-
Notifications
You must be signed in to change notification settings - Fork 4.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
connect: add toggle to globally disable wildcard outbound network access when transparent proxy is enabled #9973
Conversation
…ess when transparent proxy is enabled This adds a new config entry kind "cluster" with a single special name "cluster where this can be controlled.
@@ -0,0 +1,5 @@ | |||
package structs | |||
|
|||
func (e *ClusterConfigEntry) validateEnterpriseMeta() error { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The enterprise version of this method will be lifted from the current version of ProxyConfigEntry
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This LGTM, thanks!
Only had a few minor comments about imports moving around.
"github.com/mitchellh/copystructure" | ||
|
||
"github.com/hashicorp/consul/agent/structs" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should this have moved?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah I picked this tweak up from @dnephin for invoking goimports
:
let g:go_fmt_options = {
\ 'goimports': '-local github.com/hashicorp/consul',
\ }
testinf "github.com/mitchellh/go-testing-interface" | ||
"github.com/stretchr/testify/require" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should these have moved?
@@ -8,11 +8,12 @@ import ( | |||
|
|||
"github.com/hashicorp/consul/agent/structs" | |||
|
|||
"github.com/mitchellh/cli" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should these have moved?
🍒 If backport labels were added before merging, cherry-picking will start automatically. To retroactively trigger a backport after merging, add backport labels and re-run https://circleci.com/gh/hashicorp/consul/345785. |
This adds a new config entry kind "cluster" with a single special name "cluster" where this can be controlled.
TODO