consul/internal
Eric Haberkorn 7ce6ebaeb3
Handle Traffic Permissions With Empty Sources Properly (#19024)
Fix issues with empty sources

* Validate that each permission on traffic permissions resources has at least one source.
* Don't construct RBAC policies when there aren't any principals. This resulted in Envoy rejecting xDS updates with a validation error.

```
error=
  | rpc error: code = Internal desc = Error adding/updating listener(s) public_listener: Proto constraint validation failed (RBACValidationError.Rules: embedded message failed validation | caused by RBACValidationError.Policies[consul-intentions-layer4-1]: embedded message failed validation | caused by PolicyValidationError.Principals: value must contain at least 1 item(s)): rules {
```
2023-09-28 15:11:59 -04:00
..
auth Handle Traffic Permissions With Empty Sources Properly (#19024) 2023-09-28 15:11:59 -04:00
catalog catalog,mesh,auth: Move resource types to the proto-public module (#18935) 2023-09-22 15:50:56 -06:00
controller mesh: create new routes-controller to reconcile xRoute types into a ComputedRoutes resource (#18460) 2023-09-12 12:08:51 -05:00
go-sso [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00
mesh mesh: rename Upstreams and UpstreamsConfiguration to Destinations* (#18995) 2023-09-25 12:03:45 -06:00
protohcl add fuzz tests to resourcehcl package and fix some panics (#18798) 2023-09-14 10:59:33 -04:00
protoutil mesh: compute more of the xRoute features into ComputedRoutes (#18980) 2023-09-22 16:13:24 -05:00
radix [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00
resource v2 explicit destination traffic permissions (#18823) 2023-09-25 16:50:07 +00:00
resourcehcl mesh: rename Upstreams and UpstreamsConfiguration to Destinations* (#18995) 2023-09-25 12:03:45 -06:00
storage resource: Require scope for resource registration (#18635) 2023-09-01 09:44:53 -05:00
tenancy catalog,mesh,auth: Bump versions to v2beta1 (#18930) 2023-09-22 10:51:15 -06:00
testing/golden NET-5132 - Configure multiport routing for connect proxies in TProxy mode (#18606) 2023-09-12 01:17:56 +00:00
tools Add protoc generator to emit resource type variables (#18957) 2023-09-21 17:18:47 -04:00