Skip to content

Conversation

@lann
Copy link
Collaborator

@lann lann commented Sep 5, 2025

With allowed_outbound_hosts = ["*.spin.internal"] we don't have a component ID to validate until the actual service chaining request is attempted. In the non-service-chaining path the request ID must exist because it was routed to, so we unwrapped instead of erroring.

@lann
Copy link
Collaborator Author

lann commented Sep 5, 2025

I want to mitigate this panic now but a more robust approach might be to catch it in the allowed_outbound_hosts check: #3264

@lann lann merged commit d1eb9ac into main Sep 9, 2025
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants