Skip to content

Commit 28d04f4

Browse files
NiniOaknathancoleman
NiniOak
and
nathancoleman
committed
NET-11798: Set APIGateway TLSConfig if unset or empty (#21984)
* NET-11798: Set APIGateway TLSConfig if unset or empty * add changelog * update golden file tests * add missing golden files * Update .changelog/21984.txt Co-authored-by: Nathan Coleman <[email protected]> * remove use of reflect library and check if object is empty instead --------- Co-authored-by: Nathan Coleman <[email protected]>
1 parent 9d63b08 commit 28d04f4

11 files changed

+427
-6
lines changed

‎agent/xds/listeners_apigateway.go‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -525,24 +525,24 @@ func (s *ResourceGenerator) makeInlineOverrideFilterChains(cfgSnap *proxycfg.Con
525525
// Only empty or unset values are updated, preserving any existing specific configurations.
526526
func setAPIGatewayTLSConfig(listenerCfg structs.APIGatewayListener, cfgSnap *proxycfg.ConfigSnapshot) {
527527
// Create a local TLS config based on listener configuration
528-
gatewayTLSConfig := structs.GatewayTLSConfig{
528+
listenerConfig := structs.GatewayTLSConfig{
529529
TLSMinVersion: listenerCfg.TLS.MinVersion,
530530
TLSMaxVersion: listenerCfg.TLS.MaxVersion,
531531
CipherSuites: listenerCfg.TLS.CipherSuites,
532532
}
533533

534534
// Check and set TLSMinVersion if empty
535-
if reflect.ValueOf(cfgSnap.APIGateway.TLSConfig.TLSMinVersion).IsZero() {
536-
cfgSnap.APIGateway.TLSConfig.TLSMinVersion = gatewayTLSConfig.TLSMinVersion
535+
if cfgSnap.APIGateway.TLSConfig.TLSMinVersion == "" {
536+
cfgSnap.APIGateway.TLSConfig.TLSMinVersion = listenerConfig.TLSMinVersion
537537
}
538538

539539
// Check and set TLSMaxVersion if empty
540-
if reflect.ValueOf(cfgSnap.APIGateway.TLSConfig.TLSMaxVersion).IsZero() {
541-
cfgSnap.APIGateway.TLSConfig.TLSMaxVersion = gatewayTLSConfig.TLSMaxVersion
540+
if cfgSnap.APIGateway.TLSConfig.TLSMaxVersion == "" {
541+
cfgSnap.APIGateway.TLSConfig.TLSMaxVersion = listenerConfig.TLSMaxVersion
542542
}
543543

544544
// Check and set CipherSuites if empty
545545
if len(cfgSnap.APIGateway.TLSConfig.CipherSuites) == 0 {
546-
cfgSnap.APIGateway.TLSConfig.CipherSuites = gatewayTLSConfig.CipherSuites
546+
cfgSnap.APIGateway.TLSConfig.CipherSuites = listenerConfig.CipherSuites
547547
}
548548
}

‎agent/xds/testdata/clusters/api-gateway-with-http-route-tls-params-unset.latest.golden‎

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
{
2+
"nonce": "00000001",
3+
"resources": [
4+
{
5+
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
6+
"altStatName": "service.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
7+
"circuitBreakers": {},
8+
"commonLbConfig": {
9+
"healthyPanicThreshold": {}
10+
},
11+
"connectTimeout": "5s",
12+
"edsClusterConfig": {
13+
"edsConfig": {
14+
"ads": {},
15+
"resourceApiVersion": "V3"
16+
}
17+
},
18+
"name": "service.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
19+
"outlierDetection": {},
20+
"transportSocket": {
21+
"name": "tls",
22+
"typedConfig": {
23+
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext",
24+
"commonTlsContext": {
25+
"tlsCertificates": [
26+
{
27+
"certificateChain": {
28+
"inlineString": "-----BEGIN CERTIFICATE-----\nMIICjDCCAjKgAwIBAgIIC5llxGV1gB8wCgYIKoZIzj0EAwIwFDESMBAGA1UEAxMJ\nVGVzdCBDQSAyMB4XDTE5MDMyMjEzNTgyNloXDTI5MDMyMjEzNTgyNlowDjEMMAoG\nA1UEAxMDd2ViMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEADPv1RHVNRfa2VKR\nAB16b6rZnEt7tuhaxCFpQXPj7M2omb0B9Favq5E0ivpNtv1QnFhxtPd7d5k4e+T7\nSkW1TaOCAXIwggFuMA4GA1UdDwEB/wQEAwIDuDAdBgNVHSUEFjAUBggrBgEFBQcD\nAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBoBgNVHQ4EYQRfN2Q6MDc6ODc6M2E6\nNDA6MTk6NDc6YzM6NWE6YzA6YmE6NjI6ZGY6YWY6NGI6ZDQ6MDU6MjU6NzY6M2Q6\nNWE6OGQ6MTY6OGQ6Njc6NWU6MmU6YTA6MzQ6N2Q6ZGM6ZmYwagYDVR0jBGMwYYBf\nZDE6MTE6MTE6YWM6MmE6YmE6OTc6YjI6M2Y6YWM6N2I6YmQ6ZGE6YmU6YjE6OGE6\nZmM6OWE6YmE6YjU6YmM6ODM6ZTc6NWU6NDE6NmY6ZjI6NzM6OTU6NTg6MGM6ZGIw\nWQYDVR0RBFIwUIZOc3BpZmZlOi8vMTExMTExMTEtMjIyMi0zMzMzLTQ0NDQtNTU1\nNTU1NTU1NTU1LmNvbnN1bC9ucy9kZWZhdWx0L2RjL2RjMS9zdmMvd2ViMAoGCCqG\nSM49BAMCA0gAMEUCIGC3TTvvjj76KMrguVyFf4tjOqaSCRie3nmHMRNNRav7AiEA\npY0heYeK9A6iOLrzqxSerkXXQyj5e9bE4VgUnxgPU6g=\n-----END CERTIFICATE-----\n"
29+
},
30+
"privateKey": {
31+
"inlineString": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMoTkpRggp3fqZzFKh82yS4LjtJI+XY+qX/7DefHFrtdoAoGCCqGSM49\nAwEHoUQDQgAEADPv1RHVNRfa2VKRAB16b6rZnEt7tuhaxCFpQXPj7M2omb0B9Fav\nq5E0ivpNtv1QnFhxtPd7d5k4e+T7SkW1TQ==\n-----END EC PRIVATE KEY-----\n"
32+
}
33+
}
34+
],
35+
"tlsParams": {},
36+
"validationContext": {
37+
"matchTypedSubjectAltNames": [
38+
{
39+
"matcher": {
40+
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
41+
},
42+
"sanType": "URI"
43+
}
44+
],
45+
"trustedCa": {
46+
"inlineString": "-----BEGIN CERTIFICATE-----\nMIICXDCCAgKgAwIBAgIICpZq70Z9LyUwCgYIKoZIzj0EAwIwFDESMBAGA1UEAxMJ\nVGVzdCBDQSAyMB4XDTE5MDMyMjEzNTgyNloXDTI5MDMyMjEzNTgyNlowFDESMBAG\nA1UEAxMJVGVzdCBDQSAyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEIhywH1gx\nAsMwuF3ukAI5YL2jFxH6Usnma1HFSfVyxbXX1/uoZEYrj8yCAtdU2yoHETyd+Zx2\nThhRLP79pYegCaOCATwwggE4MA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTAD\nAQH/MGgGA1UdDgRhBF9kMToxMToxMTphYzoyYTpiYTo5NzpiMjozZjphYzo3Yjpi\nZDpkYTpiZTpiMTo4YTpmYzo5YTpiYTpiNTpiYzo4MzplNzo1ZTo0MTo2ZjpmMjo3\nMzo5NTo1ODowYzpkYjBqBgNVHSMEYzBhgF9kMToxMToxMTphYzoyYTpiYTo5Nzpi\nMjozZjphYzo3YjpiZDpkYTpiZTpiMTo4YTpmYzo5YTpiYTpiNTpiYzo4MzplNzo1\nZTo0MTo2ZjpmMjo3Mzo5NTo1ODowYzpkYjA/BgNVHREEODA2hjRzcGlmZmU6Ly8x\nMTExMTExMS0yMjIyLTMzMzMtNDQ0NC01NTU1NTU1NTU1NTUuY29uc3VsMAoGCCqG\nSM49BAMCA0gAMEUCICOY0i246rQHJt8o8Oya0D5PLL1FnmsQmQqIGCi31RwnAiEA\noR5f6Ku+cig2Il8T8LJujOp2/2A72QcHZA57B13y+8o=\n-----END CERTIFICATE-----\n"
47+
}
48+
}
49+
},
50+
"sni": "service.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul"
51+
}
52+
},
53+
"type": "EDS"
54+
}
55+
],
56+
"typeUrl": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
57+
"versionInfo": "00000001"
58+
}

