status-im
/
consul
mirror of https://github.com/status-im/consul.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

NET-4774 - replace usage of deprecated Envoy field match_subject_alt_names (#19954)

This commit is contained in:
John Murret 2023-12-22 11:34:44 -07:00 committed by GitHub
parent 21ea5c92fd
commit 90cd56c5c3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
216 changed files with 3620 additions and 1376 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.changelog/19954.txt Normal file
View File

@ -0,0 +1,3 @@
```release-note:improvement
connect: Remove usage of deprecated Envoy field `match_subject_alt_names` in favor of `match_typed_subject_alt_names`.
```

14
agent/xds/clusters.go
View File

@ -1620,17 +1620,19 @@ func injectSANMatcher(tlsContext *envoy_tls_v3.CommonTlsContext, matchStrings ..
tlsContext.ValidationContextType)
}
var matchers []*envoy_matcher_v3.StringMatcher
var matchers []*envoy_tls_v3.SubjectAltNameMatcher
for _, m := range matchStrings {
matchers = append(matchers, &envoy_matcher_v3.StringMatcher{
MatchPattern: &envoy_matcher_v3.StringMatcher_Exact{
Exact: m,
matchers = append(matchers, &envoy_tls_v3.SubjectAltNameMatcher{
SanType: envoy_tls_v3.SubjectAltNameMatcher_URI,
Matcher: &envoy_matcher_v3.StringMatcher{
MatchPattern: &envoy_matcher_v3.StringMatcher_Exact{
Exact: m,
},
},
})
}
//nolint:staticcheck
validationCtx.ValidationContext.MatchSubjectAltNames = matchers
validationCtx.ValidationContext.MatchTypedSubjectAltNames = matchers
return nil
}

19
agent/xds/testdata/builtin_extension/clusters/ext-authz-http-local-grpc-service.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/ext-authz-http-local-http-service.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/ext-authz-http-upstream-grpc-service.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/ext-authz-http-upstream-http-service.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/ext-authz-tcp-local-grpc-service.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/ext-authz-tcp-upstream-grpc-service.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

12
agent/xds/testdata/builtin_extension/clusters/lambda-and-lua-connect-proxy.latest.golden vendored
View File

@ -70,12 +70,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

12
agent/xds/testdata/builtin_extension/clusters/lambda-connect-proxy-opposite-meta.latest.golden vendored
View File

@ -70,12 +70,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/builtin_extension/clusters/lambda-connect-proxy-tproxy.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {
@ -194,9 +203,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/no-endpoints"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/no-endpoints"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/lambda-connect-proxy-with-terminating-gateway-upstream.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

12
agent/xds/testdata/builtin_extension/clusters/lambda-connect-proxy.latest.golden vendored
View File

@ -70,12 +70,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/lua-connect-proxy-with-terminating-gateway-upstream.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/lua-inbound-applies-to-inbound.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/lua-inbound-doesnt-apply-to-local-upstreams.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

47
agent/xds/testdata/builtin_extension/clusters/lua-outbound-applies-to-local-upstreams-tproxy.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -81,9 +84,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/kafka"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/kafka"
}
}
],
"trustedCa": {
@ -128,9 +134,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/kafka2"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/kafka2"
}
}
],
"trustedCa": {
@ -175,9 +184,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/kafka2"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/kafka2"
}
}
],
"trustedCa": {
@ -222,9 +234,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/google"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/google"
}
}
],
"trustedCa": {
@ -266,12 +281,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/lua-outbound-applies-to-local-upstreams.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/lua-outbound-doesnt-apply-to-inbound.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/lua-outbound-doesnt-apply-to-local-upstreams-with-consul-constraint-violation.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/lua-outbound-doesnt-apply-to-local-upstreams-with-envoy-constraint-violation.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/otel-access-logging-http.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-add-keepalive.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -83,12 +86,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-add-outlier-detection-multiple.latest.golden vendored
View File

@ -37,9 +37,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -84,12 +87,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-add-outlier-detection.latest.golden vendored
View File

@ -36,9 +36,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -82,12 +85,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-add-round-robin-lb-config.latest.golden vendored
View File

@ -35,9 +35,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -80,12 +83,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-cluster-load-assignment-inbound-add.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-cluster-load-assignment-outbound-add.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-inbound-doesnt-apply-to-outbound.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-listener-inbound-add.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-listener-outbound-add.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-outbound-doesnt-apply-to-inbound.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/builtin_extension/clusters/propertyoverride-patch-specific-upstream-service-failover.latest.golden vendored
View File

@ -56,9 +56,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -106,9 +109,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/fail"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/fail"
}
}
],
"trustedCa": {
@ -150,12 +156,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/builtin_extension/clusters/propertyoverride-patch-specific-upstream-service-splitter.latest.golden vendored
View File

