Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add external certificate management for the Concierge Impersonation Proxy #1582

Merged
merged 6 commits into from
Aug 3, 2023

Conversation

joshuatcasey
Copy link
Member

@joshuatcasey joshuatcasey commented Jul 20, 2023

Add external certificate management for the Concierge Impersonation Proxy

Resolves #1547 .

See the accepted proposal for the design considerations.

  • Working POC (with documented steps) This will happen in the blog post announcing the release
  • Regenerated API for all versions of K8s
  • Integration tests

@codecov
Copy link

codecov bot commented Jul 20, 2023

Codecov Report

Merging #1582 (dc61d13) into main (c78db66) will increase coverage by 0.00%.
The diff coverage is 76.31%.

@@           Coverage Diff           @@
##             main    #1582   +/-   ##
=======================================
  Coverage   75.48%   75.48%           
=======================================
  Files         166      166           
  Lines       15012    15083   +71     
=======================================
+ Hits        11332    11386   +54     
- Misses       3386     3399   +13     
- Partials      294      298    +4     
Files Changed Coverage Δ
...ntroller/impersonatorconfig/impersonator_config.go 90.74% <76.31%> (-1.45%) ⬇️

... and 1 file with indirect coverage changes

@joshuatcasey joshuatcasey force-pushed the jtc/1547-poc branch 5 times, most recently from 6c721ac to dbb23b8 Compare July 20, 2023 20:18
@joshuatcasey joshuatcasey marked this pull request as ready for review July 20, 2023 20:18
@joshuatcasey joshuatcasey force-pushed the jtc/1547-poc branch 2 times, most recently from 96c3cb6 to 9e264dc Compare July 24, 2023 14:48
@joshuatcasey joshuatcasey force-pushed the jtc/1547-poc branch 3 times, most recently from 2b87a55 to 0faae51 Compare August 2, 2023 04:33
@joshuatcasey joshuatcasey merged commit e2e9819 into main Aug 3, 2023
9 checks passed
@joshuatcasey joshuatcasey deleted the jtc/1547-poc branch August 3, 2023 20:52
joshuatcasey added a commit that referenced this pull request Aug 9, 2023
benjaminapetersen added a commit that referenced this pull request Aug 9, 2023
…-ca-crt

Fix #1582 by not double-decoding the ca.crt field in external TLS secrets for the impersonation proxy
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Proposal] Concierge Impersonation Proxy | External Certificate Management
4 participants