Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Delete auth map entries of deleted SVID #27663

Merged
merged 1 commit into from
Sep 6, 2023

Conversation

meyskens
Copy link
Member

This change adds a watcher on the SPIRE updates for deleted SVIDs. If one is deleted it will be signaled over the rotation channel. Should the ID be present in the auth map it will be immediately removed.

Delete auth map entries for removed Security IDs in SPIRE

@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Aug 23, 2023
@meyskens meyskens added the release-note/minor This PR changes functionality that users may find relevant to operating Cilium. label Aug 23, 2023
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Aug 23, 2023
@meyskens meyskens added area/servicemesh GH issues or PRs regarding servicemesh feature/authentication labels Aug 23, 2023
@meyskens meyskens force-pushed the meyskens/signal-spire-cert-delete branch from edb60dd to 4365e14 Compare August 23, 2023 14:56
@meyskens meyskens marked this pull request as ready for review August 25, 2023 11:50
@meyskens meyskens requested a review from a team as a code owner August 25, 2023 11:50
@meyskens
Copy link
Member Author

/test

@youngnick
Copy link
Contributor

/test

@meyskens meyskens force-pushed the meyskens/signal-spire-cert-delete branch from 4365e14 to ced4bc9 Compare September 5, 2023 12:03
This change adds a watcher on the SPIRE updates for deleted SVIDs.
If one is deleted it will be signaled over the rotation channel.
Should the ID be present in the auth map it will be immediately removed.

Signed-off-by: Maartje Eyskens <maartje.eyskens@isovalent.com>
@meyskens meyskens force-pushed the meyskens/signal-spire-cert-delete branch from ced4bc9 to f6e2eb2 Compare September 5, 2023 12:16
@meyskens
Copy link
Member Author

meyskens commented Sep 5, 2023

/test

@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Sep 5, 2023
@youngnick youngnick merged commit e99fdce into cilium:main Sep 6, 2023
61 checks passed
@joestringer
Copy link
Member

Is this really release-note/bug?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/servicemesh GH issues or PRs regarding servicemesh feature/authentication ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/minor This PR changes functionality that users may find relevant to operating Cilium.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants