Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Validate Subject Alternative Name for upstreams #10621

Merged
merged 6 commits into from
Jul 15, 2021
Merged

Validate Subject Alternative Name for upstreams #10621

merged 6 commits into from
Jul 15, 2021

Commits on Jul 15, 2021

  1. Validate Subject Alternative Name for upstreams 

    These changes ensure that the identity of services dialed is
cryptographically verified.

For all upstreams we validate against SPIFFE IDs in the format used by
Consul's service mesh:

spiffe://<trust-domain>/ns/<namespace>/dc/<datacenter>/svc/<service>
    @freddygv
    freddygv committed Jul 15, 2021
    Configuration menu
    Copy the full SHA
    a6d3fe9 View commit details
    Browse the repository at this point in the history

  2. Update golden files to account for SAN validation

    @freddygv
    freddygv committed Jul 15, 2021
    Configuration menu
    Copy the full SHA
    5454147 View commit details
    Browse the repository at this point in the history

  3. Validate SANs for passthrough clusters and failovers

    @freddygv
    freddygv committed Jul 15, 2021
    Configuration menu
    Copy the full SHA
    47da00d View commit details
    Browse the repository at this point in the history

  4. Update golden files

    @freddygv
    freddygv committed Jul 15, 2021
    Configuration menu
    Copy the full SHA
    5a82656 View commit details
    Browse the repository at this point in the history

  5. Add TODOs about partition handling

    @freddygv
    freddygv committed Jul 15, 2021
    Configuration menu
    Copy the full SHA
    b4c5c58 View commit details
    Browse the repository at this point in the history

  6. Add changelog entry

    @freddygv
    freddygv committed Jul 15, 2021
    Configuration menu
    Copy the full SHA
    444af47 View commit details
    Browse the repository at this point in the history