consul/agent/xds
freddygv bdacb71d22 Validate Subject Alternative Name for upstreams
These changes ensure that the identity of services dialed is
cryptographically verified.

For all upstreams we validate against SPIFFE IDs in the format used by
Consul's service mesh:

spiffe://<trust-domain>/ns/<namespace>/dc/<datacenter>/svc/<service>
2021-07-14 22:41:02 -06:00
..
proxysupport connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231) 2021-05-12 19:06:43 +00:00
testdata Merge pull request #10404 from hashicorp/ingress-stats 2021-06-15 20:28:43 +00:00
clusters.go Validate Subject Alternative Name for upstreams 2021-07-14 22:41:02 -06:00
clusters_test.go Rename CatalogDestinationsOnly (#10397) 2021-06-14 20:15:58 +00:00
config.go Support Incremental xDS mode (#9855) 2021-04-29 18:54:53 +00:00
config_test.go Support Incremental xDS mode (#9855) 2021-04-29 18:54:53 +00:00
delta.go xds: ensure that dependent xDS resources are reconfigured during primary type warming (#10381) 2021-06-14 22:21:04 +00:00
delta_test.go xds: fix flaky protocol tests (#10410) 2021-06-16 16:58:34 +00:00
endpoints.go Merge pull request #9981 from hashicorp/ma/uds_upstreams 2021-05-05 16:17:32 -04:00
endpoints_test.go connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101) 2021-04-29 20:22:41 +00:00
envoy_versioning.go connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101) 2021-04-29 20:22:41 +00:00
envoy_versioning_test.go connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231) 2021-05-12 19:06:43 +00:00
failover_math.go xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658) 2021-02-26 16:23:15 -06:00
failover_math_test.go xds: remove deprecated usages of xDS (#9602) 2021-02-22 15:00:15 -06:00
golden_test.go xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658) 2021-02-26 16:23:15 -06:00
listeners.go Format certificates properly (rfc7468) with a trailing new line (#10411) 2021-07-01 00:49:03 +00:00
listeners_test.go Rename CatalogDestinationsOnly (#10397) 2021-06-14 20:15:58 +00:00
naming.go connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340) 2019-08-19 13:03:03 -05:00
net_fallback.go xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9765) 2021-02-19 14:38:43 -06:00
net_linux.go xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9765) 2021-02-19 14:38:43 -06:00
protocol_trace.go Support Incremental xDS mode (#9855) 2021-04-29 18:54:53 +00:00
rbac.go xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658) 2021-02-26 16:23:15 -06:00
rbac_test.go xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658) 2021-02-26 16:23:15 -06:00
resources.go Support Incremental xDS mode (#9855) 2021-04-29 18:54:53 +00:00
response.go Merge pull request #9981 from hashicorp/ma/uds_upstreams 2021-05-05 16:17:32 -04:00
routes.go Support Incremental xDS mode (#9855) 2021-04-29 18:54:53 +00:00
routes_test.go connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101) 2021-04-29 20:22:41 +00:00
server.go Add flag for transparent proxies to dial individual instances (#10329) 2021-06-09 20:39:37 +00:00
server_oss.go xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658) 2021-02-26 16:23:15 -06:00
server_test.go xds: emit a labeled gauge of connected xDS streams by version (#10243) 2021-05-14 19:00:15 +00:00
testing.go xds: adding more delta protocol tests (#10398) 2021-06-15 20:21:42 +00:00
version_compat.go connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101) 2021-04-29 20:22:41 +00:00
xds.go Remove unused customEDSClusterJSON 2020-03-27 15:38:16 -04:00
xds_protocol_helpers_test.go Validate Subject Alternative Name for upstreams 2021-07-14 22:41:02 -06:00
z_xds_packages.go xds: ensure that all envoyproxy/go-control-plane protobuf symbols are linked into the final binary (#10131) 2021-04-29 19:58:58 +00:00
z_xds_packages_test.go xds: ensure that all envoyproxy/go-control-plane protobuf symbols are linked into the final binary (#10131) 2021-04-29 19:58:58 +00:00