Skip to content

Fix consul loader tag matching logic to allow services with extra metadata tags#736

Merged
karimra merged 1 commit intoopenconfig:mainfrom
drewelliott:fix/consul-loader-tag-matching-issue-706
Sep 18, 2025
Merged

Fix consul loader tag matching logic to allow services with extra metadata tags#736
karimra merged 1 commit intoopenconfig:mainfrom
drewelliott:fix/consul-loader-tag-matching-issue-706

Conversation

@drewelliott
Copy link
Contributor

Fixes the consul loader tag matching logic that was incorrectly rejecting services with extra metadata tags.

Problem: The previous implementation rejected services that had all required tags plus additional metadata tags (like vendor:arista, environment:production). This caused silent filtering of valid services in multi-tenant environments.

Solution: Changed the tag matching logic to only reject services that are missing required tags, not services that have extra tags. This implements proper subset matching behavior.

Test Plan: Added comprehensive tests that verify the fix works correctly and demonstrate what the old buggy logic would do vs the new correct logic.

Fixes #706

@google-cla
Copy link

google-cla bot commented Sep 15, 2025

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

…adata tags

The previous implementation incorrectly rejected services that had all required tags
plus additional metadata tags (like vendor:arista, environment:production).

This change fixes the tag matching logic to only reject services that are missing
required tags, not services that have extra tags. This resolves silent filtering
of valid services in multi-tenant environments.

Fixes openconfig#706
@drewelliott drewelliott force-pushed the fix/consul-loader-tag-matching-issue-706 branch from d9847ff to ce21a7e Compare September 15, 2025 14:17
@karimra
Copy link
Collaborator

karimra commented Sep 18, 2025

Thanks for the fix!

@karimra karimra merged commit 9560305 into openconfig:main Sep 18, 2025
2 checks passed
@drewelliott drewelliott deleted the fix/consul-loader-tag-matching-issue-706 branch October 23, 2025 17:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Consul loader tag matching bug causes silent service filtering failure

2 participants