Gregory Cooke
58d1a72b99
[Security] Add verification logic using SPIFFE Bundle Maps in XDS ( #8229 )
...
Add verification logic using SPIFFE Bundle Maps in XDS
2025-04-22 13:43:29 -04:00
Vadim Shtayura
f7d488de75
credentials: expose NewContextWithRequestInfo publicly ( #8198 )
2025-04-21 16:30:52 -07:00
Gregory Cooke
4b5505d301
[Security] Add support for SPIFFE Bundle Maps in XDS bundles ( #8180 )
...
This adds support for configuring SPIFFE Bundle Maps inside of credentials via xds bundles.
See the gRFC for more detail grpc/proposal#462
2025-04-04 13:12:53 -04:00
Gregory Cooke
1f6b0cff02
[Security] Add support for SPIFFE Bundle Maps in certificate providers ( #8167 )
2025-03-17 14:39:04 -04:00
Gregory Cooke
75d4a60639
[Security] Add support for parsing SPIFFE Bundle Maps ( #8124 )
...
This adds a dependency on go-spiffe in order to parse SPIFFE bundles. More specifically, that library does not yet support SPIFFE bundle maps, but it does support SPIFFE bundles. This adds parsing of these maps to grpc-go
2025-03-12 13:32:01 -04:00
Arjan Singh Bal
00272e8024
dns: Support link local IPv6 addresses ( #7889 )
2024-12-03 11:06:10 +05:30
janardhanvissa
9affdbb28e
internal/credentials/xds: add unit tests for `HandshakeInfo.Equal` ( #7638 )
2024-09-25 21:56:43 -07:00
Zach Reyes
1b05500d80
internal/credentials/xds: Add exported comment for HandshakeInfo ( #6823 )
2023-11-30 13:47:27 -05:00
Zach Reyes
59c0aec9dc
xDS: Atomically read and write xDS security configuration client side ( #6796 )
2023-11-15 13:54:29 -05:00
Easwar Swaminathan
8a2c220594
cdsbalancer: test cleanup part 2/N ( #6554 )
2023-08-17 19:50:44 -07:00
Doug Fawley
fbff2abb0f
*: update `interface{}` to `any` and `go.mod` version to `go 1.19` ( #6544 )
2023-08-14 09:04:46 -07:00
Theodore Salvo
f2fbb0e07e
Deprecate use of `ioutil` package ( #5906 )
...
Resolves https://github.com/grpc/grpc-go/issues/5897
2023-01-03 11:20:20 -08:00
Doug Fawley
36d87572db
attributes: add Equal method; resolver: add AddressMap and State.BalancerAttributes ( #4855 )
2021-10-15 10:39:56 -07:00
yihuaz
0ca7dca977
oauth: Allow access to Google API regional endpoints via Google Default Credentials ( #4713 )
2021-09-07 09:12:01 -07:00
Easwar Swaminathan
46ab723bb2
multiple: remove appengine specific build constraints and code ( #4685 )
2021-08-24 12:30:13 -07:00
Zach Reyes
b759b408e8
xds: moved shared matchers to internal/xds ( #4441 )
...
* Moved shared matchers to internal/xds
2021-05-14 17:02:10 -04:00
Easwar Swaminathan
f02863c306
xds: specify "h2" as the alpn in xds creds ( #4361 )
2021-04-22 14:58:58 -07:00
Doug Fawley
87eb5b7502
credentials/google: remove unnecessary dependency on xds protos ( #4339 )
2021-04-13 16:19:17 -07:00
Menghan Li
950ddd3c37
xds/google_default_creds: handshake based on cluster name in address attributes ( #4310 )
2021-04-12 09:56:37 -07:00
Easwar Swaminathan
1e7119b136
xds: support all matchers for SANs ( #4246 )
2021-03-15 14:13:13 -07:00
Easwar Swaminathan
e8930beb0e
xds: Prepare to support filter chains on the server ( #4222 )
2021-03-10 21:12:44 -08:00
Easwar Swaminathan
d79063fdde
credentials/xds: Move non-user facing functionality to an internal package ( #4117 )
2020-12-16 15:46:56 -08:00
ZhenLian
84e85f71c9
internal/credentials: fix a bug and add one more helper function SPIFFEIDFromCert ( #3929 )
...
* internal/credentials: fix a bug and add one more helper function
2020-10-09 12:57:50 -07:00
Garrett Gutierrez
35afeb6efe
internal: reintroduce legacy appengine build constraints ( #3850 )
2020-08-27 11:04:57 -07:00
Garrett Gutierrez
ff1fc890e4
internal: reintroduce legacy appengine build constraints ( #3838 )
2020-08-25 13:49:57 -07:00
cindyxue
244f9ece7c
credentials: Migrate helper functions to /internal/credentials for future cleanup ( #3780 )
...
* credentials: migrate functions in credentials/internal to internal/credentials to be used for other modules
2020-08-10 11:52:32 -07:00
Menghan Li
8beeedb8b1
internal: clean up all usages of grpclog, and replace with component ( #3719 )
2020-08-06 13:19:17 -07:00
Easwar Swaminathan
5f7b337d95
Add some appengine build constraints. ( #3787 )
...
Support for Go1.9 and appengine was removed in https://github.com/grpc/grpc-go/pull/3767 . But it looks like we still need some way to do things differently for certain appengine builds.
2020-08-04 17:46:48 -07:00
Doug Fawley
bc714cd8ae
Remove Go 1.9 / AppEngine support; assume go1.12 build tag ( #3767 )
2020-07-30 16:15:35 -07:00
ZhenLian
dd8658f921
credentials: check and expose SPIFFE ID ( #3626 )
...
* credentials: check and expose SPIFFE ID
2020-07-15 23:10:55 -07:00