Commit Graph

40 Commits

Author SHA1 Message Date
Easwar Swaminathan 912765f749
xds: move bootstrap config generating utility package to testutils (#5713) 2022-10-17 09:34:01 -07:00
Easwar Swaminathan 5017088853
internal/xds: generate an entry in the authorities map with empty string key (#5493) 2022-07-12 09:33:51 -07:00
Zach Reyes e23132c657
Added support for metadata matcher invert (#5345)
Added support for metadata matcher invert
2022-05-17 17:03:18 -04:00
Ashitha Santhosh 011544f729
authz: add additional logs to sdk authz (#5094)
* Adds additional logs to sdk authz

* resolve comment

* adds logs displaying request details

* remove sdk_server_interceptor log

* log subset of rpcData

* resolving comment

* format log message
2022-02-18 14:24:03 -08:00
Menghan Li 77b478d768
xds/federation: e2e tests (#5103) 2022-01-07 11:26:53 -08:00
Doug Fawley d61c7ae86d
internal: merge xds/envconfig into env package (#4923) 2021-11-10 17:05:08 -08:00
Zach Reyes 6603e730b5
xds: Added validation and construction of RBAC matcher engine to ParseConfig (#4964)
* xds: Added validation and construction of RBAC matcher engine to ParseConfig
2021-11-09 19:21:32 -05:00
Doug Fawley c25a52b769
config: remove retry disable via environment variable (#4922) 2021-11-09 13:06:38 -08:00
Menghan Li 82c2825168
xds/federation: support new bootstrap fields and protect them by an env var (#4936) 2021-11-08 14:18:52 -08:00
Zach Reyes 2d7bdf2d23
xds: Set RBAC on by default (#4909) 2021-10-29 13:17:49 -04:00
Zach Reyes d47437c91e
xds: Fix invert functionality for header matcher (#4902)
* Fix invert functionality for header matcher
2021-10-28 12:16:33 -04:00
Ashitha Santhosh 4f21cde702
authz: support empty principals and fix rbac authenticated matcher (#4883)
* authz: support empty principals in SDK and fixes to rbac authenticated
matcher.

* Minor formatting

* Remove pointer from principals fields

* resolving comments
2021-10-21 15:39:02 -07:00
Zach Reyes 4757d0249e
xds: Make regex matchers match on full string, not just partial match (#4875)
* xds: Make regex matchers match on full string, not just partial match
2021-10-15 16:14:49 -04:00
Zach Reyes 03ca7b7d00
Added logs to rbac (#4853)
Added logs to rbac
2021-10-07 22:46:49 -04:00
Zach Reyes d16cfedb5f
Rename env var (#4849)
Rename env var
2021-10-06 19:26:22 -04:00
Zach Reyes 34df1b42ae
xds: Small RBAC Changes defined in A41 (#4818)
* xds: Small RBAC Changes defined in A41
2021-09-28 15:27:00 -04:00
Zach Reyes 4555155af2
xds: Small changes at xDS RBAC Layer (#4815)
* xds: Small changes at xDS RBAC Layer
2021-09-27 17:36:16 -04:00
Zach Reyes 458ea7640a
xds: Added validations for HCM to support xDS RBAC Filter (#4786)
* xds: Added validations for HCM to support xDS RBAC Filter
2021-09-22 15:08:44 -04:00
Menghan Li 5417cf8091
xds/test: delete use of removed types (#4784)
They were deprecated, and removed later.
2021-09-20 13:27:27 -07:00
Zach Reyes e469f0d5f5
xds: Add env var protection for RBAC HTTP Filter (#4765)
* xds: Add env var protection for RBAC HTTP Filter
2021-09-17 01:01:07 -04:00
Menghan Li 03b2ebe508
xds: enable ringhash and retry by default (#4776) 2021-09-16 11:07:04 -07:00
Easwar Swaminathan 43e8fd4f69
xds: don't remove env var protection for security on the client yet (#4752)
Set the value to true by default, and remove it one release later.
2021-09-10 10:59:25 -07:00
Doug Fawley a6a63177ae
xds: add retry support (#4738) 2021-09-08 10:00:44 -07:00
Easwar Swaminathan 00a7dc8901
xds: remove env var protection for security on client (#4735) 2021-09-07 10:28:56 -07:00
Ashitha Santhosh b189f5e1bc
authz: create interceptors for gRPC security policy API (#4664)
* Static Authorization Interceptor
2021-09-02 11:22:07 -07:00
Easwar Swaminathan 712e8d4f57
Remove support for Go 1.13 and older (cont) (#4706) 2021-08-25 14:51:41 -07:00
Aliaksandr Mianzhynski 9c668aeab8
all: preallocate slices where possible (#4609) 2021-08-11 09:17:59 -07:00
Zach Reyes 01bababd83
Added connection to transport context (#4649)
* Added connection to transport context
2021-08-09 23:15:57 -04:00
Easwar Swaminathan ea9b7a0a76
xds: fix a typo (#4631) 2021-07-29 17:23:32 -07:00
Zach Reyes c513103bee
Add extra layer on top of RBAC Engine (#4576)
* Add extra layer in RBAC
2021-07-21 22:42:38 -04:00
Zach Reyes 22c5358187
xds: add HashPolicy fields to RDS update (#4521)
* Add HashPolicy fields to RDS update
2021-06-14 15:02:50 -04:00
Doug Fawley 6351a55c38
xds: remove env var protetion of advanced routing features (#4529) 2021-06-10 09:33:06 -07:00
Doug Fawley 7beddeea91
cleanup: remove "Interface" as suffix of (almost all) interface names (#4512) 2021-06-04 08:58:26 -07:00
Doug Fawley 3508452162
xds: add test-only injection of xds config to client and server (#4476) 2021-06-02 10:48:18 -07:00
Zach Reyes 34bd6fbb8e
xds: add RBAC Engine (#4471)
* Added RBAC Engine
2021-05-26 14:20:25 -04:00
Menghan Li a12250e98f
xds/cds: add env var for aggregated and DNS cluster (#4440) 2021-05-14 15:20:45 -07:00
Zach Reyes b759b408e8
xds: moved shared matchers to internal/xds (#4441)
* Moved shared matchers to internal/xds
2021-05-14 17:02:10 -04:00
Doug Fawley 702608ffae
xds: enable timeout, circuit breaking, and fault injection by default (#4286) 2021-03-24 10:20:16 -07:00
Menghan Li d26af8e391
admin: implement admin services (#4274) 2021-03-22 15:14:11 -07:00
Easwar Swaminathan 1e7119b136
xds: support all matchers for SANs (#4246) 2021-03-15 14:13:13 -07:00