knative / serving

Kubernetes-based, scale-to-zero, request-driven compute

https://knative.dev/docs/serving/

Apache License 2.0

5.52k stars 1.15k forks source link

Encryption Cleanup: drop LegacyFakeDnsName in SANs #14992

Open ReToCode opened 6 months ago

ReToCode commented 6 months ago

Description

In our certificates for the system-internal-tls feature, we are still using certificates.LegacyFakeDnsName for legacy reasons and to make trust work on ingress layers that do not support trusting multiple SANs (like in contour and gateway-api).

As soon as this is resolved, we need to clean that up and remove certificates.LegacyFakeDnsName

github-actions[bot] commented 3 months ago

This issue is stale because it has been open for 90 days with no activity. It will automatically close after 30 more days of inactivity. Reopen the issue with /reopen. Mark the issue as fresh by adding the comment /remove-lifecycle stale.