open-consul

Commit Graph

Author	SHA1	Message	Date
Chris S. Kim	247b56def3	Pass trust domain to RBAC to validate and fix use of wrong peer trust bundles (#13508 )	2022-06-20 22:47:14 -04:00
Chris S. Kim	4cb251497f	Update RBAC to handle imported services (#13404 ) When converting from Consul intentions to xds RBAC rules, services imported from other peers must encode additional data like partition (from the remote cluster) and trust domain. This PR updates the PeeringTrustBundle to hold the sending side's local partition as ExportedPartition. It also updates RBAC code to encode SpiffeIDs of imported services with the ExportedPartition and TrustDomain.	2022-06-10 17:15:22 -04:00

Author

SHA1

Message

Date

Chris S. Kim

247b56def3

Pass trust domain to RBAC to validate and fix use of wrong peer trust bundles (#13508 )

2022-06-20 22:47:14 -04:00

Chris S. Kim

4cb251497f

Update RBAC to handle imported services (#13404 )

When converting from Consul intentions to xds RBAC rules, services imported from other peers must encode additional data like partition (from the remote cluster) and trust domain.

This PR updates the PeeringTrustBundle to hold the sending side's local partition as ExportedPartition. It also updates RBAC code to encode SpiffeIDs of imported services with the ExportedPartition and TrustDomain.

2022-06-10 17:15:22 -04:00

2 Commits