You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

freddygv af52d21884 Update prepared query cluster SAN validation ... Previously SAN validation for prepared queries was broken because we validated against the name, namespace, and datacenter for prepared queries. However, prepared queries can target: - Services with a name that isn't their own - Services in multiple datacenters This means that the SpiffeID to validate needs to be based on the prepared query endpoints, and not the prepared query's upstream definition. This commit updates prepared query clusters to account for that.		3 years ago
..
connect-proxy-lb-in-resolver.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-lb-in-resolver.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-chain-and-failover.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-chain-and-failover.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-chain-and-overrides.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-chain-and-overrides.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-chain-external-sni.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-chain-external-sni.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-chain.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-chain.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-double-failover-through-local-gateway-triggered.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-double-failover-through-local-gateway-triggered.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-double-failover-through-local-gateway.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-double-failover-through-local-gateway.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-double-failover-through-remote-gateway-triggered.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-double-failover-through-remote-gateway-triggered.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-double-failover-through-remote-gateway.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-double-failover-through-remote-gateway.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-failover-through-local-gateway-triggered.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-failover-through-local-gateway-triggered.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-failover-through-local-gateway.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-failover-through-local-gateway.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-failover-through-remote-gateway-triggered.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-failover-through-remote-gateway-triggered.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-failover-through-remote-gateway.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
connect-proxy-with-tcp-chain-failover-through-remote-gateway.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-limits-max-connections-only.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-limits-max-connections-only.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-limits-set-to-zero.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-limits-set-to-zero.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-limits.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-limits.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-local-app.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-local-app.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-timeouts.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-timeouts.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-upstream-default-chain.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-upstream-default-chain.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-upstream.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
custom-upstream.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
defaults.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
defaults.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
downstream-service-with-unix-sockets.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
downstream-service-with-unix-sockets.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
expose-paths-grpc-new-cluster-http1.envoy-1-18-x.golden	…
expose-paths-grpc-new-cluster-http1.v2compat.envoy-1-16-x.golden	…
expose-paths-local-app-paths.envoy-1-18-x.golden	…
expose-paths-local-app-paths.v2compat.envoy-1-16-x.golden	…
expose-paths-new-cluster-http2.envoy-1-18-x.golden	…
expose-paths-new-cluster-http2.v2compat.envoy-1-16-x.golden	…
ingress-gateway-no-services.envoy-1-18-x.golden	…
ingress-gateway-no-services.v2compat.envoy-1-16-x.golden	…
ingress-gateway.envoy-1-18-x.golden	…
ingress-gateway.v2compat.envoy-1-16-x.golden	…
ingress-lb-in-resolver.envoy-1-18-x.golden	…
ingress-lb-in-resolver.v2compat.envoy-1-16-x.golden	…
ingress-multiple-listeners-duplicate-service.envoy-1-18-x.golden	…
