freddygv 752f5ff961 Validate Subject Alternative Name for upstreams ...

These changes ensure that the identity of services dialed is
cryptographically verified.

For all upstreams we validate against SPIFFE IDs in the format used by
Consul's service mesh:

spiffe://<trust-domain>/ns/<namespace>/dc/<datacenter>/svc/<service>

2021-07-14 23:41:19 -06:00

..

proxysupport

[1.8.x] connect: update supported envoy versions to 1.14.7, 1.13.7, 1.12.7, 1.11.2 (#10106)

2021-04-29 15:56:24 -05:00

testdata

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

clusters_test.go

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

clusters.go

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

config_test.go

Enable gateways to resolve hostnames to IPv4 addresses (#7999)

2020-06-03 18:51:33 -06:00

config.go

connect: upgrade github.com/envoyproxy/go-control-plane to v0.9.5 (#8247)

2020-07-07 16:22:30 -05:00

endpoints_test.go

test: omit envoy golden test files that differ from the latest version (#9824)

2021-02-24 15:49:32 -06:00

endpoints.go

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

envoy_versioning_test.go

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

envoy_versioning.go

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

failover_math_test.go

…

failover_math.go

…

golden_test.go

test: omit envoy golden test files that differ from the latest version (#9824)

2021-02-24 15:49:32 -06:00

listeners_test.go

test: omit envoy golden test files that differ from the latest version (#9824)

2021-02-24 15:49:32 -06:00

listeners.go

Format certificates properly (rfc7468) with a trailing new line (#10411) (#10556)

2021-07-06 12:40:39 -04:00

naming.go

…

net_fallback.go

xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9794)

2021-02-22 10:45:40 -06:00

net_linux.go

xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9794)

2021-02-22 10:45:40 -06:00

response.go

connect: upgrade github.com/envoyproxy/go-control-plane to v0.9.5 (#8247)

2020-07-07 16:22:30 -05:00

routes_test.go

test: omit envoy golden test files that differ from the latest version (#9824)

2021-02-24 15:49:32 -06:00

routes.go

[backport/1.8.x] connect: use stronger validation that ingress gateways have compatible protocols defined for their upstreams (#8494)

2020-08-13 15:26:23 -05:00

server_oss.go

…

server_test.go

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

server.go

Backport to release/1.8.x: #9738 - Stop background refresh of cached data for requests that result in ACL not found errors (#9742)

2021-02-09 11:32:38 -05:00

testing.go

connect: upgrade github.com/envoyproxy/go-control-plane to v0.9.5 (#8247)

2020-07-07 16:22:30 -05:00

xds.go

…