consul/agent/xds/testdata/routes
Michael Zalimeni d9206fc7e2
[NET-1151 NET-11228] security: Add request normalization and header match options to prevent L7 intentions bypass (#21816)
mesh: add options for HTTP incoming request normalization

Expose global mesh configuration to enforce inbound HTTP request
normalization on mesh traffic via Envoy xDS config.

mesh: enable inbound URL path normalization by default

mesh: add support for L7 header match contains and ignore_case

Enable partial string and case-insensitive matching in L7 intentions
header match rules.

ui: support L7 header match contains and ignore_case

Co-authored-by: Phil Renaud <phil@riotindustries.com>

test: add request normalization integration bats tests

Add both "positive" and "negative" test suites, showing normalization in
action as well as expected results when it is not enabled, for the same
set of test cases.

Also add some alternative service container test helpers for verifying
raw HTTP request paths, which is difficult to do with Fortio.

docs: update security and reference docs for L7 intentions bypass prevention

- Update security docs with best practices for service intentions
  configuration
- Update configuration entry references for mesh and intentions to
  reflect new values and add guidance on usage
2024-10-16 12:23:33 -04:00
..
access-logs-defaults.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
access-logs-json-file.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
access-logs-text-stderr-disablelistenerlogs.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
api-gateway-http-listener-with-http-route.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
api-gateway-http-listener.latest.golden Migrate individual resource tests for API Gateway to TestAllResourcesFromSnapshot (#19584) 2023-11-09 17:01:54 +00:00
api-gateway-nil-config-entry.latest.golden Migrate individual resource tests for API Gateway to TestAllResourcesFromSnapshot (#19584) 2023-11-09 17:01:54 +00:00
api-gateway-tcp-listener-with-tcp-and-http-route.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
api-gateway-tcp-listener-with-tcp-route.latest.golden Migrate individual resource tests for API Gateway to TestAllResourcesFromSnapshot (#19584) 2023-11-09 17:01:54 +00:00
api-gateway-tcp-listener.latest.golden Migrate individual resource tests for API Gateway to TestAllResourcesFromSnapshot (#19584) 2023-11-09 17:01:54 +00:00
api-gateway-with-http-route-timeoutfilter-one-set.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
api-gateway-with-http-route.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
api-gateway-with-multiple-hostnames.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
api-gateway-with-multiple-inline-certificates.latest.golden
api-gateway-with-tcp-route-and-inline-certificate.latest.golden
api-gateway.latest.golden Migrate individual resource tests for API Gateway to TestAllResourcesFromSnapshot (#19584) 2023-11-09 17:01:54 +00:00
connect-proxy-exported-to-peers.latest.golden
connect-proxy-lb-in-resolver.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-resolver-with-lb.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-route-to-lb-resolver.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-splitter-overweight.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-upstream-defaults.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
connect-proxy-with-chain-and-failover-to-cluster-peer.latest.golden
connect-proxy-with-chain-and-failover.latest.golden NET-6385 - Static routes that are inlined in listener filters are also created as a resource. (#19459) 2023-11-07 08:00:08 -07:00
connect-proxy-with-chain-and-overrides.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-with-chain-and-redirect-to-cluster-peer.latest.golden
connect-proxy-with-chain-and-router.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-with-chain-and-splitter-and-mesh-validate-clusters.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-with-chain-and-splitter.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-with-chain-external-sni.latest.golden
connect-proxy-with-chain-http2.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-chain.latest.golden
connect-proxy-with-default-chain-and-custom-cluster.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-grpc-chain.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-with-grpc-router.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-with-http-chain.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-with-http2-chain.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
connect-proxy-with-jwt-config-entry-with-local.latest.golden Migrate individual resource tests for JWT Provider to TestAllResourcesFromSnapshot (#19511) 2023-11-08 14:34:40 -07:00
connect-proxy-with-jwt-config-entry-with-remote-jwks.latest.golden Migrate individual resource tests for JWT Provider to TestAllResourcesFromSnapshot (#19511) 2023-11-08 14:34:40 -07:00
connect-proxy-with-mesh-config-request-normalization-all-consul-options.latest.golden [NET-1151 NET-11228] security: Add request normalization and header match options to prevent L7 intentions bypass (#21816) 2024-10-16 12:23:33 -04:00
connect-proxy-with-mesh-config-request-normalization-all-envoy-options-enabled.latest.golden [NET-1151 NET-11228] security: Add request normalization and header match options to prevent L7 intentions bypass (#21816) 2024-10-16 12:23:33 -04:00
connect-proxy-with-peered-upstreams-escape-overrides.latest.golden
connect-proxy-with-peered-upstreams-http2.latest.golden
connect-proxy-with-peered-upstreams.latest.golden
connect-proxy-with-tcp-chain-double-failover-through-local-gateway-triggered.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-tcp-chain-double-failover-through-local-gateway.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-tcp-chain-double-failover-through-remote-gateway-triggered.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-tcp-chain-double-failover-through-remote-gateway.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-tcp-chain-failover-through-local-gateway-triggered.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-tcp-chain-failover-through-local-gateway.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-tcp-chain-failover-through-remote-gateway-triggered.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-tcp-chain-failover-through-remote-gateway.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-tcp-chain.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
connect-proxy-with-tls-incoming-cipher-suites.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
connect-proxy-with-tls-incoming-max-version.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
connect-proxy-with-tls-incoming-min-version.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
connect-proxy-with-tls-outgoing-cipher-suites.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
connect-proxy-with-tls-outgoing-max-version.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
connect-proxy-with-tls-outgoing-min-version-auto.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