@ -30,12 +30,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {
@ -108,9 +114,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -158,9 +167,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {

26
agent/xds/testdata/builtin_extension/clusters/propertyoverride-patch-specific-upstream-service.latest.golden vendored
View File

@ -55,9 +55,12 @@
"trustedCa": {
"inlineString": "-----BEGIN CERTIFICATE-----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\noR5f6Ku+cig2Il8T8LJujOp2/2A72QcHZA57B13y+8o=\n-----END CERTIFICATE-----\n"
},
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
]
}
@ -103,9 +106,12 @@
"trustedCa": {
"inlineString": "-----BEGIN CERTIFICATE-----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\noR5f6Ku+cig2Il8T8LJujOp2/2A72QcHZA57B13y+8o=\n-----END CERTIFICATE-----\n"
},
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/fail"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/fail"
}
}
]
}
@ -147,12 +153,18 @@
"trustedCa": {
"inlineString": "-----BEGIN CERTIFICATE-----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\noR5f6Ku+cig2Il8T8LJujOp2/2A72QcHZA57B13y+8o=\n-----END CERTIFICATE-----\n"
},
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
]
}

19
agent/xds/testdata/builtin_extension/clusters/propertyoverride-remove-outlier-detection.latest.golden vendored
View File

@ -33,9 +33,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -76,12 +79,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/wasm-http-local-file.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/wasm-http-remote-file.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/wasm-tcp-local-file-outbound.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/wasm-tcp-local-file.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/wasm-tcp-remote-file-outbound.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/builtin_extension/clusters/wasm-tcp-remote-file.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/access-logs-defaults.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/access-logs-json-file.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/access-logs-text-stderr-disablelistenerlogs.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

7
agent/xds/testdata/clusters/api-gateway-http-listener-with-http-route.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/http-service"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/http-service"
}
}
],
"trustedCa": {

14
agent/xds/testdata/clusters/api-gateway-tcp-listener-with-tcp-and-http-route.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/http-service"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/http-service"
}
}
],
"trustedCa": {
@ -82,9 +85,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/tcp-service"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/tcp-service"
}
}
],
"trustedCa": {

7
agent/xds/testdata/clusters/api-gateway-tcp-listener-with-tcp-route.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/tcp-service"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/tcp-service"
}
}
],
"trustedCa": {

7
agent/xds/testdata/clusters/api-gateway-with-http-route-timeoutfilter-one-set.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
}
}
],
"trustedCa": {

7
agent/xds/testdata/clusters/api-gateway-with-http-route.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
}
}
],
"trustedCa": {

14
agent/xds/testdata/clusters/api-gateway-with-multiple-hostnames.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/backend"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/backend"
}
}
],
"trustedCa": {
@ -82,9 +85,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/frontend"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/frontend"
}
}
],
"trustedCa": {

7
agent/xds/testdata/clusters/api-gateway-with-multiple-inline-certificates.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
}
}
],
"trustedCa": {

7
agent/xds/testdata/clusters/api-gateway-with-tcp-route-and-inline-certificate.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
}
}
],
"trustedCa": {

26
agent/xds/testdata/clusters/connect-proxy-lb-in-resolver.latest.golden vendored
View File

@ -39,9 +39,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -83,12 +86,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {
@ -159,9 +168,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/something-else"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/something-else"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-resolver-with-lb.latest.golden vendored
View File

@ -39,9 +39,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -83,12 +86,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/clusters/connect-proxy-route-to-lb-resolver.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {
@ -159,9 +168,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/web"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/web"
}
}
],
"trustedCa": {

33
agent/xds/testdata/clusters/connect-proxy-splitter-overweight.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/big-side"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/big-side"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {
@ -129,9 +138,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/goldilocks-side"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/goldilocks-side"
}
}
],
"trustedCa": {
@ -177,9 +189,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/lil-bit-side"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/lil-bit-side"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-upstream-defaults.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/clusters/connect-proxy-with-chain-and-failover-to-cluster-peer.latest.golden vendored
View File

@ -51,9 +51,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -99,9 +102,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -143,12 +149,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/clusters/connect-proxy-with-chain-and-failover.latest.golden vendored
View File

@ -51,9 +51,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -99,9 +102,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/fail"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/fail"
}
}
],
"trustedCa": {
@ -143,12 +149,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-chain-and-overrides.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -86,12 +89,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-chain-and-redirect-to-cluster-peer.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

