v1.1.0-release
Slice VPN Key rotation
The slice VPN Gateway is an essential component of the slice network service, allowing the slice to connect to secure VPN networks. By default, any new slice created using the KubeSlice Manager or the YAML file will have a duration of 30 days to renew the SliceGateway certificates. You can customize the rotation interval when creating a slice by setting the rotationInterval parameter in the slice configuration YAML file. This interval range is 30 to 90 days.
Additionally, if you need to update the rotation interval at any time, you can modify the rotationInterval parameter in the slice configuration file. This flexibility allows you to align the certificate renewal process with your specific security requirements. Moreover, if you want to initiate the certificate renewal process immediately, you can use the renewBefore option. This option allows you to trigger the certificate renewal process before the expiration of the rotation interval. By specifying an appropriate value for renewBefore parameter in the YAML file, you can ensure that the certificate renewal process starts promptly, helping to maintain the security and compliance of your system.
The VPN cipher can be configured during slice creation using the cipher parameter in the slice configuration YAML file. The cipher value can be set to AES_128_CBC. The default value is AES_256_CBC. This configuration is immutable during the lifetime of a slice
What's Changed
- fix(): release latest images by @priyank-upadhyay in #155
- fix(AM-8238): add serviceexport deletion webhook by @priyank-upadhyay in #157
- feat(): create default QoS Config with Project creation by @priyank-upadhyay in #159
- fix(): add new cluster validations for sliceConfig by @priyank-upadhyay in #160
- feat(): Default QoS + SliceConfig validation updates by @priyank-upadhyay in #161
- feat():Release lucknow by @priyank-upadhyay in #162
- Dev by @narmidm in #163
- fix(AM-8057): setup Integration tests by @priyank-upadhyay in #156
- fix(): update cluster crd with vCPURestriction by @priyank-upadhyay in #158
- Dev by @narmidm in #172
- feat(): vpnkeyrotation apis, webhook, ITs, UTs and service layer by @rahulsawra98 in #174
Full Changelog: v0.10.0...v1.1.0-release
