This repository has been archived by the owner on Feb 6, 2022. It is now read-only.

RBAC setup for ingress key/cert #313

Open

wattli opened this issue Oct 25, 2017 · 2 comments · Fixed by istio/istio.io#755

Assignees

Labels

Milestone

Contributor

wattli commented Oct 25, 2017

The ingress key/cert is not protected by RBAC and it's long-lived. We need to specify RBAC rules for it.

https://istio.io/docs/tasks/traffic-management/ingress.html

wattli added the enhancement label

wattli added this to the Istio 0.3 milestone

JimmyCYJ self-assigned this

Contributor Author

wattli commented Nov 13, 2017

Code goes to https://github.com/istio/istio/tree/master/security
Doc goes to https://github.com/istio/istio.github.io

Member

JimmyCYJ commented Nov 27, 2017

I did some tests and wrote a draft about what I learned from setting up rbac for Istio.
https://docs.google.com/document/d/14mPzL7Rgi58gvJgKSO1_OWAzyPVFpjyaJuofV1Rrfg4/edit?usp=sharing

JimmyCYJ mentioned this issue

Document RBAC set up for ingress key cert protection. istio/istio.io#755

Merged

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.