consul

Commit Graph

Author	SHA1	Message	Date
R.B. Boyer	6742340878	mesh: add ComputedImplicitDestinations resource for future use (#20547 ) Creates a new controller to create ComputedImplicitDestinations resources by composing ComputedRoutes, Services, and ComputedTrafficPermissions to infer all ParentRef services that could possibly send some portion of traffic to a Service that has at least one accessible Workload Identity. A followup PR will rewire the sidecar controller to make use of this new resource. As this is a performance optimization, rather than a security feature the following aspects of traffic permissions have been ignored: - DENY rules - port rules (all ports are allowed) Also: - Add some v2 TestController machinery to help test complex dependency mappers.	2024-02-09 15:42:10 -06:00
Matt Keeler	34a32d4ce5	Remove V2 PeerName field from pbresource.Tenancy (#19865 ) The peer name will eventually show up elsewhere in the resource. For now though this rips it out of where we don’t want it to be.	2024-01-29 15:08:31 -05:00
Matt Keeler	123bc95e1a	Add Common Controller Caching Infrastructure (#19767 ) * Add Common Controller Caching Infrastructure	2023-12-13 10:06:39 -05:00

Author

SHA1

Message

Date

R.B. Boyer

6742340878

mesh: add ComputedImplicitDestinations resource for future use (#20547 )

Creates a new controller to create ComputedImplicitDestinations resources by 
composing ComputedRoutes, Services, and ComputedTrafficPermissions to 
infer all ParentRef services that could possibly send some portion of traffic to a 
Service that has at least one accessible Workload Identity. A followup PR will 
rewire the sidecar controller to make use of this new resource.

As this is a performance optimization, rather than a security feature the following 
aspects of traffic permissions have been ignored:

- DENY rules
- port rules (all ports are allowed)

Also:

- Add some v2 TestController machinery to help test complex dependency mappers.

2024-02-09 15:42:10 -06:00

Matt Keeler

34a32d4ce5

Remove V2 PeerName field from pbresource.Tenancy (#19865 )

The peer name will eventually show up elsewhere in the resource. For now though this rips it out of where we don’t want it to be.

2024-01-29 15:08:31 -05:00

Matt Keeler

123bc95e1a

Add Common Controller Caching Infrastructure (#19767 )

* Add Common Controller Caching Infrastructure

2023-12-13 10:06:39 -05:00

3 Commits (984ccec9348c3e9e7e6a839c2e8894317de87376)