You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Freddy 74ca6406ea Configure upstream TLS context with peer root certs (#13321) ... For mTLS to work between two proxies in peered clusters with different root CAs, proxies need to configure their outbound listener to use different root certificates for validation. Up until peering was introduced proxies would only ever use one set of root certificates to validate all mesh traffic, both inbound and outbound. Now an upstream proxy may have a leaf certificate signed by a CA that's different from the dialing proxy's. This PR makes changes to proxycfg and xds so that the upstream TLS validation uses different root certificates depending on which cluster is being dialed.		3 years ago
..
common.go	Configure upstream TLS context with peer root certs (#13321)	3 years ago
mock_Provider.go	chore: upgrade mockery to v2 and regenerate (#12836)	3 years ago
provider.go	Support vault namespaces in connect CA (#12904)	3 years ago
provider_aws.go	Configure upstream TLS context with peer root certs (#13321)	3 years ago
provider_aws_test.go	…
provider_consul.go	…
provider_consul_config.go	…
provider_consul_test.go	…
provider_test.go	…
provider_vault.go	Configure upstream TLS context with peer root certs (#13321)	3 years ago
provider_vault_test.go	Fix leaked Vault LifetimeRenewers (#12607)	3 years ago
testing.go	…