(root) Identity Story

[draychev]

This GitHub Issue is the umbrella for all Identity-related issues.

Related Issues

• catalog: Simplify ListAllowedEndpointsForService #3190
• identity: Change (sophisticate) ServiceIdentity from a string to a struct{} so it can capture more context #3188
• certificates: Envoy xDS Certs should have a ServiceIdentity in the CN; not ServiceAccount #3186
• identity: Remove GetSDSCSecretName() and GetCertificateCommonName() from ServiceIdentity #3182
• xds: Envoys should be grouped by ServiceAccount (config distributed should be the same) #3046
• Use ServiceIdentity type in catalog APIs instead of service.K8sServiceAccount #2218

---

Relevant Work

• SMI Spec: Need a discussion on validating user intent in SMI policy  servicemeshinterface/smi-spec#105
• Document by @asridharan: https://docs.google.com/document/d/1tiEDUgx9wjdBBi-AjBMr6I94XnzX57rezPvamZ0djBE/edit?usp=sharing
• Related SMI Issue: resolving destination service accounts to workload servicemeshinterface/smi-spec#82

[github-actions]

This issue will be closed due to a long period of inactivity. If you would like this issue to remain open then please comment or update.

[github-actions]

Issue closed due to inactivity.