Closed ctyano closed 4 months ago
Please modify the athenz-sia.env
file too.
@ctyano Do you think we should merge this before the release of v3.2.0?
~This requires operation check just in case in k8s platform.~ ~TODOs:~ ~-[x] Operation done by @mlajkim~
I won't do it as I wrote this with expectation of including this PR in v3.2.0.
This won't be included in v3.2.0 release.
Description
IP addresses in X.509 Subject Alternative Names is an optional attribute in Athenz X.509 identity certificate. Users shall set an empty string to POD_IP environment variable to remove IP address from a CSR. If the IP address is not set in the CSR, ZTS will skip verifying the client IP address to match the SANs IP. (e.g. InstanceZTSProvider)
Assignees
Assignees
is setType of changes
labels
of the following that fits:bug
: Bug fixdependencies
: Dependency upgradesdocumentation
: Documentation changesenhancement
: New Featuregood first issue
: First contributionlogging
: Log changesrefactor
: Refactoring (no functional changes, no api changes)Flags
[ ] Has untestable code
Checklist
[skip ci]
/[ci skip]
/[no ci]
/[skip actions]
/[actions skip]
in the PR title if necessaryChecklist for maintainer
Squash and merge
[skip ci]
/[ci skip]
/[no ci]
/[skip actions]
/[actions skip]