consul

Commit Graph

Author	SHA1	Message	Date
freddygv	af52d21884	Update prepared query cluster SAN validation Previously SAN validation for prepared queries was broken because we validated against the name, namespace, and datacenter for prepared queries. However, prepared queries can target: - Services with a name that isn't their own - Services in multiple datacenters This means that the SpiffeID to validate needs to be based on the prepared query endpoints, and not the prepared query's upstream definition. This commit updates prepared query clusters to account for that.	2021-08-20 17:40:33 -06:00
freddygv	5454147c09	Update golden files to account for SAN validation	2021-07-14 22:21:55 -06:00
Freddy	429f9d8bb8	Add flag for transparent proxies to dial individual instances (#10329 )	2021-06-09 14:34:17 -06:00

Author

SHA1

Message

Date

freddygv

af52d21884

Update prepared query cluster SAN validation

Previously SAN validation for prepared queries was broken because we
validated against the name, namespace, and datacenter for prepared
queries.

However, prepared queries can target:

- Services with a name that isn't their own
- Services in multiple datacenters

This means that the SpiffeID to validate needs to be based on the
prepared query endpoints, and not the prepared query's upstream
definition.

This commit updates prepared query clusters to account for that.

2021-08-20 17:40:33 -06:00

freddygv

5454147c09

Update golden files to account for SAN validation

2021-07-14 22:21:55 -06:00

Freddy

429f9d8bb8

Add flag for transparent proxies to dial individual instances (#10329 )

2021-06-09 14:34:17 -06:00

3 Commits (ca2e7c2039c8b1368a9d2141b117e35108f6a15a)