Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix authorizeClient on failed refresh #1558

Merged

Conversation

glazychev-art
Copy link
Contributor

@glazychev-art glazychev-art commented Nov 17, 2023

Description

The main idea is not to close the existing connection during refresh in case of an error.
This corrects the situation where the spire certificate update occurred during the Request. This may return a false negative result

Issue link

networkservicemesh/deployments-k8s#10377

How Has This Been Tested?

  • Added unit testing to cover
  • Tested manually
  • Tested by integration testing
  • Have not tested

Types of changes

  • Bug fix
  • New functionality
  • Documentation
  • Refactoring
  • CI

Copy link

codecov bot commented Nov 17, 2023

Codecov Report

All modified and coverable lines are covered by tests ✅

❗ No coverage uploaded for pull request base (main@4d02ed4). Click here to learn what that means.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1558   +/-   ##
=======================================
  Coverage        ?   67.27%           
=======================================
  Files           ?      260           
  Lines           ?    12332           
  Branches        ?        0           
=======================================
  Hits            ?     8296           
  Misses          ?     3515           
  Partials        ?      521           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@glazychev-art glazychev-art marked this pull request as ready for review November 20, 2023 06:04
@denis-tingaikin
Copy link
Member

@glazychev-art Should we also update registry chain?

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>
Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>
@glazychev-art
Copy link
Contributor Author

@denis-tingaikin
Thanks, fixed

@denis-tingaikin denis-tingaikin merged commit 774304c into networkservicemesh:main Dec 7, 2023
17 checks passed
nsmbot pushed a commit to networkservicemesh/cmd-csi-driver that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-map-ip-k8s that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-cluster-info-k8s that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-ipam-vl3 that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-registry-proxy-dns that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-admission-webhook-k8s that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nse-remote-vlan that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsmgr that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/sdk-kernel that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nse-vfio that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/sdk-k8s that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-registry-memory that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsmgr-proxy that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
nsmbot pushed a commit to networkservicemesh/cmd-nsc-init that referenced this pull request Dec 7, 2023
…k@main

PR link: networkservicemesh/sdk#1558

Commit: 774304c
Author: Artem Glazychev
Date: 2023-12-07 22:14:43 +0700
Message:
  - Fix authorizeClient on failed refresh (#1558)
* Fix authorizeClient on failed refresh

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

* Fix registry

Signed-off-by: Artem Glazychev <artem.glazychev@xored.com>

---------

Signed-off-by: NSMBot <nsmbot@networkservicmesh.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants