consul

History

Matt Keeler e4ea9b0a96 Updates to allow for Namespacing ACL resources in Consul Enterp… (#6675 ) Main Changes: • method signature updates everywhere to account for passing around enterprise meta. • populate the EnterpriseAuthorizerContext for all ACL related authorizations. • ACL resource listings now operate like the catalog or kv listings in that the returned entries are filtered down to what the token is allowed to see. With Namespaces its no longer all or nothing. • Modified the acl.Policy parsing to abstract away basic decoding so that enterprise can do it slightly differently. Also updated method signatures so that when parsing a policy it can take extra ent metadata to use during rules validation and policy creation. Secondary Changes: • Moved protobuf encoding functions out of the agentpb package to eliminate circular dependencies. • Added custom JSON unmarshalers for a few ACL resource types (to support snake case and to get rid of mapstructure) • AuthMethod validator cache is now an interface as these will be cached per-namespace for Consul Enterprise. • Added checks for policy/role link existence at the RPC API so we don’t push the request through raft to have it fail internally. • Forward ACL token delete request to the primary datacenter when the secondary DC doesn’t have the token. • Added a bunch of ACL test helpers for inserting ACL resource test data.		5 years ago
..
testdata	agent: allow mesh gateways to initialize even if there are no connect services registered yet (#6576 )	5 years ago
clusters.go	Expose HTTP-based paths through Connect proxy (#6446 )	5 years ago
clusters_test.go	agent: allow mesh gateways to initialize even if there are no connect services registered yet (#6576 )	5 years ago
config.go	Expose HTTP-based paths through Connect proxy (#6446 )	5 years ago
config_test.go	connect: allow overriding envoy listener bind_address (#6033 )	5 years ago
endpoints.go	connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340 )	5 years ago
endpoints_test.go	agent: allow mesh gateways to initialize even if there are no connect services registered yet (#6576 )	5 years ago
failover_math.go	connect: fix failover through a mesh gateway to a remote datacenter (#6259 )	5 years ago
failover_math_test.go	connect: fix failover through a mesh gateway to a remote datacenter (#6259 )	5 years ago
golden_test.go	…
listeners.go	xds: tcp services using the discovery chain should not assume RDS during LDS (#6623 )	5 years ago
listeners_test.go	agent: allow mesh gateways to initialize even if there are no connect services registered yet (#6576 )	5 years ago
naming.go	connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340 )	5 years ago
response.go	activate most discovery chain features in xDS for envoy (#6024 )	5 years ago
routes.go	connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340 )	5 years ago
routes_test.go	connect: introduce ExternalSNI field on service-defaults (#6324 )	5 years ago
server.go	ACL Authorizer overhaul (#6620 )	5 years ago
server_test.go	Updates to allow for Namespacing ACL resources in Consul Enterp… (#6675 )	5 years ago
testing.go	Upgrade xDS (go-control-plane) API to support Envoy 1.10. (#5872 )	6 years ago
xds.go	…