wip #346
Annotations
39 errors and 3 warnings
flaky_test
Process completed with exit code 1.
|
RBACFilterFactoryTest.should create RBAC filter with two status routes permissions when no incoming permissions are defined():
envoy-control-core/src/test/kotlin/pl/allegro/tech/servicemesh/envoycontrol/snapshot/resource/listeners/filters/rbac/RBACFilterFactoryTest.kt#L154
org.opentest4j.AssertionFailedError:
expected:
name: "envoy.filters.http.rbac"
typed_config {
type_url: "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC"
value: "\nO\022M\n\027STATUS_ALLOW_ALL_POLICY\0222\n,\022*\n\016R\f\n\n\022\b/status/\n\030R\026\n\024\n\022/example-endpoint/\022\002\030\001\022O\022M\n\027STATUS_ALLOW_ALL_POLICY\0222\n,\022*\n\016R\f\n\n\022\b/status/\n\030R\026\n\024\n\022/example-endpoint/\022\002\030\001"
}
but was:
name: "envoy.filters.http.rbac"
typed_config {
type_url: "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC"
value: "\nO\022M\n\027STATUS_ALLOW_ALL_POLICY\0222\n,\022*\n\016R\f\n\n\022\b/status/\n\030R\026\n\024\022\022/example-endpoint/\022\002\030\001\022O\022M\n\027STATUS_ALLOW_ALL_POLICY\0222\n,\022*\n\016R\f\n\n\022\b/status/\n\030R\026\n\024\022\022/example-endpoint/\022\002\030\001"
}
|
IncomingPermissionsAllowedClientTest.echo should allow special client with name from the certificate to access endpoint and log it when policy log():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsAllowedClientTest.kt#L122
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 352] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsAllowedClientTest.echo should block special client with name from header over https and log request when unlistedEndpointsPolicy is blockAndLog():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsAllowedClientTest.kt#L256
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 381] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsAllowedClientTest.echo2 should allow special client with name from header over https and log request when unlistedEndpointsPolicy is log():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsAllowedClientTest.kt#L233
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 378] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsAllowedClientTest.echo should block special client with name from header to access endpoint and log it when policy blockAndLog():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsAllowedClientTest.kt#L209
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 357] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsAllowedClientTest.echo should allow special client with name from header to access endpoint and log it when policy log():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsAllowedClientTest.kt#L180
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 362] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsAllowedClientTest.echo should allow special client with name from the certificate to access endpoint and log it when policy blockAndLog():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsAllowedClientTest.kt#L151
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 354] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsEmptyClientsTest.echo2 should deny clients access to 'unlisted' endpoint():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsEmptyClientsTest.kt#L138
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 339] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsEmptyClientsTest.echo should deny clients access to 'blocked-for-all' endpoint():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsEmptyClientsTest.kt#L88
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 346] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsEmptyClientsTest.echo2 should allow clients access to 'logged-for-all' endpoint and log it():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsEmptyClientsTest.kt#L122
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 352] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsEmptyClientsTest.echo should allow clients access to 'unlisted' endpoint and log it():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsEmptyClientsTest.kt#L106
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 346] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsEmptyEndpointsTest.echo should allow any client to access any endpoint and log request():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsEmptyEndpointsTest.kt#L61
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 351] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should allow echo3 to access unlisted endpoint over https and log it():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L563
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 351] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo should NOT allow echo3 to access unlisted endpoint over https():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L544
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 343] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should allow unlisted client with client identity header over https and log client name as untrusted():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L747
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 397] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo should allow echo2 to access 'log-unlisted-clients' endpoint over https and log it():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L387
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 353] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should NOT allow unlisted clients to access 'block-unlisted-clients' endpoint over http():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L345
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 353] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo should NOT allow unlisted clients to access 'block-unlisted-clients-by-default' endpoint over http():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L326
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 364] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should allow unlisted clients to access unlisted endpoint over http():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L677
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 355] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should allow source-ip-client to access unlisted endpoint over http():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L640
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 356] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo should allow unlisted clients to access 'log-unlisted-clients' endpoint over http and log it():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L445
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 358] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should NOT allow unlisted clients to access 'block-unlisted-clients-by-default' endpoint over http():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L525
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 364] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should NOT allow echo to access 'block-unlisted-clients' endpoint over https():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L285
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 348] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should allow unlisted clients to access 'log-unlisted-clients' endpoint over http and log it():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L462
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 358] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo should NOT allow echo3 to access 'log-unlisted-clients' endpoint with wrong http method():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L700
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 347] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should allow echo to access 'log-unlisted-clients' endpoint over https and log it():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L406
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 353] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should NOT allow echo to access 'block-unlisted-clients-by-default' endpoint over https():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L767
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 359] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo should NOT allow unlisted clients to access unlisted endpoint over http():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L658
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 348] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo should NOT allow source-ip-client to access unlisted endpoint over http():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L621
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 349] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo2 should allow echo3 to access 'log-unlisted-clients' endpoint with wrong http method and log it():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L724
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 355] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo should NOT allow echo2 to access unlisted endpoint over https():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L582
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 343] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsLoggingModeTest.echo should NOT allow echo2 to access 'block-unlisted-clients' endpoint over https():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsLoggingModeTest.kt#L266
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 348] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsOriginalDestinationTest.should block direct request when using orginal destination and echo service is not specified as client():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsOriginalDestinationTest.kt#L139
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 358] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsPathMatchingTest.echo should allow echo2 to access endpoints for matched Glob patterns in the 'paths' field():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsPathMatchingTest.kt#L155
java.lang.AssertionError:
Expecting actual:
Response{protocol=http/1.1, code=403, message=Forbidden, url=http://localhost:33046/api/products}
to match given predicate.
You can use 'matches(Predicate p, String description)' to have a better error message
For example:
assertThat(player).matches(p -> p.isRookie(), "is rookie");
will give an error message looking like:
Expecting actual:
player
to match 'is rookie' predicate
|
IncomingPermissionsRbacActionTest.rbacAction should be set to shadow_denied when shadow_engine result is denied and upstream is unavailable():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsRbacActionTest.kt#L98
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 344] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsRbacActionTest.incoming permissions logs should contain rbacAction():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsRbacActionTest.kt#L85
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 336] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsRequestIdTest.should handle request id containing double quotes():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsRequestIdTest.kt#L95
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 302] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
IncomingPermissionsRequestIdTest.incoming permissions logs should contain requestId if present():
envoy-control-tests/src/main/kotlin/pl/allegro/tech/servicemesh/envoycontrol/permissions/IncomingPermissionsRequestIdTest.kt#L80
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "rule" (class pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog), not marked as ignorable (13 known properties: "method", "trustedClient", "authority", "jwtTokenStatus", "path", "rbacAction", "requestId", "luaDestinationAuthority", "clientIp", "clientAllowedToAllEndpoints", "clientName", "protocol", "statusCode"])
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 303] (through reference chain: pl.allegro.tech.servicemesh.envoycontrol.assertions.RbacLog["rule"])
|
flaky_test
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
flaky_test
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
flaky_test
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|