Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Provide feature to onboard and distribute a common CA cert chain to Istio service mesh in edge clusters.  This feature will allow the user to prepare a CA certificate that will be used to generate a set of Intermediate CAs (with a common CA Root certificate) that will be distributed to a set of edge clusters running the Istio service mesh.  The Intermediate CA certificates distributed to the edge clusters can replace the default Istio CA or be set up per Namespace (i.e. per EMCO Logical Clouds).  This feature allows EMCO to implement traffic controller intents between workloads across edge clusters with mTLS.  The per Namespace capability allows workloads deployed to different Logical Clouds (e.g. tenants) to be isolated from each other.

...