Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create SPIFFE identity when Cilium identity is created #23802

Closed
Tracked by #22215
youngnick opened this issue Feb 16, 2023 · 0 comments · Fixed by #24471
Closed
Tracked by #22215

Create SPIFFE identity when Cilium identity is created #23802

youngnick opened this issue Feb 16, 2023 · 0 comments · Fixed by #24471
Assignees
@sayboras
Labels
area/operator Impacts the cilium-operator component area/servicemesh GH issues or PRs regarding servicemesh kind/feature This introduces new functionality. sig/agent Cilium agent related.

Comments

@youngnick
Copy link
Contributor

youngnick commented Feb 16, 2023 •
edited

This issue covers building something that, when a new Cilium identity is created, will create a SPIFFE identity in the SPIRE server, so that the SPIRE server can create a keypair for that Cilium identity.

This should be in the operator, so there may be some trickiness to talking to the SPIRE server (as creating identities is a privileged operation).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@sayboras sayboras

Labels
area/operator Impacts the cilium-operator component area/servicemesh GH issues or PRs regarding servicemesh kind/feature This introduces new functionality. sig/agent Cilium agent related.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

auth: Add spire identity registration for CiliumIdentity sayboras/cilium
2 participants
@sayboras @youngnick