freddygv a6d3fe90b1 Validate Subject Alternative Name for upstreams ...

These changes ensure that the identity of services dialed is
cryptographically verified.

For all upstreams we validate against SPIFFE IDs in the format used by
Consul's service mesh:

spiffe://<trust-domain>/ns/<namespace>/dc/<datacenter>/svc/<service>

2021-07-14 22:20:27 -06:00

..

proxysupport

connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231)

2021-05-12 14:06:06 -05:00

testdata

Regen golden files

2021-06-15 14:18:25 -06:00

clusters_test.go

Rename CatalogDestinationsOnly (#10397)

2021-06-14 14:15:09 -06:00

clusters.go

Validate Subject Alternative Name for upstreams

2021-07-14 22:20:27 -06:00

config_test.go

Support Incremental xDS mode (#9855)

2021-04-29 13:54:05 -05:00

config.go

Support Incremental xDS mode (#9855)

2021-04-29 13:54:05 -05:00

delta_test.go

xds: fix flaky protocol tests (#10410)

2021-06-16 11:57:43 -05:00

delta.go

xds: ensure that dependent xDS resources are reconfigured during primary type warming (#10381)

2021-06-14 17:20:27 -05:00

endpoints_test.go

connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101)

2021-04-29 15:22:03 -05:00

endpoints.go

Add support for downstreams

2021-05-04 12:41:43 -07:00

envoy_versioning_test.go

connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231)

2021-05-12 14:06:06 -05:00

envoy_versioning.go

connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101)

2021-04-29 15:22:03 -05:00

failover_math_test.go

xds: remove deprecated usages of xDS (#9602)

2021-02-22 15:00:15 -06:00

failover_math.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

golden_test.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

listeners_test.go

Rename CatalogDestinationsOnly (#10397)

2021-06-14 14:15:09 -06:00

listeners.go

Format certificates properly (rfc7468) with a trailing new line (#10411)

2021-06-30 20:48:29 -04:00

naming.go

…

net_fallback.go

xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9765)

2021-02-19 14:38:43 -06:00

net_linux.go

xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9765)

2021-02-19 14:38:43 -06:00

protocol_trace.go

Support Incremental xDS mode (#9855)

2021-04-29 13:54:05 -05:00

rbac_test.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

rbac.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

resources.go

Support Incremental xDS mode (#9855)

2021-04-29 13:54:05 -05:00

response.go

Continue working through proxy and agent

2021-05-04 12:41:43 -07:00

routes_test.go

connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101)

2021-04-29 15:22:03 -05:00

routes.go

Replace use of 'sane' where appropriate

2021-07-02 12:18:46 -04:00

server_oss.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

server_test.go

xds: emit a labeled gauge of connected xDS streams by version (#10243)

2021-05-14 13:59:13 -05:00

server.go

rename GRPC->XDS where appropriate

2021-07-09 12:17:45 -04:00

testing.go

xds: adding more delta protocol tests (#10398)

2021-06-15 15:21:07 -05:00

version_compat.go

connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101)

2021-04-29 15:22:03 -05:00

xds_protocol_helpers_test.go

Validate Subject Alternative Name for upstreams

2021-07-14 22:20:27 -06:00

xds.go

…

z_xds_packages_test.go

xds: ensure that all envoyproxy/go-control-plane protobuf symbols are linked into the final binary (#10131)

2021-04-29 14:58:26 -05:00

z_xds_packages.go

xds: ensure that all envoyproxy/go-control-plane protobuf symbols are linked into the final binary (#10131)

2021-04-29 14:58:26 -05:00