‎agent/xds/testdata/clusters/api-gateway-with-multiple-inline-certificates-tls-params-unset.latest.golden‎

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
{
2+
"nonce": "00000001",
3+
"resources": [
4+
{
5+
"@type": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
6+
"altStatName": "service.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
7+
"circuitBreakers": {},
8+
"commonLbConfig": {
9+
"healthyPanicThreshold": {}
10+
},
11+
"connectTimeout": "5s",
12+
"edsClusterConfig": {
13+
"edsConfig": {
14+
"ads": {},
15+
"resourceApiVersion": "V3"
16+
}
17+
},
18+
"name": "service.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
19+
"outlierDetection": {},
20+
"transportSocket": {
21+
"name": "tls",
22+
"typedConfig": {
23+
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext",
24+
"commonTlsContext": {
25+
"tlsCertificates": [
26+
{
27+
"certificateChain": {
28+
"inlineString": "-----BEGIN CERTIFICATE-----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\npY0heYeK9A6iOLrzqxSerkXXQyj5e9bE4VgUnxgPU6g=\n-----END CERTIFICATE-----\n"
29+
},
30+
"privateKey": {
31+
"inlineString": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMoTkpRggp3fqZzFKh82yS4LjtJI+XY+qX/7DefHFrtdoAoGCCqGSM49\nAwEHoUQDQgAEADPv1RHVNRfa2VKRAB16b6rZnEt7tuhaxCFpQXPj7M2omb0B9Fav\nq5E0ivpNtv1QnFhxtPd7d5k4e+T7SkW1TQ==\n-----END EC PRIVATE KEY-----\n"
32+
}
33+
}
34+
],
35+
"tlsParams": {},
36+
"validationContext": {
37+
"matchTypedSubjectAltNames": [
38+
{
39+
"matcher": {
40+
"exact": "spiffe://11111111-2222-3333-4444-555555555555.consul/ns/default/dc/dc1/svc/service"
41+
},
42+
"sanType": "URI"
43+
}
44+
],
45+
"trustedCa": {
46+
"inlineString": "-----BEGIN CERTIFICATE-----\nMIICXDCCAgKgAwIBAgIICpZq70Z9LyUwCgYIKoZIzj0EAwIwFDESMBAGA1UEAxMJ\nVGVzdCBDQSAyMB4XDTE5MDMyMjEzNTgyNloXDTI5MDMyMjEzNTgyNlowFDESMBAG\nA1UEAxMJVGVzdCBDQSAyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEIhywH1gx\nAsMwuF3ukAI5YL2jFxH6Usnma1HFSfVyxbXX1/uoZEYrj8yCAtdU2yoHETyd+Zx2\nThhRLP79pYegCaOCATwwggE4MA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTAD\nAQH/MGgGA1UdDgRhBF9kMToxMToxMTphYzoyYTpiYTo5NzpiMjozZjphYzo3Yjpi\nZDpkYTpiZTpiMTo4YTpmYzo5YTpiYTpiNTpiYzo4MzplNzo1ZTo0MTo2ZjpmMjo3\nMzo5NTo1ODowYzpkYjBqBgNVHSMEYzBhgF9kMToxMToxMTphYzoyYTpiYTo5Nzpi\nMjozZjphYzo3YjpiZDpkYTpiZTpiMTo4YTpmYzo5YTpiYTpiNTpiYzo4MzplNzo1\nZTo0MTo2ZjpmMjo3Mzo5NTo1ODowYzpkYjA/BgNVHREEODA2hjRzcGlmZmU6Ly8x\nMTExMTExMS0yMjIyLTMzMzMtNDQ0NC01NTU1NTU1NTU1NTUuY29uc3VsMAoGCCqG\nSM49BAMCA0gAMEUCICOY0i246rQHJt8o8Oya0D5PLL1FnmsQmQqIGCi31RwnAiEA\noR5f6Ku+cig2Il8T8LJujOp2/2A72QcHZA57B13y+8o=\n-----END CERTIFICATE-----\n"
47+
}
48+
}
49+
},
50+
"sni": "service.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul"
51+
}
52+
},
53+
"type": "EDS"
54+
}
55+
],
56+
"typeUrl": "type.googleapis.com/envoy.config.cluster.v3.Cluster",
57+
"versionInfo": "00000001"
58+
}

