payload: {"action":"created","issue":{"url":"https://api.github.com/repos/istio/istio/issues/19527","repository_url":"https://api.github.com/repos/istio/istio","labels_url":"https://api.github.com/repos/istio/istio/issues/19527/labels{/name}","comments_url":"https://api.github.com/repos/istio/istio/issues/19527/comments","events_url":"https://api.github.com/repos/istio/istio/issues/19527/events","html_url":"https://github.com/istio/istio/pull/19527","id":536578372,"node_id":"MDExOlB1bGxSZXF1ZXN0MzUyMDg0ODEx","number":19527,"title":"WIP: Validate cert chain for Kubernetes secrets","user":{"login":"johscheuer","id":9477533,"node_id":"MDQ6VXNlcjk0Nzc1MzM=","avatar_url":"https://avatars1.githubusercontent.com/u/9477533?v=4","gravatar_id":"","url":"https://api.github.com/users/johscheuer","html_url":"https://github.com/johscheuer","followers_url":"https://api.github.com/users/johscheuer/followers","following_url":"https://api.github.com/users/johscheuer/following{/other_user}","gists_url":"https://api.github.com/users/johscheuer/gists{/gist_id}","starred_url":"https://api.github.com/users/johscheuer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/johscheuer/subscriptions","organizations_url":"https://api.github.com/users/johscheuer/orgs","repos_url":"https://api.github.com/users/johscheuer/repos","events_url":"https://api.github.com/users/johscheuer/events{/privacy}","received_events_url":"https://api.github.com/users/johscheuer/received_events","type":"User","site_admin":false},"labels":[{"id":744786716,"node_id":"MDU6TGFiZWw3NDQ3ODY3MTY=","url":"https://api.github.com/repos/istio/istio/labels/area/security","name":"area/security","color":"0e8a16","default":false,"description":null},{"id":1475126481,"node_id":"MDU6TGFiZWwxNDc1MTI2NDgx","url":"https://api.github.com/repos/istio/istio/labels/cla:%20yes","name":"cla: yes","color":"bfdadc","default":false,"description":"Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA."},{"id":957605109,"node_id":"MDU6TGFiZWw5NTc2MDUxMDk=","url":"https://api.github.com/repos/istio/istio/labels/do-not-merge/work-in-progress","name":"do-not-merge/work-in-progress","color":"bfdadc","default":false,"description":"Block merging of a PR because it isn't ready yet."},{"id":1448953237,"node_id":"MDU6TGFiZWwxNDQ4OTUzMjM3","url":"https://api.github.com/repos/istio/istio/labels/size/S","name":"size/S","color":"77bb00","default":false,"description":"Denotes a PR that changes 10-29 lines, ignoring generated files."}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2019-12-11T19:47:59Z","updated_at":"2019-12-11T19:50:57Z","closed_at":null,"author_association":"MEMBER","pull_request":{"url":"https://api.github.com/repos/istio/istio/pulls/19527","html_url":"https://github.com/istio/istio/pull/19527","diff_url":"https://github.com/istio/istio/pull/19527.diff","patch_url":"https://github.com/istio/istio/pull/19527.patch"},"body":"\nCitadel should validate if the cert chain has been changed (and if so create a new secret). This should fix: https://github.com/istio/istio/issues/18990 since the issue only happens when the intermediate CA has been changed but there are some older Secrets (it's a race-condition between the valid time of the intermediate CA and the workload certificates). \n\nTodo:\n\n- [ ] Add tests"},"comment":{"url":"https://api.github.com/repos/istio/istio/issues/comments/564704744","html_url":"https://github.com/istio/istio/pull/19527#issuecomment-564704744","issue_url":"https://api.github.com/repos/istio/istio/issues/19527","id":564704744,"node_id":"MDEyOklzc3VlQ29tbWVudDU2NDcwNDc0NA==","user":{"login":"istio-testing","id":25311884,"node_id":"MDQ6VXNlcjI1MzExODg0","avatar_url":"https://avatars1.githubusercontent.com/u/25311884?v=4","gravatar_id":"","url":"https://api.github.com/users/istio-testing","html_url":"https://github.com/istio-testing","followers_url":"https://api.github.com/users/istio-testing/followers","following_url":"https://api.github.com/users/istio-testing/following{/other_user}","gists_url":"https://api.github.com/users/istio-testing/gists{/gist_id}","starred_url":"https://api.github.com/users/istio-testing/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/istio-testing/subscriptions","organizations_url":"https://api.github.com/users/istio-testing/orgs","repos_url":"https://api.github.com/users/istio-testing/repos","events_url":"https://api.github.com/users/istio-testing/events{/privacy}","received_events_url":"https://api.github.com/users/istio-testing/received_events","type":"User","site_admin":false},"created_at":"2019-12-11T19:50:56Z","updated_at":"2019-12-11T19:50:56Z","author_association":"COLLABORATOR","body":"@johscheuer: The following tests **failed**, say `/retest` to rerun them all:\n\nTest name | Commit | Details | Rerun command\n--- | --- | --- | ---\ninteg-framework-local-tests_istio | 7f63e5e1aef3d6b8c7e4b2ca1241c62f2d948c1b | [link](https://prow.istio.io/view/gcs/istio-prow/pr-logs/pull/istio_istio/19527/integ-framework-local-tests_istio/4776) | `/test integ-framework-local-tests_istio`\ninteg-pilot-local-tests_istio | 7f63e5e1aef3d6b8c7e4b2ca1241c62f2d948c1b | [link](https://prow.istio.io/view/gcs/istio-prow/pr-logs/pull/istio_istio/19527/integ-pilot-local-tests_istio/4812) | `/test integ-pilot-local-tests_istio`\ninteg-security-local-tests_istio | 7f63e5e1aef3d6b8c7e4b2ca1241c62f2d948c1b | [link](https://prow.istio.io/view/gcs/istio-prow/pr-logs/pull/istio_istio/19527/integ-security-local-tests_istio/4795) | `/test integ-security-local-tests_istio`\nunit-tests_istio | 7f63e5e1aef3d6b8c7e4b2ca1241c62f2d948c1b | [link](https://prow.istio.io/view/gcs/istio-prow/pr-logs/pull/istio_istio/19527/unit-tests_istio/5083) | `/test unit-tests_istio`\nistio_e2e_cloudfoundry_istio | 7f63e5e1aef3d6b8c7e4b2ca1241c62f2d948c1b | [link](https://prow.istio.io/view/gcs/istio-prow/pr-logs/pull/istio_istio/19527/istio_e2e_cloudfoundry_istio/4768) | `/test istio_e2e_cloudfoundry_istio`\nrelease-test_istio | 7f63e5e1aef3d6b8c7e4b2ca1241c62f2d948c1b | [link](https://prow.istio.io/view/gcs/istio-prow/pr-logs/pull/istio_istio/19527/release-test_istio/4793) | `/test release-test_istio`\n\n\n\n<details>\n\nInstructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md).  If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).\n</details>\n<!-- test report -->"}}
other: {"actor":{"display_login":"istio-testing"}}