linkerd2/cli/cmd
Oliver Gould ab90263461
destination: Only return TLS identities when appropriate (#2371)
As described in #2217, the controller returns TLS identities for results even
when the destination pod may not be able to participate in identity
requester: specifically, the other pod may not have the same controller
namespace or it may not be injected with identity.

This change introduces a new annotation, linkerd.io/identity-mode that is set
when injecting pods (via both CLI and webhook). This annotation is always
added.

The destination service now only returns TLS identities when this annotation
is set to optional on a pod and the destination pod uses the same controller.
These semantics are expected to change before the 2.3 release.

Fixes #2217
2019-02-27 12:18:39 -08:00
..
testdata destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
check.go Update check command hint URLs to new alias (#2245) 2019-02-11 11:00:16 -08:00
check_test.go Update check command hint URLs to new alias (#2245) 2019-02-11 11:00:16 -08:00
completion.go CLI help updates: non-experimental auto-inject; unhide install-cni (#2319) 2019-02-18 15:32:46 -08:00
completion_test.go Rename CLI from conduit to linkerd (#1312) 2018-07-12 17:14:07 -07:00
dashboard.go Leave dashboard command running when open URL fails (#2081) 2019-01-14 16:46:11 -08:00
doc.go Generate CLI docs for usage by the website (#2296) 2019-02-15 13:28:31 -08:00
endpoints.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
endpoints_test.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
get.go Introduce resource selector and deprecate namespace field for ListPods (#2025) 2019-01-23 10:35:55 -08:00
get_test.go Fix most golint issues that are not comment related (#1982) 2018-12-20 10:37:47 -08:00
inject.go destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
inject_test.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
inject_util.go lint: Enable goimports (#2366) 2019-02-25 15:51:10 -08:00
install-cni-plugin.go CLI help updates: unhide install-cni (#2321) 2019-02-18 18:13:26 -08:00
install-cni-plugin_test.go lint: Enable unparam (#2369) 2019-02-27 10:34:02 -08:00
install-sp.go Enable `unused` linter (#2357) 2019-02-23 11:05:39 -08:00
install-sp_test.go lint: Enable scopelint (#2364) 2019-02-24 08:59:51 -08:00
install.go Install the Linkerd global and proxy config maps (#2344) 2019-02-22 15:28:21 -08:00
install_test.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
logs.go lint: Enable goimports (#2366) 2019-02-25 15:51:10 -08:00
logs_test.go lint: Enable scopelint (#2364) 2019-02-24 08:59:51 -08:00
main_test.go test: Support the -update and -pretty-diff flags (#2315) 2019-02-19 13:06:12 -08:00
profile.go Enable `unused` linter (#2357) 2019-02-23 11:05:39 -08:00
profile_test.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
root.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
routes.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
routes_test.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
stat.go lint: Enable unparam (#2369) 2019-02-27 10:34:02 -08:00
stat_test.go lint: Enable unparam (#2369) 2019-02-27 10:34:02 -08:00
tap.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
tap_test.go lint: Enable goconst (#2365) 2019-02-25 12:00:03 -08:00
top.go lint: Enable unparam (#2369) 2019-02-27 10:34:02 -08:00
uninject.go destination: Only return TLS identities when appropriate (#2371) 2019-02-27 12:18:39 -08:00
uninject_test.go lint: Enable scopelint (#2364) 2019-02-24 08:59:51 -08:00
version.go Consolidate timeouts for `linkerd check` (#2191) 2019-02-05 11:38:30 -05:00
version_test.go lint: Enable scopelint (#2364) 2019-02-24 08:59:51 -08:00