‎agent/xds/testdata/endpoints/api-gateway-with-http-route-tls-params-unset.latest.golden‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
{
2+
"nonce": "00000001",
3+
"resources": [
4+
{
5+
"@type": "type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment",
6+
"clusterName": "service.default.dc1.internal.11111111-2222-3333-4444-555555555555.consul",
7+
"endpoints": [
8+
{
9+
"lbEndpoints": [
10+
{
11+
"endpoint": {
12+
"address": {
13+
"socketAddress": {
14+
"address": "10.10.1.1",
15+
"portValue": 8080
16+
}
17+
}
18+
},
19+
"healthStatus": "HEALTHY",
20+
"loadBalancingWeight": 1
21+
},
22+
{
23+
"endpoint": {
24+
"address": {
25+
"socketAddress": {
26+
"address": "10.10.1.2",
27+
"portValue": 8080
28+
}
29+
}
30+
},
31+
"healthStatus": "HEALTHY",
32+
"loadBalancingWeight": 1
33+
}
34+
]
35+
}
36+
]
37+
}
38+
],
39+
"typeUrl": "type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment",
40+
"versionInfo": "00000001"
41+
}

‎agent/xds/testdata/endpoints/api-gateway-with-multiple-inline-certificates-tls-params-unset.latest.golden‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"nonce": "00000001",
3+
"typeUrl": "type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment",
4+
"versionInfo": "00000001"
5+
}

‎agent/xds/testdata/listeners/api-gateway-with-http-route-tls-params-unset.latest.golden‎

