status-im
/
consul
mirror of https://github.com/status-im/consul.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
consul/agent/xds/testdata/clusters/transparent-proxy-terminati...

264 lines
8.2 KiB
Plaintext
Raw Normal View History

feat: tgtwy xDS generation for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-05-24 16:51:52 +00:00
{
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"nonce": "00000001",
feat: tgtwy xDS generation for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-05-24 16:51:52 +00:00
"resources": [
{
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
"connectTimeout": "5s",
"loadAssignment": {
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
"clusterName": "destination.192-168-0-1.external-IP-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"endpoints": [
{
"lbEndpoints": [
{
"endpoint": {
"address": {
"socketAddress": {
"address": "192.168.0.1",
"portValue": 80
}
}
}
}
]
}
]
},
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"name": "destination.192-168-0-1.external-IP-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"outlierDetection": {},
"type": "STATIC"
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
},
{
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
"connectTimeout": "5s",
"loadAssignment": {
"clusterName": "destination.192-168-0-2.external-IP-HTTP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
"endpoints": [
{
"lbEndpoints": [
{
"endpoint": {
"address": {
"socketAddress": {
"address": "192.168.0.2",
"portValue": 80
}
}
}
}
]
feat: tgtwy xDS generation for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-05-24 16:51:52 +00:00
}
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
]
feat: tgtwy xDS generation for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-05-24 16:51:52 +00:00
},
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"name": "destination.192-168-0-2.external-IP-HTTP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"outlierDetection": {},
"type": "STATIC"
feat: tgtwy xDS generation for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-05-24 16:51:52 +00:00
},
{
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
"connectTimeout": "5s",
"loadAssignment": {
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
"clusterName": "destination.192-168-0-2.external-IP-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
feat: tgtwy xDS generation for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-05-24 16:51:52 +00:00
"endpoints": [
{
"lbEndpoints": [
{
"endpoint": {
"address": {
"socketAddress": {
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
"address": "192.168.0.2",
feat: tgtwy xDS generation for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-05-24 16:51:52 +00:00
"portValue": 80
}
}
}
}
]
}
]
},
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"name": "destination.192-168-0-2.external-IP-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"outlierDetection": {},
"type": "STATIC"
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
},
{
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
"connectTimeout": "5s",
"loadAssignment": {
"clusterName": "destination.192-168-0-3.external-IP-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"endpoints": [
{
"lbEndpoints": [
{
"endpoint": {
"address": {
"socketAddress": {
"address": "192.168.0.3",
"portValue": 80
}
}
}
}
]
}
]
},
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"name": "destination.192-168-0-3.external-IP-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"outlierDetection": {},
"type": "STATIC"
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
},
{
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
"connectTimeout": "5s",
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"dnsLookupFamily": "V4_ONLY",
"dnsRefreshRate": "10s",
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
"loadAssignment": {
"clusterName": "destination.api-hashicorp-com.external-hostname-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"endpoints": [
{
"lbEndpoints": [
{
"endpoint": {
"address": {
"socketAddress": {
"address": "api.hashicorp.com",
"portValue": 8089
}
}
}
}
]
}
]
},
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"name": "destination.api-hashicorp-com.external-hostname-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"outlierDetection": {},
"type": "LOGICAL_DNS"
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
},
inject gateway addons to destination clusters (#13951)
2022-07-28 19:17:35 +00:00
{
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
"connectTimeout": "5s",
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"dnsLookupFamily": "V4_ONLY",
"dnsRefreshRate": "10s",
inject gateway addons to destination clusters (#13951)
2022-07-28 19:17:35 +00:00
"loadAssignment": {
"clusterName": "destination.api-test-com.external-hostname-with-SNI.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"endpoints": [
{
"lbEndpoints": [
{
"endpoint": {
"address": {
"socketAddress": {
"address": "api.test.com",
