freddygv bdacb71d22 Validate Subject Alternative Name for upstreams ...

These changes ensure that the identity of services dialed is
cryptographically verified.

For all upstreams we validate against SPIFFE IDs in the format used by
Consul's service mesh:

spiffe://<trust-domain>/ns/<namespace>/dc/<datacenter>/svc/<service>

2021-07-14 22:41:02 -06:00

..

proxysupport

connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231)

2021-05-12 19:06:43 +00:00

testdata

Merge pull request #10404 from hashicorp/ingress-stats

2021-06-15 20:28:43 +00:00

clusters_test.go

Rename CatalogDestinationsOnly (#10397)

2021-06-14 20:15:58 +00:00

clusters.go

Validate Subject Alternative Name for upstreams

2021-07-14 22:41:02 -06:00

config_test.go

Support Incremental xDS mode (#9855)

2021-04-29 18:54:53 +00:00

config.go

Support Incremental xDS mode (#9855)

2021-04-29 18:54:53 +00:00

delta_test.go

xds: fix flaky protocol tests (#10410)

2021-06-16 16:58:34 +00:00

delta.go

xds: ensure that dependent xDS resources are reconfigured during primary type warming (#10381)

2021-06-14 22:21:04 +00:00

endpoints_test.go

connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101)

2021-04-29 20:22:41 +00:00

endpoints.go

Merge pull request #9981 from hashicorp/ma/uds_upstreams

2021-05-05 16:17:32 -04:00

envoy_versioning_test.go

connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231)

2021-05-12 19:06:43 +00:00

envoy_versioning.go

connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101)

2021-04-29 20:22:41 +00:00

failover_math_test.go

xds: remove deprecated usages of xDS (#9602)

2021-02-22 15:00:15 -06:00

failover_math.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

golden_test.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

listeners_test.go

Rename CatalogDestinationsOnly (#10397)

2021-06-14 20:15:58 +00:00

listeners.go

Format certificates properly (rfc7468) with a trailing new line (#10411)

2021-07-01 00:49:03 +00:00

naming.go

connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340)

2019-08-19 13:03:03 -05:00

net_fallback.go

xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9765)

2021-02-19 14:38:43 -06:00

net_linux.go

xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9765)

2021-02-19 14:38:43 -06:00

protocol_trace.go

Support Incremental xDS mode (#9855)

2021-04-29 18:54:53 +00:00

rbac_test.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

rbac.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

resources.go

Support Incremental xDS mode (#9855)

2021-04-29 18:54:53 +00:00

response.go

Merge pull request #9981 from hashicorp/ma/uds_upstreams

2021-05-05 16:17:32 -04:00

routes_test.go

connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101)

2021-04-29 20:22:41 +00:00

routes.go

Support Incremental xDS mode (#9855)

2021-04-29 18:54:53 +00:00

server_oss.go

xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658)

2021-02-26 16:23:15 -06:00

server_test.go

xds: emit a labeled gauge of connected xDS streams by version (#10243)

2021-05-14 19:00:15 +00:00

server.go

Add flag for transparent proxies to dial individual instances (#10329)

2021-06-09 20:39:37 +00:00

testing.go

xds: adding more delta protocol tests (#10398)

2021-06-15 20:21:42 +00:00

version_compat.go

connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101)

2021-04-29 20:22:41 +00:00

xds_protocol_helpers_test.go

Validate Subject Alternative Name for upstreams

2021-07-14 22:41:02 -06:00

xds.go

Remove unused customEDSClusterJSON

2020-03-27 15:38:16 -04:00

z_xds_packages_test.go

xds: ensure that all envoyproxy/go-control-plane protobuf symbols are linked into the final binary (#10131)

2021-04-29 19:58:58 +00:00

z_xds_packages.go

xds: ensure that all envoyproxy/go-control-plane protobuf symbols are linked into the final binary (#10131)

2021-04-29 19:58:58 +00:00