Skip to content

[release-1.24] Better support for root certificate#1546

Merged
istio-testing merged 4 commits intoistio:release-1.24from
Stevenjin8:cherry-pick-1510-to-release-1.24
May 5, 2025
Merged

[release-1.24] Better support for root certificate#1546
istio-testing merged 4 commits intoistio:release-1.24from
Stevenjin8:cherry-pick-1510-to-release-1.24

Conversation

@Stevenjin8
Copy link
Copy Markdown
Contributor

Manual cherry pick of #1526

howardjohn and others added 4 commits April 15, 2025 16:36
* Split the last element of the returned response from the CA. This
  allows support for multiple roots. Note this requires a change to
Istio (which I am making) to rever the regression in 1.25.1
(istio/istio#55793).
* Split root from chain in the config_dump. Without this, it is
  impossible to know if something is a root or intermediate.
@Stevenjin8 Stevenjin8 requested a review from a team May 1, 2025 18:42
@istio-testing istio-testing added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label May 1, 2025
@Stevenjin8 Stevenjin8 changed the title Cherry pick 1510 to release 1.24 [release-1.24] Better support for root certificate May 1, 2025
@istio-testing istio-testing merged commit 2b35181 into istio:release-1.24 May 5, 2025
3 checks passed
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 4, 2025
* upstream/release-1.24:
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 4, 2025
* upstream/release-1.24:
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 18, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 19, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 20, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 23, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 24, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 25, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 26, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 27, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jun 30, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jul 1, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jul 2, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jul 3, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jul 4, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jul 7, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jul 8, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jul 9, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jul 10, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Jul 11, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 4, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 5, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 6, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 7, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 8, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 11, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 12, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 13, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 14, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 15, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 18, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 19, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 20, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 21, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 22, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 25, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 26, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 27, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 28, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Aug 29, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 1, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 2, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 3, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 4, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 5, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 8, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 10, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 11, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 12, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/ztunnel that referenced this pull request Sep 15, 2025
* upstream/release-1.24:
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1573)
  [release-1.24] Better support for root certificate (istio#1546)
  http2: tune connection window size and add config (istio#1540)
  Automator: update common-files@release-1.24 in istio/ztunnel@release-1.24 (istio#1516)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants