Skip to content

listener: handle nil pilot metakey (manual backport of 21513)#21514

Merged
istio-testing merged 1 commit intoistio:release-1.4from
ramaraochavali:fix/pilot_segv_bp
Feb 26, 2020
Merged

listener: handle nil pilot metakey (manual backport of 21513)#21514
istio-testing merged 1 commit intoistio:release-1.4from
ramaraochavali:fix/pilot_segv_bp

Conversation

@ramaraochavali
Copy link
Copy Markdown
Contributor

Manual backport of #21513 for release 1.4

[ ] Configuration Infrastructure
[ ] Docs
[ ] Installation
[X ] Networking
[ ] Performance and Scalability
[ ] Policies and Telemetry
[ ] Security
[ ] Test and Release
[ ] User Experience
[ ] Developer Infrastructure

Signed-off-by: Rama Chavali <[email protected]>
@ramaraochavali ramaraochavali requested a review from a team February 26, 2020 15:02
@googlebot googlebot added the cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. label Feb 26, 2020
@istio-testing istio-testing added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Feb 26, 2020
@ramaraochavali
Copy link
Copy Markdown
Contributor Author

/test unit-tests_istio_release-1.4

Copy link
Copy Markdown
Member

@howardjohn howardjohn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Generally should wait for master PR to merge so its easier to track but this is simple so I don't mind

@ramaraochavali
Copy link
Copy Markdown
Contributor Author

@howardjohn sure. next time will wait till master is merged. Thanks.

@istio-testing istio-testing merged commit b911a07 into istio:release-1.4 Feb 26, 2020
@ramaraochavali ramaraochavali deleted the fix/pilot_segv_bp branch February 26, 2020 16:12
luksa pushed a commit to luksa/istio that referenced this pull request Jul 17, 2020
* authz: fix the validation for request.headers (istio#21284)

* manual backport of 21513 (istio#21514)

Signed-off-by: Rama Chavali <[email protected]>

* Fix PSP sample file to allow NET_RAW. (istio#21533)

* [release-1.4] remove use_downstream_protocol for gateway (istio#21727)

* remove use_downstream_protocol for gateway

* comment

* writing

Co-authored-by: Yan Xue <[email protected]>

* Update dependencies (istio#21765)

* Make iptables script and output consistent with golang (istio#21871)

Co-authored-by: knrc <[email protected]>

* [release-1.4] resign certificate (istio#22131)

* resign certificate

* test

Co-authored-by: xuzhonghu <[email protected]>

* Stop linting links of 1.4 branch (istio#22132)

This is going to continue to break as istio.io changes. We already
disabled this on 1.5/master.

* [release-1.4] Build: Honor GOBUILDFLAGS variable also in test mode (istio#22171)

We already honor it in `go build`, we should do the same
in `go test`.

Manual backport of istio#22163

* Update base image for release 1.4 (istio#22165)

* Fix GOBUILDFLAGS usage in codecov scripts (istio#22182)

This variable needs to be set before used (set -u) and must not be
quoted, otherwise it will become an empty arg for go test if it's empty.

Co-authored-by: Jonh Wendell <[email protected]>

* Update proxy to pickup fixes for ISTIO-SECURITY-2020-003. (istio#22257)

* Fix extra .Value in deployment file for stackdriver tracing vars (istio#22506)

Co-authored-by: gargnupur <[email protected]>

* Update operator SHA (istio#22523)

* clone LbEndpoint to prevent data race (istio#22023) (istio#22528)

(cherry picked from commit fdc6dd4)

Co-authored-by: Zhonghu Xu <[email protected]>

* cni: update SHA (istio#22569)

Signed-off-by: Yuchen Dai <[email protected]>

* Make sure to use CNI 1.4 image when running tests under CNI (istio#23035)

* Make sure to use CNI 1.4 image when running tests under CNI

* Fix lint

* [release-1.4] Update dependencies with update_deps.sh (istio#23010)

* Update deps with update_deps.sh

* Dep updates again

* [release-1.4] Run update_deps.sh (istio#23051)

* Run update_deps.sh

Had to do go get istio.io/operator@5f8ecc70a0f4059bfd4d0f7867d4dc76407f2f08
since update_deps.sh was not updating it.

* Run go mod tidy

* Update with another cni change (istio#23061)

* [release-1.4] Fix Gateway helm chart for helm 3 (istio#23077)

* Fix Gateway helm chart for helm 3

Helm 3 threw an error that `$spec.sds` is not a function. Removing the parentheses led to the next problem: the and evaluates eager so `spec.sds.enabled` resulted in a `nil` exception.