222
agent/xds/testdata/clusters/connect-proxy-with-chain-and-router.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/big-side"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/big-side"
}
}
],
"trustedCa": {
@ -82,9 +85,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -130,9 +136,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/empty-match-1"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/empty-match-1"
}
}
],
"trustedCa": {
@ -178,9 +187,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/empty-match-2"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/empty-match-2"
}
}
],
"trustedCa": {
@ -226,9 +238,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/exact"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/exact"
}
}
],
"trustedCa": {
@ -270,12 +285,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {
@ -321,9 +342,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/goldilocks-side"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/goldilocks-side"
}
}
],
"trustedCa": {
@ -369,9 +393,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-exact-with-method"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-exact-with-method"
}
}
],
"trustedCa": {
@ -417,9 +444,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-exact"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-exact"
}
}
],
"trustedCa": {
@ -465,9 +495,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-not-present"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-not-present"
}
}
],
"trustedCa": {
@ -513,9 +546,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-prefix"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-prefix"
}
}
],
"trustedCa": {
@ -561,9 +597,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-present"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-present"
}
}
],
"trustedCa": {
@ -609,9 +648,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-regex"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-regex"
}
}
],
"trustedCa": {
@ -657,9 +699,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-suffix"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/hdr-suffix"
}
}
],
"trustedCa": {
@ -705,9 +750,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/header-manip"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/header-manip"
}
}
],
"trustedCa": {
@ -753,9 +801,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/idle-timeout"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/idle-timeout"
}
}
],
"trustedCa": {
@ -801,9 +852,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/just-methods"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/just-methods"
}
}
],
"trustedCa": {
@ -849,9 +903,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/lil-bit-side"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/lil-bit-side"
}
}
],
"trustedCa": {
@ -922,9 +979,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/nil-match"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/nil-match"
}
}
],
"trustedCa": {
@ -970,9 +1030,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prefix-rewrite-1"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prefix-rewrite-1"
}
}
],
"trustedCa": {
@ -1018,9 +1081,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prefix-rewrite-2"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prefix-rewrite-2"
}
}
],
"trustedCa": {
@ -1066,9 +1132,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prefix"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prefix"
}
}
],
"trustedCa": {
@ -1114,9 +1183,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prm-exact"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prm-exact"
}
}
],
"trustedCa": {
@ -1162,9 +1234,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prm-present"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prm-present"
}
}
],
"trustedCa": {
@ -1210,9 +1285,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prm-regex"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prm-regex"
}
}
],
"trustedCa": {
@ -1258,9 +1336,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/regex"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/regex"
}
}
],
"trustedCa": {
@ -1306,9 +1387,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/req-timeout"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/req-timeout"
}
}
],
"trustedCa": {
@ -1354,9 +1438,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/retry-all"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/retry-all"
}
}
],
"trustedCa": {
@ -1402,9 +1489,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/retry-codes"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/retry-codes"
}
}
],
"trustedCa": {
@ -1450,9 +1540,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/retry-connect"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/retry-connect"
}
}
],
"trustedCa": {
@ -1498,9 +1591,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/retry-reset"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/retry-reset"
}
}
],
"trustedCa": {

40
agent/xds/testdata/clusters/connect-proxy-with-chain-and-splitter.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/big-side"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/big-side"
}
}
],
"trustedCa": {
@ -82,9 +85,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -126,12 +132,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {
@ -177,9 +189,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/goldilocks-side"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/goldilocks-side"
}
}
],
"trustedCa": {
@ -225,9 +240,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/lil-bit-side"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/lil-bit-side"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-chain-external-sni.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-chain-http2.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -86,12 +89,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-chain.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-default-chain-and-custom-cluster.latest.golden vendored
View File

@ -30,12 +30,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {
@ -113,9 +119,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-grpc-chain.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -86,12 +89,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/clusters/connect-proxy-with-grpc-router.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -86,12 +89,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {
@ -162,9 +171,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prefix"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/prefix"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-http-chain.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-http2-chain.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -86,12 +89,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-jwt-config-entry-with-local.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-jwt-config-entry-with-remote-jwks.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

14
agent/xds/testdata/clusters/connect-proxy-with-peered-upstreams-escape-overrides.latest.golden vendored
View File

@ -66,9 +66,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/payments"
"sanType": "URI",
"matcher": {
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/payments"
}
}
],
"trustedCa": {
@ -114,9 +117,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/refunds"
"sanType": "URI",
"matcher": {
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/refunds"
}
}
],
"trustedCa": {

14
agent/xds/testdata/clusters/connect-proxy-with-peered-upstreams-http2.latest.golden vendored
View File

@ -77,9 +77,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/payments"
"sanType": "URI",
"matcher": {
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/payments"
}
}
],
"trustedCa": {
@ -134,9 +137,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/refunds"
"sanType": "URI",
"matcher": {
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/refunds"
}
}
],
"trustedCa": {

