• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

pomerium / pomerium / 5625832759
45%

Build:
DEFAULT BRANCH: main
Ran 21 Jul 2023 07:21PM UTC
Jobs 1
Files 274
Run time 5s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

21 Jul 2023 07:17PM UTC coverage: 63.401% (-0.01%) from 63.411%
5625832759

push

github

web-flow
authorize: incorporate mTLS validation from Envoy (#4374)

Configure Envoy to validate client certificates, using the union of all
relevant client CA bundles (that is, a bundle of the main client CA
setting together with all per-route client CAs). Pass the validation
status from Envoy through to the authorize service, by configuring Envoy
to use the newly-added SetClientCertificateMetadata filter, and by also
adding the relevant metadata namespace to the ExtAuthz configuration.

Remove the existing 'include_peer_certificate' setting from the ExtAuthz
configuration, as the metadata from the Lua filter will include the full
certificate chain (when it validates successfully by Envoy).

Update policy evaluation to consider the validation status from Envoy,
in addition to its own certificate chain validation. (Policy evaluation
cannot rely solely on the Envoy validation status while we still support
the per-route client CA setting.)

75 of 75 new or added lines in 5 files covered. (100.0%)

13689 of 21591 relevant lines covered (63.4%)

120.47 hits per line

Jobs
ID Job ID Ran Files Coverage
1 5625832759.1 21 Jul 2023 07:21PM UTC 0
63.4
GitHub Action Run
Source Files on build 5625832759
Detailed source file information is not available for this build.
  • Back to Repo
  • Github Actions Build #5625832759
  • 8d09567f on github
  • Prev Build on main (#5625715789)
  • Next Build on main (#5648775573)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc