Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

spiffe: add support for spiffe bundle format #36190

Open
wants to merge 13 commits into
base: main
Choose a base branch
from

docs ci fix

843d881
Select commit
Loading
Failed to load commit list.
Open

spiffe: add support for spiffe bundle format #36190

docs ci fix
843d881
Select commit
Loading
Failed to load commit list.
CI (Envoy) / Mobile/Android tests skipped Dec 12, 2024 in 0s

Check was skipped

This check was not triggered in this CI run

Details

Request (pr/36190/main@843d881)

briansonnenberg @briansonnenberg 843d881 #36190 merge main@ab9ff8e

spiffe: add support for spiffe bundle format

Commit Message: Adds alternative to "trust_domains" config for the spiffe validator—"trust_bundle_map".

Additional Description:

#35567
trust_bundle_map points to a local file containing a SPIFFE bundle map. A file watcher is set up to trigger refreshes to the SPIFFE data when this file is modified. SPIFFE refresh hint and sequence number are currently ignored.

Risk Level: medium
Testing: WIP
Docs Changes: TBD
Release Notes: TBD

Environment

Request variables

Key Value
ref c193c01
sha 843d881
pr 36190
base-sha ab9ff8e
actor briansonnenberg @briansonnenberg
message spiffe: add support for spiffe bundle format...
started 1734027924.378761
target-branch main
trusted false
Build image

Container image/s (as used in this CI run)

Key Value
default envoyproxy/envoy-build-ubuntu:f94a38f62220a2b017878b790b6ea98a0f6c5f9c
mobile envoyproxy/envoy-build-ubuntu:mobile-f94a38f62220a2b017878b790b6ea98a0f6c5f9c
Version

Envoy version (as used in this CI run)

Key Value
major 1
minor 33
patch 0
dev true