WIP: Add cross-cluster traffic protection #10504
Draft
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
💻 Deploy preview available: https://deploy-preview-mimir-10504-zb444pucvq-vp.a.run.app/docs/mimir/latest/ |
aknuds1
force-pushed
the
arve/distributor-validate-cluster-name
branch
10 times, most recently
from
a4256c8 to
e3dfcd4
Compare
aknuds1
force-pushed
the
arve/distributor-validate-cluster-name
branch
2 times, most recently
from
34bf241 to
5dfcf69
Compare
Signed-off-by: Arve Knudsen <[email protected]>
Signed-off-by: Arve Knudsen <[email protected]>
Signed-off-by: Arve Knudsen <[email protected]>
aknuds1
force-pushed
the
arve/distributor-validate-cluster-name
branch
from
5dfcf69 to
f17900e
Compare
Signed-off-by: Yuri Nikolic <[email protected]>
duricanikolic
force-pushed
the
arve/distributor-validate-cluster-name
branch
from
b72c109 to
2665a46
Compare
Signed-off-by: Yuri Nikolic <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
duricanikolic
force-pushed
the
arve/distributor-validate-cluster-name
branch
from
177249c to
68cff50
Compare
Signed-off-by: Yuri Nikolic <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
Signed-off-by: Arve Knudsen <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
duricanikolic
force-pushed
the
arve/distributor-validate-cluster-name
branch
from
a5db9ce to
ccc6449
Compare
aknuds1
force-pushed
the
arve/distributor-validate-cluster-name
branch
from
9c7e204 to
583f16f
Compare
Signed-off-by: Arve Knudsen <[email protected]>
aknuds1
force-pushed
the
arve/distributor-validate-cluster-name
branch
from
583f16f to
b27c983
Compare
…date-cluster-name
Signed-off-by: Arve Knudsen <[email protected]>
Signed-off-by: Arve Knudsen <[email protected]>
Signed-off-by: Arve Knudsen <[email protected]>
aknuds1
force-pushed
the
arve/distributor-validate-cluster-name
branch
from
cb499c7 to
fa29d71
Compare
aknuds1
changed the title
…date-cluster-name
Signed-off-by: Arve Knudsen <[email protected]>
Signed-off-by: Arve Knudsen <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
Signed-off-by: Yuri Nikolic <[email protected]>
duricanikolic
force-pushed
the
arve/distributor-validate-cluster-name
branch
from
e78bddc to
bb6f4af
Compare
Signed-off-by: Yuri Nikolic <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What this PR does
Add cross-cluster traffic protection functionality. This is controlled through the following flags:
-server.cluster-verification-label-> Define the cluster verification label, which is sent with HTTP and gRPC requests-server.cluster-verification-label-check-> Enable checking of the cluster verification label when receiving HTTP and gRPC requests-server.auxiliary-url-paths-> Auxiliary HTTP URL paths that should be exempt from checking of the cluster verification label (e.g. k8s webhooks)TODO
Which issue(s) this PR fixes or relates to
Fixes #
Checklist
CHANGELOG.mdupdated - the order of entries should be[CHANGE],[FEATURE],[ENHANCEMENT],[BUGFIX].about-versioning.mdupdated with experimental features.