github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
19,340 Commits
1,703 Branches
464 Tags
724 MiB
Commit Graph

2 Commits (c375dd2a794d74ffdd6a85819ac7bb18e9c22977)

Author SHA1 Message Date
freddygv 0ea3353537 Add handling in agent cache for server leaf certs 2022-09-16 17:54:34 -06:00
Freddy f4dfd42e0a
Add SpiffeID for Consul server agents (#14485) 
Co-authored-by: Eric Haberkorn <erichaberkorn@gmail.com>

By adding a SpiffeID for server agents, servers can now request a leaf
certificate from the Connect CA.

This new Spiffe ID has a key property: servers are identified by their
datacenter name and trust domain. All servers that share these
attributes will share a ServerURI.

The aim is to use these certificates to verify the server name of ANY
server in a Consul datacenter.
 2022-09-06 17:58:13 -06:00