open-consul/agent/proxycfg-glue
Derek Menteer f3be5d9b80
Fix issue with trust bundle read ACL check. (#16630)
This commit fixes an issue where trust bundles could not be read
by services in a non-default namespace, unless they had excessive
ACL permissions given to them.

Prior to this change, `service:write` was required in the default
namespace in order to read the trust bundle. Now, `service:write`
to a service in any namespace is sufficient.
2023-03-14 12:24:33 -05:00
..
config_entry.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
config_entry_test.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
discovery_chain.go proxycfg-glue: server-local compiled discovery chain data source 2022-07-14 18:22:12 +01:00
discovery_chain_test.go proxycfg-glue: server-local compiled discovery chain data source 2022-07-14 18:22:12 +01:00
exported_peered_services.go Fixup authz for data imported from peers (#15347) 2022-11-14 11:36:27 -07:00
exported_peered_services_test.go Fix issue with peer services incorrectly appearing as connect-enabled. (#16339) 2023-02-21 13:59:36 -06:00
federation_state_list_mesh_gateways.go proxycfg-glue: server-local implementation of `FederationStateListMeshGateways` 2022-07-14 18:22:12 +01:00
federation_state_list_mesh_gateways_test.go proxycfg-glue: server-local implementation of `FederationStateListMeshGateways` 2022-07-14 18:22:12 +01:00
gateway_services.go proxycfg-glue: server-local implementation of `GatewayServices` 2022-07-14 18:22:12 +01:00
gateway_services_test.go proxycfg-glue: server-local implementation of `GatewayServices` 2022-07-14 18:22:12 +01:00
glue.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
health.go proxycfg-glue: server-local implementation of the `Health` interface 2022-07-14 18:22:12 +01:00
health_test.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
helpers_test.go proxycfg-glue: server-local implementation of `ExportedPeeredServices` 2022-07-22 15:23:23 +01:00
intention_upstreams.go proxycfg-glue: server-local implementation of IntentionUpstreamsDestination 2022-09-06 23:27:25 +01:00
intention_upstreams_test.go Remove legacy acl policies (#15922) 2023-02-06 15:35:52 +00:00
intentions.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
intentions_ent_test.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
intentions_oss.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
intentions_test.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
internal_service_dump.go Fixup authz for data imported from peers (#15347) 2022-11-14 11:36:27 -07:00
internal_service_dump_test.go proxycfg-glue: server-local implementation of InternalServiceDump 2022-09-06 23:27:25 +01:00
peered_upstreams.go sync more acl enforcement 2022-07-28 12:01:52 -07:00
peered_upstreams_test.go sync more acl enforcement 2022-07-28 12:01:52 -07:00
peering_list.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
peering_list_test.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
resolved_service_config.go [OSS] Add Peer field to service-defaults upstream overrides (#15956) 2023-02-03 10:51:53 -05:00
resolved_service_config_test.go proxycfg-glue: server-local implementation of ResolvedServiceConfig 2022-09-06 23:27:25 +01:00
service_http_checks.go Service http checks data source for agentless proxies (#14924) 2022-10-12 07:49:56 -07:00
service_http_checks_test.go Add new config_file_service_registration token (#15828) 2023-01-10 10:24:02 -06:00
service_list.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
service_list_test.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00
trust_bundle.go Fix issue with trust bundle read ACL check. (#16630) 2023-03-14 12:24:33 -05:00
trust_bundle_test.go Protobuf Refactoring for Multi-Module Cleanliness (#16302) 2023-02-17 16:14:46 -05:00