"portValue": 80
}
}
}
}
]
}
]
},
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"name": "destination.api-test-com.external-hostname-with-SNI.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"outlierDetection": {},
inject gateway addons to destination clusters (#13951)
2022-07-28 19:17:35 +00:00
"transportSocket": {
"name": "tls",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext",
"commonTlsContext": {
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"tlsParams": {},
inject gateway addons to destination clusters (#13951)
2022-07-28 19:17:35 +00:00
"validationContext": {
NET-4774 - replace usage of deprecated Envoy field match_subject_alt_names (#19954)
2023-12-22 18:34:44 +00:00
"matchTypedSubjectAltNames": [
inject gateway addons to destination clusters (#13951)
2022-07-28 19:17:35 +00:00
{
NET-4774 - replace usage of deprecated Envoy field match_subject_alt_names (#19954)
2023-12-22 18:34:44 +00:00
"matcher": {
"exact": "api.test.com"
NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) * NET-6946 - Replace usage of deprecated Envoy field envoy.config.route.v3.HeaderMatcher.safe_regex_match * removing unrelated changes * update golden files * do not set engine type
2024-01-03 16:53:39 +00:00
},
"sanType": "URI"
Fix SAN matching on terminating gateways (#20417) Fixes issue: hashicorp/consul#20360 A regression was introduced in hashicorp/consul#19954 where the SAN validation matching was reduced from 4 potential types down to just the URI. Terminating gateways will need to match on many fields depending on user configuration, since they make egress calls outside of the cluster. Having more than one matcher behaves like an OR operation, where any match is sufficient to pass the certificate validation. To maintain backwards compatibility with the old untyped `match_subject_alt_names` Envoy behavior, we should match on all 4 enum types. https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/transport_sockets/tls/v3/common.proto#enum-extensions-transport-sockets-tls-v3-subjectaltnamematcher-santype
2024-01-31 18:17:45 +00:00
},
{
"matcher": {
"exact": "api.test.com"
},
"sanType": "DNS"
},
{
"matcher": {
"exact": "api.test.com"
},
"sanType": "EMAIL"
},
{
"matcher": {
"exact": "api.test.com"
},
"sanType": "IP_ADDRESS"
inject gateway addons to destination clusters (#13951)
2022-07-28 19:17:35 +00:00
}
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
],
"trustedCa": {
"filename": "cert.pem"
}
inject gateway addons to destination clusters (#13951)
2022-07-28 19:17:35 +00:00
}
},
"sni": "api.test.com"
}
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
},
"type": "LOGICAL_DNS"
inject gateway addons to destination clusters (#13951)
2022-07-28 19:17:35 +00:00
},
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
{
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
"connectTimeout": "5s",
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"dnsLookupFamily": "V4_ONLY",
"dnsRefreshRate": "10s",
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
"loadAssignment": {
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
"clusterName": "destination.httpbin-org.external-hostname-HTTP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
"endpoints": [
{
"lbEndpoints": [
{
"endpoint": {
"address": {
"socketAddress": {
"address": "httpbin.org",
"portValue": 80
}
}
}
}
]
}
]
},
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"name": "destination.httpbin-org.external-hostname-HTTP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"outlierDetection": {},
"type": "LOGICAL_DNS"
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
},
{
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
"connectTimeout": "5s",
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"dnsLookupFamily": "V4_ONLY",
"dnsRefreshRate": "10s",
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
"loadAssignment": {
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
"clusterName": "destination.web-hashicorp-com.external-hostname-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
"endpoints": [
{
"lbEndpoints": [
{
"endpoint": {
"address": {
"socketAddress": {
feat: convert destination address to slice
2022-07-18 21:10:06 +00:00
"address": "web.hashicorp.com",
feat: connect proxy xDS for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-07-14 18:45:51 +00:00
"portValue": 8089
}
}
}
}
]
}
]
},
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"name": "destination.web-hashicorp-com.external-hostname-TCP.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
"outlierDetection": {},
"type": "LOGICAL_DNS"
feat: tgtwy xDS generation for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-05-24 16:51:52 +00:00
}
],
"typeUrl": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
xds: update golden tests to be deterministic (#18707)
2023-09-11 16:40:19 +00:00
"versionInfo": "00000001"
feat: tgtwy xDS generation for destinations Signed-off-by: Dhia Ayachi <dhia@hashicorp.com>
2022-05-24 16:51:52 +00:00
}