v1.1.0-release
Slice VPN Key rotation
The slice VPN Gateway is an essential component of the slice network service, allowing the slice to connect to secure VPN networks. By default, any new slice created using the KubeSlice Manager or the YAML file will have a duration of 30 days to renew the SliceGateway certificates. You can customize the rotation interval when creating a slice by setting the rotationInterval parameter in the slice configuration YAML file. This interval range is 30 to 90 days.
Additionally, if you need to update the rotation interval at any time, you can modify the rotationInterval parameter in the slice configuration file. This flexibility allows you to align the certificate renewal process with your specific security requirements. Moreover, if you want to initiate the certificate renewal process immediately, you can use the renewBefore option. This option allows you to trigger the certificate renewal process before the expiration of the rotation interval. By specifying an appropriate value for renewBefore parameter in the YAML file, you can ensure that the certificate renewal process starts promptly, helping to maintain the security and compliance of your system.
The VPN cipher can be configured during slice creation using the cipher parameter in the slice configuration YAML file. The cipher value can be set to AES_128_CBC. The default value is AES_256_CBC. This configuration is immutable during the lifetime of a slice.
What's Changed
- fix(): Initialize labels field as an empty map by @Rahul-D78 in #267
- fix(): fix gateway rebalancing by @gourishkb in #271
- [WIP] VPN Key Rotation Reconciler by @YachikaRalhan in #257
- fix(): updated ctrl apis dependency by @YachikaRalhan in #274
- fix(): fsm bug fixes - v1 by @rahulsawra98 in #276
- fix(): recycler name as gw pod name by @YachikaRalhan in #277
- fix(): disabled rebalancing by @YachikaRalhan in #279
Full Changelog: v1.0.4...v1.1.0-release
