istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove unnecessary backslashes from example SVID (#5206) 

reads: `spiffe://\<domain\>/ns/\<namespace\>/sa/\<serviceaccount\>`
should read: `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>`
This commit is contained in:
craigbox 2019-10-21 03:06:35 +13:00 committed by Istio Automation
parent 92c548ea1d
commit a42efeb7f8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
content/en/docs/concepts/security/index.md
View File

@ -93,7 +93,7 @@ across heterogeneous environments.
Istio and SPIFFE share the same identity document: [SVID](https://github.com/spiffe/spiffe/blob/master/standards/SPIFFE-ID.md) (SPIFFE Verifiable Identity Document). Istio and SPIFFE share the same identity document: [SVID](https://github.com/spiffe/spiffe/blob/master/standards/SPIFFE-ID.md) (SPIFFE Verifiable Identity Document).
For example, in Kubernetes, the X.509 certificate has the URI field in the format of For example, in Kubernetes, the X.509 certificate has the URI field in the format of
`spiffe://\<domain\>/ns/\<namespace\>/sa/\<serviceaccount\>`. `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>`.
This enables Istio services to establish and accept connections with other SPIFFE-compliant systems. This enables Istio services to establish and accept connections with other SPIFFE-compliant systems.
Istio security and [SPIRE](https://spiffe.io/spire/), which is the implementation of SPIFFE, differ in the PKI implementation details. Istio security and [SPIRE](https://spiffe.io/spire/), which is the implementation of SPIFFE, differ in the PKI implementation details.