-
Notifications
You must be signed in to change notification settings - Fork 115
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
WIP: Feature/double hbone #1429
Open
Stevenjin8
wants to merge
26
commits into
istio:master
Choose a base branch
from
Stevenjin8:feature/double-hbone
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
+716
−121
Open
Changes from 1 commit
Commits
Show all changes
26 commits
Select commit
Hold shift + click to select a range
8702bd2
double hbone (no inner encryption) working!!
Stevenjin8 e340d8c
hbone-ish
Stevenjin8 b381e34
cleanup
Stevenjin8 2192d67
graceful shutdowns
Stevenjin8 dff6c92
Some cleanup
Stevenjin8 f1cc535
Add some auth/tls logic back in
Stevenjin8 cab4849
inline double hbone code
Stevenjin8 565f41f
Use correct(?) identities
Stevenjin8 48fa773
Merge branch 'master' into feature/double-hbone
Stevenjin8 9f5609d
checkpoint
Stevenjin8 54dd3e3
another checkpoint
Stevenjin8 58399be
Use new xds
Stevenjin8 59eedf0
Merge branch 'master' into HEAD
Stevenjin8 89efd6c
Merge commit '59eedf0' into feature/double-hbone
Stevenjin8 b2a21bd
lint
Stevenjin8 896cef5
Fix type sizes
Stevenjin8 522fd35
Check workload potocol
Stevenjin8 a56b3ca
wip
Stevenjin8 b255c25
Merge branch 'master' into feature/double-hbone
Stevenjin8 08e7a58
initial impl of hostname
Stevenjin8 a4b8e4b
Merge branch 'master' into feature/double-hbone
Stevenjin8 4ef17cc
tests passing
Stevenjin8 11b4f87
svc addressing
Stevenjin8 8b506cb
Check workload network when using network gateways
Stevenjin8 862c6f8
Use dummy SNI
Stevenjin8 d54a820
remove extra derive
Stevenjin8 File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading status checks…
lint
commit b2a21bd2150cb607770e9de5cf63cf1679716f1f
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The presence of a network gateway does not imply we need to reach it through the network gateway. For example, a local workload in a cluster will have a network gateway defined.
The WDS protocol is not contextual. A workload w/ a network gateway does not mean "To reach this workload, always go through this network gateway [and the control plane will dynamically set or unset this for you]", it means "if you need to traverse a network boundary, here is how to do it".
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
More generally, I wonder if the code might be simplified to have a new Protocol::DoubleHbone (maybe we make a new enum like RequestProtocol though)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agreed.