Lines changed: 85 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,85 @@
1+
{
2+
"nonce": "00000001",
3+
"resources": [
4+
{
5+
"@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
6+
"address": {
7+
"socketAddress": {
8+
"address": "1.2.3.4",
9+
"portValue": 8080
10+
}
11+
},
12+
"filterChains": [
13+
{
14+
"filters": [
15+
{
16+
"name": "envoy.filters.network.http_connection_manager",
17+
"typedConfig": {
18+
"@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
19+
"httpFilters": [
20+
{
21+
"name": "envoy.filters.http.router",
22+
"typedConfig": {
23+
"@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
24+
}
25+
}
26+
],
27+
"rds": {
28+
"configSource": {
29+
"ads": {},
30+
"resourceApiVersion": "V3"
31+
},
32+
"routeConfigName": "8080"
33+
},
34+
"statPrefix": "ingress_upstream_certificate",
35+
"tracing": {
36+
"randomSampling": {}
37+
},
38+
"upgradeConfigs": [
39+
{
40+
"upgradeType": "websocket"
41+
}
42+
]
43+
}
44+
}
45+
],
46+
"transportSocket": {
47+
"name": "tls",
48+
"typedConfig": {
49+
"@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
50+
"commonTlsContext": {
51+
"alpnProtocols": [
52+
"http/1.1"
53+
],
54+
"tlsCertificates": [
55+
{
56+
"certificateChain": {
57+
"inlineString": "-----BEGIN CERTIFICATE-----\nMIICljCCAX4CCQCQMDsYO8FrPjANBgkqhkiG9w0BAQsFADANMQswCQYDVQQGEwJV\nUzAeFw0yMjEyMjAxNzUwMjVaFw0yNzEyMTkxNzUwMjVaMA0xCzAJBgNVBAYTAlVT\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx95Opa6t4lGEpiTUogEB\nptqOdam2ch4BHQGhNhX/MrDwwuZQhttBwMfngQ/wd9NmYEPAwj0dumUoAITIq6i2\njQlhqTodElkbsd5vWY8R/bxJWQSoNvVE12TlzECxGpJEiHt4W0r8pGffk+rvplji\nUyCfnT1kGF3znOSjK1hRMTn6RKWCyYaBvXQiB4SGilfLgJcEpOJKtISIxmZ+S409\ng9X5VU88/Bmmrz4cMyxce86Kc2ug5/MOv0CjWDJwlrv8njneV2zvraQ61DDwQftr\nXOvuCbO5IBRHMOBHiHTZ4rtGuhMaIr21V4vb6n8c4YzXiFvhUYcyX7rltGZzVd+W\nmQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBfCqoUIdPf/HGSbOorPyZWbyizNtHJ\nGL7x9cAeIYxpI5Y/WcO1o5v94lvrgm3FNfJoGKbV66+JxOge731FrfMpHplhar1Z\nRahYIzNLRBTLrwadLAZkApUpZvB8qDK4knsTWFYujNsylCww2A6ajzIMFNU4GkUK\nNtyHRuD+KYRmjXtyX1yHNqfGN3vOQmwavHq2R8wHYuBSc6LAHHV9vG+j0VsgMELO\nqwxn8SmLkSKbf2+MsQVzLCXXN5u+D8Yv+4py+oKP4EQ5aFZuDEx+r/G/31rTthww\nAAJAMaoXmoYVdgXV+CPuBb2M4XCpuzLu3bcA2PXm5ipSyIgntMKwXV7r\n-----END CERTIFICATE-----\n"
58+
},
59+
"privateKey": {
60+
"inlineString": "-----BEGIN RSA PRIVATE KEY-----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\nkHrHfwBFDB3KMudhQknsJzEJKCL/KmFH6o0MvsoaT9yzEl3K+ah/\n-----END RSA PRIVATE KEY-----\n"
61+
}
62+
}
63+
],
64+
"tlsParams": {}
65+
},
66+
"requireClientCertificate": false
67+
}
68+
}
69+
}
70+
],
71+
"listenerFilters": [
72+
{
73+
"name": "envoy.filters.listener.tls_inspector",
74+
"typedConfig": {
75+
"@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
76+
}
77+
}
78+
],
79+
"name": "http:1.2.3.4:8080",
80+
"trafficDirection": "OUTBOUND"
81+
}
82+
],
83+
"typeUrl": "type.googleapis.com/envoy.config.listener.v3.Listener",
84+
"versionInfo": "00000001"
85+
}

0 commit comments

Comments
 (0)