consul

Commit Graph

Author	SHA1	Message	Date
freddygv	0ea3353537	Add handling in agent cache for server leaf certs	2022-09-16 17:54:34 -06:00
Freddy	f4dfd42e0a	Add SpiffeID for Consul server agents (#14485 ) Co-authored-by: Eric Haberkorn <erichaberkorn@gmail.com> By adding a SpiffeID for server agents, servers can now request a leaf certificate from the Connect CA. This new Spiffe ID has a key property: servers are identified by their datacenter name and trust domain. All servers that share these attributes will share a ServerURI. The aim is to use these certificates to verify the server name of ANY server in a Consul datacenter.	2022-09-06 17:58:13 -06:00

Author

SHA1

Message

Date

freddygv

0ea3353537

Add handling in agent cache for server leaf certs

2022-09-16 17:54:34 -06:00

Freddy

f4dfd42e0a

Add SpiffeID for Consul server agents (#14485 )

Co-authored-by: Eric Haberkorn <erichaberkorn@gmail.com>

By adding a SpiffeID for server agents, servers can now request a leaf
certificate from the Connect CA.

This new Spiffe ID has a key property: servers are identified by their
datacenter name and trust domain. All servers that share these
attributes will share a ServerURI.

The aim is to use these certificates to verify the server name of ANY
server in a Consul datacenter.

2022-09-06 17:58:13 -06:00

2 Commits (3febdbff393c709e8d2b9a24838a51d83a8171dc)