Commit Graph

3938 Commits

Author SHA1 Message Date
Easwar Swaminathan 7cf9689be2
xds: validations for security config, as specified in A29 (#4762)
* xds: validations for security config, as specified in A29

* make vet happy

* fix error log

* fix error msg in test
2021-09-15 15:38:01 -07:00
Menghan Li 4f093b9a5a
ringhash: the balancer (#4741) 2021-09-15 14:47:18 -07:00
Easwar Swaminathan 4c5f7fb0ee
xds: de-experimentalize xDS apis required for psm security (#4753) 2021-09-15 14:05:59 -07:00
Zach Reyes c84a5de064
transport/server: add :method POST to incoming metadata (#4770)
* transport/server: add :method POST to incoming metadata
2021-09-15 17:02:08 -04:00
Menghan Li 98ccf472da
priority: handle Idle children the same way as Ready (#4769) 2021-09-15 13:35:51 -07:00
Menghan Li 2d4e44a0cd
xds/affinity: fix bugs in clusterresolver and xds-resolver (#4744) 2021-09-14 16:11:03 -07:00
Doug Fawley d41f21ca05
stats: support stats for all retry attempts; support transparent retry (#4749) 2021-09-14 15:11:42 -07:00
Kobi 5d8e5aad40
Create NOTICE.txt (#4739) 2021-09-14 07:15:02 -07:00
Easwar Swaminathan 5bfc05fb0c
grpc: clarify the use of transport.ErrConnClosing from createTransport() (#4757) 2021-09-13 11:50:52 -07:00
Zach Reyes 77ffb2ef31
xds: RBAC HTTP Filter (#4748)
* xds: RBAC HTTP Filter
2021-09-13 14:09:57 -04:00
Doug Fawley 03268c8ed2
balancer: fix aggregated state to not report idle with zero subconns (#4756) 2021-09-10 16:25:09 -07:00
Doug Fawley d25e31e741
client: fix case where GOAWAY would leak connections and memory (#4755) 2021-09-10 14:12:13 -07:00
Easwar Swaminathan 7f560ef4c5
grpc: close underlying transport when subConn is closed when in connecting state (#4751) 2021-09-10 14:08:26 -07:00
Cesar Ghali 4e07a14b4e
credentials/ALTS: Ensure ALTS record protocol names are consistent (#4754) 2021-09-10 13:58:12 -07:00
Menghan Li 16cf65612e
xds: update xdsclient NACK to keep valid resources (#4743) 2021-09-10 11:24:25 -07:00
Easwar Swaminathan 43e8fd4f69
xds: don't remove env var protection for security on the client yet (#4752)
Set the value to true by default, and remove it one release later.
2021-09-10 10:59:25 -07:00
Easwar Swaminathan 0a99ae2d03
xds: support new fields to fetch security configuration (#4747) 2021-09-10 09:04:59 -07:00
Zach Reyes 2608e38e63
xds: Added server side routing (#4726)
* Added server side routing
2021-09-09 13:35:41 -04:00
apolcyn 1fe5adbbf8
interop-testing: add soak test cases to interop client (#4677) 2021-09-08 17:31:51 -07:00
Doug Fawley a6a63177ae
xds: add retry support (#4738) 2021-09-08 10:00:44 -07:00
Easwar Swaminathan 2f3355d224
xds: update go-control-plane to latest (#4737) 2021-09-07 11:11:16 -07:00
Menghan Li 973e7cb9a1
ringhash: the picker (#4730) 2021-09-07 10:41:26 -07:00
Easwar Swaminathan 00a7dc8901
xds: remove env var protection for security on client (#4735) 2021-09-07 10:28:56 -07:00
Menghan Li c99a9c19b0
priority: forward the first IDLE state and picker (#4731) 2021-09-07 10:10:36 -07:00
yihuaz 0ca7dca977
oauth: Allow access to Google API regional endpoints via Google Default Credentials (#4713) 2021-09-07 09:12:01 -07:00
Easwar Swaminathan b2ba77a36f
xds: use separate update channels for listeners in test (#4712) 2021-09-03 10:59:33 -07:00
Zach Reyes c93e472777
Fixed race in Filter Chain (#4728) 2021-09-02 14:43:26 -04:00
Ashitha Santhosh b189f5e1bc
authz: create interceptors for gRPC security policy API (#4664)
* Static Authorization Interceptor
2021-09-02 11:22:07 -07:00
Menghan Li d6a5f5f4f3
ringhash: the ring (#4701) 2021-09-02 10:49:35 -07:00
Easwar Swaminathan 51003aa81e
xds: start a management server per test (#4720) 2021-09-01 13:49:44 -07:00
Tobias Klauser ed501aa1fd
xds/internal/resolver: update github.com/cespare/xxhash to v2 (#4671)
github.com/cespare/xxhash/v2 supports Go ≥ 1.11 and this package states
1.11 in its go.mod file. The only symbol used from the xxhash package is the
Sum64String func which still exists and works the same in v2.

