Skip to content
This repository was archived by the owner on Jul 11, 2023. It is now read-only.

Add EnableMeshRootCertificate to MeshConfig #5041

Closed
jaellio opened this issue Aug 25, 2022 · 1 comment · Fixed by #5204
Closed

Add EnableMeshRootCertificate to MeshConfig #5041

jaellio opened this issue Aug 25, 2022 · 1 comment · Fixed by #5204
Assignees
@jaellio
Labels
kind/subtask size/S 3 days sprint/current sprint/4 sprint/5 sprint/6
Milestone
v1.3

Comments

@jaellio
Copy link
Contributor

jaellio commented Aug 25, 2022 •
edited
Loading

Part of #4998

Related to #5040

Deprecate the enableMeshRootCertificate binary flag added in #4871. Add the enableMeshRootCertificate feature flag to the MeshConfig. This will allow the MRC to be enabled for certificate management after OSM install.

To enable the use of the MRC the user will need to perform the following actions:

  1. set the enableMeshRootCertificate feature flag to true in the MeshConfig
  2. restart the osm-bootstrap
  3. restart the osm-controller and osm-injector

The user must update the osm-bootstrap before the osm-controller and osm-injector to ensure the MRC is created before the controller and injector startup. The user must also not change the certificate provider during the enablement of the MRC.

Resources:
@jaellio jaellio added this to the v1.3 milestone Aug 25, 2022
@jaellio jaellio added kind/blocked The issue is blocked and no further progress can be made. kind/subtask good first issue Good for newcomers labels Aug 25, 2022
@jaellio jaellio mentioned this issue Aug 25, 2022
Closed
@jaellio jaellio moved this from Todo to Blocked in OSM Root Certificate Rotation Aug 25, 2022
@jaellio
Copy link
Contributor Author

jaellio commented Aug 25, 2022 •
edited
Loading

Blocked on:

@jaellio jaellio moved this from Blocked to Todo in OSM Root Certificate Rotation Sep 9, 2022
@jaellio jaellio moved this from Todo to In Progress in OSM Root Certificate Rotation Oct 14, 2022
@jaellio jaellio self-assigned this Oct 14, 2022
@jaellio jaellio changed the title Deprecate enableMeshRootCertificate binary flag Add EnableMeshRootCertificate to MeshConfig Oct 14, 2022
@jaellio jaellio mentioned this issue Oct 14, 2022
Merged
@jaellio jaellio removed the kind/blocked The issue is blocked and no further progress can be made. label Oct 17, 2022
Repository owner moved this from In Progress to Done in OSM Root Certificate Rotation Nov 21, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@jaellio jaellio

Labels
kind/subtask size/S 3 days sprint/current sprint/4 sprint/5 sprint/6
Projects
OSM Root Certificate Rotation
Status: Done
Milestone
v1.3
Development

Successfully merging a pull request may close this issue.

feat(certs): use MeshConfig feature flag to enable MRC jaellio/osm
2 participants
@trstringer @jaellio