freddygv 752f5ff961 Validate Subject Alternative Name for upstreams ...

These changes ensure that the identity of services dialed is
cryptographically verified.

For all upstreams we validate against SPIFFE IDs in the format used by
Consul's service mesh:

spiffe://<trust-domain>/ns/<namespace>/dc/<datacenter>/svc/<service>

2021-07-14 23:41:19 -06:00

..

connect-proxy-with-chain-and-failover.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-chain-and-overrides.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-chain-external-sni.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-chain.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-tcp-chain-double-failover-through-local-gateway-triggered.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-tcp-chain-double-failover-through-local-gateway.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-tcp-chain-double-failover-through-remote-gateway-triggered.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-tcp-chain-double-failover-through-remote-gateway.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-tcp-chain-failover-through-local-gateway-triggered.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-tcp-chain-failover-through-local-gateway.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-tcp-chain-failover-through-remote-gateway-triggered.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

connect-proxy-with-tcp-chain-failover-through-remote-gateway.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

custom-limits-max-connections-only.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

custom-limits-set-to-zero.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

custom-limits.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

custom-local-app.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

custom-timeouts.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

custom-upstream-default-chain.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

custom-upstream.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

defaults.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

expose-paths-grpc-new-cluster-http1.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

expose-paths-local-app-paths.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

expose-paths-new-cluster-http2.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

ingress-gateway-no-services.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

ingress-gateway.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-multiple-listeners-duplicate-service.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-splitter-with-resolver-redirect.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-chain-and-failover.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-chain-and-overrides.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-chain-external-sni.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-chain.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-tcp-chain-double-failover-through-local-gateway-triggered.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-tcp-chain-double-failover-through-local-gateway.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-tcp-chain-double-failover-through-remote-gateway-triggered.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-tcp-chain-double-failover-through-remote-gateway.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-tcp-chain-failover-through-local-gateway-triggered.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-tcp-chain-failover-through-local-gateway.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-tcp-chain-failover-through-remote-gateway-triggered.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

ingress-with-tcp-chain-failover-through-remote-gateway.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

mesh-gateway-ignore-extra-resolvers.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

mesh-gateway-no-services.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

mesh-gateway-service-subsets.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

mesh-gateway-service-timeouts.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

mesh-gateway-using-federation-states.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

mesh-gateway.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

splitter-with-resolver-redirect.envoy-1-14-x.golden

Validate Subject Alternative Name for upstreams

2021-07-14 23:41:19 -06:00

terminating-gateway-hostname-service-subsets.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

terminating-gateway-ignore-extra-resolvers.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

terminating-gateway-no-services.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

terminating-gateway-service-subsets.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00

terminating-gateway.envoy-1-14-x.golden

[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265)

2020-07-09 17:04:23 -05:00