This gets rid of two indirect dependencies.
2021-09-01 14:08:00 -04:00
Lidi Zheng f7d66b5846
Change to a non-workload-identity GKE cluster (#4723) 2021-08-31 13:42:43 -07:00
Zach Reyes 198d951db5
xds: Instantiated HTTP Filters on Server Side (#4669)
* Instantiated HTTP Filters on Server Side
2021-08-31 09:27:06 -04:00
Zach Reyes ef66d13abb
xds: Required Router Filter for both Client and Server side (#4676)
* Added isTerminal() to FilterAPI and required router filter on Client and Server side
2021-08-30 16:49:46 -04:00
Easwar Swaminathan 85b9a1a0fa
xds: pass empty balancer.BuildOptions in clusterresolver_test (#4711) 2021-08-27 08:18:29 -07:00
Doug Fawley 43b19ef0e4
grpctest: extend use of mutex to guard more things (#4710) 2021-08-26 13:29:59 -07:00
Doug Fawley d074cae66b
github: fold security tests into 'tests'; update testing to 1.17-1.15 (#4708) 2021-08-26 11:21:36 -07:00
Menghan Li 0b372df5f4
xds/client: NACK ringhash lb policy if env var is not set (#4707) 2021-08-26 10:21:09 -07:00
Easwar Swaminathan 712e8d4f57
Remove support for Go 1.13 and older (cont) (#4706) 2021-08-25 14:51:41 -07:00
apolcyn 498743c19e
xds/c2p: update default XDS server name in C2P resolver (#4705) 2021-08-25 14:03:53 -07:00
Easwar Swaminathan 6bd8e8cf30
multiple: remove support for Go 1.11 (#4700) 2021-08-24 14:24:34 -07:00
Doug Fawley 5f4bc66745
grpc: fix stayConnected function to connect upon entry (#4699)
If stayConnected was called while the ClientConn was in IDLE already, it would
never call Connect, and stay stuck in that state.  This change ensures
cc.Connect is always called at least once.
2021-08-24 13:52:18 -07:00
Easwar Swaminathan 46ab723bb2
multiple: remove appengine specific build constraints and code (#4685) 2021-08-24 12:30:13 -07:00
Easwar Swaminathan bfd964bba6
xds: use the defaultTestTimeout instead of the short one (#4684) 2021-08-24 11:19:04 -07:00
Easwar Swaminathan dc3afb202f
xds: deflake Test/ServerSideXDS_ServingModeChanges (#4689) 2021-08-24 11:04:25 -07:00
Easwar Swaminathan 45a623cbef
test: use non blocking dials in end2end_test (#4687) 2021-08-24 10:02:55 -07:00
Zach Reyes c361e9ea16
Move Server Credentials Handshake to transport (#4692)
* Move Server Credentials Handshake to transport
2021-08-23 19:39:14 -04:00
Doug Fawley 8ab16ef276
balancer: add ExitIdle optional interface (#4673) 2021-08-18 15:04:35 -07:00
吴亲库里 52cea24534
server: fix net.conn closed twice (#4663) 2021-08-18 13:31:22 -07:00
Menghan Li a42567fe92
xds: support picking ringhash in xds client and cds policy (#4657) 2021-08-12 11:12:02 -07:00