Description
In cf-for-k8s we'd like to let Istio handle container-to-container communications, but Eirini has hard requirements that the following (non-exhaustive) are specified:
cc_cert_path
cc_key_path
cc_ca_path
Suggested fix (optional)
Make cert/key/ca configuration optional.
Allow communication over HTTP.
There may be other certificate configurations that would be desirable to be optional, but this is the specific one I noticed when trying to trim down some explicit certificate configuration.
Description In cf-for-k8s we'd like to let Istio handle container-to-container communications, but Eirini has hard requirements that the following (non-exhaustive) are specified:
cc_cert_path
cc_key_path
cc_ca_path
Suggested fix (optional)
There may be other certificate configurations that would be desirable to be optional, but this is the specific one I noticed when trying to trim down some explicit certificate configuration.