Easwar Swaminathan
7cf9689be2
xds: validations for security config, as specified in A29 ( #4762 )
...
* xds: validations for security config, as specified in A29
* make vet happy
* fix error log
* fix error msg in test
2021-09-15 15:38:01 -07:00
Menghan Li
4f093b9a5a
ringhash: the balancer ( #4741 )
2021-09-15 14:47:18 -07:00
Easwar Swaminathan
4c5f7fb0ee
xds: de-experimentalize xDS apis required for psm security ( #4753 )
2021-09-15 14:05:59 -07:00
Zach Reyes
c84a5de064
transport/server: add :method POST to incoming metadata ( #4770 )
...
* transport/server: add :method POST to incoming metadata
2021-09-15 17:02:08 -04:00
Menghan Li
98ccf472da
priority: handle Idle children the same way as Ready ( #4769 )
2021-09-15 13:35:51 -07:00
Menghan Li
2d4e44a0cd
xds/affinity: fix bugs in clusterresolver and xds-resolver ( #4744 )
2021-09-14 16:11:03 -07:00
Doug Fawley
d41f21ca05
stats: support stats for all retry attempts; support transparent retry ( #4749 )
2021-09-14 15:11:42 -07:00
Kobi
5d8e5aad40
Create NOTICE.txt ( #4739 )
2021-09-14 07:15:02 -07:00
Easwar Swaminathan
5bfc05fb0c
grpc: clarify the use of transport.ErrConnClosing from createTransport() ( #4757 )
2021-09-13 11:50:52 -07:00
Zach Reyes
77ffb2ef31
xds: RBAC HTTP Filter ( #4748 )
...
* xds: RBAC HTTP Filter
2021-09-13 14:09:57 -04:00
Doug Fawley
03268c8ed2
balancer: fix aggregated state to not report idle with zero subconns ( #4756 )
2021-09-10 16:25:09 -07:00
Doug Fawley
d25e31e741
client: fix case where GOAWAY would leak connections and memory ( #4755 )
2021-09-10 14:12:13 -07:00
Easwar Swaminathan
7f560ef4c5
grpc: close underlying transport when subConn is closed when in connecting state ( #4751 )
2021-09-10 14:08:26 -07:00
Cesar Ghali
4e07a14b4e
credentials/ALTS: Ensure ALTS record protocol names are consistent ( #4754 )
2021-09-10 13:58:12 -07:00
Menghan Li
16cf65612e
xds: update xdsclient NACK to keep valid resources ( #4743 )
2021-09-10 11:24:25 -07:00
Easwar Swaminathan
43e8fd4f69
xds: don't remove env var protection for security on the client yet ( #4752 )
...
Set the value to true by default, and remove it one release later.
2021-09-10 10:59:25 -07:00
Easwar Swaminathan
0a99ae2d03
xds: support new fields to fetch security configuration ( #4747 )
2021-09-10 09:04:59 -07:00
Zach Reyes
2608e38e63
xds: Added server side routing ( #4726 )
...
* Added server side routing
2021-09-09 13:35:41 -04:00
apolcyn
1fe5adbbf8
interop-testing: add soak test cases to interop client ( #4677 )
2021-09-08 17:31:51 -07:00
Doug Fawley
a6a63177ae
xds: add retry support ( #4738 )
2021-09-08 10:00:44 -07:00
Easwar Swaminathan
2f3355d224
xds: update go-control-plane to latest ( #4737 )
2021-09-07 11:11:16 -07:00
Menghan Li
973e7cb9a1
ringhash: the picker ( #4730 )
2021-09-07 10:41:26 -07:00
Easwar Swaminathan
00a7dc8901
xds: remove env var protection for security on client ( #4735 )
2021-09-07 10:28:56 -07:00
Menghan Li
c99a9c19b0
priority: forward the first IDLE state and picker ( #4731 )
2021-09-07 10:10:36 -07:00
yihuaz
0ca7dca977
oauth: Allow access to Google API regional endpoints via Google Default Credentials ( #4713 )
2021-09-07 09:12:01 -07:00
Easwar Swaminathan
b2ba77a36f
xds: use separate update channels for listeners in test ( #4712 )
2021-09-03 10:59:33 -07:00
Zach Reyes
c93e472777
Fixed race in Filter Chain ( #4728 )
2021-09-02 14:43:26 -04:00
Ashitha Santhosh
b189f5e1bc
authz: create interceptors for gRPC security policy API ( #4664 )
...
