status-im/consul
2
0
Fork 0
mirror of https://github.com/status-im/consul.git synced 2025-02-13 14:16:35 +00:00
Code Issues Projects Releases Wiki Activity
consul/agent
History
R.B. Boyer 31b95c747b
xds: modify rbac rules to use the XFCC header for peered L7 enforcement (#13629) 
When the protocol is http-like, and an intention has a peered source
then the normal RBAC mTLS SAN field check is replaces with a joint combo
of:

    mTLS SAN field must be the service's local mesh gateway leaf cert
      AND
    the first XFCC header (from the MGW) must have a URI field that matches the original intention source

Also:

- Update the regex program limit to be much higher than the teeny
  defaults, since the RBAC regex constructions are more complicated now.

- Fix a few stray panics in xds generation.
2022-06-29 10:29:54 -05:00
..
ae
sdk: add TestLogLevel for setting log level in tests
2022-02-03 13:42:28 -05:00
auto-config
peering: initial sync (#12842)
2022-04-21 17:34:40 -05:00
cache
proxycfg: remove dependency on cache.UpdateEvent (#13144)
2022-05-20 15:47:40 +01:00
cache-types
xds: mesh gateways now have their own leaf certificate when involved in a peering (#13460)
2022-06-15 14:36:18 -05:00
checks
UDP check for service stanza #12221 (#12722)
2022-06-06 15:13:19 -04:00
config
Change default dates
2022-06-09 17:07:41 -07:00
configentry
Fixup acl.EnterpriseMeta
2022-04-05 15:11:49 -07:00
connect
xds: mesh gateways now have their own leaf certificate when involved in a peering (#13460)
2022-06-15 14:36:18 -05:00
consul
peering: replicate all SpiffeID values necessary for the importing side to do SAN validation (#13612)
2022-06-27 14:37:18 -05:00
debug
bulk rewrite using this script
2022-01-20 10:46:23 -06:00
dns
test: fix incorrect use of t instead of r in retry test (#13146)
2022-05-19 14:00:07 -05:00
exec
re-run gofmt on 1.17 (#11579)
2021-11-16 12:04:01 -06:00
grpc
Move ACLResolveResult into acl/resolver package (#13467)
2022-06-17 10:24:43 +01:00
local
Move ACLResolveResult into acl/resolver package (#13467)
2022-06-17 10:24:43 +01:00
metadata
partitions: various refactors to support partitioning the serf LAN pool (#11568)
2021-11-15 09:51:14 -06:00
mock
…
pool
Add timeout to Client RPC calls (#11500)
2022-04-21 16:21:35 -04:00
proxycfg
xds: modify rbac rules to use the XFCC header for peered L7 enforcement (#13629)
2022-06-29 10:29:54 -05:00
proxycfg-glue
peering: allow mesh gateways to proxy L4 peered traffic (#13339)
2022-06-06 14:20:41 -05:00
proxycfg-sources
Fix a flaky test (#13282)
2022-05-27 13:25:08 -04:00
router
sdk: add TestLogLevel for setting log level in tests
2022-02-03 13:42:28 -05:00
routine-leak-checker
Remove references to "master" ACL tokens in tests (#11751)
2021-12-07 12:48:50 +00:00
rpc
peering: replicate all SpiffeID values necessary for the importing side to do SAN validation (#13612)
2022-06-27 14:37:18 -05:00
rpcclient/health
Add support for merge-central-config query param (#13001)
2022-05-25 13:20:17 -07:00
structs
peering: replicate all SpiffeID values necessary for the importing side to do SAN validation (#13612)
2022-06-27 14:37:18 -05:00
submatview
proxycfg: remove dependency on cache.UpdateEvent (#13144)
2022-05-20 15:47:40 +01:00
systemd
…
token
agent/token: rename agent_master to agent_recovery (internally) (#11744)
2021-12-07 12:12:47 +00:00
uiserver
Reimplement fs.FileInfo interface (#13315)
2022-06-01 11:09:51 -04:00
xds
xds: modify rbac rules to use the XFCC header for peered L7 enforcement (#13629)
2022-06-29 10:29:54 -05:00
acl_endpoint_legacy_test.go
…
acl_endpoint_legacy.go
…
acl_endpoint_test.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
acl_endpoint.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
acl_oss.go
agent: support X-Consul-Results-Filtered-By-ACLs header in agent-local endpoints (#11610)
2021-12-03 20:36:28 +00:00
acl_test.go
Move ACLResolveResult into acl/resolver package (#13467)
2022-06-17 10:24:43 +01:00
acl.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
agent_endpoint_oss_test.go
Add oss test
2022-05-09 10:07:19 -07:00
agent_endpoint_oss.go