ingress-multiple-listeners-duplicate-service.v2compat.envoy-1-16-x.golden	…
ingress-splitter-with-resolver-redirect.envoy-1-18-x.golden	…
ingress-splitter-with-resolver-redirect.v2compat.envoy-1-16-x.golden	…
ingress-with-chain-and-failover.envoy-1-18-x.golden	Update golden files	3 years ago
ingress-with-chain-and-failover.v2compat.envoy-1-16-x.golden	Update golden files	3 years ago
ingress-with-chain-and-overrides.envoy-1-18-x.golden	…
ingress-with-chain-and-overrides.v2compat.envoy-1-16-x.golden	…
ingress-with-chain-external-sni.envoy-1-18-x.golden	…
ingress-with-chain-external-sni.v2compat.envoy-1-16-x.golden	…
ingress-with-chain.envoy-1-18-x.golden	…
ingress-with-chain.v2compat.envoy-1-16-x.golden	…
ingress-with-tcp-chain-double-failover-through-local-gateway-triggered.envoy-1-18-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-double-failover-through-local-gateway-triggered.v2compat.envoy-1-16-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-double-failover-through-local-gateway.envoy-1-18-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-double-failover-through-local-gateway.v2compat.envoy-1-16-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-double-failover-through-remote-gateway-triggered.envoy-1-18-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-double-failover-through-remote-gateway-triggered.v2compat.envoy-1-16-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-double-failover-through-remote-gateway.envoy-1-18-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-double-failover-through-remote-gateway.v2compat.envoy-1-16-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-failover-through-local-gateway-triggered.envoy-1-18-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-failover-through-local-gateway-triggered.v2compat.envoy-1-16-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-failover-through-local-gateway.envoy-1-18-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-failover-through-local-gateway.v2compat.envoy-1-16-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-failover-through-remote-gateway-triggered.envoy-1-18-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-failover-through-remote-gateway-triggered.v2compat.envoy-1-16-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-failover-through-remote-gateway.envoy-1-18-x.golden	Update golden files	3 years ago
ingress-with-tcp-chain-failover-through-remote-gateway.v2compat.envoy-1-16-x.golden	Update golden files	3 years ago
mesh-gateway-hash-lb-ignored.envoy-1-18-x.golden	…
mesh-gateway-hash-lb-ignored.v2compat.envoy-1-16-x.golden	…
mesh-gateway-ignore-extra-resolvers.envoy-1-18-x.golden	…
mesh-gateway-ignore-extra-resolvers.v2compat.envoy-1-16-x.golden	…
mesh-gateway-no-services.envoy-1-18-x.golden	…
mesh-gateway-no-services.v2compat.envoy-1-16-x.golden	…
mesh-gateway-non-hash-lb-injected.envoy-1-18-x.golden	…
mesh-gateway-non-hash-lb-injected.v2compat.envoy-1-16-x.golden	…
mesh-gateway-service-subsets.envoy-1-18-x.golden	…
mesh-gateway-service-subsets.v2compat.envoy-1-16-x.golden	…
mesh-gateway-service-timeouts.envoy-1-18-x.golden	…
mesh-gateway-service-timeouts.v2compat.envoy-1-16-x.golden	…
mesh-gateway-using-federation-states.envoy-1-18-x.golden	…
mesh-gateway-using-federation-states.v2compat.envoy-1-16-x.golden	…
mesh-gateway.envoy-1-18-x.golden	…
mesh-gateway.v2compat.envoy-1-16-x.golden	…
splitter-with-resolver-redirect.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
splitter-with-resolver-redirect.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
terminating-gateway-hostname-service-subsets.envoy-1-18-x.golden	…
terminating-gateway-hostname-service-subsets.v2compat.envoy-1-16-x.golden	…
terminating-gateway-ignore-extra-resolvers.envoy-1-18-x.golden	…
terminating-gateway-ignore-extra-resolvers.v2compat.envoy-1-16-x.golden	…
terminating-gateway-lb-config.envoy-1-18-x.golden	…
terminating-gateway-lb-config.v2compat.envoy-1-16-x.golden	…
terminating-gateway-no-services.envoy-1-18-x.golden	…
terminating-gateway-no-services.v2compat.envoy-1-16-x.golden	…
terminating-gateway-service-subsets.envoy-1-18-x.golden	…
terminating-gateway-service-subsets.v2compat.envoy-1-16-x.golden	…
terminating-gateway.envoy-1-18-x.golden	…
terminating-gateway.v2compat.envoy-1-16-x.golden	…
transparent-proxy-catalog-destinations-only.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
transparent-proxy-catalog-destinations-only.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
transparent-proxy-dial-instances-directly.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
transparent-proxy-dial-instances-directly.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago
transparent-proxy.envoy-1-18-x.golden	Update prepared query cluster SAN validation	3 years ago
transparent-proxy.v2compat.envoy-1-16-x.golden	Update prepared query cluster SAN validation	3 years ago