knative-extensions / net-gateway-api

Integration between Knative and service-apis (ingress v2) for Knative Ingress migration.
Apache License 2.0
24 stars 28 forks source link

Support system-internal-tls in net-gateway-api #450

Open ReToCode opened 1 year ago

ReToCode commented 1 year ago

Larger description in the Feature Track document Parent-issue: https://github.com/knative/serving/issues/11906 Gateway-API Issue: https://github.com/kubernetes-sigs/gateway-api/issues/1897

Summary net-gateway-api should support calling activator / backends with a known CA key and subject name.

This is currently blocked by upstream gateway-api, as there is no way to define it. More info:

/kind feature-request

github-actions[bot] commented 1 year ago

This issue is stale because it has been open for 90 days with no activity. It will automatically close after 30 more days of inactivity. Reopen the issue with /reopen. Mark the issue as fresh by adding the comment /remove-lifecycle stale.

ReToCode commented 1 year ago

/remove-lifecycle stale

dprotaso commented 3 months ago

There's a redux happening with TLS validation and the BackendTLSPolicy will have a breaking change

See: https://github.com/kubernetes-sigs/gateway-api/pull/2910