Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Test fix for [NET-11043] crd: support request normalization and header match options to prevent L7 intentions bypass in release/1.6.x #4402

Conversation

hc-github-team-consul-core
Copy link
Collaborator

Backport

This PR is auto-generated from #4385 to be assessed for backporting due to the inclusion of the label backport/1.6.x.

The below text is copied from the body of the original PR.


Changes proposed in this PR

Supports changes in hashicorp/consul#21816 with CRD updates:

How I've tested this PR

  • Added unit tests
  • Manually spun up cluster in kind and validated both changes are reflected in xDS / config when created as CRDs

How I expect reviewers to test this PR

👀 + spot check me on the CRD update process in case I missed a step. It's been a while since I've done one of these.

Checklist


Overview of commits

@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/zalimeni/net-11043-l7-intentions-updates-support/wildly-suited-parrot branch from 7083a5f to 864aa1f Compare October 18, 2024 02:52
@zalimeni zalimeni force-pushed the backport/zalimeni/net-11043-l7-intentions-updates-support/wildly-suited-parrot branch from 864aa1f to 68d4087 Compare October 18, 2024 02:58
@zalimeni zalimeni changed the title Backport of [NET-11043] crd: support request normalization and header match options to prevent L7 intentions bypass into release/1.6.x Test fix for [NET-11043] crd: support request normalization and header match options to prevent L7 intentions bypass in release/1.6.x Oct 18, 2024
@zalimeni zalimeni enabled auto-merge (squash) October 18, 2024 03:00
BindName: "", //api.ACLTemplatedPolicyWorkloadIdentityName, TODO: remove w/ v2 code
BindName: "builtin/workload-identity", // TODO: remove w/ v2 code
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Using a literal because in the corresponding api submodule version, this constant has been removed.

@zalimeni zalimeni merged commit 5009272 into release/1.6.x Oct 18, 2024
50 of 51 checks passed
@zalimeni zalimeni deleted the backport/zalimeni/net-11043-l7-intentions-updates-support/wildly-suited-parrot branch October 18, 2024 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants