November 12, 2016
View 38c0198

Implement inscureEdgeTermination options for reencrypt and pasthrough routes reencrypt routes work the same as edge routes with Allow, Redirect, and None

Jacob Tanenbaum authored on 2016/11/12 02:17:34
November 10, 2016
View 647b289

Fix for bugz https://bugzilla.redhat.com/show_bug.cgi?id=1392862 - don't allow wildcard policy if host is not specified.

ramr authored on 2016/11/10 09:50:03
November 9, 2016
View 64f88d7

Merge pull request #11716 from ramr/fix-extval-bug

OpenShift Bot authored on 2016/11/09 06:43:04
November 2, 2016
View 0ed0fb5

Fix for bugz #1389165 - extended route validation breaks included templates. Plus fixes as per @liggitt review comments: o Clean up errors to not leak cert/key data. o Relax checks on certs which have expired or valid in the future for backward compatibility. o Add tests for expired, future valid and valid certs with intermediate CAs and pass intermediate chains to the x509 verifier. o Improve readability of test config (certs, keys etc). o Fixup error messages to include underlying certificate parse errors. o Add comment and remove currenttime hack.

ramr authored on 2016/11/02 08:02:10
View eebbc14

Merge pull request #11550 from ramr/host-wildcard-policy

OpenShift Bot authored on 2016/11/02 21:43:58
October 22, 2016
View 7d6d0ff

Revert "Add router support for wildcard domains (*.foo.com)"

Clayton Coleman authored on 2016/10/22 08:37:48
October 14, 2016
View 0e75c1d

o Split out cert list and use commit from PR 11217 o Allow wildcard (currently only *.) routes to be created and add tests. o Add a host admission controller and allow/deny list of domains and control the admission/blockage of wildcard routes. o Fix test cases and expection. o Add helper to generate valid wildcard regular expressions. o Add wildcard domain map + regex based rules and use the rules for wildcard routes. o Bug fixes and add tests. o Add generated completions and docs. o Changes as per @marun, @rajatchopra, @smarterclayton review comments o Rework as per api changes to use wildcard policy with routes o Add defaults and update generated files.

ramr authored on 2016/10/14 08:22:59
View 7ab4f0f

o Split out cert list and use commit from PR 11217 o Allow wildcard (currently only *.) routes to be created and add tests. o Add a host admission controller and allow/deny list of domains and control the admission/blockage of wildcard routes. o Fix test cases and expection. o Add helper to generate valid wildcard regular expressions. o Add wildcard domain map + regex based rules and use the rules for wildcard routes. o Bug fixes and add tests. o Add generated completions and docs. o Changes as per @marun, @rajatchopra, @smarterclayton review comments

ramr authored on 2016/10/14 08:22:59
August 16, 2016
View 5d3470e

Fix for bugz https://bugzilla.redhat.com/show_bug.cgi?id=1337322 Add Spec.Host validation for dns labels and subdomain at runtime - this is not enabled in the API validation checks on route creation. And fixes as per @smarterclayton review comments.

ramr authored on 2016/08/16 16:29:07
June 15, 2016
View 9595389

Prevent route theft by removing the ability to update spec.host

Clayton Coleman authored on 2016/06/15 00:52:01
May 27, 2016
View 5a19e50

ab testing

Rajat Chopra authored on 2016/05/27 09:19:53
April 6, 2016
View cdf242e

o Add basic validation for route TLS configuration - checks that input is "syntactically" valid. o Checkpoint initial code. o Add support for validating route tls config. o Add option for validating route tls config. o Validation fixes. o Check private key + cert mismatches. o Add tests. o Record route rejection. o Hook into add route processing + store invalid service alias configs in another place - easy to check prior errors on readmission. o Remove entry from invalid service alias configs upon route removal. o Add generated completions. o Bug fixes. o Recording rejecting routes is not working completely. o Fix status update problem - we should set the status to admitted only if we had no errors handling a route. o Rework to use a new controller - extended_validator as per @smarterclayton comments. o Cleanup validation as per @liggitt comments. o Update bash completions. o Fixup older validation unit tests. o Changes as per @liggitt review comments + cleanup tests. o Fix failing test.

ramr authored on 2016/04/06 09:36:20
April 5, 2016
View b4501f2

remove old double escape validation

Paul Weil authored on 2016/04/05 01:42:30
February 17, 2016
View 3818f73

Limit route.spec.to to kind/name

Jordan Liggitt authored on 2016/02/17 14:24:06
January 26, 2016
View 398ef03

Change validation to use field.Path and field.ErrorList

Maciej Szulik authored on 2016/01/26 18:17:35