Easwar Swaminathan
912765f749
xds: move bootstrap config generating utility package to testutils ( #5713 )
2022-10-17 09:34:01 -07:00
Easwar Swaminathan
5017088853
internal/xds: generate an entry in the authorities map with empty string key ( #5493 )
2022-07-12 09:33:51 -07:00
Zach Reyes
e23132c657
Added support for metadata matcher invert ( #5345 )
...
Added support for metadata matcher invert
2022-05-17 17:03:18 -04:00
Ashitha Santhosh
011544f729
authz: add additional logs to sdk authz ( #5094 )
...
* Adds additional logs to sdk authz
* resolve comment
* adds logs displaying request details
* remove sdk_server_interceptor log
* log subset of rpcData
* resolving comment
* format log message
2022-02-18 14:24:03 -08:00
Menghan Li
77b478d768
xds/federation: e2e tests ( #5103 )
2022-01-07 11:26:53 -08:00
Doug Fawley
d61c7ae86d
internal: merge xds/envconfig into env package ( #4923 )
2021-11-10 17:05:08 -08:00
Zach Reyes
6603e730b5
xds: Added validation and construction of RBAC matcher engine to ParseConfig ( #4964 )
...
* xds: Added validation and construction of RBAC matcher engine to ParseConfig
2021-11-09 19:21:32 -05:00
Doug Fawley
c25a52b769
config: remove retry disable via environment variable ( #4922 )
2021-11-09 13:06:38 -08:00
Menghan Li
82c2825168
xds/federation: support new bootstrap fields and protect them by an env var ( #4936 )
2021-11-08 14:18:52 -08:00
Zach Reyes
2d7bdf2d23
xds: Set RBAC on by default ( #4909 )
2021-10-29 13:17:49 -04:00
Zach Reyes
d47437c91e
xds: Fix invert functionality for header matcher ( #4902 )
...
* Fix invert functionality for header matcher
2021-10-28 12:16:33 -04:00
Ashitha Santhosh
4f21cde702
authz: support empty principals and fix rbac authenticated matcher ( #4883 )
...
* authz: support empty principals in SDK and fixes to rbac authenticated
matcher.
* Minor formatting
* Remove pointer from principals fields
* resolving comments
2021-10-21 15:39:02 -07:00
Zach Reyes
4757d0249e
xds: Make regex matchers match on full string, not just partial match ( #4875 )
...
* xds: Make regex matchers match on full string, not just partial match
2021-10-15 16:14:49 -04:00
Zach Reyes
03ca7b7d00
Added logs to rbac ( #4853 )
...
Added logs to rbac
2021-10-07 22:46:49 -04:00
Zach Reyes
d16cfedb5f
Rename env var ( #4849 )
...
Rename env var
2021-10-06 19:26:22 -04:00
Zach Reyes
34df1b42ae
xds: Small RBAC Changes defined in A41 ( #4818 )
...
* xds: Small RBAC Changes defined in A41
2021-09-28 15:27:00 -04:00
Zach Reyes
4555155af2
xds: Small changes at xDS RBAC Layer ( #4815 )
...
* xds: Small changes at xDS RBAC Layer
2021-09-27 17:36:16 -04:00
Zach Reyes
458ea7640a
xds: Added validations for HCM to support xDS RBAC Filter ( #4786 )
...
* xds: Added validations for HCM to support xDS RBAC Filter
2021-09-22 15:08:44 -04:00
Menghan Li
5417cf8091
xds/test: delete use of removed types ( #4784 )
...
They were deprecated, and removed later.
2021-09-20 13:27:27 -07:00
Zach Reyes
e469f0d5f5
xds: Add env var protection for RBAC HTTP Filter ( #4765 )
...
* xds: Add env var protection for RBAC HTTP Filter
2021-09-17 01:01:07 -04:00
Menghan Li
03b2ebe508
xds: enable ringhash and retry by default ( #4776 )
2021-09-16 11:07:04 -07:00
Easwar Swaminathan
43e8fd4f69
xds: don't remove env var protection for security on the client yet ( #4752 )
...
Set the value to true by default, and remove it one release later.
2021-09-10 10:59:25 -07:00
Doug Fawley
a6a63177ae
xds: add retry support ( #4738 )
2021-09-08 10:00:44 -07:00
Easwar Swaminathan
00a7dc8901
xds: remove env var protection for security on client ( #4735 )
2021-09-07 10:28:56 -07:00
Ashitha Santhosh
b189f5e1bc
authz: create interceptors for gRPC security policy API ( #4664 )
...
* Static Authorization Interceptor
2021-09-02 11:22:07 -07:00
Easwar Swaminathan
712e8d4f57
Remove support for Go 1.13 and older (cont) ( #4706 )
2021-08-25 14:51:41 -07:00
Aliaksandr Mianzhynski
9c668aeab8
all: preallocate slices where possible ( #4609 )
2021-08-11 09:17:59 -07:00
Zach Reyes
01bababd83
Added connection to transport context ( #4649 )
...
* Added connection to transport context
2021-08-09 23:15:57 -04:00
Easwar Swaminathan
ea9b7a0a76
xds: fix a typo ( #4631 )
2021-07-29 17:23:32 -07:00
Zach Reyes
c513103bee
Add extra layer on top of RBAC Engine ( #4576 )
...
* Add extra layer in RBAC
2021-07-21 22:42:38 -04:00
Zach Reyes
22c5358187
xds: add HashPolicy fields to RDS update ( #4521 )
...
* Add HashPolicy fields to RDS update
2021-06-14 15:02:50 -04:00
Doug Fawley
6351a55c38
xds: remove env var protetion of advanced routing features ( #4529 )
2021-06-10 09:33:06 -07:00
Doug Fawley
7beddeea91
cleanup: remove "Interface" as suffix of (almost all) interface names ( #4512 )
2021-06-04 08:58:26 -07:00
Doug Fawley
3508452162
xds: add test-only injection of xds config to client and server ( #4476 )
2021-06-02 10:48:18 -07:00
Zach Reyes
34bd6fbb8e
xds: add RBAC Engine ( #4471 )
...
* Added RBAC Engine
2021-05-26 14:20:25 -04:00
Menghan Li
a12250e98f
xds/cds: add env var for aggregated and DNS cluster ( #4440 )
2021-05-14 15:20:45 -07:00
Zach Reyes
b759b408e8
xds: moved shared matchers to internal/xds ( #4441 )
...
* Moved shared matchers to internal/xds
2021-05-14 17:02:10 -04:00
Doug Fawley
702608ffae
xds: enable timeout, circuit breaking, and fault injection by default ( #4286 )
2021-03-24 10:20:16 -07:00
Menghan Li
d26af8e391
admin: implement admin services ( #4274 )
2021-03-22 15:14:11 -07:00
Easwar Swaminathan
1e7119b136
xds: support all matchers for SANs ( #4246 )
2021-03-15 14:13:13 -07:00