* Static Authorization Interceptor
2021-09-02 11:22:07 -07:00
Menghan Li
d6a5f5f4f3
ringhash: the ring ( #4701 )
2021-09-02 10:49:35 -07:00
Easwar Swaminathan
51003aa81e
xds: start a management server per test ( #4720 )
2021-09-01 13:49:44 -07:00
Tobias Klauser
ed501aa1fd
xds/internal/resolver: update github.com/cespare/xxhash to v2 ( #4671 )
...
github.com/cespare/xxhash/v2 supports Go ≥ 1.11 and this package states
1.11 in its go.mod file. The only symbol used from the xxhash package is the
Sum64String func which still exists and works the same in v2.
This gets rid of two indirect dependencies.
2021-09-01 14:08:00 -04:00
Lidi Zheng
f7d66b5846
Change to a non-workload-identity GKE cluster ( #4723 )
2021-08-31 13:42:43 -07:00
Zach Reyes
198d951db5
xds: Instantiated HTTP Filters on Server Side ( #4669 )
...
* Instantiated HTTP Filters on Server Side
2021-08-31 09:27:06 -04:00
Zach Reyes
ef66d13abb
xds: Required Router Filter for both Client and Server side ( #4676 )
...
* Added isTerminal() to FilterAPI and required router filter on Client and Server side
2021-08-30 16:49:46 -04:00
Easwar Swaminathan
85b9a1a0fa
xds: pass empty balancer.BuildOptions in clusterresolver_test ( #4711 )
2021-08-27 08:18:29 -07:00
Doug Fawley
43b19ef0e4
grpctest: extend use of mutex to guard more things ( #4710 )
2021-08-26 13:29:59 -07:00
Doug Fawley
d074cae66b
github: fold security tests into 'tests'; update testing to 1.17-1.15 ( #4708 )
2021-08-26 11:21:36 -07:00
Menghan Li
0b372df5f4
xds/client: NACK ringhash lb policy if env var is not set ( #4707 )
2021-08-26 10:21:09 -07:00
Easwar Swaminathan
712e8d4f57
Remove support for Go 1.13 and older (cont) ( #4706 )
2021-08-25 14:51:41 -07:00
apolcyn
498743c19e
xds/c2p: update default XDS server name in C2P resolver ( #4705 )
2021-08-25 14:03:53 -07:00
Easwar Swaminathan
6bd8e8cf30
multiple: remove support for Go 1.11 ( #4700 )
2021-08-24 14:24:34 -07:00
Doug Fawley
5f4bc66745
grpc: fix stayConnected function to connect upon entry ( #4699 )
...
If stayConnected was called while the ClientConn was in IDLE already, it would
never call Connect, and stay stuck in that state. This change ensures
cc.Connect is always called at least once.
2021-08-24 13:52:18 -07:00
Easwar Swaminathan
46ab723bb2
multiple: remove appengine specific build constraints and code ( #4685 )
2021-08-24 12:30:13 -07:00
Easwar Swaminathan
bfd964bba6
xds: use the defaultTestTimeout instead of the short one ( #4684 )
2021-08-24 11:19:04 -07:00
Easwar Swaminathan
dc3afb202f
xds: deflake Test/ServerSideXDS_ServingModeChanges ( #4689 )
2021-08-24 11:04:25 -07:00
Easwar Swaminathan
45a623cbef
test: use non blocking dials in end2end_test ( #4687 )
2021-08-24 10:02:55 -07:00
Zach Reyes
c361e9ea16
Move Server Credentials Handshake to transport ( #4692 )
...
* Move Server Credentials Handshake to transport
2021-08-23 19:39:14 -04:00
Doug Fawley
8ab16ef276
balancer: add ExitIdle optional interface ( #4673 )
2021-08-18 15:04:35 -07:00
吴亲库里
52cea24534
server: fix net.conn closed twice ( #4663 )
2021-08-18 13:31:22 -07:00
Menghan Li
a42567fe92
xds: support picking ringhash in xds client and cds policy ( #4657 )
2021-08-12 11:12:02 -07:00