Fixup acl.EnterpriseMeta
2022-04-05 15:11:49 -07:00
agent_endpoint_test.go
Move ACLResolveResult into acl/resolver package (#13467)
2022-06-17 10:24:43 +01:00
agent_endpoint.go
xds: mesh gateways now have their own leaf certificate when involved in a peering (#13460)
2022-06-15 14:36:18 -05:00
agent_oss.go
proxycfg: replace direct agent cache usage with interfaces (#13320)
2022-06-01 16:18:06 +01:00
agent_test.go
Update go version to 1.18.1
2022-04-18 11:41:10 -04:00
agent.go
Move ACLResolveResult into acl/resolver package (#13467)
2022-06-17 10:24:43 +01:00
apiserver_test.go
…
apiserver.go
…
catalog_endpoint_oss.go
re-run gofmt on 1.17 (#11579)
2021-11-16 12:04:01 -06:00
catalog_endpoint_test.go
[OSS] Support merge-central-config option in node services list API (#13450)
2022-06-15 08:30:31 -07:00
catalog_endpoint.go
[OSS] Support merge-central-config option in node services list API (#13450)
2022-06-15 08:30:31 -07:00
check.go
Fixup acl.EnterpriseMeta
2022-04-05 15:11:49 -07:00
config_endpoint_test.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
config_endpoint.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
connect_auth.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
connect_ca_endpoint_test.go
Update go version to 1.18.1
2022-04-18 11:41:10 -04:00
connect_ca_endpoint.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
coordinate_endpoint_test.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
coordinate_endpoint.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
delegate_mock_test.go
Move ACLResolveResult into acl/resolver package (#13467)
2022-06-17 10:24:43 +01:00
denylist_test.go
…
denylist.go
…
discovery_chain_endpoint_test.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
discovery_chain_endpoint.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
dns_oss.go
Fixup acl.EnterpriseMeta
2022-04-05 15:11:49 -07:00
dns_test.go
Remove references to "master" ACL tokens in tests (#11751)
2021-12-07 12:48:50 +00:00
dns.go
Add dns node lookup support in partitions
2022-06-10 11:23:51 -07:00
enterprise_delegate_oss.go
re-run gofmt on 1.17 (#11579)
2021-11-16 12:04:01 -06:00
event_endpoint_test.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
event_endpoint.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
federation_state_endpoint.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
health_endpoint_test.go
[OSS] Fix merge central config tests (#13309)
2022-05-31 12:04:19 -07:00
health_endpoint.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
http_decode_test.go
…
http_oss_test.go
Remove references to "master" ACL tokens in tests (#11751)
2021-12-07 12:48:50 +00:00
http_oss.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
http_register.go
peering: rename initiate to establish in the context of the APIs (#13419)
2022-06-10 11:10:46 -05:00
http_test.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
http.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
intentions_endpoint_oss_test.go
re-run gofmt on 1.17 (#11579)
2021-11-16 12:04:01 -06:00
intentions_endpoint_test.go
oss: peering, http: get peer service intentions (#2098)
2022-06-22 16:25:09 -07:00
intentions_endpoint.go
oss: peering, http: get peer service intentions (#2098)
2022-06-22 16:25:09 -07:00
keyring_test.go
Remove references to "master" ACL tokens in tests (#11751)
2021-12-07 12:48:50 +00:00
keyring.go
Allows keyring operations on client agents
2022-02-24 17:24:57 +00:00
kvs_endpoint_test.go
…
kvs_endpoint.go
Fix KVSGet method to handle QueryOptions properly (#13344)
2022-06-02 12:26:18 -04:00
metrics_test.go
Add isLeader metric to track if a server is a leader (#13304)
2022-06-03 13:07:37 -04:00
metrics.go
…
nodeid_test.go
…
nodeid.go
…
notify_test.go
…
notify.go
…
operator_endpoint_oss.go
re-run gofmt on 1.17 (#11579)
2021-11-16 12:04:01 -06:00
operator_endpoint_test.go
…
operator_endpoint.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
peering_endpoint_oss_test.go
[sync oss] api: add peering api module (#12911)
2022-05-02 11:49:05 -07:00
peering_endpoint_test.go
Avoid deleting peerings marked as terminated.