connect-proxy-with-tls-outgoing-min-version.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
connect-proxy-with-tproxy-and-permissive-mtls.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
connect-proxy-without-tproxy-and-permissive-mtls.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
custom-limits-max-connections-only.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-limits-set-to-zero.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-limits.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-local-app.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-max-inbound-connections.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-passive-healthcheck-zero-consecutive_5xx.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-passive-healthcheck.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-public-listener-http-2.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-public-listener-http-missing.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-public-listener-http.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-public-listener.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-timeouts.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-trace-listener.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-upstream-default-chain.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
custom-upstream-ignored-with-disco-chain.latest.golden Migrate individual resource tests for Discovery Chains to TestAllResourcesFromSnapshot (#19508) 2023-11-08 01:34:42 +00:00
custom-upstream-with-prepared-query.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
custom-upstream.latest.golden Migrate individual resource tests for custom configuration to TestAllResourcesFromSnapshot (#19512) 2023-11-08 10:34:23 -07:00
defaults.latest.golden
downstream-service-with-unix-sockets.latest.golden Migrate individual resource tests for expose paths and checks to TestAllResourcesFromSnapshot (#19513) 2023-11-08 14:24:27 +00:00
expose-checks-grpc.latest.golden Migrate individual resource tests for expose paths and checks to TestAllResourcesFromSnapshot (#19513) 2023-11-08 14:24:27 +00:00
expose-checks-http-with-bind-override.latest.golden Migrate individual resource tests for expose paths and checks to TestAllResourcesFromSnapshot (#19513) 2023-11-08 14:24:27 +00:00
expose-checks-http.latest.golden Migrate individual resource tests for expose paths and checks to TestAllResourcesFromSnapshot (#19513) 2023-11-08 14:24:27 +00:00
expose-checks.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
expose-paths-grpc-new-cluster-http1.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
expose-paths-local-app-paths.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
expose-paths-new-cluster-http2.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
grpc-public-listener.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
http-listener-with-timeouts.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
http-public-listener-no-xfcc.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
http-public-listener.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
http-upstream.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
http2-public-listener.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
ingress-config-entry-nil.latest.golden
ingress-defaults-no-chain.latest.golden
ingress-gateway-bind-addrs.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-gateway-nil-config-entry.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-gateway-no-services.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-gateway-with-tls-outgoing-cipher-suites.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-gateway-with-tls-outgoing-max-version.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-gateway-with-tls-outgoing-min-version.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-gateway.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-grpc-multiple-services.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-http-multiple-services.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-lb-in-resolver.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-multiple-listeners-duplicate-service.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-splitter-with-resolver-redirect.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-chain-and-failover-to-cluster-peer.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-chain-and-failover.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-chain-and-router-header-manip.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-chain-and-router.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-chain-and-splitter.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-chain-external-sni.latest.golden
ingress-with-chain.latest.golden
ingress-with-defaults-passive-health-check.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-defaults-service-max-connections.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-grpc-router.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-grpc-single-tls-listener.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-http2-and-grpc-multiple-tls-listener.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-http2-single-tls-listener.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-overwrite-defaults-passive-health-check.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-overwrite-defaults-service-max-connections.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-sds-listener+service-level.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-sds-listener-gw-level-http.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-sds-listener-gw-level-mixed-tls.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-sds-listener-gw-level.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-sds-listener-level-wildcard.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-sds-listener-level.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-sds-listener-listener-level.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-sds-service-level-2.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-sds-service-level-mixed-no-tls.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-sds-service-level-mixed-tls.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-sds-service-level.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-service-max-connections.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-service-passive-health-check.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-single-tls-listener.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-tcp-chain-double-failover-through-local-gateway-triggered.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tcp-chain-double-failover-through-local-gateway.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tcp-chain-double-failover-through-remote-gateway-triggered.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tcp-chain-double-failover-through-remote-gateway.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tcp-chain-failover-through-local-gateway-triggered.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tcp-chain-failover-through-local-gateway.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tcp-chain-failover-through-remote-gateway-triggered.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tcp-chain-failover-through-remote-gateway.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tls-listener-cipher-suites.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tls-listener-max-version.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tls-listener-min-version.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tls-listener.latest.golden Migrate individual resource tests for Ingress Gateway to TestAllResourcesFromSnapshot (#19506) 2023-11-09 16:08:07 +00:00
