linkerd2

Commit Graph

Author	SHA1	Message	Date
Oliver Gould	e0ba802f80	proxy-identity: Set a CommonName on CSRs (#2626 ) Some CA's (like AWS) require a CN be set on the CSR. This change modifies proxy-identity to set the identity name as the CSR's CommonName. Fixes #2622	2019-04-03 13:54:50 -07:00
Oliver Gould	790c13b3b2	Introduce the Identity controller implementation (#2521 ) This change introduces a new Identity service implementation for the `io.linkerd.proxy.identity.Identity` gRPC service. The `pkg/identity` contains a core, abstract implementation of the service (generic over both the CA and (Kubernetes) Validator interfaces). `controller/identity` includes a concrete implementation that uses the Kubernetes TokenReview API to validate serviceaccount tokens when issuing certificates. This change does NOT alter installation or runtime to include the identity service. This will be included in a follow-up.	2019-03-19 13:58:45 -07:00

Author

SHA1

Message

Date

Oliver Gould

e0ba802f80

proxy-identity: Set a CommonName on CSRs (#2626 )

Some CA's (like AWS) require a CN be set on the CSR.

This change modifies proxy-identity to set the identity name as the
CSR's CommonName.

Fixes #2622

2019-04-03 13:54:50 -07:00

Oliver Gould

790c13b3b2

Introduce the Identity controller implementation (#2521 )

This change introduces a new Identity service implementation for the
`io.linkerd.proxy.identity.Identity` gRPC service.

The `pkg/identity` contains a core, abstract implementation of the service
(generic over both the CA and (Kubernetes) Validator interfaces).

`controller/identity` includes a concrete implementation that uses the
Kubernetes TokenReview API to validate serviceaccount tokens when
issuing certificates.

This change does **NOT** alter installation or runtime to include the
identity service. This will be included in a follow-up.

2019-03-19 13:58:45 -07:00

2 Commits