luxolus
/
open-consul
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity
open-consul/agent/xds
History
Michael Zalimeni 4cae008559
Disable remote proxy patching except AWS Lambda (#17415) 
To avoid unintended tampering with remote downstreams via service
config, refactor BasicEnvoyExtender and RuntimeConfig to disallow
typical Envoy extensions from being applied to non-local proxies.

Continue to allow this behavior for AWS Lambda and the read-only
Validate builtin extensions.

Addresses CVE-2023-2816.
 		2023-05-23 11:55:06 +00:00
..
accesslogs copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
extensionruntime Disable remote proxy patching except AWS Lambda (#17415) 2023-05-23 11:55:06 +00:00
testcommon copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
testdata Disable remote proxy patching except AWS Lambda (#17415) 2023-05-23 11:55:06 +00:00
validateupstream-test copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
clusters.go xds: generate clusters directly from API gateway snapshot (#17391) 2023-05-22 12:00:13 -04:00
clusters_test.go Support Envoy's MaxEjectionPercent and BaseEjectionTime config entries for passive health checks (#15979) 2023-04-26 15:59:48 -07:00
config.go Support Envoy's MaxEjectionPercent and BaseEjectionTime config entries for passive health checks (#15979) 2023-04-26 15:59:48 -07:00
config_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
delta.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
delta_envoy_extender_oss_test.go Disable remote proxy patching except AWS Lambda (#17415) 2023-05-23 11:55:06 +00:00
delta_test.go Disable remote proxy patching except AWS Lambda (#17415) 2023-05-23 11:55:06 +00:00
endpoints.go xds: generate clusters directly from API gateway snapshot (#17391) 2023-05-22 12:00:13 -04:00
endpoints_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
failover_policy.go [COMPLIANCE] Add Copyright and License Headers (#16854) 2023-04-20 12:40:22 +00:00
failover_policy_oss.go [COMPLIANCE] Add Copyright and License Headers (#16854) 2023-04-20 12:40:22 +00:00
golden_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
jwt_authn.go JWT Authentication with service intentions: xds package update (#17414) 2023-05-19 18:14:16 -04:00
jwt_authn_test.go JWT Authentication with service intentions: xds package update (#17414) 2023-05-19 18:14:16 -04:00
listeners.go xds: generate listeners directly from API gateway snapshot (#17398) 2023-05-22 17:36:29 -04:00
listeners_apigateway.go xds: generate listeners directly from API gateway snapshot (#17398) 2023-05-22 17:36:29 -04:00
listeners_ingress.go xds: generate listeners directly from API gateway snapshot (#17398) 2023-05-22 17:36:29 -04:00
listeners_test.go Permissive mTLS (#17035) 2023-04-19 14:45:00 -05:00
naming.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
net_fallback.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
net_linux.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
protocol_trace.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
rbac.go Add sameness groups to service intentions. (#17064) 2023-04-20 12:16:04 -04:00
rbac_test.go Add sameness groups to service intentions. (#17064) 2023-04-20 12:16:04 -04:00
resources.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
resources_oss_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
resources_test.go xds: generate endpoints directly from API gateway snapshot (#17390) 2023-05-19 18:50:59 +00:00
response.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
routes.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
routes_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
secrets.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
server.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
server_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
testing.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
xds.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
xds_protocol_helpers_test.go Disable remote proxy patching except AWS Lambda (#17415) 2023-05-23 11:55:06 +00:00
z_xds_packages.go Add connection limit setting to service defaults 2022-05-24 10:13:38 -07:00
z_xds_packages_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00