open-consul/agent/xds
Freddy 0459069523
Hash namespace+proxy ID when creating socket path (#17204)
UNIX domain socket paths are limited to 104-108 characters, depending on
the OS. This limit was quite easy to exceed when testing the feature on
Kubernetes, due to how proxy IDs encode the Pod ID eg:
metrics-collector-59467bcb9b-fkkzl-hcp-metrics-collector-sidecar-proxy

To ensure we stay under that character limit this commit makes a
couple changes:
- Use a b64 encoded SHA1 hash of the namespace + proxy ID to create a
  short and deterministic socket file name.
- Add validation to proxy registrations and proxy-defaults to enforce a
  limit on the socket directory length.
2023-05-09 12:20:26 -06:00
..
accesslogs
extensionruntime
testcommon
testdata Hash namespace+proxy ID when creating socket path (#17204) 2023-05-09 12:20:26 -06:00
validateupstream-test
clusters.go fix panic in injectSANMatcher when tlsContext is nil (#17185) 2023-04-28 16:27:57 -04:00
clusters_test.go Support Envoy's MaxEjectionPercent and BaseEjectionTime config entries for passive health checks (#15979) 2023-04-26 15:59:48 -07:00
config.go Support Envoy's MaxEjectionPercent and BaseEjectionTime config entries for passive health checks (#15979) 2023-04-26 15:59:48 -07:00
config_test.go
delta.go
delta_envoy_extender_oss_test.go
delta_test.go
endpoints.go
endpoints_test.go
failover_policy.go [COMPLIANCE] Add Copyright and License Headers (#16854) 2023-04-20 12:40:22 +00:00
failover_policy_oss.go [COMPLIANCE] Add Copyright and License Headers (#16854) 2023-04-20 12:40:22 +00:00
golden_test.go
listeners.go Add sameness groups to service intentions. (#17064) 2023-04-20 12:16:04 -04:00
listeners_ingress.go
listeners_test.go Permissive mTLS (#17035) 2023-04-19 14:45:00 -05:00
naming.go
net_fallback.go
net_linux.go
protocol_trace.go
rbac.go Add sameness groups to service intentions. (#17064) 2023-04-20 12:16:04 -04:00
rbac_test.go Add sameness groups to service intentions. (#17064) 2023-04-20 12:16:04 -04:00
resources.go
resources_oss_test.go
resources_test.go
response.go
routes.go
routes_test.go
secrets.go
server.go
server_oss.go
testing.go
xds.go
xds_protocol_helpers_test.go
z_xds_packages.go
z_xds_packages_test.go