mirror of https://github.com/status-im/consul.git
7c3e9cd862
UNIX domain socket paths are limited to 104-108 characters, depending on the OS. This limit was quite easy to exceed when testing the feature on Kubernetes, due to how proxy IDs encode the Pod ID eg: metrics-collector-59467bcb9b-fkkzl-hcp-metrics-collector-sidecar-proxy To ensure we stay under that character limit this commit makes a couple changes: - Use a b64 encoded SHA1 hash of the namespace + proxy ID to create a short and deterministic socket file name. - Add validation to proxy registrations and proxy-defaults to enforce a limit on the socket directory length. |
||
---|---|---|
.. | ||
builtin_extension | ||
clusters | ||
endpoints | ||
listeners | ||
rbac | ||
routes | ||
secrets | ||
alt-test-leaf-cert.golden | ||
alt-test-leaf-key.golden | ||
alt-test-root-cert.golden | ||
cache-test-leaf-cert.golden | ||
cache-test-leaf-key.golden | ||
db-test-leaf-cert.golden | ||
db-test-leaf-key.golden | ||
test-leaf-cert.golden | ||
test-leaf-key.golden | ||
test-root-cert.golden |