Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 1.21] TLS: Allow specification of both typed and non-typed san matchers in config (20529) #21170

Merged
merged 5 commits into from
May 16, 2022

Conversation

pradeepcrao
Copy link
Contributor

Signed-off-by: Pradeep Rao pcrao@google.com

Commit Message:
Additional Description:
Backport #20529 to 1.21
Risk Level: Low
Testing: Modified test.
Docs Changes:
Release Notes:
Platform Specific Features:

…san matchers in config (20529)

Signed-off-by: Pradeep Rao <pcrao@google.com>
@repokitteh-read-only
Copy link

CC @envoyproxy/api-shepherds: Your approval is needed for changes made to (api/envoy/|docs/root/api-docs/).
envoyproxy/api-shepherds assignee is @markdroth
CC @envoyproxy/api-watchers: FYI only for changes made to (api/envoy/|docs/root/api-docs/).

🐱

Caused by: #21170 was opened by pradeepcrao.

see: more, trace.

@pradeepcrao
Copy link
Contributor Author

/retest

@repokitteh-read-only
Copy link

Retrying Azure Pipelines:
Retried failed jobs in: envoy-presubmit

🐱

Caused by: a #21170 (comment) was created by @pradeepcrao.

see: more, trace.

@pradeepcrao
Copy link
Contributor Author

/assign @ggreenway

ggreenway
ggreenway previously approved these changes May 9, 2022
@pradeepcrao
Copy link
Contributor Author

/assign @adisuissa

@ggreenway
Copy link
Contributor

CI is failing
/wait

Signed-off-by: Pradeep Rao <pcrao@google.com>
@pradeepcrao
Copy link
Contributor Author

CI is failing /wait

Can't reproduce the build failure locally. Doing a merge to kick off tests again.

…1_21

Signed-off-by: Pradeep Rao <pcrao@google.com>
Copy link
Contributor

@adisuissa adisuissa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overall LGTM. Left a small nit
/lgtm api
/wait

Comment on lines 12 to 13
* cryptomb: remove RSA PKCS1 v1.5 padding support.
* perf: ssl contexts are now tracked without scan based garbage collection and greatly improved the performance on secret update.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These changes don't seem related to the current backport PR.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Aah, this happened because of this: https://github.com/envoyproxy/envoy/pull/21226/files

Fixing.

Signed-off-by: Pradeep Rao <pcrao@google.com>
Copy link
Contributor

@adisuissa adisuissa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@ggreenway ggreenway merged commit 11d1a0f into envoyproxy:release/v1.21 May 16, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants