consul/internal/resource
skpratt 202090e5d5
v2 explicit destination traffic permissions (#18823)
* workload identity boilerplate

* notes from discussion with Iryna

* WIP traffic permissions controller poc

* workload identity, traffic permissions validation, errors, types

* traffic permissions mapper framing, traffic permissions controller updates.

* more roughing out of the controller

* cleanup

* controller and mapper logic

* tests

* refactor mapper logic, add tests

* clean up tenancy and integration test stubs

* consolidate mapping

* cleanup cache leak, revert bimapper changes

* address review comments

* test fix and rebase

* use resource helper

---------

Co-authored-by: John Landa <john.landa@hashicorp.com>
2023-09-25 16:50:07 +00:00
..
demo resource: allow for the ACLs.Read hook to request the entire data payload to perform the authz check (#18925) 2023-09-22 09:53:55 -05:00
http fix: write endpoint errors out gracefully (#18743) 2023-09-12 09:22:15 -04:00
mappers/bimapper mesh: store bound reference pointers on a ComputedRoutes resource and use during reconcile (#18965) 2023-09-22 15:46:14 -05:00
protoc-gen-resource-types Add protoc generator to emit resource type variables (#18957) 2023-09-21 17:18:47 -04:00
reaper [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00
resourcetest mesh: make FailoverPolicy work in xdsv2 and ProxyStateTemplate (#18900) 2023-09-20 11:59:01 -05:00
testdata Add type validations for the catalog resources (#17211) 2023-05-12 09:24:55 -04:00
authz.go resource: ensure resource.AuthorizerContext properly strips the local… (#18908) 2023-09-19 17:14:15 -05:00
authz_ce.go resource: ensure resource.AuthorizerContext properly strips the local… (#18908) 2023-09-19 17:14:15 -05:00
authz_ce_test.go resource: ensure resource.AuthorizerContext properly strips the local… (#18908) 2023-09-19 17:14:15 -05:00
decode.go v2 explicit destination traffic permissions (#18823) 2023-09-25 16:50:07 +00:00
decode_test.go resource: Require scope for resource registration (#18635) 2023-09-01 09:44:53 -05:00
equality.go bimapper: allow to untrack links and support reference or id (#18451) 2023-08-17 18:03:05 -06:00
equality_test.go [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00
errors.go [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00
errors_test.go catalog,mesh,auth: Bump versions to v2beta1 (#18930) 2023-09-22 10:51:15 -06:00
reference.go mesh: Wire ComputedRoutes into the ProxyStateTemplate via the sidecar controller (#18752) 2023-09-14 17:19:04 -05:00
refkey.go [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00
refkey_test.go [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00
registry.go catalog,mesh,auth: Bump versions to v2beta1 (#18930) 2023-09-22 10:51:15 -06:00
registry_test.go resource: allow for the ACLs.Read hook to request the entire data payload to perform the authz check (#18925) 2023-09-22 09:53:55 -05:00
sort.go mesh: store bound reference pointers on a ComputedRoutes resource and use during reconcile (#18965) 2023-09-22 15:46:14 -05:00
sort_test.go mesh: store bound reference pointers on a ComputedRoutes resource and use during reconcile (#18965) 2023-09-22 15:46:14 -05:00
stringer.go [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00
tenancy.go Traffic Permissions Validations (#18907) 2023-09-22 16:10:10 -04:00
tenancy_bridge_ce.go add v2 tenancy bridge Flag and v2 Tenancy Bridge initial implementation (#18830) 2023-09-18 12:25:05 -04:00
tenancy_test.go resource: add helper to normalize inner Reference tenancy during mutate (#18765) 2023-09-13 12:08:12 -05:00
tombstone.go [COMPLIANCE] License changes (#18443) 2023-08-11 09:12:13 -04:00