consul/agent/xds/testdata/rbac
skpratt 57bad0df85
add traffic permissions excludes and tests (#20453)
* add traffic permissions tests

* review fixes

* Update internal/mesh/internal/controllers/sidecarproxy/builder/local_app.go

Co-authored-by: John Landa <jonathanlanda@gmail.com>

---------

Co-authored-by: John Landa <jonathanlanda@gmail.com>
2024-02-07 20:21:44 +00:00
..
default-allow-deny-all-and-path-allow--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-deny-all-and-path-allow.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-deny-all-and-path-deny--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-deny-all-and-path-deny.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-kitchen-sink--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-kitchen-sink.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-one-deny--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-one-deny.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-path-allow--httpfilter.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
default-allow-path-allow.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-path-deny--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-path-deny.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-service-wildcard-deny--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-service-wildcard-deny.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-single-intention-with-kitchen-sink-perms--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-single-intention-with-kitchen-sink-perms.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-two-path-deny-and-path-allow--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-allow-two-path-deny-and-path-allow.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-allow-deny--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-allow-deny.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-deny-all-and-path-allow--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-deny-all-and-path-allow.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
default-deny-deny-all-and-path-deny--httpfilter.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
default-deny-deny-all-and-path-deny.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
default-deny-kitchen-sink--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-kitchen-sink.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-mixed-precedence--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-mixed-precedence.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-one-allow--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-one-allow.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-path-allow--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-path-allow.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
default-deny-path-deny--httpfilter.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
default-deny-path-deny.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
default-deny-peered-kitchen-sink--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-peered-kitchen-sink.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-service-wildcard-allow--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-service-wildcard-allow.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-single-intention-with-kitchen-sink-perms--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-single-intention-with-kitchen-sink-perms.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
default-deny-two-path-deny-and-path-allow--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
default-deny-two-path-deny-and-path-allow.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
empty-top-level-jwt-with-one-permission--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
empty-top-level-jwt-with-one-permission.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
top-level-jwt-no-permissions--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
top-level-jwt-no-permissions.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
top-level-jwt-with-multiple-permissions--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
top-level-jwt-with-multiple-permissions.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
top-level-jwt-with-one-permission--httpfilter.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
top-level-jwt-with-one-permission.golden xds: update golden tests to be deterministic (#18707) 2023-09-11 11:40:19 -05:00
v2-L4-deny-L7-allow--httpfilter.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-L4-deny-L7-allow.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-default-allow--httpfilter.golden Fix SAN matching on terminating gateways (#20417) 2024-01-31 12:17:45 -06:00
v2-default-allow.golden Add V2 TCP traffic permissions (#18771) 2023-09-13 09:03:42 -04:00
v2-default-deny--httpfilter.golden Fix SAN matching on terminating gateways (#20417) 2024-01-31 12:17:45 -06:00
v2-default-deny.golden Allow connections through Terminating Gateways from peered clusters NET-3463 (#18959) 2023-10-05 21:54:23 +00:00
v2-ignore-empty-permissions--httpfilter.golden Fix SAN matching on terminating gateways (#20417) 2024-01-31 12:17:45 -06:00
v2-ignore-empty-permissions.golden Handle Traffic Permissions With Empty Sources Properly (#19024) 2023-09-28 15:11:59 -04:00
v2-kitchen-sink--httpfilter.golden Fix SAN matching on terminating gateways (#20417) 2024-01-31 12:17:45 -06:00
v2-kitchen-sink.golden NET-6946 / NET-6941 - Replace usage of deprecated Envoy fields envoy.config.route.v3.HeaderMatcher.safe_regex_match and envoy.type.matcher.v3.RegexMatcher.google_re2 (#20013) 2024-01-03 09:53:39 -07:00
v2-path-excludes--httpfilter.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-path-excludes.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-path-method-header-excludes--httpfilter.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-path-method-header-excludes.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-single-permission-multiple-destination-rules--httpfilter.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-single-permission-multiple-destination-rules.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-single-permission-with-excludes--httpfilter.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-single-permission-with-excludes.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-single-permission-with-kitchen-sink-perms--httpfilter.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00
v2-single-permission-with-kitchen-sink-perms.golden add traffic permissions excludes and tests (#20453) 2024-02-07 20:21:44 +00:00