luxolus
/
open-consul
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity
open-consul/agent/structs
History
Paul Glass d8d89d4b59
Permissive mTLS (#17035) 
This implements permissive mTLS , which allows toggling services into "permissive" mTLS mode.
Permissive mTLS mode allows incoming "non Consul-mTLS" traffic to be forward unmodified to the application.

* Update service-defaults and proxy-defaults config entries with a MutualTLSMode field
* Update the mesh config entry with an AllowEnablingPermissiveMutualTLS field and implement the necessary validation. AllowEnablingPermissiveMutualTLS must be true to allow changing to MutualTLSMode=permissive, but this does not require that all proxy-defaults and service-defaults are currently in strict mode.
* Update xDS listener config to add a "permissive filter chain" when MutualTLSMode=permissive for a particular service. The permissive filter chain matches incoming traffic by the destination port. If the destination port matches the service port from the catalog, then no mTLS is required and the traffic sent is forwarded unmodified to the application.
 		2023-04-19 14:45:00 -05:00
..
aclfilter copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
acl.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
acl_cache.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
acl_cache_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
acl_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
acl_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
auto_encrypt.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
autopilot.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
autopilot_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
catalog.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
catalog_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
check_definition.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
check_definition_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
check_type.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry.go Permissive mTLS (#17035) 2023-04-19 14:45:00 -05:00
config_entry_discoverychain.go Add PrioritizeByLocality to config entries. (#17007) 2023-04-14 15:42:54 -05:00
config_entry_discoverychain_oss.go Add PrioritizeByLocality to config entries. (#17007) 2023-04-14 15:42:54 -05:00
config_entry_discoverychain_oss_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_discoverychain_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_exports.go Add sameness-group to exported-services config entries (#16836) 2023-03-31 12:36:44 -05:00
config_entry_exports_oss.go Add sameness-group to exported-services config entries (#16836) 2023-03-31 12:36:44 -05:00
config_entry_exports_oss_test.go Add sameness-group to exported-services config entries (#16836) 2023-03-31 12:36:44 -05:00
config_entry_exports_test.go Add sameness-group to exported-services config entries (#16836) 2023-03-31 12:36:44 -05:00
config_entry_gateways.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_gateways_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_inline_certificate.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_inline_certificate_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_intentions.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_intentions_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_intentions_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_mesh.go Permissive mTLS (#17035) 2023-04-19 14:45:00 -05:00
config_entry_mesh_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_mesh_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_oss_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_routes.go APIGW: Routes with duplicate parents should be invalid (#16926) 2023-04-10 13:20:32 -04:00
config_entry_routes_test.go APIGW: Routes with duplicate parents should be invalid (#16926) 2023-04-10 13:20:32 -04:00
config_entry_sameness_group.go Add default resolvers to disco chains based on the default sameness group (#16837) 2023-03-31 14:35:56 -04:00
config_entry_sameness_group_oss.go Add default resolvers to disco chains based on the default sameness group (#16837) 2023-03-31 14:35:56 -04:00
config_entry_status.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
config_entry_test.go Permissive mTLS (#17035) 2023-04-19 14:45:00 -05:00
connect.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
connect_ca.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
connect_ca_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
connect_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
connect_proxy_config.go Permissive mTLS (#17035) 2023-04-19 14:45:00 -05:00
connect_proxy_config_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
connect_proxy_config_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
deep-copy.sh Add sameness-group to exported-services config entries (#16836) 2023-03-31 12:36:44 -05:00
discovery_chain.go Add PrioritizeByLocality to config entries. (#17007) 2023-04-14 15:42:54 -05:00
discovery_chain_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
envoy_extension.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
errors.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
federation_state.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
identity.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
intention.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
intention_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
intention_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
operator.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
peering.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
prepared_query.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
prepared_query_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
protobuf_compat.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
service_definition.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
service_definition_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
snapshot.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
structs.deepcopy.go Add PrioritizeByLocality to config entries. (#17007) 2023-04-14 15:42:54 -05:00
structs.go Raft storage backend (#16619) 2023-04-04 17:30:06 +01:00
structs_ext_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
structs_filtering_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
structs_oss.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
structs_oss_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
structs_test.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
system_metadata.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
testing.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
testing_catalog.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
testing_connect_proxy_config.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
testing_intention.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
testing_service_definition.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00
txn.go copyright headers for agent folder (#16704) 2023-03-28 14:39:22 -04:00