pomerium/config
backport-actions-token[bot] ba7d7d443d
envoy: configure upstream IP SAN match as needed (#4382)
envoy: configure upstream IP SAN match as needed (#4380)

When building an upstream validation context for a particular URL, check
whether the hostname is an IP address. If so, configure the SAN match to
use type IP_ADDRESS rather than DNS.

Co-authored-by: Kenneth Jenkins <51246568+kenjenkins@users.noreply.github.com>
2023-07-21 13:40:40 -07:00
..
envoyconfig envoy: configure upstream IP SAN match as needed (#4382) 2023-07-21 13:40:40 -07:00
testdata config: additional kubernetes token source support (#1200) 2020-08-04 09:40:51 -04:00
autocert.go remove deprecated ioutil usages (#2877) 2021-12-30 10:02:12 -08:00
autocert_test.go config: update logic for checking overlapping certificates (#4216) (#4217) 2023-06-01 10:13:40 -06:00
codec_type.go config: allow specifying auto codec type in all-in-one mode (#2846) 2021-12-22 12:34:58 -07:00
codec_type_test.go config: default to http2 (#3660) 2022-10-12 14:46:06 -06:00
config.go improve certificate matching performance (#4188) 2023-05-23 13:41:48 +00:00
config_source.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
config_source_test.go test: use T.TempDir to create temporary test directory (#3725) 2022-11-08 09:16:32 -07:00
constants.go envoy: add support for bind_config bootstrap options (#2772) 2021-12-01 13:02:49 -07:00
crypt.go cryptutil: always use kek public id, add x509 support (#2066) 2021-04-07 09:44:36 -07:00
custom.go envoy: add support for bind_config bootstrap options (#2772) 2021-12-01 13:02:49 -07:00
custom_test.go all: remove unused handler code (#2439) 2021-08-16 16:04:39 -04:00
doc.go *: remove import path comments (#545) 2020-03-16 10:13:47 -07:00
from.go config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
from_test.go config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
helpers.go postgres: databroker storage backend (#3370) 2022-05-25 10:23:58 -06:00
helpers_test.go databroker: rename cache service (#1790) 2021-01-21 08:41:22 -07:00
http.go use tlsClientConfig instead of custom dialer (#3830) 2022-12-27 09:55:36 -07:00
http_test.go httputil/reproxy: fix policy transport (#3322) 2022-05-04 18:32:36 -06:00
identity.go move directory providers (#3633) 2022-11-03 11:33:56 -06:00
layered.go auto tls (#3856) 2023-01-05 16:35:58 -05:00
layered_test.go auto tls (#3856) 2023-01-05 16:35:58 -05:00
log.go backport (#4368) 2023-07-18 08:50:42 -06:00
log_level.go backport (#4368) 2023-07-18 08:50:42 -06:00
metrics.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
metrics_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
options.go backport (#4368) 2023-07-18 08:50:42 -06:00
options_check.go add config option check logging (#3722) 2022-11-05 00:25:09 -04:00
options_test.go config: update logic for checking overlapping certificates (#4216) (#4217) 2023-06-01 10:13:40 -06:00
policy.go config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
policy_ppl.go Merge pull request from GHSA-pvrc-wvj2-f59p 2023-05-26 13:34:21 -07:00
policy_ppl_test.go Merge pull request from GHSA-pvrc-wvj2-f59p 2023-05-26 13:34:21 -07:00
policy_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
session.go config: allow blank identity providers when loading sessions for service account support (#3709) 2022-10-27 08:32:06 -06:00
session_test.go config: allow blank identity providers when loading sessions for service account support (#3709) 2022-10-27 08:32:06 -06:00
trace.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
trace_test.go log context (#2107) 2021-04-22 10:58:13 -04:00
validate.go config: add additional dns lookup families, default to V4_PREFERRED (#3957) 2023-02-10 16:29:23 -07:00