consul

Commit Graph

Author	SHA1	Message	Date
Eric Haberkorn	d99312b86e	Add Upstream Service Targeting to Property Override Extension (#17517 ) * add upstream service targeting to property override extension * Also add baseline goldens for service specific property override extension. * Refactor the extension framework to put more logic into the templates. * fix up the golden tests	2023-05-30 14:53:42 -04:00
Michael Zalimeni	b8d2640429	Disable remote proxy patching except AWS Lambda (#17415 ) To avoid unintended tampering with remote downstreams via service config, refactor BasicEnvoyExtender and RuntimeConfig to disallow typical Envoy extensions from being applied to non-local proxies. Continue to allow this behavior for AWS Lambda and the read-only Validate builtin extensions. Addresses CVE-2023-2816.	2023-05-23 11:55:06 +00:00

Author

SHA1

Message

Date

Eric Haberkorn

d99312b86e

Add Upstream Service Targeting to Property Override Extension (#17517 )

* add upstream service targeting to property override extension

* Also add baseline goldens for service specific property override extension.
* Refactor the extension framework to put more logic into the templates.

* fix up the golden tests

2023-05-30 14:53:42 -04:00

Michael Zalimeni

b8d2640429

Disable remote proxy patching except AWS Lambda (#17415 )

To avoid unintended tampering with remote downstreams via service
config, refactor BasicEnvoyExtender and RuntimeConfig to disallow
typical Envoy extensions from being applied to non-local proxies.

Continue to allow this behavior for AWS Lambda and the read-only
Validate builtin extensions.

Addresses CVE-2023-2816.

2023-05-23 11:55:06 +00:00

2 Commits (cd05b8b921d967f3dde0331cc7d70dc0a3804a4b)