search

spiffe / spire

The SPIFFE Runtime Environment
https://spiffe.io
Apache License 2.0
1.8k stars 476 forks source link

Create migration guide for users impacted by agent ID shape enforcement #3527

Open azdagron opened 2 years ago

azdagron commented 2 years ago

Before we can enforce agent ID shape (#2712) we need to come up with a migration guide for users are impacted by the enforcement.

azdagron commented 2 years ago

@zmt, are you still interested in contributing this guide?

zmt commented 2 years ago

I think I can get to this by EOY 2022.

zmt commented 1 year ago

I have slipped by 2 weeks. I should be able to make progress by 1/16/23

zmt commented 1 year ago

I have finally managed to start looking at this. I'm trying to get a testbed together to practice migration. I don't see a feature flag that switches this to enforcement: https://github.com/spiffe/spire/blob/main/pkg/server/api/agent/v1/service.go#L306-L308. Perhaps I'm not looking in the right places, @azdagron?

azdagron commented 1 year ago

There is no feature flag that enables enforcement. You'd have to add some code to do the enforcement to test it out, which I'm happy to help with if needed.

zmt commented 1 year ago

There's a non-zero chance that I will be able to complete this in the 1.8.1 milestone timeframe.

zmt commented 12 months ago

It is clear to me now that these will never be high enough priority among my competing work priorities that I will ever accomplish them. Please re-label help wanted. I apologize to the community for holding these so long and not completing them.

SilvaMatteus commented 9 months ago

I would like to address this issue :D

azdagron commented 9 months ago

Thanks, @SilvaMatteus !

SilvaMatteus commented 1 month ago

Hi @azdagron,

as we talked, after evaluating the steps needed to test and validate the steps for folks to migrate safely, I think this issue demands more time than I can spend per week. I will remove me from the assignee of this issue to give the opportunity to others to take it.