mirror of https://github.com/status-im/consul.git
6742340878
Creates a new controller to create ComputedImplicitDestinations resources by composing ComputedRoutes, Services, and ComputedTrafficPermissions to infer all ParentRef services that could possibly send some portion of traffic to a Service that has at least one accessible Workload Identity. A followup PR will rewire the sidecar controller to make use of this new resource. As this is a performance optimization, rather than a security feature the following aspects of traffic permissions have been ignored: - DENY rules - port rules (all ports are allowed) Also: - Add some v2 TestController machinery to help test complex dependency mappers. |
||
---|---|---|
.. | ||
cache | ||
controllermock | ||
controllertest | ||
dependency | ||
testdata | ||
.mockery.yaml | ||
controller.go | ||
controller_test.go | ||
custom_watch.go | ||
dependencies.go | ||
dependencies_test.go | ||
doc.go | ||
helper.go | ||
helper_test.go | ||
lease.go | ||
manager.go | ||
mem_consistency_test.go | ||
runner.go | ||
supervisor.go | ||
supervisor_test.go | ||
testing.go | ||
watch.go |