8ca42ec6f8
Revert "Update to rbac policy struct and end2end authz test. ( #27074 )" ( #28552 )
...
This reverts commit b64167a034
3 years ago
c02fe64bea
Support custom xDS channel creds ( #28486 )
...
This patch introduces a factory to allow supporting custom xDS channel
creds. Three types currently supported (fake, insecure, google_default)
are registered by default for backward-compatibility.
3 years ago
17859fb6b5
Stop N**2 symbol name lengths ( #28502 )
...
* Experiment: Try to stop N**2 symbol name lengths
* Better copysink
* clean up tests
* fix clang-tidy
* fix
* typo?
* fix
* comment
* Automated change: Fix sanity tests
Co-authored-by: ctiller <ctiller@users.noreply.github.com>
3 years ago
b64167a034
Update to rbac policy struct and end2end authz test. ( #27074 )
...
* Empty principals checks for authenticated connection
* fix sanity check
* clang-format
* principals:[] will result in ANY
* minor correction after merging
* clang-format
* formatting
* clang-format
* remove unnecessary header
* Remove unnecessary target from BUILD
3 years ago
c0f18e2bd6
another fixup for #27846 ( #28540 )
3 years ago
e29bdfe4e8
Add a test for includes without paths ( #28532 )
...
* Add a test for includes without paths
* fix path
* fix
* Automated change: Fix sanity tests
Co-authored-by: ctiller <ctiller@users.noreply.github.com>
3 years ago
2bdd5bd8e6
Add a trace to list which filters are contained in a channel stack ( #28530 )
...
* Add a trace to emit what a channel stack looks like
* Add a trace to emit what a channel stack looks like
* x
3 years ago
d2d2d0650a
Allow MetadataMap to be a status in TrySeq ( #28490 )
...
* Enable metadata to be a 'status' for TrySeq
Begins to allow us to return trailing metadata and get the right
behaviors.
* comment
3 years ago
066a50b9ca
Remove grpc_httpcli_context ( #27867 )
...
* remove grpc_httpcli_context
3 years ago
4b3045b788
fix mac build ( #28494 )
3 years ago
e48845c346
avod sync_test timeouts on arm64 ( #28492 )
3 years ago
d884a7a440
RBAC Authorization Engine updates based on A41 proposal ( #27754 )
...
* RBAC Authorization Engine updates based on A41 proposal
* Fix headermatcher
* Support for metadata
* Maps host to :authority, special-case te and :method
* removes method hardcoding
* add factory methods
* minor formatting
* fix test
* formatting
* remove constructors
* fix api usage
* ReqServerName test in xds_end2end_test
* Initialize bool
3 years ago
90340c24c4
URI parser: fix percent-encoding and add ToString() method ( #28485 )
...
* fix URI percent-encoding character set
* clean up and fix edge cases
* add ToString() method to URI parser with appropriate percent-encoding logic
* clang-format
* fix ordering for URI::QueryParam
* fix decoding edge cases in parsing
* generate upper-case hex digits, as per the RFC
* clang-format
* reuse offset variable
3 years ago
ded999b1e5
fix openssl protability test ( #28499 )
3 years ago
10b2b50569
Reland empty target introduction to ease the internal merge of #25586 ( #28408 )
...
* revert #28172
* fix missing arena dependency
* add missing dependency
* sync to upstream/master
3 years ago
4b881c5947
Remove grpc_mdelem ( #28267 )
...
* Automated change: Fix sanity tests
* content-type
* Automated change: Fix sanity tests
* clang-format
* fix
* Move colon prefixed metadata
* Automated change: Fix sanity tests
* Automated change: Fix sanity tests
* try to fix windows failure
* try and scale sizes better
* ambiguity fix?
* wip metadatavalueasslice
* Fix status code for resource exhaustion
* Revert "Revert "Move a bunch of slice typed metadata to new system (#28107 )" (#28208 )"
This reverts commit 7717587063
3 years ago
55b365f287
Move resolver code around a little ( #27846 )
...
