Skip to content

v1.78.2

Choose a tag to compare

View all tags
@pitabwire pitabwire released this 12 Mar 19:52
· 181 commits to main since this release
v1.78.2
d69b3c6
This commit was signed with the committer’s verified signature. The key has expired.
pitabwire Peter Bwire
GPG key ID: 19C42A207122B0A3
Expired
Verified
Learn about vigilant mode.

What's Changed

Graceful Workload API Degradation

When WithHTTPWorkloadAPITargetPath(...) is used but no SPIFFE trust domain is configured (WORKLOAD_API_TRUSTED_DOMAIN env var not set), the HTTP client now silently skips workload API mTLS and uses a plain HTTP client instead of failing closed with an error transport.

This allows services to include workload API target options in their code without crashing when SPIFFE infrastructure is not deployed. When trust domain IS configured but the SPIFFE socket is unavailable, the client still fails closed as before (security-first behavior).

Fixes: Services crashing with "workload API target path requires trusted domain configuration" when SPIFFE/SPIRE is not deployed.

Full Changelog: v1.78.1...v1.78.2

Assets 2
Loading