github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
18,882 Commits
1,702 Branches
461 Tags
707 MiB
Commit Graph

2 Commits (7f9a5d0f58d89e86b3d9588b87bb3fcc303e71c8)

Author SHA1 Message Date
freddygv 0ea3353537 Add handling in agent cache for server leaf certs 2022-09-16 17:54:34 -06:00
Freddy f4dfd42e0a
Add SpiffeID for Consul server agents (#14485) 
Co-authored-by: Eric Haberkorn <erichaberkorn@gmail.com>

By adding a SpiffeID for server agents, servers can now request a leaf
certificate from the Connect CA.

This new Spiffe ID has a key property: servers are identified by their
datacenter name and trust domain. All servers that share these
attributes will share a ServerURI.

The aim is to use these certificates to verify the server name of ANY
server in a Consul datacenter.
 2022-09-06 17:58:13 -06:00