consul

Commit Graph

Author	SHA1	Message	Date
John Maguire	2c244b6f42	[APIGW] NET-5017 JWT Cleanup/Status Conditions (#18700 ) * Fixes issues in setting status * Update golden files for changes to xds generation to not use deprecated methods * Fixed default for validation of JWT for route	2023-09-07 19:03:09 +00:00
Chris S. Kim	fb5eb20563	Pass trust domain to RBAC to validate and fix use of wrong peer trust bundles (#13508 )	2022-06-20 22:47:14 -04:00
Chris S. Kim	a02e9abcc1	Update RBAC to handle imported services (#13404 ) When converting from Consul intentions to xds RBAC rules, services imported from other peers must encode additional data like partition (from the remote cluster) and trust domain. This PR updates the PeeringTrustBundle to hold the sending side's local partition as ExportedPartition. It also updates RBAC code to encode SpiffeIDs of imported services with the ExportedPartition and TrustDomain.	2022-06-10 17:15:22 -04:00

Author

SHA1

Message

Date

John Maguire

2c244b6f42

[APIGW] NET-5017 JWT Cleanup/Status Conditions (#18700 )

* Fixes issues in setting status

* Update golden files for changes to xds generation to not use deprecated
methods

* Fixed default for validation of JWT for route

2023-09-07 19:03:09 +00:00

Chris S. Kim

fb5eb20563

Pass trust domain to RBAC to validate and fix use of wrong peer trust bundles (#13508 )

2022-06-20 22:47:14 -04:00

Chris S. Kim

a02e9abcc1

Update RBAC to handle imported services (#13404 )

When converting from Consul intentions to xds RBAC rules, services imported from other peers must encode additional data like partition (from the remote cluster) and trust domain.

This PR updates the PeeringTrustBundle to hold the sending side's local partition as ExportedPartition. It also updates RBAC code to encode SpiffeIDs of imported services with the ExportedPartition and TrustDomain.

2022-06-10 17:15:22 -04:00

3 Commits