github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Backport of Golden File Tests for TermGW w/ Cluster Peering into release/1.16.x (#19192) 

backport of commit 1fffd233b3

Co-authored-by: Thomas Eckert <teckert@hashicorp.com>
pull/19438/head
hc-github-team-consul-core 2023-10-30 11:04:47 -04:00 committed by GitHub
parent 7ca6abd2b3
commit 66a7699944
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 30 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
agent/xds/listeners_test.go
View File

@ -995,12 +995,12 @@ func TestListenersFromSnapshot(t *testing.T) {
Bundles: []*pbpeering.PeeringTrustBundle{
{
TrustDomain: "foo.bar.gov",
PeerName: "dc1",
PeerName: "dc2",
Partition: "default",
RootPEMs: []string{
roots.Roots[0].RootCert,
},
ExportedPartition: "dc1",
ExportedPartition: "default",
CreateIndex: 0,
ModifyIndex: 0,
},
@ -1011,8 +1011,11 @@ func TestListenersFromSnapshot(t *testing.T) {
CorrelationID: "service-intentions:web",
Result: structs.SimplifiedIntentions{
{
SourceName: "*",
DestinationName: "web",
SourceName: "source",
SourcePeer: "dc2",
DestinationName: "web",
DestinationPartition: "default",
Action: structs.IntentionActionAllow,
},
},
},

24
agent/xds/testdata/listeners/terminating-gateway-with-peer-trust-bundle.latest.golden vendored
View File

@ -171,7 +171,29 @@
"name": "envoy.filters.network.rbac",
"typedConfig": {
"@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
"rules": {},
"rules": {
"policies": {
"consul-intentions-layer4": {
"permissions": [
{
"any": true
}
],
"principals": [
{
"authenticated": {
"principalName": {
"safeRegex": {
"googleRe2": {},
"regex": "^spiffe://foo.bar.gov/ns/default/dc/[^/]+/svc/source$"
}
}
}
}
]
}
}
},
"statPrefix": "connect_authz"
}
},