·
1 commit
to air-release-1.15.5
since this release
authn: include trust domains from cacertificates in san validator This CL includes the trust domains from the meshConfig caCertificates in the SAN validator. Without this change, we need to completely disable that validation with the PILOT_SKIP_VALIDATE_TRUST_DOMAIN env var. Backported from: https://github.com/istio/istio/pull/43536. Change-Id: If5e791b23d0ced48000995ac45ebcbdffd3447d4 Reviewed-on: https://gerrit.musta.ch/c/public/istio/+/4471 Reviewed-by: Ying Zhu <ying.zhu@airbnb.com>