5582882244
45%

Ran 18 Jul 2023 03:16AM UTC

Jobs 1

Files 273

Run time 4s

Badge

Embed ▾

Committed 18 Jul 2023 03:09AM UTC coverage: 63.352% (-0.02%) from 63.369%

Build # 5582882244

Build Type

push

github

Committed by

web-flow

Commit Message

envoy: separate gRPC listener configuration (#4365)

Pomerium configures a gRPC listener in Envoy, for internal communication
between the various Pomerium services. Currently this listener shares
much of the same configuration as the main HTTP listener, based on the
main Pomerium configuration options.

However, some configuration options don't make sense for the gRPC
listener. Specifically, the `codec_type` option should not be applied to
the gRPC listener, as gRPC requires HTTP/2. Also, any client certificate
settings should not apply to the gRPC listener.

Separate the gRPC listener configuration from the main HTTP listener
configuration, so we can avoid applying these configuration options.
Instead set AlpnProtocols to just "h2" (HTTP/2), and do not set any
ValidationContextType on the DownstreamTlsContext (no client certificate
validation).

Specifically, inline the call to buildTLSSocket() within the body of
buildGRPCListener(). Extract a new method envoyCertificates() from
buildDownstreamTLSContextMulti(), to avoid repeating this logic.

Coverage Stats

13620 of 21499 relevant lines covered (63.35%)

118.9 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	5582882244.1	18 Jul 2023 03:16AM UTC	0	63.35	GitHub Action Run

Source Files on build 5582882244

Detailed source file information is not available for this build.

pomerium / pomerium / 5582882244
45%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 5582882244

pomerium / pomerium / 5582882244 45%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 5582882244

pomerium / pomerium / 5582882244
45%

README BADGES
x