AthenZ / k8s-athenz-sia

Apache License 2.0

1 stars 7 forks source link

Fix client certificate source for mTLS using cert reloader #99

Closed t4niwa closed 5 months ago

t4niwa commented 5 months ago

Description

Fix to store Instance Cert issued by ZTS server in cert reloader from memory instead of from file
- If SIA does not issue Instance Cert, it is stored in cert reloader from file and updated by reading file 1 per second.
Fix to get Instance Cert used for mTLS with the ZTS server (for updating Instance Certs, fetching and updating Role Cert, and fetching and updating AccessToken/RoleToken) from the cert reloader.

Type of change

[ ] Bug fix
[x] New feature
[ ] Refactoring (no functional changes, no api changes)
[ ] Non-code changes (update documentation, pipeline, etc.)

Flags

[ ] Breaks backward compatibility
[ ] Requires a documentation update
[ ] Has untestable code

Related issue/PR

Delete this section if there are no issues or pull requests that relate to this pull request.

Fixes #issue
Closes #PR

Checklist

[x] Followed the guidelines in the CONTRIBUTING document
[x] Added prefix [skip ci]/[ci skip]/[no ci]/[skip actions]/[actions skip] in the PR title if necessary
[x] Tested and linted the code
[x] Commented the code
[x] Made corresponding changes to the documentation
[x] Passed all pipeline checking

Checklist for maintainer

Use Squash and merge
Double-confirm the merge message has prefix [skip ci]/[ci skip]/[no ci]/[skip actions]/[actions skip]
Delete the branch after merge