consul

Commit Graph

Author	SHA1	Message	Date
Chris S. Kim	a02e9abcc1	Update RBAC to handle imported services (#13404 ) When converting from Consul intentions to xds RBAC rules, services imported from other peers must encode additional data like partition (from the remote cluster) and trust domain. This PR updates the PeeringTrustBundle to hold the sending side's local partition as ExportedPartition. It also updates RBAC code to encode SpiffeIDs of imported services with the ExportedPartition and TrustDomain.	2022-06-10 17:15:22 -04:00
R.B. Boyer	1e02460bd1	re-run gofmt on 1.17 (#11579 ) This should let freshly recompiled golangci-lint binaries using Go 1.17 pass 'make lint'	2021-11-16 12:04:01 -06:00
R.B. Boyer	ed8a901be7	connect: include optional partition prefixes in SPIFFE identifiers (#10507 ) NOTE: this does not include any intentions enforcement changes yet	2021-06-25 16:47:47 -05:00

Author

SHA1

Message

Date

Chris S. Kim

a02e9abcc1

Update RBAC to handle imported services (#13404 )

When converting from Consul intentions to xds RBAC rules, services imported from other peers must encode additional data like partition (from the remote cluster) and trust domain.

This PR updates the PeeringTrustBundle to hold the sending side's local partition as ExportedPartition. It also updates RBAC code to encode SpiffeIDs of imported services with the ExportedPartition and TrustDomain.

2022-06-10 17:15:22 -04:00

R.B. Boyer

1e02460bd1

re-run gofmt on 1.17 (#11579 )

This should let freshly recompiled golangci-lint binaries using Go 1.17
pass 'make lint'

2021-11-16 12:04:01 -06:00

R.B. Boyer

ed8a901be7

connect: include optional partition prefixes in SPIFFE identifiers (#10507 )

NOTE: this does not include any intentions enforcement changes yet

2021-06-25 16:47:47 -05:00

3 Commits (45ea33b5d5a96ec423c01c925a9bfd05889a6c07)