* Update Envoy SHA to latest with deterministic hash (release-1.1).
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
* review: use lld linker for clang-asan and clang-tsan.
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
* review: export PATH.
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
* Improve performance by removing MD5 for check cache keys (#2002)
* Improve performance by removing MD5 for check cache keys
Signed-off-by: Wayne Zhang <qiwzhang@google.com>
* not to allocate memory from stack
Signed-off-by: Wayne Zhang <qiwzhang@google.com>
* Make debug string readable
Signed-off-by: Wayne Zhang <qiwzhang@google.com>
* alts: remove ALTS (#2003)
Signed-off-by: Lizan Zhou <lizan@tetrate.io>
* Use std::hash for check cache. (#2009)
Signed-off-by: Wayne Zhang <qiwzhang@google.com>
* Remove tests to compare signature values (#2015)
Signed-off-by: Wayne Zhang <qiwzhang@google.com>
* update sample envoy config to latest version (#2016)
* Add a new TCP cluster rewrite filter (#2017)
* Add a new TCP cluster rewrite filter
This commit adds a new TCP cluster rewrite filter which allows users to
rewrite TCP cluster names obtained via TLS SNI by matching via regex
configuration.
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Make TCP cluster rewrite stackable on SNI filter
This commit updates the TCP Cluster Rewrite filter to be stackable on
the SNI Cluster filter.
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Update TCP Cluster Rewrite filter name (#2019)
This commit updates the TCP Cluster Rewrite filter name to
envoy.filters.network.tcp_cluster_rewrite.
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Enable TCP Cluster Rewrite filter registration (#2021)
This commit enables the static registration of the TCP Cluster Rewrite
filter by updating the build configuration.
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Update Envoy SHA to 4ef8562b (#2023)
Envoy /server_info API was inconsistent intermittently causing errors on
a Proxy update on Istio. This update will bring in the API fix to Istio.
Signed-off-by: Venil Noronha <veniln@vmware.com>
* add proxy postsubmit periodic (#2025)
* Update Envoy SHA to c41fa7118e69a0872074d7a685a62331c5d5c17e (#2029)
* Update Envoy SHA
Signed-off-by: JimmyCYJ <jimmychen.0102@gmail.com>
* Fix format.
Signed-off-by: JimmyCYJ <jimmychen.0102@gmail.com>
* bazel: Allow to distdir all dependencies (#2034)
To use --distdir option of Bazel (which allows to use previously
fetched tarballs instead of downloading dependencies during
build), all dependencies should use http instead of git and need
to have sha256 sums specified.
Signed-off-by: Michal Rostecki <mrostecki@suse.de>
* bazel: Remove BoringSSL repository (#2035)
Pull request #2002 removed signature calculation which was using
BoringSSL as a dependency. BoringSSL is not needed anymore.
Signed-off-by: Michal Rostecki <mrostecki@suse.de>
* Update Envoy SHA to fcc68f1 (#2037)
* Update Envoy SHA to fcc68f1
Signed-off-by: JimmyCYJ <jimmychen.0102@gmail.com>
* Update SHA256
Signed-off-by: JimmyCYJ <jimmychen.0102@gmail.com>
Automatic merge from submit-queue.
use bazel --batch for release script
**What this PR does / why we need it**:
Follow up on #1223, bazel server consumes more memory while it doesn't provide benefits in CI.
This will make postsubmit more stable.
**Release note**:
```release-note
None
```
Automatic merge from submit-queue.
Fix pre-commit to use clang 5.0
**What this PR does / why we need it**:
Missed from #1218
**Release note**:
```release-note
N/A
```
Automatic merge from submit-queue.
Update clang version and fix format.
**What this PR does / why we need it**:
**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes#1206
**Special notes for your reviewer**:
**Release note**:
```release-note
NONE
```
Automatic merge from submit-queue.
allow script/check-style to work on MacOS
**What this PR does / why we need it**: allows script/check-style to work on MacOS
**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes#978
**Special notes for your reviewer**: Tested on MacOS and GLinux
**Release note**:
```release-note
```
* change bucket
* do ver in advance
* debug
* del version
* del added line
* del add-on
* retest
* shorten name
* change bucket back
* reapply original change
* add OWNERS to root of proxy
* Typo fix and missing serviceCluster setting
* don't build .deb with opt for now
```release-note
Don’t build with opt the proxy debug for now (flow control issue)
```
* Build -c dbg
* Fix Cloud builder build to work with user releng
Proxy (Envoy) cannot be build as root. See
https://github.com/bazelbuild/bazel/issues/3786
Cloud builder does not support running a container as a user. This
changes updates cloud builder build to run the build as releng user.
* Adds bazelrc
* More performance
* Remove kms calls as we don't publish docker images
* Adds a version to istio-builder
* Defines default for ISTIO_VERSION
* Add initial set of deb files for proxy
* Updates for the scripts
* Adding blacklist as well, make sure 22 is safe
* Use older tag
* Fix scripts
* Add copyright, fixes
* Update the scripts to use istio-proxy user, to match the 0.1 docker.
* Add the deb to the release-binary script.
* Fine tunning, testing with pilot-agent.
* Add a minimal config file, for standalone testing.
This is the same as the file generated by sidecar - the proxy deb
package can be tested separatedly from the pilot agent.
* Add comments
* Add unit tests for the iptables script
* Making the new script backward compatible with the old one
* Add the scripts to the docker image, make it possible to replace the k8s init image with the new script
* Include the new iptables script in the docker image.
Based on PR feedback, to allow testing in k8s and eventual replacement
of the current script.
* More fixes and adjustments based on testing and PR review
* Add copyright, add in-progress script for install integration testing
* End to end tests finally working
* More documentation for debug, and small fixes based on recent tests
* Cosmetic fixes
* Adds Jenkinsfile and update release-binary
* Update Jenkinsfile and gitignore
* Fixes typo and use normal build Node
* Uses default bazel config
* Using batch mode
* Update bazel memory settings
* Do not use Jenkins bazel env
* Set .bazelrc for postsubmit
* Add check_style in presubmit test.
* Checks clang-format version.
* Install required clang-fromat version.
* Download the clang-format for ubuntu.
* Cache the clang-format folder.
* Use ubuntu 16.4
* Revert ubuntu version back to 14.04.
* Make sure clang-format can be run.
Piotr Sikora