* move service config
* service config should not depend on grpc_base
* move resolver, deal with fallout
* Automated change: Fix sanity tests
* fix
* fix
* Automated change: Fix sanity tests
* review feedback
* review feedback
* fix
* Automated change: Fix sanity tests
* fix
* Automated change: Fix sanity tests
* fix vis
* fix
* fixes
* Automated change: Fix sanity tests
* visibility
* fix
Co-authored-by: ctiller <ctiller@users.noreply.github.com>
3 years ago
143d1a7e2c
Fix typo. tranasction -> transaction ( #27593 )
3 years ago
7759632a2d
Add CRL checking to gRPC Core ( #28418 )
3 years ago
0bd1ab364b
Revert "Revert "Promise pipe redux ( #28319 )" ( #28364 )" ( #28400 )
...
* Revert "Revert "Promise pipe redux (#28319 )" (#28364 )"
This reverts commit 3df2a4ecea
3 years ago
e520fc137c
xDS Federation: bootstrap and xds_resolver changes ( #27938 )
...
* xDS Federation: bootstrap and xds_resolver changes
* code review fixes
* fixing code review comments
* fixing code review comments
* fixing code review comments
* code review comments
* fixing code review comments
* First very basic test to make sure parsing and reconstruction work as
expected.
* clean up
* fixing logic error about authority
* fixing resource type parsing
* fixing code review comments
* simplify parsing!
* Parsing method signature update
* fixing code review comments
* clean up
* working progress for the test with generated bootstrap
* reorg the bootstrap file
* fixing tests
* Adding more to test authorities
* Added a test and it passes
* addressing code review comments
* code review comments to make parser cleaner and more efficient
* Merge in authority prefixes
* fixing sanity error and xds boostrap test error
* small fix
* Release all tests that pass; reduce scope for DeadUpdate
* Updated test strcuture and how to pass in the index for balancers to be
used as xds server uri and authority xds server uri
* code review comments
* code review fixes
* code review comment
* Making test structure changes
* fixing code review comments
* fixing code review comments
* Fixing test regression
* fixing bootstrap tests
* cleanup files
* enabling localhost:xxx for xds server; updated server tests and will fix
one more NameExpected test with testsetup.
* Finally removing fake reolsver for xds server
* Fixing bootstrap tests
* Rewrite builder
* Fixing code review comments
* fixing code review comments
* Fixing all tests to use Setup again
* fixing small sanity error
* Found the source of xds server nack test faiure and fix added
* small code review fixes
* Remove fake resolver! YAY!
* Fixing according to code review comments
* Setup plugin in bootfile
* Added more tests.
* Adding server test
* fixing a regression
* regression
* sanity fix
* fixing code review
* fixing code review comments
* Re-combine SecurityNaming tests.
* Add Rds new resource type and new tests
* Added PercentEncode test
* fixing code review comments
* refactor test a bit more
* fixing code review comments
* fixing according to code review comments
* fixing code review comments
* fixing code review comments
3 years ago
7e9e503bd9
Revert "modify call.cc to remove grpc-timeout metadata on the server side ( #28419 )" ( #28455 )
...
This reverts commit 038ea2196d
3 years ago
038ea2196d
modify call.cc to remove grpc-timeout metadata on the server side ( #28419 )
...
* modify api fuzzer code to disallow specification of grpc-timout metadata on the server side
* reverting changes to api_fuzzer and changing call.cc to drop grpc-timeout metadata on the server side
* tidying up code
3 years ago
ab6d7b4f02
Reland rbac filter ( #28442 )
...
* Revert "Revert "xDS: Add support for RBAC HTTP filter (#28309 )" (#28441 )"
This reverts commit 7aae5c66df
3 years ago
7aae5c66df
Revert "xDS: Add support for RBAC HTTP filter ( #28309 )" ( #28441 )
...
This reverts commit 6ea8214879
3 years ago
e8c790df71
Dont hpack very long paths ( #28436 )
3 years ago
6ea8214879
xDS: Add support for RBAC HTTP filter ( #28309 )
...
