github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
15,423 Commits
1,701 Branches
457 Tags
685 MiB
Commit Graph

3 Commits (02dda536f95844b59ec137506997f78d1384bd56)

Author SHA1 Message Date
freddygv af52d21884 Update prepared query cluster SAN validation 
Previously SAN validation for prepared queries was broken because we
validated against the name, namespace, and datacenter for prepared
queries.

However, prepared queries can target:

- Services with a name that isn't their own
- Services in multiple datacenters

This means that the SpiffeID to validate needs to be based on the
prepared query endpoints, and not the prepared query's upstream
definition.

This commit updates prepared query clusters to account for that.
 2021-08-20 17:40:33 -06:00
freddygv 5454147c09 Update golden files to account for SAN validation 2021-07-14 22:21:55 -06:00
Mark Anderson ff7fca756b Add simple test for downstream sockets 
Signed-off-by: Mark Anderson <manderson@hashicorp.com>
 2021-05-04 12:41:43 -07:00