Commit Graph

125 Commits (5972bdc87c899a1668f43e2b5a264b11ec4a1d28)

Author SHA1 Message Date
Kyle Havlovitz de72834b8c
Move connect CA provider to separate package
7 years ago
Paul Banks e0e12e165b
TLS watching integrated into Service with some basic tests.
7 years ago
Paul Banks 90c574ebaa
Wire up agent leaf endpoint to cache framework to support blocking.
7 years ago
Kyle Havlovitz edcfdb37af
Fix some inconsistencies around the CA provider code
7 years ago
Kyle Havlovitz 315b8bf594
Simplify the CAProvider.Sign method
7 years ago
Kyle Havlovitz c6e1b72ccb
Simplify the CA provider interface by moving some logic out
7 years ago
Kyle Havlovitz a325388939
Clarify some comments and names around CA bootstrapping
7 years ago
Kyle Havlovitz 33418afd3c
Add cross-signing mechanism to root rotation
7 years ago
Kyle Havlovitz d83fbfc766
Add the root rotation mechanism to the CA config endpoint
7 years ago
Kyle Havlovitz f9d92d795e
Have the built in CA store its state in raft
7 years ago
Kyle Havlovitz 9fc33d2a62
Add the CA provider interface and built-in provider
7 years ago
Paul Banks 10db79c8ae
Rework connect/proxy and command/connect/proxy. End to end demo working again
7 years ago
Paul Banks 26e65f6bfd
connect.Service based implementation after review feedback.
7 years ago
Mitchell Hashimoto 3ef0b93159
agent/connect: Authorize for CertURI
7 years ago
Mitchell Hashimoto ffe4cdfc15
agent/connect: support any values in the URL
7 years ago
Mitchell Hashimoto 75bf0e1638
agent/connect: support SpiffeIDSigning
7 years ago
Mitchell Hashimoto 17ca8ad083
agent/connect: rename SpiffeID to CertURI
7 years ago
Mitchell Hashimoto 0cbcb07d61
agent/connect: use proper keyusage fields for CA and leaf
7 years ago
Mitchell Hashimoto 73442ada5a
agent/connect: address PR feedback for the CA.go file
7 years ago
Mitchell Hashimoto a54d1af421
agent/consul: encode issued cert serial number as hex encoded
7 years ago
Mitchell Hashimoto c2588262b7
agent: /v1/connect/ca/leaf/:service_id
7 years ago
Mitchell Hashimoto 891cd22ad9
agent/consul: key the public key of the CSR, verify in test
7 years ago
Mitchell Hashimoto d768d5e9a7
agent/consul: test for ConnectCA.Sign
7 years ago
Mitchell Hashimoto f4ec28bfe3
agent/consul: basic sign endpoint not tested yet
7 years ago
Mitchell Hashimoto 548ce190d5
agent/connect: package for agent-related Connect, parse SPIFFE IDs
7 years ago