By nesting the if, the problem is resolved

* Also fix the role

Co-authored-by: Alex Nederlof <[email protected]>

Co-authored-by: Yangmin Zhu <[email protected]>
Co-authored-by: Rama Chavali <[email protected]>
Co-authored-by: Oliver Liu <[email protected]>
Co-authored-by: Istio Automation <[email protected]>
Co-authored-by: Yan Xue <[email protected]>
Co-authored-by: Jonh Wendell <[email protected]>
Co-authored-by: knrc <[email protected]>
Co-authored-by: xuzhonghu <[email protected]>
Co-authored-by: John Howard <[email protected]>
Co-authored-by: Eric Van Norman <[email protected]>
Co-authored-by: Joshua Blatt <[email protected]>
Co-authored-by: gargnupur <[email protected]>
Co-authored-by: Yuchen Dai <[email protected]>
Co-authored-by: jacob-delgado <[email protected]>
Co-authored-by: Alex Nederlof <[email protected]>
brian-avery added a commit to brian-avery/istio that referenced this pull request Jan 5, 2021
* authz: fix the validation for request.headers (istio#21284)

* manual backport of 21513 (istio#21514)

Signed-off-by: Rama Chavali <[email protected]>

* Fix PSP sample file to allow NET_RAW. (istio#21533)

* [release-1.4] remove use_downstream_protocol for gateway (istio#21727)

* remove use_downstream_protocol for gateway

* comment

* writing

Co-authored-by: Yan Xue <[email protected]>

* Update dependencies (istio#21765)

* Make iptables script and output consistent with golang (istio#21871)

Co-authored-by: knrc <[email protected]>

* [release-1.4] resign certificate (istio#22131)

* resign certificate

* test

Co-authored-by: xuzhonghu <[email protected]>

* Stop linting links of 1.4 branch (istio#22132)

This is going to continue to break as istio.io changes. We already
disabled this on 1.5/master.

* [release-1.4] Build: Honor GOBUILDFLAGS variable also in test mode (istio#22171)

We already honor it in `go build`, we should do the same
in `go test`.

Manual backport of istio#22163

* Update base image for release 1.4 (istio#22165)

* Fix GOBUILDFLAGS usage in codecov scripts (istio#22182)

This variable needs to be set before used (set -u) and must not be
quoted, otherwise it will become an empty arg for go test if it's empty.

Co-authored-by: Jonh Wendell <[email protected]>

* Update proxy to pickup fixes for ISTIO-SECURITY-2020-003. (istio#22257)

* Fix extra .Value in deployment file for stackdriver tracing vars (istio#22506)

Co-authored-by: gargnupur <[email protected]>

* Update operator SHA (istio#22523)

* clone LbEndpoint to prevent data race (istio#22023) (istio#22528)

(cherry picked from commit fdc6dd4)

Co-authored-by: Zhonghu Xu <[email protected]>

* cni: update SHA (istio#22569)

Signed-off-by: Yuchen Dai <[email protected]>

* Make sure to use CNI 1.4 image when running tests under CNI (istio#23035)

* Make sure to use CNI 1.4 image when running tests under CNI

* Fix lint

* [release-1.4] Update dependencies with update_deps.sh (istio#23010)

* Update deps with update_deps.sh

* Dep updates again

* [release-1.4] Run update_deps.sh (istio#23051)

* Run update_deps.sh

Had to do go get istio.io/operator@5f8ecc70a0f4059bfd4d0f7867d4dc76407f2f08
since update_deps.sh was not updating it.

* Run go mod tidy

* Update with another cni change (istio#23061)

* [release-1.4] Fix Gateway helm chart for helm 3 (istio#23077)

* Fix Gateway helm chart for helm 3

Helm 3 threw an error that `$spec.sds` is not a function. Removing the parentheses led to the next problem: the and evaluates eager so `spec.sds.enabled` resulted in a `nil` exception.

By nesting the if, the problem is resolved

* Also fix the role

Co-authored-by: Alex Nederlof <[email protected]>

* Citadel completely ignores namespaces opted out. (istio#23223)

* Add Kiali fix to Helm (istio#23445)

* Update operator for istio/operator#777 (istio#23540)

* bump base (istio#23655)

* Update cni sha for release-1.4 branch (istio#24216)

* [release-1.4] Update jquery and nodejs (istio#24407)

* Add files from cherrypick

* Update yaml files to pull 1.15.1 images

Co-authored-by: Brian Avery <[email protected]>

* Update proxy sha (istio#24721)

* Bump bookinfo images

* Update vendor

Co-authored-by: Yangmin Zhu <[email protected]>
Co-authored-by: Rama Chavali <[email protected]>
Co-authored-by: Oliver Liu <[email protected]>
Co-authored-by: Istio Automation <[email protected]>
Co-authored-by: Yan Xue <[email protected]>
Co-authored-by: knrc <[email protected]>
Co-authored-by: xuzhonghu <[email protected]>
Co-authored-by: John Howard <[email protected]>
Co-authored-by: Eric Van Norman <[email protected]>
Co-authored-by: Joshua Blatt <[email protected]>
Co-authored-by: gargnupur <[email protected]>
Co-authored-by: Yuchen Dai <[email protected]>
Co-authored-by: jacob-delgado <[email protected]>
Co-authored-by: Alex Nederlof <[email protected]>
Co-authored-by: Brian Avery <[email protected]>
Co-authored-by: Martin Ostrowski <[email protected]>
Co-authored-by: stewartbutler <[email protected]>
Co-authored-by: Istio Automation <[email protected]>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/networking cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants