-
Notifications
You must be signed in to change notification settings - Fork 2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update VirtualServer to ignore CRL for EgressMTLS #3737
Conversation
for more information, see https://pre-commit.ci
Codecov Report
@@ Coverage Diff @@
## main #3737 +/- ##
==========================================
+ Coverage 52.37% 52.41% +0.03%
==========================================
Files 59 59
Lines 16898 16902 +4
==========================================
+ Hits 8851 8859 +8
+ Misses 7750 7748 -2
+ Partials 297 295 -2
... and 1 file with indirect coverage changes 📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't think we want to ignore the CRL. We should use the right directive for it proxy_ssl_crl
.
That would be the right thing to do. |
@brianehlert @lucacome We only added support for CRLs with IngressMTLs but not EgressMTLs. |
To close this conversation, we will be adding proper EgressMTLS support for CRL to match IngressMTLS behavior. |
* Update VirtualServer to ignore CRL for EgressMTLS * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Un-comment tests * Fix crt and crl path in test and fix nill slice reference * Update data files for egress MTLS tests * Remove VSR python test * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Add new app.yaml file for EgressMTLS tests * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> (cherry picked from commit 87b8a58)
Update VirtualServer to ignore CRL for EgressMTLS (#3737) * Update VirtualServer to ignore CRL for EgressMTLS * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Un-comment tests * Fix crt and crl path in test and fix nill slice reference * Update data files for egress MTLS tests * Remove VSR python test * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Add new app.yaml file for EgressMTLS tests * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> (cherry picked from commit 87b8a58) Co-authored-by: Shaun <s.odonovan@f5.com>
Proposed changes
This change updates the logic which applies policies to VirtualServer to ignore CRL for EgressMTLS.
Resolves #3732
Checklist
Before creating a PR, run through this checklist and mark each as complete.