Different TLS settings must generate new Envoy clusters

Signed-off-by: Robbie McMichael <[email protected]>
projectcontour · Jan 14, 2019 · df1647d · df1647d
1 parent 0438867
commit df1647d
Show file tree

Hide file tree

Showing 14 changed files with 743 additions and 80 deletions.
diff --git a/apis/contour/v1beta1/ingressroute.go b/apis/contour/v1beta1/ingressroute.go
@@ -120,9 +120,9 @@ type HealthCheck struct {
 type TLSVerification struct {
 	// Required, the CA to use for TLS verification
 	CA CA `json:"ca"`
-	// If specified, at least one of the hostnames must be included in the
-	// certificate's Subject Alternative Names field
-	Hostnames []string `json:"hostnames"`
+	// If specified, the hostname must be included in the certificate's Subject
+	// Alternative Names field
+	Hostname string `json:"hostname"`
 }
 
 // TLS verification for the upstream services

diff --git a/deployment/common/common.yaml b/deployment/common/common.yaml
@@ -161,7 +161,5 @@ spec:
                                   type: string
                                   pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ # DNS-1123 subdomain
                             hostnames:
-                              type: array
-                              items:
-                                type: string
+                              type: string
 ---
diff --git a/deployment/render/daemonset-rbac.yaml b/deployment/render/daemonset-rbac.yaml
@@ -164,9 +164,7 @@ spec:
                                   type: string
                                   pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ # DNS-1123 subdomain
                             hostnames:
-                              type: array
-                              items:
-                                type: string
+                              type: string
 ---
 apiVersion: extensions/v1beta1
 kind: DaemonSet

diff --git a/deployment/render/deployment-rbac.yaml b/deployment/render/deployment-rbac.yaml
@@ -164,9 +164,7 @@ spec:
                                   type: string
                                   pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ # DNS-1123 subdomain
                             hostnames:
-                              type: array
-                              items:
-                                type: string
+                              type: string
 ---
 apiVersion: extensions/v1beta1
 kind: Deployment

diff --git a/internal/contour/cluster.go b/internal/contour/cluster.go
@@ -97,13 +97,7 @@ func visitClusters(root dag.Vertex) map[string]*v2.Cluster {
 
 func (v *clusterVisitor) visit(vertex dag.Vertex) {
 	switch service := vertex.(type) {
-	case *dag.HTTPService:
-		name := envoy.Clustername(&service.TCPService)
-		if _, ok := v.clusters[name]; !ok {
-			c := envoy.Cluster(service)
-			v.clusters[c.Name] = c
-		}
-	case *dag.TCPService:
+	case dag.Service:
 		name := envoy.Clustername(service)
 		if _, ok := v.clusters[name]; !ok {
 			c := envoy.Cluster(service)