14
agent/xds/testdata/clusters/connect-proxy-with-peered-upstreams.latest.golden vendored
View File

@ -77,9 +77,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/payments"
"sanType": "URI",
"matcher": {
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/payments"
}
}
],
"trustedCa": {
@ -126,9 +129,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/refunds"
"sanType": "URI",
"matcher": {
"exact": "spiffe://1c053652-8512-4373-90cf-5a7f6263a994.consul/ns/default/dc/cloud-dc/svc/refunds"
}
}
],
"trustedCa": {

33
agent/xds/testdata/clusters/connect-proxy-with-tcp-chain-double-failover-through-local-gateway-triggered.latest.golden vendored
View File

@ -52,9 +52,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -100,9 +103,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -148,9 +154,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc3/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc3/svc/db"
}
}
],
"trustedCa": {
@ -192,12 +201,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

33
agent/xds/testdata/clusters/connect-proxy-with-tcp-chain-double-failover-through-local-gateway.latest.golden vendored
View File

@ -52,9 +52,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -100,9 +103,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -148,9 +154,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc3/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc3/svc/db"
}
}
],
"trustedCa": {
@ -192,12 +201,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

33
agent/xds/testdata/clusters/connect-proxy-with-tcp-chain-double-failover-through-remote-gateway-triggered.latest.golden vendored
View File

@ -52,9 +52,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -100,9 +103,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -148,9 +154,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc3/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc3/svc/db"
}
}
],
"trustedCa": {
@ -192,12 +201,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

33
agent/xds/testdata/clusters/connect-proxy-with-tcp-chain-double-failover-through-remote-gateway.latest.golden vendored
View File

@ -52,9 +52,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -100,9 +103,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -148,9 +154,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc3/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc3/svc/db"
}
}
],
"trustedCa": {
@ -192,12 +201,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/clusters/connect-proxy-with-tcp-chain-failover-through-local-gateway-triggered.latest.golden vendored
View File

@ -51,9 +51,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -99,9 +102,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -143,12 +149,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/clusters/connect-proxy-with-tcp-chain-failover-through-local-gateway.latest.golden vendored
View File

@ -51,9 +51,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -99,9 +102,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -143,12 +149,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/clusters/connect-proxy-with-tcp-chain-failover-through-remote-gateway-triggered.latest.golden vendored
View File

@ -51,9 +51,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -99,9 +102,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -143,12 +149,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

26
agent/xds/testdata/clusters/connect-proxy-with-tcp-chain-failover-through-remote-gateway.latest.golden vendored
View File

@ -51,9 +51,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -99,9 +102,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/db"
}
}
],
"trustedCa": {
@ -143,12 +149,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-tcp-chain.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-tls-incoming-cipher-suites.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-tls-incoming-max-version.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-tls-incoming-min-version.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-tls-outgoing-cipher-suites.latest.golden vendored
View File

@ -39,9 +39,12 @@
]
},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -88,12 +91,18 @@
]
},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-tls-outgoing-max-version.latest.golden vendored
View File

@ -36,9 +36,12 @@
"tlsMaximumProtocolVersion": "TLSv1_2"
},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -82,12 +85,18 @@
"tlsMaximumProtocolVersion": "TLSv1_2"
},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-tls-outgoing-min-version-auto.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-tls-outgoing-min-version.latest.golden vendored
View File

@ -36,9 +36,12 @@
"tlsMinimumProtocolVersion": "TLSv1_3"
},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -82,12 +85,18 @@
"tlsMinimumProtocolVersion": "TLSv1_3"
},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-with-tproxy-and-permissive-mtls.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/connect-proxy-without-tproxy-and-permissive-mtls.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/custom-limits-max-connections-only.latest.golden vendored
View File

@ -40,9 +40,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -90,12 +93,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/custom-limits-set-to-zero.latest.golden vendored
View File

@ -42,9 +42,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -94,12 +97,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/custom-limits.latest.golden vendored
View File

@ -42,9 +42,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -94,12 +97,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/custom-local-app.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

19
agent/xds/testdata/clusters/custom-max-inbound-connections.latest.golden vendored
View File

@ -34,9 +34,12 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/db"
}
}
],
"trustedCa": {
@ -78,12 +81,18 @@
],
"tlsParams": {},
"validationContext": {
"matchSubjectAltNames": [
"matchTypedSubjectAltNames": [
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/geo-cache-target"
}
},
{
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
"sanType": "URI",
"matcher": {
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc2/svc/geo-cache-target"
}
}
],
"trustedCa": {

Some files were not shown because too many files have changed in this diff Show More