You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Michael Zalimeni d9206fc7e2 [NET-1151 NET-11228] security: Add request normalization and header match options to prevent L7 intentions bypass (#21816) ... mesh: add options for HTTP incoming request normalization Expose global mesh configuration to enforce inbound HTTP request normalization on mesh traffic via Envoy xDS config. mesh: enable inbound URL path normalization by default mesh: add support for L7 header match contains and ignore_case Enable partial string and case-insensitive matching in L7 intentions header match rules. ui: support L7 header match contains and ignore_case Co-authored-by: Phil Renaud <phil@riotindustries.com> test: add request normalization integration bats tests Add both "positive" and "negative" test suites, showing normalization in action as well as expected results when it is not enabled, for the same set of test cases. Also add some alternative service container test helpers for verifying raw HTTP request paths, which is difficult to do with Fortio. docs: update security and reference docs for L7 intentions bypass prevention - Update security docs with best practices for service intentions configuration - Update configuration entry references for mesh and intentions to reflect new values and add guidance on usage		1 month ago
..
auth-method.js	[COMPLIANCE] License changes (#18443)	1 year ago
binding-rule.js	[COMPLIANCE] License changes (#18443)	1 year ago
coordinate.js	[COMPLIANCE] License changes (#18443)	1 year ago
dc.js	[COMPLIANCE] License changes (#18443)	1 year ago
discovery-chain.js	[COMPLIANCE] License changes (#18443)	1 year ago
gateway-config.js	[COMPLIANCE] License changes (#18443)	1 year ago
health-check.js	[COMPLIANCE] License changes (#18443)	1 year ago
intention-permission-http-header.js	[NET-1151 NET-11228] security: Add request normalization and header match options to prevent L7 intentions bypass (#21816)	1 month ago
intention-permission-http.js	[COMPLIANCE] License changes (#18443)	1 year ago
intention-permission.js	[COMPLIANCE] License changes (#18443)	1 year ago
intention.js	[COMPLIANCE] License changes (#18443)	1 year ago
kv.js	[COMPLIANCE] License changes (#18443)	1 year ago
license.js	[COMPLIANCE] License changes (#18443)	1 year ago
node.js	[COMPLIANCE] License changes (#18443)	1 year ago
nspace.js	[COMPLIANCE] License changes (#18443)	1 year ago
oidc-provider.js	[COMPLIANCE] License changes (#18443)	1 year ago
partition.js	[COMPLIANCE] License changes (#18443)	1 year ago
peer.js	[COMPLIANCE] License changes (#18443)	1 year ago
permission.js	[COMPLIANCE] License changes (#18443)	1 year ago
policy.js	[COMPLIANCE] License changes (#18443)	1 year ago
proxy.js	[COMPLIANCE] License changes (#18443)	1 year ago
role.js	[COMPLIANCE] License changes (#18443)	1 year ago
service-instance.js	[COMPLIANCE] License changes (#18443)	1 year ago
service.js	[COMPLIANCE] License changes (#18443)	1 year ago
session.js	[COMPLIANCE] License changes (#18443)	1 year ago
token.js	[COMPLIANCE] License changes (#18443)	1 year ago
topology.js	[COMPLIANCE] License changes (#18443)	1 year ago