News for hackers. Stuff that matters.

A comment on Istio – An open platform to connect, manage, and secure microservices.

Re:Istio – An open platform to connect, manage, and secure m... by fosco on Monday February 04, 2019 @11:36AM (#19077688)
> Citadel - A centralized component responsible for certificate issuance and rotation.

That interests me, while I know nothing about istio, I'd love to have something like his for me personally, if I understand correctly this could centrally manage certificates used as password and their management?

[ Parent | on HN ]
Re:Istio – An open platform to connect, manage, and secure m... by kkapelon on Monday February 04, 2019 @12:00PM (#19077987)
Vault from Hashicorp (and its competitors) is probably better suited for what you ask
[ Parent | on HN ]
Re:Istio – An open platform to connect, manage, and secure m... by fosco on Tuesday February 05, 2019 @08:38AM (#19085120)
thank you for sharing, I will look into this, much appreciated!
[ Parent | on HN ]
Re:Istio – An open platform to connect, manage, and secure m... by nprateem on Monday February 04, 2019 @01:16PM (#19078939)
Cert manager [1] also automatically provisions and rotates TLS certificates.

[1] http://cert-manager.readthedocs.io/

[ Parent | on HN ]
Re:Istio – An open platform to connect, manage, and secure m... by cromantin on Monday February 04, 2019 @03:08PM (#19080131)
Citadel does this only for internal certa. It does not provision lets encrypt (at least didn’t several months ago)
[ Parent | on HN ]
Re:Istio – An open platform to connect, manage, and secure m... by fosco on Tuesday February 05, 2019 @08:38AM (#19085123)
thank you for sharing, I will look into this, much appreciated!
[ Parent | on HN ]
Re:Istio – An open platform to connect, manage, and secure m... by rexarex on Monday February 04, 2019 @12:07PM (#19078090)
It basically automatically issues certificates to pods so they can use mTLS seamlessly when they communicate with each other. More of authentication/authorization piece.
[ Parent | on HN ]
Re:Istio – An open platform to connect, manage, and secure m... by danberg on Monday February 04, 2019 @12:07PM (#19078084)
Citadel does as you say specifically for secure communication between services (i.e., mTLS).
[ Parent | on HN ]