* xDS: ADD RBAC HTTP filter support
* sanity, upb regenerate files
* Revert PerChannelArg changes
* Reviewer comments
* Reviewer comments
* Reviewer comments
* Remove unnecessary header
* Fix sanity
* Add RBAC service config parsing tests
* Don't make a copy of the metadata batch
* Revert expr_proto changes
* Some more tests
* Reviewer comments
* Reviewer comments
* No metadata changes needed
* Fix leak of DynamicXdsServerConfigSelectorProvider
* Fix deadlock issues
* Fix test compilation
3 years ago
0dda706907
fixing heap use after free bug due to mismanaged ref counting in passthru endpoint ( #28417 )
...
* fixing heap use after free bug due to mismanaged ref counting in passthru endpoint
* fix sanity checks
3 years ago
f6d392b623
Fix timeout bug in api fuzzer ( #28385 )
...
* Fix timeout bug in api fuzzer
* add example
3 years ago
24778bf8ea
Revert "Enable CRL checking in gRPC core ( #26287 )" ( #28416 )
...
This reverts commit 7d8c9ae890
3 years ago
99e833d751
Better handle invalid content-type ( #28377 )
3 years ago
fb54d04ae2
Fix handling of very long user-agent strings ( #28376 )
...
* fix encoding of very long user-agent strings
* fuzzer found example
3 years ago
7d8c9ae890
Enable CRL checking in gRPC core ( #26287 )
...
* enable crl checking in gRPC C core
3 years ago
ecd968391a
Authorization Matchers: Fix header matcher to check for :method, :path and :authority ( #28371 )
...
* Authorization Matchers: Fix header matcher to check for :method, :path and :authority
* Reviewer comments
3 years ago
1a8d2b6760
API to cancel grpc_resolve_address ( #27883 )
...
Add an API to cancel grpc_resolve_address
3 years ago
c6f96d687f
Re-enabling RBE ubsan ( #27861 )
...
* Cherry-pick #27439
* Fix StatusGetTime misalignment
* Fix memcpy with nullptr
* Fix boringssl ubsan issue
* Fix slice ubsan issue
* Ignore msan errors for ubsan
* Add upb UBSAN exception
* Add local ubsan run comment
* Revert "Fix StatusGetTime misalignment"
This reverts commit a1d0c34e8ea6933d09386867e8d4836d9e1b4e1c.
* Fix status_helper
* Added alignas
* Fix fuzzer_corpus_test
* Removed binder_transport_test from ubsan
3 years ago
7d6000082a
Double added reclaimers need not be called ( #28378 )
3 years ago
1c19a4379f
run objc cfstream clients against 127.0.0.1 ( #28372 )
3 years ago
3df2a4ecea
Revert "Promise pipe redux ( #28319 )" ( #28364 )
...
This reverts commit b9ea84ac9d
3 years ago
264c321d83
Move compression related metadata to the new system ( #28223 )
...
* Eliminate most of grpc_message metadata handling
* Eliminate most of host metadata handling
* Remove more callouts without fixing code
* fiiixes
* typo
* Automated change: Fix sanity tests
* try-shrink
* Automated change: Fix sanity tests
* size tweaks
* less tricks
* deunique
* commonize
* commonize
* Automated change: Fix sanity tests
* size tuning, fixes
* Automated change: Fix sanity tests
* fix
* size tuning, fixes
* remove constexpr
* fix
* reuse code
* fix
* tweak code
* more tweaks
* tell no lies
* fixes
* fixes
* Automated change: Fix sanity tests
* fix
* fix
* fix
* fix
* fix?
* fix binder
* fix
* fix
* fixes
* Automated change: Fix sanity tests
* fix
* initial refactoring
* optimize status encoding
* Automated change: Fix sanity tests
* Automated change: Fix sanity tests
* content-type
* Automated change: Fix sanity tests
* clang-format
* fix
* Move colon prefixed metadata
* Automated change: Fix sanity tests
* Automated change: Fix sanity tests
* try to fix windows failure
* try and scale sizes better
* ambiguity fix?
