1Feature: Linkerdctl rotates the trust anchor secret
2
3Scenario: Upgrade of Linkerd
4 Given a cluster with an older version of Linkerd
5 When an upgrade of Linkerd is performed
6 Then the linkerd version is updated
7 And the trust anchor secret is patched with a new value
8 And the ca bundle in the identity configmap is updated
9 And the new trust anchor secret lifetime is 2 years
10 And the pods will be healthy
11 And the identity certificate and secret are re-created
12
13Scenario: Multiple successive upgrades of Linkerd
14 Given a cluster with a Linkerd version at least a couple of releases out of date
15 When the first upgrade of Linkerd is ran
16 And the second upgrade of Linkerd is ran
17 But the proxy certificates had not yet been re-issued after the first upgrade
18 Then some meshed pods might not be able to communicate
19 But after some time, the old pods will get re-meshed
20 And communication between pods will be restoredView as plain text