Commits on May 14, 2020

1. bootstrap: support for Envoy xDS certificate rotation …

   Added new flag --resources-dir to bootstrap command for supporting path-based
   SDS resources to define xDS certificate and key.  When using the flag,
   following changes take place:
   
   - Bootstrap file will contain references to SDS resource files instead of
     direct cert/key paths.
   - SDS resource file is written into resources dir for xDS client cert and key
   - SDS resource file is written into resources dir for xDS trusted CA cert
   
   With this change there is no need to restart Envoy anymore when certificates
   are rotated.  Envoy will monitor and automatically reload the certificate and
   key files without causing an interruption to traffic.
   
   Any recent version of Envoy supports the above configuration, but Envoy 1.14.1
   or later is required for automatic certificate reload.
   
   Signed-off-by: Tero Saarni <[email protected]>

   

   tsaarni committed May 14, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for a70cdc3
   • Browse repository at this point

   Copy the full SHA

   a70cdc3 View commit details

   Browse the repository at this point in the history