consul

History

Nitya Dhanushkodi 78b170ad50 xds controller: setup watches for and compute leaf cert references in ProxyStateTemplate, and wire up leaf cert manager dependency (#18756 ) * Refactors the leafcert package to not have a dependency on agent/consul and agent/cache to avoid import cycles. This way the xds controller can just import the leafcert package to use the leafcert manager. The leaf cert logic in the controller: * Sets up watches for leaf certs that are referenced in the ProxyStateTemplate (which generates the leaf certs too). * Gets the leaf cert from the leaf cert cache * Stores the leaf cert in the ProxyState that's pushed to xds * For the cert watches, this PR also uses a bimapper + a thin wrapper to map leaf cert events to related ProxyStateTemplates Since bimapper uses a resource.Reference or resource.ID to map between two resource types, I've created an internal type for a leaf certificate to use for the resource.Reference, since it's not a v2 resource. The wrapper allows mapping events to resources (as opposed to mapping resources to resources) The controller tests: Unit: Ensure that we resolve leaf cert references Lifecycle: Ensure that when the CA is updated, the leaf cert is as well Also adds a new spiffe id type, and adds workload identity and workload identity URI to leaf certs. This is so certs are generated with the new workload identity based SPIFFE id. * Pulls out some leaf cert test helpers into a helpers file so it can be used in the xds controller tests. * Wires up leaf cert manager dependency * Support getting token from proxytracker * Add workload identity spiffe id type to the authorize and sign functions --------- Co-authored-by: John Murret <john.murret@hashicorp.com>		1 year ago
..
catalog_datacenters.go	[COMPLIANCE] License changes (#18443 )	1 year ago
catalog_datacenters_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
catalog_list_services.go	[COMPLIANCE] License changes (#18443 )	1 year ago
catalog_list_services_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
catalog_service_list.go	[COMPLIANCE] License changes (#18443 )	1 year ago
catalog_service_list_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
catalog_services.go	[COMPLIANCE] License changes (#18443 )	1 year ago
catalog_services_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
config_entry.go	[COMPLIANCE] License changes (#18443 )	1 year ago
config_entry_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
connect_ca_root.go	xds controller: setup watches for and compute leaf cert references in ProxyStateTemplate, and wire up leaf cert manager dependency (#18756 )	1 year ago
connect_ca_root_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
discovery_chain.go	[COMPLIANCE] License changes (#18443 )	1 year ago
discovery_chain_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
exported_peered_services.go	[COMPLIANCE] License changes (#18443 )	1 year ago
exported_peered_services_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
federation_state_list_gateways.go	[COMPLIANCE] License changes (#18443 )	1 year ago
federation_state_list_gateways_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
gateway_services.go	[COMPLIANCE] License changes (#18443 )	1 year ago
gateway_services_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
health_services.go	[COMPLIANCE] License changes (#18443 )	1 year ago
health_services_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
intention_match.go	[COMPLIANCE] License changes (#18443 )	1 year ago
intention_match_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
intention_upstreams.go	[COMPLIANCE] License changes (#18443 )	1 year ago
intention_upstreams_destination.go	[COMPLIANCE] License changes (#18443 )	1 year ago
intention_upstreams_destination_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
intention_upstreams_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
mock_PeeringLister_test.go	Protobuf Refactoring for Multi-Module Cleanliness (#16302 )	2 years ago
mock_RPC.go	xds: don't attempt to load-balance sessions for local proxies (#15789 )	2 years ago
mock_TrustBundleLister_test.go	Protobuf Refactoring for Multi-Module Cleanliness (#16302 )	2 years ago
mock_TrustBundleReader_test.go	Protobuf Refactoring for Multi-Module Cleanliness (#16302 )	2 years ago
node_services.go	[COMPLIANCE] License changes (#18443 )	1 year ago
node_services_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
options.go	[COMPLIANCE] License changes (#18443 )	1 year ago
peered_upstreams.go	[COMPLIANCE] License changes (#18443 )	1 year ago
peered_upstreams_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
peerings.go	[COMPLIANCE] License changes (#18443 )	1 year ago
peerings_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
prepared_query.go	[COMPLIANCE] License changes (#18443 )	1 year ago
prepared_query_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
resolved_service_config.go	[COMPLIANCE] License changes (#18443 )	1 year ago
resolved_service_config_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
rpc.go	[COMPLIANCE] License changes (#18443 )	1 year ago
service_checks.go	[COMPLIANCE] License changes (#18443 )	1 year ago
service_checks_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
service_dump.go	[COMPLIANCE] License changes (#18443 )	1 year ago
service_dump_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
service_gateways.go	[COMPLIANCE] License changes (#18443 )	1 year ago
service_gateways_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
testing.go	[COMPLIANCE] License changes (#18443 )	1 year ago
trust_bundle.go	[COMPLIANCE] License changes (#18443 )	1 year ago
trust_bundle_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago
trust_bundles.go	[COMPLIANCE] License changes (#18443 )	1 year ago
trust_bundles_test.go	[COMPLIANCE] License changes (#18443 )	1 year ago