istio

1
apiVersion: release-notes/v2
2
kind: feature
3
area: security
4
releaseNotes:
5
- |
6
  **Updated** default value of the feature flag `VERIFY_CERT_AT_CLIENT` to true.
7
  This means server certificates will be automatically verified using the OS CA certificates when not using a DestinationRule caCertificates field.
8
  If undesired please use the new `compatibilityVersion` feature to fallback to old behavior, or `insecureSkipVerify`
9
  field in DestinationRule to skip the verification.
10
upgradeNotes:
11
- title: Default value of the feature flag `VERIFY_CERT_AT_CLIENT` is set to true
12
  content: |
13
    This means server certificates will be automatically verified using the OS CA certificates when not using a DestinationRule caCertificates field.
14
    If undesired please use the new `compatibilityVersion` feature to fallback to old behavior, or `insecureSkipVerify`
15
    field in DestinationRule to skip the verification.
16

17