jetstack / jetstack-secure

Open source components of Jetstack Secure
https://www.jetstack.io/jetstack-secure/
Apache License 2.0
252 stars 24 forks source link

VC-32931: Gather Istio's secret keys #538

Open maelvls opened 1 month ago

maelvls commented 1 month ago

Ref: VC-32931

Istio can be operated using a self-signed CA (with the secret istio-ca-secret) or using the Plugin CA with the secret cacerts. Both these secrets use non-standard keys unknown to the agent.

I've detailed what the contents of these two secrets are in https://venafi.atlassian.net/wiki/spaces/~862991627/pages/2429878323/VC-32931+Agent+to+capture+Istio+CA+info+and+send+to+cloud.

I'm not sure what tests are needed here, I'd need help on that.