consul

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

consul api-gateway kubernetes ecs service-discovery service-mesh vault

Tree: 439d9e7f65

History

R.B. Boyer 1a8834e1c8 peering: replicate expected SNI, SPIFFE, and service protocol to peers (#13218 ) The importing peer will need to know what SNI and SPIFFE name corresponds to each exported service. Additionally it will need to know at a high level the protocol in use (L4/L7) to generate the appropriate connection pool and local metrics. For replicated connect synthetic entities we edit the `Connect{}` part of a `NodeService` to have a new section: { "PeerMeta": { "SNI": [ "web.default.default.owt.external.183150d5-1033-3672-c426-c29205a576b8.consul" ], "SpiffeID": [ "spiffe://183150d5-1033-3672-c426-c29205a576b8.consul/ns/default/dc/dc1/svc/web" ], "Protocol": "tcp" } } This data is then replicated and saved as-is at the importing side. Both SNI and SpiffeID are slices for now until I can be sure we don't need them for how mesh gateways will ultimately work.		3 years ago
..
ca	Support vault namespaces in connect CA (#12904 )	3 years ago
authz.go	Fixup acl.EnterpriseMeta	3 years ago
authz_test.go	Remove ent checks from oss test	3 years ago
common_names.go	connect/ca: cease including the common name field in generated certs (#10424 )	3 years ago
csr.go	ConnectCA.Sign gRPC Endpoint (#12787 )	3 years ago
generate.go	ca: examine the full chain in newCARoot	3 years ago
generate_test.go	bulk rewrite using this script	3 years ago
parsing.go	ca: examine the full chain in newCARoot	3 years ago
sni.go	peering: replicate expected SNI, SPIFFE, and service protocol to peers (#13218 )	3 years ago
sni_test.go	peering: replicate expected SNI, SPIFFE, and service protocol to peers (#13218 )	3 years ago
testing_ca.go	peering: replicate expected SNI, SPIFFE, and service protocol to peers (#13218 )	3 years ago
testing_ca_test.go	bulk rewrite using this script	3 years ago
testing_spiffe.go	…
uri.go	auto-config: ensure the feature works properly with partitions (#11699 )	3 years ago
uri_agent.go	Fixup acl.EnterpriseMeta	3 years ago
uri_agent_oss.go	Fixup acl.EnterpriseMeta	3 years ago
uri_agent_oss_test.go	re-run gofmt on 1.17 (#11579 )	3 years ago
uri_service.go	Fixup acl.EnterpriseMeta	3 years ago
uri_service_oss.go	Fixup acl.EnterpriseMeta	3 years ago
uri_service_oss_test.go	re-run gofmt on 1.17 (#11579 )	3 years ago
uri_signing.go	ca: accept only the cluster ID to SpiffeIDSigningForCluster	3 years ago
uri_signing_test.go	ca: accept only the cluster ID to SpiffeIDSigningForCluster	3 years ago
uri_test.go	auto-config: ensure the feature works properly with partitions (#11699 )	3 years ago
x509_patch.go	connect/ca: cease including the common name field in generated certs (#10424 )	3 years ago
x509_patch_test.go	connect/ca: cease including the common name field in generated certs (#10424 )	3 years ago