New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove trustworthy and legacy jwt concepts. Always use trustworthy jwt #16147
Conversation
e00a07a
to
7b5f655
Compare
7b5f655
to
c3ea331
Compare
@pitlv2109: The following tests failed, say
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
@quanjielin @myidpt Hopefully we can land this in 1.3. PTAL. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
are we removing this in 1.3? We don't have a deprecation time period for this? Or was it already deprecated? |
We've already removed it. This is just a cleanup. Trustworthy Jwt is the only choice when using SDS. |
…ease 1.3 Istio release 1.3 uses new k8s JWT (istio/istio#16147), which breaks the user guide of Istio Vault CA integration for release 1.3. This PR temporarily disables the user guide of Istio Vault CA integration for release 1.3.
…ease 1.3 Istio release 1.3 uses new k8s JWT (istio/istio#16147), which breaks the user guide of Istio Vault CA integration for release 1.3. This PR temporarily disables the user guide of Istio Vault CA integration for release 1.3.
…ration for release 1.3 (#4904) * Temporarily disable the user guide of Istio Vault integration for release 1.3 Istio release 1.3 uses new k8s JWT (istio/istio#16147), which breaks the user guide of Istio Vault CA integration for release 1.3. This PR temporarily disables the user guide of Istio Vault CA integration for release 1.3.
* Sync changes to old installer Cherrypicks istio#13392, istio#13666, istio#13982, istio#14077, istio#14059 * Cherrypick istio#14301 * Cherrypick istio#13638 * cherrypick istio#14606 * istio#14171 * istio#14438 * istio#14674 * istio#14974 * 14904 * istio#14796 * istio#15346 * istio#15345 * istio#15383 * istio#14815 * istio#15690 * istio#15681 * istio#15014 * istio#15503 * istio#16084 * istio#16146 * istio#16147 * Fix tests
Remove
useTrustworthyJwt
anduseNormalJwt
helm values. Always use trustworthy Jwts if SDS is enabled.[ ] Configuration Infrastructure
[ ] Docs
[X] Installation
[ ] Networking
[ ] Performance and Scalability
[ ] Policies and Telemetry
[X] Security
[ ] Test and Release
[ ] User Experience
[ ] Developer Infrastructure