ingress-with-tls-min-version-listeners-gateway-defaults.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-tls-mixed-cipher-suites-listeners.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-tls-mixed-listeners.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-tls-mixed-max-version-listeners.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
ingress-with-tls-mixed-min-version-listeners.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
listener-balance-inbound-connections.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
listener-balance-outbound-connections-bind-port.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
listener-bind-address-port.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
listener-bind-address.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
listener-bind-port.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
listener-max-inbound-connections.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
listener-unix-domain-socket.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
local-mesh-gateway-with-peered-upstreams.latest.golden
mesh-gateway-custom-addresses.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-default-service-subset.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-hash-lb-ignored.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-ignore-extra-resolvers.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-newer-information-in-federation-states.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-no-services.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-non-hash-lb-injected.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-older-information-in-federation-states.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-peering-control-plane.latest.golden
mesh-gateway-service-subsets.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-service-subsets2.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-service-timeouts.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-tagged-addresses.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-tcp-keepalives.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-using-federation-control-plane.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-using-federation-states.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
mesh-gateway-with-exported-peered-services-http-with-router.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
mesh-gateway-with-exported-peered-services-http.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
mesh-gateway-with-exported-peered-services.latest.golden
mesh-gateway-with-imported-peered-services.latest.golden
mesh-gateway-with-limits.latest.golden Net 6820 customize mesh gateway limits (#20945) 2024-04-16 10:59:41 -05:00
mesh-gateway-with-peer-through-mesh-gateway-enabled.latest.golden
mesh-gateway.latest.golden Migrate individual resource tests for Mesh Gateway to TestAllResourcesFromSnapshot (#19502) 2023-11-09 16:39:16 +00:00
splitter-with-resolver-redirect.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
telemetry-collector.latest.golden
terminating-gateway-custom-and-tagged-addresses.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-custom-trace-listener.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-default-service-subset.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-hostname-service-subsets.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
terminating-gateway-http2-upstream-subsets.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-http2-upstream.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-ignore-extra-resolvers.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
terminating-gateway-lb-config-no-hash-policies.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
terminating-gateway-lb-config.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
terminating-gateway-no-api-cert.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-no-services.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-service-subsets.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
terminating-gateway-sni.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-tcp-keepalives.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-with-peer-trust-bundle.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-with-tls-incoming-cipher-suites.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-with-tls-incoming-max-version.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway-with-tls-incoming-min-version.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
terminating-gateway.latest.golden Migrate individual resource tests for Terminating Gateway to TestAllResourcesFromSnapshot (#19505) 2023-11-09 08:38:33 -07:00
transparent-proxy-catalog-destinations-only.latest.golden NET-6385 - Static routes that are inlined in listener filters are also created as a resource. (#19459) 2023-11-07 08:00:08 -07:00
transparent-proxy-destination-http.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
transparent-proxy-destination.latest.golden
transparent-proxy-dial-instances-directly.latest.golden NET-6385 - Static routes that are inlined in listener filters are also created as a resource. (#19459) 2023-11-07 08:00:08 -07:00
transparent-proxy-http-upstream.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
transparent-proxy-terminating-gateway-destinations-only.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
transparent-proxy-terminating-gateway.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
transparent-proxy-with-peered-upstreams.latest.golden
transparent-proxy-with-resolver-redirect-upstream.latest.golden Migrate remaining individual resource tests for service mesh to TestAllResourcesFromSnapshot (#19583) 2023-11-09 20:08:37 +00:00
transparent-proxy.latest.golden
xds-fetch-timeout-ms-ingress-with-router.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
xds-fetch-timeout-ms-mgw-peering.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
xds-fetch-timeout-ms-sidecar.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
xds-fetch-timeout-ms-term-gw.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00
xds-fetch-timeout-ms-tproxy-http-peering.latest.golden Fix ClusterLoadAssignment timeouts dropping endpoints. (#19871) 2023-12-11 09:25:11 -06:00
xds-fetch-timeout-ms-tproxy-passthrough.latest.golden fix: use Envoy's default for validate_clusters to fix breaking routes when some backend clusters don't exist (#21587) 2024-08-19 22:39:28 -07:00