Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cleanup trust domain to not use globals #51205

Merged
merged 1 commit into from
May 23, 2024

Conversation

howardjohn
Copy link
Member

Before: from mesh config, set a global var

After: read from mesh config

This is a general code smell to use globals, and also the source of a
bug (and a few many years ago IIRC).

Most of the churn is in tests

@howardjohn howardjohn added the release-notes-none Indicates a PR that does not require release notes. label May 22, 2024
@howardjohn howardjohn requested review from a team as code owners May 22, 2024 19:58
@istio-testing istio-testing added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label May 22, 2024
Before: from mesh config, set a global var

After: read from mesh config

This is a general code smell to use globals, and also the source of a
bug (and a few many years ago IIRC).

Most of the churn is in tests
@howardjohn howardjohn force-pushed the istiod/drop-td-globals branch from 6fe84f5 to d982f7f Compare May 22, 2024 20:45
Copy link
Contributor

@bleggett bleggett left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The bits I understand around passing and using TD and dropping spiffe Get/SetTD make sense to me.

@bleggett
Copy link
Contributor

As with #51204 integ-ambient will likely fail until zt is updated, as both these PRs elide/remove/unset the clusterID from the CNI, and the ZT here still expects it.

@howardjohn
Copy link
Member Author

/retest

@istio-testing istio-testing merged commit d9fe12a into istio:master May 23, 2024
28 checks passed
luksa pushed a commit to luksa/istio that referenced this pull request Oct 14, 2024
* upstream/master:
  CNI shouldn't pass trustdomain down (istio#51204)
  Cleanup trust domain to not use globals (istio#51205)
  Bugfix: actually use v6 SNAT IP inpod (istio#51221)
  Automator: update ztunnel@master in istio/istio@master (istio#51219)
  Automator: update proxy@master in istio/istio@master (istio#51215)
  Pick up mesh config change to not depend on k8s (istio#51041)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release-notes-none Indicates a PR that does not require release notes. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants