How deeply does Google Anthos in Action cover certificate rotation?

Explains certificate issuance, CA configuration, agent responsibilities, and operational overhead without detailing rotation timing or failure recovery.

Certificate rotation

As explained in Google Anthos in Action

Certificate rotation is the replacement and redistribution of certificates before or after they expire or become unsuitable.

Certificate rotation replaces and redistributes certificates before or after expiration or unsuitability. In Istio, istiod's CA and agents alongside Envoy automate key and certificate rotation for mesh workloads. section 4.3.3

Key operational characteristics include:

The Istio CA issues X.509 certificates that provide strong workload identities. section 4.3.3
Operators can configure an existing enterprise root certificate or delegated CA signing certificate and key. section 4.3.3
Automated rotation and distribution reduce ongoing operator overhead after initial configuration. section 4.3.3

Enterprise service mesh

An enterprise configures Istio's CA with an existing root or delegated CA signing certificate and key, then relies on Istio agents and istiod to rotate and distribute workload certificates. section 4.3.3

How Google Anthos in Action covers it

liveBook manning.com

Read Google Anthos in Action on liveBook Get the book at manning.com

Related concepts

cloud computingpart of · Cloud computing is the on-demand delivery of computing resources and services over a network from remotely managed infrastructure.
credential rotationkind of · Credential rotation is the periodic or event-triggered replacement of authentication credentials or secrets to limit exposure and satisfy security requirements.

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.