istio.io/istio@v0.0.0-20240520182934-d79c90f27776/releasenotes/notes/enable-verify-certificate-at-client.yaml (about)

     1  apiVersion: release-notes/v2
     2  kind: feature
     3  area: security
     4  releaseNotes:
     5  - |
     6    **Updated** default value of the feature flag `VERIFY_CERT_AT_CLIENT` to true.
     7    This means server certificates will be automatically verified using the OS CA certificates when not using a DestinationRule caCertificates field.
     8    If undesired please use the new `compatibilityVersion` feature to fallback to old behavior, or `insecureSkipVerify`
     9    field in DestinationRule to skip the verification.
    10  upgradeNotes:
    11  - title: Default value of the feature flag `VERIFY_CERT_AT_CLIENT` is set to true
    12    content: |
    13      This means server certificates will be automatically verified using the OS CA certificates when not using a DestinationRule caCertificates field.
    14      If undesired please use the new `compatibilityVersion` feature to fallback to old behavior, or `insecureSkipVerify`
    15      field in DestinationRule to skip the verification.
    16