2
0
mirror of https://github.com/status-im/consul.git synced 2025-02-28 05:10:40 +00:00

7 Commits

Author SHA1 Message Date
Eric Haberkorn
d99312b86e
Add Upstream Service Targeting to Property Override Extension ()
* add upstream service targeting to property override extension

* Also add baseline goldens for service specific property override extension.
* Refactor the extension framework to put more logic into the templates.

* fix up the golden tests
2023-05-30 14:53:42 -04:00
Michael Zalimeni
b8d2640429
Disable remote proxy patching except AWS Lambda ()
To avoid unintended tampering with remote downstreams via service
config, refactor BasicEnvoyExtender and RuntimeConfig to disallow
typical Envoy extensions from being applied to non-local proxies.

Continue to allow this behavior for AWS Lambda and the read-only
Validate builtin extensions.

Addresses CVE-2023-2816.
2023-05-23 11:55:06 +00:00
Ronald
b64674623e
Copyright headers for missing files/folders ()
* copyright headers for agent folder
2023-03-28 18:48:58 -04:00
Nitya Dhanushkodi
8dab825c36
troubleshoot: fixes and updated messages () 2023-02-17 07:43:05 -08:00
Nitya Dhanushkodi
ad7b71dbd7
troubleshoot: handle tproxy dialed directly case () 2023-02-08 14:49:38 -08:00
Nitya Dhanushkodi
1f25289048
troubleshoot: output messages for the troubleshoot proxy command () 2023-02-08 13:03:15 -08:00
Nitya Dhanushkodi
b8b37c2357
refactor: remove troubleshoot module dependency on consul top level module ()
Ensure nothing in the troubleshoot go module depends on consul's top level module. This is so we can import troubleshoot into consul-k8s and not import all of consul.

* turns troubleshoot into a go module [authored by @curtbushko]
* gets the envoy protos into the troubleshoot module [authored by @curtbushko]
* adds a new go module `envoyextensions` which has xdscommon and extensioncommon folders that both the xds package and the troubleshoot package can import
* adds testing and linting for the new go modules
* moves the unit tests in `troubleshoot/validateupstream` that depend on proxycfg/xds into the xds package, with a comment describing why those tests cannot be in the troubleshoot package
* fixes all the imports everywhere as a result of these changes 

Co-authored-by: Curt Bushko <cbushko@gmail.com>
2023-02-06 09:14:35 -08:00