Commit Graph

108 Commits (3c3bdba926f97fa65fac00c50bf4ff081d4889d7)

Author SHA1 Message Date
sarahalsmiller 08761f16c8
Net 6820 customize mesh gateway limits (#20945)
7 months ago
Nathan Coleman 5e9f02d4be
[NET-8091] Add file-system-certificate config entry for API gateway (#20873)
7 months ago
Derek Menteer dfab5ade50
Fix ClusterLoadAssignment timeouts dropping endpoints. (#19871)
12 months ago
Thomas Eckert 342306c312
Allow connections through Terminating Gateways from peered clusters NET-3463 (#18959)
1 year ago
Semir Patel 53e28a4963
OSS -> CE (community edition) changes (#18517)
1 year ago
hashicorp-copywrite[bot] 5fb9df1640
[COMPLIANCE] License changes (#18443)
1 year ago
Dan Stough 1b08626358
[OSS] Fix initial_fetch_timeout to wait for all xDS resources (#18024)
1 year ago
Eric Haberkorn a3ba559149
Make locality aware routing xDS changes (#17826)
1 year ago
Andrew Stucki 9a4f503b2b
[API Gateway] Fix trust domain for external peered services in synthesis code (#17609)
1 year ago
sarahalsmiller b147323fb0
xds: Remove APIGateway ToIngress function (#17453)
2 years ago
sarahalsmiller e2a81aa8bd
xds: generate listeners directly from API gateway snapshot (#17398)
2 years ago
Ronald 113202d541
JWT Authentication with service intentions: xds package update (#17414)
2 years ago
sarahalsmiller 134aac7c26
xds: generate endpoints directly from API gateway snapshot (#17390)
2 years ago
Eric Haberkorn b1fae05983
Add sameness groups to service intentions. (#17064)
2 years ago
Ronald 94ec4eb2f4
copyright headers for agent folder (#16704)
2 years ago
John Maguire 8dd1d73874
Remove unused are hosts set check (#16691)
2 years ago
Matt Keeler 085c0addc0
Protobuf Refactoring for Multi-Module Cleanliness (#16302)
2 years ago
Andrew Stucki e4a992c581
Fix hostname alignment checks for HTTPRoutes (#16300)
2 years ago
Andrew Stucki b3ddd4d24e
Inline API Gateway TLS cert code (#16295)
2 years ago
Andrew Stucki 9bb0ecfc18
[API Gateway] Add integration test for HTTP routes (#16236)
2 years ago
Andrew Stucki 8ff2974dbe
[API Gateway] Update simple test to leverage intentions and multiple listeners (#16228)
2 years ago
Andrew Stucki 318ba215ab
[API Gateway] Add integration test for conflicted TCP listeners (#16225)
2 years ago
Andrew Stucki 3b9c569561
Simple API Gateway e2e test for tcp routes (#16222)
2 years ago
Thomas Eckert e81a0c2855
API Gateway to Ingress Gateway Snapshot Translation and Routes to Virtual Routers and Splitters (#16127)
2 years ago
Nathan Coleman 72a73661c9
Implement APIGateway proxycfg snapshot (#16194)
2 years ago
Derek Menteer 2facf50923
Fix configuration merging for implicit tproxy upstreams. (#16000)
2 years ago
Derek Menteer 1f7e7abeac
Fix issue with incorrect proxycfg watch on upstream peer-targets. (#15865)
2 years ago
cskh a3f57cc5e8
fix(mesh-gateway): remove deregistered service from mesh gateway (#15272)
2 years ago
Dan Upton e6b55d1d81
perf: remove expensive reflection from xDS hot path (#14934)
2 years ago
DanStough 77ab28c5c7 feat: xDS updates for peerings control plane through mesh gw
2 years ago
Eric Haberkorn 1633cf20ea
Make the mesh gateway changes to allow `local` mode for cluster peering data plane traffic (#14817)
2 years ago
Freddy d9fe3578ac
Merge pull request #14734 from hashicorp/NET-643-update-mesh-gateway-envoy-config-for-inbound-peering-control-plane-traffic
2 years ago
freddygv b15d41534f Update xds generation for peering over mesh gws
2 years ago
cskh 69f40df548
feat(ingress gateway: support configuring limits in ingress-gateway c… (#14749)
2 years ago
Eric Haberkorn 6570d5f004
Enable outbound peered requests to go through local mesh gateway (#14763)
2 years ago
freddygv d818d7b096 Manage local server watches depending on mesh cfg
2 years ago
Eric Haberkorn 3726a0ab7a
Finish up cluster peering failover (#14396)
2 years ago
DanStough 2da8949d78 feat: convert destination address to slice
2 years ago
Chris S. Kim 495936300e
Make envoy resources for inferred peered upstreams (#13758)
2 years ago
Dan Stough 49f3dadb8f feat: connect proxy xDS for destinations
2 years ago
Chris S. Kim f56810132f Check if an upstream is implicit from either intentions or peered services
2 years ago
Chris S. Kim 02cff2394d Use new maps for proxycfg peered data
2 years ago
R.B. Boyer 31b95c747b
xds: modify rbac rules to use the XFCC header for peered L7 enforcement (#13629)
2 years ago
R.B. Boyer 1a9c86ea8f
xds: mesh gateways now correctly load up peer-exported discovery chains using L7 protocols (#13624)
2 years ago
Chris S. Kim fb5eb20563
Pass trust domain to RBAC to validate and fix use of wrong peer trust bundles (#13508)
2 years ago
DanStough 4b402e3119 feat: tgtwy xDS generation for destinations
2 years ago
R.B. Boyer 201d1458c3
xds: mesh gateways now have their own leaf certificate when involved in a peering (#13460)
2 years ago
R.B. Boyer f557509e58
xds: allow for peered upstreams to use tagged addresses that are hostnames (#13422)
2 years ago
R.B. Boyer ab758b7b32
peering: allow mesh gateways to proxy L4 peered traffic (#13339)
3 years ago
R.B. Boyer 019aeaa57d
peering: update how cross-peer upstreams and represented in proxycfg and rendered in xds (#13362)
3 years ago