Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add validations for TLS Certs for a specific listener #1377

Merged
merged 9 commits into from
Jun 2, 2023

Conversation

cnvergence
Copy link
Member

What type of PR is this?

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #1292

@codecov
Copy link

codecov bot commented Apr 28, 2023

Codecov Report

Merging #1377 (b755169) into main (22bd06b) will increase coverage by 0.26%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##             main    #1377      +/-   ##
==========================================
+ Coverage   61.40%   61.66%   +0.26%     
==========================================
  Files          79       79              
  Lines       11459    11490      +31     
==========================================
+ Hits         7036     7085      +49     
+ Misses       3962     3945      -17     
+ Partials      461      460       -1     
Impacted Files Coverage Δ
internal/gatewayapi/tls.go 100.00% <100.00%> (ø)
internal/gatewayapi/validate.go 91.47% <100.00%> (+1.66%) ⬆️

... and 3 files with indirect coverage changes

@cnvergence cnvergence force-pushed the tls-validation branch 2 times, most recently from 47d1401 to f075373 Compare May 18, 2023 11:27
@cnvergence cnvergence marked this pull request as ready for review May 18, 2023 11:27
@cnvergence cnvergence requested a review from a team as a code owner May 18, 2023 11:27
internal/gatewayapi/tls.go Outdated Show resolved Hide resolved
@arkodg
Copy link
Contributor

arkodg commented May 22, 2023

the CI failure / conformance test failures seem to be legit

@cnvergence cnvergence force-pushed the tls-validation branch 2 times, most recently from 1ff177f to 806c497 Compare May 23, 2023 16:45
internal/gatewayapi/tls.go Outdated Show resolved Hide resolved
internal/gatewayapi/tls.go Outdated Show resolved Hide resolved
internal/gatewayapi/tls.go Outdated Show resolved Hide resolved
@cnvergence
Copy link
Member Author

the CI failure / conformance test failures seem to be legit

I need to fix this PR, it seems that the wildcard certificate is still breaking it

https://github.com/kubernetes-sigs/gateway-api/blob/main/conformance/utils/suite/suite.go#L158

internal/gatewayapi/tls.go Outdated Show resolved Hide resolved
@arkodg
Copy link
Contributor

arkodg commented May 26, 2023

added some minor comments, but this PR mostly looks good to me, thanks @cnvergence !
@LanceEa @chauhanshubham can you also ptal ?

@cnvergence cnvergence force-pushed the tls-validation branch 2 times, most recently from 670fe4d to 688dc4b Compare May 29, 2023 11:50
arkodg
arkodg previously approved these changes May 29, 2023
Copy link
Contributor

@arkodg arkodg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks @cnvergence

Copy link
Contributor

@LanceEa LanceEa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good, just a couple of small questions/items

internal/gatewayapi/validate.go Outdated Show resolved Hide resolved
internal/gatewayapi/tls.go Outdated Show resolved Hide resolved
internal/gatewayapi/tls.go Outdated Show resolved Hide resolved
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
…n certificate

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
…hostname

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Copy link
Contributor

@arkodg arkodg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks for addressing the comments

@zirain zirain merged commit 35e6166 into envoyproxy:main Jun 2, 2023
@cnvergence cnvergence deleted the tls-validation branch June 2, 2023 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add validations for TLS Certs for a specific listener
4 participants