Commit Graph

30 Commits

Author SHA1 Message Date
Gregory Cooke 58d1a72b99
[Security] Add verification logic using SPIFFE Bundle Maps in XDS (#8229)
Add verification logic using SPIFFE Bundle Maps in XDS
2025-04-22 13:43:29 -04:00
Vadim Shtayura f7d488de75
credentials: expose NewContextWithRequestInfo publicly (#8198) 2025-04-21 16:30:52 -07:00
Gregory Cooke 4b5505d301
[Security] Add support for SPIFFE Bundle Maps in XDS bundles (#8180)
This adds support for configuring SPIFFE Bundle Maps inside of credentials via xds bundles.

See the gRFC for more detail grpc/proposal#462
2025-04-04 13:12:53 -04:00
Gregory Cooke 1f6b0cff02
[Security] Add support for SPIFFE Bundle Maps in certificate providers (#8167) 2025-03-17 14:39:04 -04:00
Gregory Cooke 75d4a60639
[Security] Add support for parsing SPIFFE Bundle Maps (#8124)
This adds a dependency on go-spiffe in order to parse SPIFFE bundles. More specifically, that library does not yet support SPIFFE bundle maps, but it does support SPIFFE bundles. This adds parsing of these maps to grpc-go
2025-03-12 13:32:01 -04:00
Arjan Singh Bal 00272e8024
dns: Support link local IPv6 addresses (#7889) 2024-12-03 11:06:10 +05:30
janardhanvissa 9affdbb28e
internal/credentials/xds: add unit tests for `HandshakeInfo.Equal` (#7638) 2024-09-25 21:56:43 -07:00
Zach Reyes 1b05500d80
internal/credentials/xds: Add exported comment for HandshakeInfo (#6823) 2023-11-30 13:47:27 -05:00
Zach Reyes 59c0aec9dc
xDS: Atomically read and write xDS security configuration client side (#6796) 2023-11-15 13:54:29 -05:00
Easwar Swaminathan 8a2c220594
cdsbalancer: test cleanup part 2/N (#6554) 2023-08-17 19:50:44 -07:00
Doug Fawley fbff2abb0f
*: update `interface{}` to `any` and `go.mod` version to `go 1.19` (#6544) 2023-08-14 09:04:46 -07:00
Theodore Salvo f2fbb0e07e
Deprecate use of `ioutil` package (#5906)
Resolves https://github.com/grpc/grpc-go/issues/5897
2023-01-03 11:20:20 -08:00
Doug Fawley 36d87572db
attributes: add Equal method; resolver: add AddressMap and State.BalancerAttributes (#4855) 2021-10-15 10:39:56 -07:00
yihuaz 0ca7dca977
oauth: Allow access to Google API regional endpoints via Google Default Credentials (#4713) 2021-09-07 09:12:01 -07:00
Easwar Swaminathan 46ab723bb2
multiple: remove appengine specific build constraints and code (#4685) 2021-08-24 12:30:13 -07:00
Zach Reyes b759b408e8
xds: moved shared matchers to internal/xds (#4441)
* Moved shared matchers to internal/xds
2021-05-14 17:02:10 -04:00
Easwar Swaminathan f02863c306
xds: specify "h2" as the alpn in xds creds (#4361) 2021-04-22 14:58:58 -07:00
Doug Fawley 87eb5b7502
credentials/google: remove unnecessary dependency on xds protos (#4339) 2021-04-13 16:19:17 -07:00
Menghan Li 950ddd3c37
xds/google_default_creds: handshake based on cluster name in address attributes (#4310) 2021-04-12 09:56:37 -07:00
Easwar Swaminathan 1e7119b136
xds: support all matchers for SANs (#4246) 2021-03-15 14:13:13 -07:00
Easwar Swaminathan e8930beb0e
xds: Prepare to support filter chains on the server (#4222) 2021-03-10 21:12:44 -08:00
Easwar Swaminathan d79063fdde
credentials/xds: Move non-user facing functionality to an internal package (#4117) 2020-12-16 15:46:56 -08:00
ZhenLian 84e85f71c9
internal/credentials: fix a bug and add one more helper function SPIFFEIDFromCert (#3929)
* internal/credentials: fix a bug and add one more helper function
2020-10-09 12:57:50 -07:00
Garrett Gutierrez 35afeb6efe
internal: reintroduce legacy appengine build constraints (#3850) 2020-08-27 11:04:57 -07:00
Garrett Gutierrez ff1fc890e4
internal: reintroduce legacy appengine build constraints (#3838) 2020-08-25 13:49:57 -07:00
cindyxue 244f9ece7c
credentials: Migrate helper functions to /internal/credentials for future cleanup (#3780)
* credentials: migrate functions in credentials/internal to internal/credentials to be used for other modules
2020-08-10 11:52:32 -07:00
Menghan Li 8beeedb8b1
internal: clean up all usages of grpclog, and replace with component (#3719) 2020-08-06 13:19:17 -07:00
Easwar Swaminathan 5f7b337d95
Add some appengine build constraints. (#3787)
Support for Go1.9 and appengine was removed in https://github.com/grpc/grpc-go/pull/3767. But it looks like we still need some way to do things differently for certain appengine builds.
2020-08-04 17:46:48 -07:00
Doug Fawley bc714cd8ae
Remove Go 1.9 / AppEngine support; assume go1.12 build tag (#3767) 2020-07-30 16:15:35 -07:00
ZhenLian dd8658f921
credentials: check and expose SPIFFE ID (#3626)
* credentials: check and expose SPIFFE ID
2020-07-15 23:10:55 -07:00