Derek Menteer 8f75d99299

Fix issue with trust bundle read ACL check. (#16630) ...

This commit fixes an issue where trust bundles could not be read
by services in a non-default namespace, unless they had excessive
ACL permissions given to them.

Prior to this change, `service:write` was required in the default
namespace in order to read the trust bundle. Now, `service:write`
to a service in any namespace is sufficient.

2023-03-14 12:24:33 -05:00

..

config_entry_test.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

config_entry.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

discovery_chain_test.go

proxycfg-glue: server-local compiled discovery chain data source

2022-07-14 18:22:12 +01:00

discovery_chain.go

proxycfg-glue: server-local compiled discovery chain data source

2022-07-14 18:22:12 +01:00

exported_peered_services_test.go

Fix issue with peer services incorrectly appearing as connect-enabled. (#16339)

2023-02-21 13:59:36 -06:00

exported_peered_services.go

Fixup authz for data imported from peers (#15347)

2022-11-14 11:36:27 -07:00

federation_state_list_mesh_gateways_test.go

proxycfg-glue: server-local implementation of FederationStateListMeshGateways

2022-07-14 18:22:12 +01:00

federation_state_list_mesh_gateways.go

proxycfg-glue: server-local implementation of FederationStateListMeshGateways

2022-07-14 18:22:12 +01:00

gateway_services_test.go

proxycfg-glue: server-local implementation of GatewayServices

2022-07-14 18:22:12 +01:00

gateway_services.go

proxycfg-glue: server-local implementation of GatewayServices

2022-07-14 18:22:12 +01:00

glue.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

health_test.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

health.go

proxycfg-glue: server-local implementation of the Health interface

2022-07-14 18:22:12 +01:00

helpers_test.go

proxycfg-glue: server-local implementation of ExportedPeeredServices

2022-07-22 15:23:23 +01:00

intention_upstreams_test.go

Remove legacy acl policies (#15922)

2023-02-06 15:35:52 +00:00

intention_upstreams.go

proxycfg-glue: server-local implementation of IntentionUpstreamsDestination

2022-09-06 23:27:25 +01:00

intentions_ent_test.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

intentions_oss.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

intentions_test.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

intentions.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

internal_service_dump_test.go

proxycfg-glue: server-local implementation of InternalServiceDump

2022-09-06 23:27:25 +01:00

internal_service_dump.go

Fixup authz for data imported from peers (#15347)

2022-11-14 11:36:27 -07:00

peered_upstreams_test.go

sync more acl enforcement

2022-07-28 12:01:52 -07:00

peered_upstreams.go

sync more acl enforcement

2022-07-28 12:01:52 -07:00

peering_list_test.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

peering_list.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

resolved_service_config_test.go

proxycfg-glue: server-local implementation of ResolvedServiceConfig

2022-09-06 23:27:25 +01:00

resolved_service_config.go

[OSS] Add Peer field to service-defaults upstream overrides (#15956)

2023-02-03 10:51:53 -05:00

service_http_checks_test.go

Add new config_file_service_registration token (#15828)

2023-01-10 10:24:02 -06:00

service_http_checks.go

Service http checks data source for agentless proxies (#14924)

2022-10-12 07:49:56 -07:00

service_list_test.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

service_list.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

trust_bundle_test.go

Protobuf Refactoring for Multi-Module Cleanliness (#16302)

2023-02-17 16:14:46 -05:00

trust_bundle.go

Fix issue with trust bundle read ACL check. (#16630)

2023-03-14 12:24:33 -05:00