* wip metadatavalueasslice
* Fix status code for resource exhaustion
* Revert "Revert "Move a bunch of slice typed metadata to new system (#28107 )" (#28208 )"
This reverts commit 7717587063
3 years ago
c485b94ed7
Remove extern c wrapping for openssl headers ( #28360 )
3 years ago
1a2b459daa
Update timeout encoding algorithm ( #28346 )
...
* update timeout encoding algorithm
* Automated change: Fix sanity tests
* fix
* review feedback
Co-authored-by: ctiller <ctiller@users.noreply.github.com>
3 years ago
2a4b7f25e6
testing: add a fake TCP and UDP server to test/core/util (extracted from #27883 ) ( #28332 )
...
* add a fake TCP and UDP server to test/core/util
3 years ago
32770542b2
Cleanup of ObjC test scripts ( #28333 )
...
* cleanup cfstream tests scripts
* add xcodebuild_filter_output script
* cleanup scripts for ObjC CoreTests
* clean one more build_tests.sh file
* cleanup more scripts
* cleanup ios cpp scripts
* remove last copy of verbose_time
* revert readlink change
3 years ago
4fd524cd17
Fix presence match in authorization. ( #28269 )
...
* Fix presence match in authorization.
* Remove header
* Add test
* fix regex to include whitespace characters
3 years ago
0deb64d1f6
Move content-type, colon prefixed metadata to new system ( #28204 )
...
* Eliminate most of grpc_message metadata handling
* Eliminate most of host metadata handling
* Remove more callouts without fixing code
* fiiixes
* typo
* Automated change: Fix sanity tests
* try-shrink
* Automated change: Fix sanity tests
* size tweaks
* less tricks
* deunique
* commonize
* commonize
* Automated change: Fix sanity tests
* size tuning, fixes
* Automated change: Fix sanity tests
* fix
* size tuning, fixes
* remove constexpr
* fix
* reuse code
* fix
* tweak code
* more tweaks
* tell no lies
* fixes
* fixes
* Automated change: Fix sanity tests
* fix
* fix
* fix
* fix
* fix?
* fix binder
* fix
* fix
* fixes
* Automated change: Fix sanity tests
* fix
* initial refactoring
* optimize status encoding
* Automated change: Fix sanity tests
* Automated change: Fix sanity tests
* content-type
* Automated change: Fix sanity tests
* clang-format
* fix
* Move colon prefixed metadata
* Automated change: Fix sanity tests
* Automated change: Fix sanity tests
* try to fix windows failure
* try and scale sizes better
* ambiguity fix?
* wip metadatavalueasslice
* Fix status code for resource exhaustion
* Revert "Revert "Move a bunch of slice typed metadata to new system (#28107 )" (#28208 )"
This reverts commit 7717587063
3 years ago
5466a0bc43
skip unittest.grpc.io dualstack socket test if DNS64 is used ( #28343 )
3 years ago
b9ea84ac9d
Promise pipe redux ( #28319 )
...
The original pipe implementation made a few assumptions:
* it should be used outside of arenas, implying allocation was expensive
* pipes would be fairly deep
With our expected implementation of the filter stack, pipes will max out at one to three stages, and so optimizations enabled by Filter seem to be actual pessimizations for our usual case.
Additionally we'll be operating inside of arenas and consequently memory allocation can be trivially cheap - and in doing so we can enable a far simpler implementation.
Co-authored-by: ctiller <ctiller@users.noreply.github.com>
3 years ago
790365f261
xds: fix memory leak ( #28327 )
3 years ago
0fa0e5f300
Revert "Revert "Replace work serializer with a mutex in c-ares resolver" #28324" ( #28325 )
...
* Revert "Revert "Replace work serializer with a mutex in c-ares resolver (#27858 )" (#28324 )"
This reverts commit b972b76816
3 years ago
Jan Tattermusch
Yousuk Seung
Craig Tiller
Ashitha Santhosh
apolcyn
Mark D. Roth
ZhenLian
yihuaz
Ming-Chuan
krestofur
donnadionne
Vignesh Babu
Yash Tibrewal
Esun Kim
Denny C. Dai