consul/test at a2e69236a214bf74d3834554833f9b49f2df5bbb - consul - https://git.xinac.net

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

consul api-gateway kubernetes ecs service-discovery service-mesh vault

Tree: a2e69236a2

History

Michael Zalimeni d9206fc7e2 [NET-1151 NET-11228] security: Add request normalization and header match options to prevent L7 intentions bypass (#21816 ) mesh: add options for HTTP incoming request normalization Expose global mesh configuration to enforce inbound HTTP request normalization on mesh traffic via Envoy xDS config. mesh: enable inbound URL path normalization by default mesh: add support for L7 header match contains and ignore_case Enable partial string and case-insensitive matching in L7 intentions header match rules. ui: support L7 header match contains and ignore_case Co-authored-by: Phil Renaud <phil@riotindustries.com> test: add request normalization integration bats tests Add both "positive" and "negative" test suites, showing normalization in action as well as expected results when it is not enabled, for the same set of test cases. Also add some alternative service container test helpers for verifying raw HTTP request paths, which is difficult to do with Fortio. docs: update security and reference docs for L7 intentions bypass prevention - Update security docs with best practices for service intentions configuration - Update configuration entry references for mesh and intentions to reflect new values and add guidance on usage		1 month ago
..
bin	[COMPLIANCE] License changes (#18443 )	1 year ago
ca	test: update certs for 10 year expiry (#19481 )	1 year ago
ca_path	test: update certs for 10 year expiry (#19481 )	1 year ago
client_certs	test: update certs for 10 year expiry (#19481 )	1 year ago
command/merge	Add utility types to enable checking for unset flags	8 years ago
hostname	test: update certs for 10 year expiry (#19481 )	1 year ago
integration	[NET-1151 NET-11228] security: Add request normalization and header match options to prevent L7 intentions bypass (#21816 )	1 month ago
key	[Cloud][CC-6925] Updates to pushing server state (#19682 )	12 months ago
load	[COMPLIANCE] License changes (#18443 )	1 year ago
snapshot	snapshot: read meta.json correctly. (#5193 )	6 years ago
CA-GENERATION.md	test: update certs for 10 year expiry (#19481 )	1 year ago