mirror of https://github.com/hashicorp/consul
7c3e9cd862
UNIX domain socket paths are limited to 104-108 characters, depending on the OS. This limit was quite easy to exceed when testing the feature on Kubernetes, due to how proxy IDs encode the Pod ID eg: metrics-collector-59467bcb9b-fkkzl-hcp-metrics-collector-sidecar-proxy To ensure we stay under that character limit this commit makes a couple changes: - Use a b64 encoded SHA1 hash of the namespace + proxy ID to create a short and deterministic socket file name. - Add validation to proxy registrations and proxy-defaults to enforce a limit on the socket directory length. |
||
|---|---|---|
| .. | ||
| internal/watch | ||
| api_gateway.go | ||
| connect_proxy.go | ||
| data_sources.go | ||
| data_sources_oss.go | ||
| deep-copy.sh | ||
| ingress_gateway.go | ||
| manager.go | ||
| manager_test.go | ||
| mesh_gateway.go | ||
| mesh_gateway_oss.go | ||
| naming.go | ||
| naming_oss.go | ||
| naming_test.go | ||
| proxycfg.deepcopy.go | ||
| proxycfg.go | ||
| snapshot.go | ||
| snapshot_test.go | ||
| state.go | ||
| state_oss_test.go | ||
| state_test.go | ||
| terminating_gateway.go | ||
| testing.go | ||
| testing_api_gateway.go | ||
| testing_connect_proxy.go | ||
| testing_ingress_gateway.go | ||
| testing_mesh_gateway.go | ||
| testing_oss.go | ||
| testing_peering.go | ||
| testing_terminating_gateway.go | ||
| testing_tproxy.go | ||
| testing_upstreams.go | ||
| testing_upstreams_oss.go | ||
| upstreams.go | ||