Backport of [NET-11043] crd: support request normalization and header match options to prevent L7 intentions bypass into release/1.6.x - Githubissues

hashicorp / consul-k8s

First-class support for Consul Service Mesh on Kubernetes

https://www.consul.io/docs/k8s

Mozilla Public License 2.0

668 stars 321 forks source link

Backport of [NET-11043] crd: support request normalization and header match options to prevent L7 intentions bypass into release/1.6.x #4398

Closed hc-github-team-consul-core closed 4 days ago

hc-github-team-consul-core commented 4 days ago

Backport

This PR is auto-generated from #4385 to be assessed for backporting due to the inclusion of the label backport/1.6.x.

The below text is copied from the body of the original PR.

Changes proposed in this PR

Supports changes in https://github.com/hashicorp/consul/pull/21816 with CRD updates:

How I've tested this PR

Added unit tests
Manually spun up cluster in kind and validated both changes are reflected in xDS / config when created as CRDs

How I expect reviewers to test this PR

👀 + spot check me on the CRD update process in case I missed a step. It's been a while since I've done one of these.

Checklist

[x] Tests added
[x] CHANGELOG entry added

Overview of commits

- 2d3d34e5548ad6f6ee3e7c502bcab6af271ae152