2022-06-14 15:37:09 -06:00
peering_endpoint.go
peering: rename initiate to establish in the context of the APIs (#13419)
2022-06-10 11:10:46 -05:00
prepared_query_endpoint_test.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
prepared_query_endpoint.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
reload.go
…
remote_exec_test.go
Remove references to "master" ACL tokens in tests (#11751)
2021-12-07 12:48:50 +00:00
remote_exec.go
…
retry_join_test.go
…
retry_join.go
…
service_checks_test.go
…
service_manager_test.go
Add support for merge-central-config query param (#13001)
2022-05-25 13:20:17 -07:00
service_manager.go
Add support for merge-central-config query param (#13001)
2022-05-25 13:20:17 -07:00
session_endpoint_test.go
…
session_endpoint.go
Revert getPathSuffixUnescaped (#13256)
2022-06-01 13:17:14 -04:00
setup_oss.go
re-run gofmt on 1.17 (#11579)
2021-11-16 12:04:01 -06:00
setup.go
Add isLeader metric to track if a server is a leader (#13304)
2022-06-03 13:07:37 -04:00
sidecar_service_test.go
bulk rewrite using this script
2022-01-20 10:46:23 -06:00
sidecar_service.go
…
signal_unix.go
re-run gofmt on 1.17 (#11579)
2021-11-16 12:04:01 -06:00
signal_windows.go
re-run gofmt on 1.17 (#11579)
2021-11-16 12:04:01 -06:00
snapshot_endpoint_test.go
…
snapshot_endpoint.go
…
status_endpoint_test.go
…
status_endpoint.go
…
streaming_test.go
regenerate expired certs (#11462)
2021-11-01 11:40:16 -04:00
testagent_test.go
…
testagent.go
Retry on bad dogstatsd connection (#13091)
2022-05-19 16:03:46 -04:00
translate_addr.go
…
txn_endpoint_test.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
txn_endpoint.go
Unify various status errors into one HTTP error type. (#12594)
2022-04-29 13:42:49 -04:00
ui_endpoint_oss_test.go
re-run gofmt on 1.17 (#11579)
2021-11-16 12:04:01 -06:00
ui_endpoint_test.go
peering, internal: support UIServices, UINodes, UINodeInfo (#13577)
2022-06-24 15:17:35 -07:00
ui_endpoint.go
peering, internal: support UIServices, UINodes, UINodeInfo (#13577)
2022-06-24 15:17:35 -07:00
user_event_test.go
…
user_event.go
Vendor in rpc mono repo for net/rpc fork, go-msgpack, msgpackrpc. (#12311)
2022-02-14 09:45:45 -08:00
util_test.go
Remove some usage of md5 from the system (#11491)
2021-11-04 13:07:54 -07:00
util.go
Remove some usage of md5 from the system (#11491)
2021-11-04 13:07:54 -07:00
watch_handler_test.go
…
watch_handler.go
…