Context
With the changes from #14392 the Queue-Proxy now hosts a new SAN kn-user-<ns> (DataPlaneUserSAN). We need activator to trust this SAN for each Knative-Service.
David used VerifyConnection in his closed PR here.
We can use that same approach to trust the new SANs.
More info in the discussion here
Context
With the changes from #14392 the Queue-Proxy now hosts a new SAN
kn-user-<ns>(DataPlaneUserSAN). We need activator to trust this SAN for each Knative-Service.David used
VerifyConnectionin his closed PR here.We can use that same approach to trust the new SANs.
More info in the discussion here