consul

Branch: CC-6363/downgrade-node-for-v-1-point-15

Author	SHA1	Message	Date
hc-github-team-consul-core	c33ef90dde	Backport of [NET-5944] security: Update Go version to 1.20.10 and `x/net` to 0.17.0 into release/1.15.x (#19233 ) * backport of commit `d7d9de9564` * backport of commit `0794b1ce74` --------- Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>	1 year ago
hc-github-team-consul-core	78f6df469c	Backport of [NET-5146] security: Update Go version to 1.20.7 and `x/net` to 0.13.0 into release/1.15.x (#18362 ) backport of commit `905e371607` Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>	1 year ago
Michael Zalimeni	a5734755fc	[NET-4904] Update list of Envoy versions on 1.15.x (#18304 ) Update list of Envoy versions Update supported envoy versions to 1.22.11, 1.23.12, 1.24.10, 1.25.9.	1 year ago
hc-github-team-consul-core	a799176bf1	Backport of [NET-4865] Bump golang.org/x/net to 0.12.0 into release/1.15.x (#18188 ) Backport of [NET-4865] Bump golang.org/x/net to 0.12.0 into release/1.16.x (#18189) Bump golang.org/x/net to 0.12.0 While not necessary to directly address CVE-2023-29406 (which should be handled by using a patched version of Go when building), an accompanying change to HTTP/2 error handling does impact agent code. See https://go-review.googlesource.com/c/net/+/506995 for the HTTP/2 change. Bump this dependency across our submodules as well for the sake of potential indirect consumers of `x/net/http`. Manual backport of `84cbf09185`.	1 year ago
John Murret	9d81853813	Include changes from v1.15.4 in 1.15.x (#17892 )	1 year ago
hc-github-team-consul-core	65cc60e87f	Backport of APIGW Normalize Status Conditions into release/1.15.x (#17844 ) * APIGW Normalize Status Conditions (#16994) * normalize status conditions for gateways and routes * Added tests for checking condition status and panic conditions for validating combinations, added dummy code for fsm store * get rid of unneeded gateway condition generator struct * Remove unused file * run go mod tidy * Update tests, add conflicted gateway status * put back removed status for test * Fix linting violation, remove custom conflicted status * Update fsm commands oss * Fix incorrect combination of type/condition/status * cleaning up from PR review * Change "invalidCertificate" to be of accepted status * Move status condition enums into api package * Update gateways controller and generated code * Update conditions in fsm oss tests * run go mod tidy on consul-container module to fix linting * Fix type for gateway endpoint test * go mod tidy from changes to api * go mod tidy on troubleshoot * Fix route conflicted reason * fix route conflict reason rename * Fix text for gateway conflicted status * Add valid certificate ref condition setting * Revert change to resolved refs to be handled in future PR * Resolve sneaky merge conflicts --------- Co-authored-by: John Maguire <john.maguire@hashicorp.com> Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	1 year ago
malizz	09e11fb8e0	Update 1.15.x submodules, version, and changelog (#17559 )	1 year ago
Michael Zalimeni	1a155e2302	Update list of Envoy versions (#17545 )	1 year ago
Michael Zalimeni	aca09d2f65	Manual backport 1.15.x of Avoid panic applying TProxy Envoy extensions (#17539 ) backport of commit `8c30455761`	1 year ago
Michael Zalimeni	66f7d7b207	Manual backport 1.15.x of Disable remote proxy patching except AWS Lambda (#17432 ) backport of commit `ba18381ab2`	2 years ago
hc-github-team-consul-core	d18e88056d	Backport of Update list of Envoy versions into release/1.15.x (#16989 ) * backport of commit `a59f68f51e` * backport of commit `dace20a9e4` * backport of commit `ad6e2a472b` * backport of commit `b48c42a6cc` * backport of commit `b913f60dee` --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	2 years ago
Semir Patel	4afa3a51bd	bump consul/api to v1.20.0 and consul/sdk to v0.13.1	2 years ago
Nathan Coleman	381760b8c2	[OSS] connect: Bump Envoy 1.22.5 to 1.22.7, 1.23.2 to 1.23.4, 1.24.0 to 1.24.2, add 1.25.1, remove 1.21.5 (#16274 ) (#16491 ) * Bump Envoy 1.22.5 to 1.22.7, 1.23.2 to 1.23.4, 1.24.0 to 1.24.2, add 1.25.1, remove 1.21.5 Co-authored-by: Curt Bushko <cbushko@gmail.com>	2 years ago
hc-github-team-consul-core	a3a9b05e14	backport of commit `748e2a76cb` (#16328 ) Co-authored-by: DanStough <dan.stough@hashicorp.com>	2 years ago
hc-github-team-consul-core	0e89df2b7a	Backport of [OSS] security: update go to 1.20.1 into release/1.15.x (#16314 ) * backport of commit `2a8cdf1747` * backport of commit `716d162048` * backport of commit `2c757fac4f` * backport of commit `f81c5d4933` * backport of commit `ff4f0596f3` * backport of commit `31bbca9fe4` * backport of commit `2f54191353` * backport of commit `c263147180` --------- Co-authored-by: DanStough <dan.stough@hashicorp.com>	2 years ago
Nitya Dhanushkodi	78a4b5fd6f	update the api in envoyextensions and troubleshoot modules (#16226 )	2 years ago
Nathan Coleman	72a73661c9	Implement APIGateway proxycfg snapshot (#16194 ) * Stub proxycfg handler for API gateway * Add Service Kind constants/handling for API Gateway * Begin stubbing for SDS * Add new Secret type to xDS order of operations * Continue stubbing of SDS * Iterate on proxycfg handler for API gateway * Handle BoundAPIGateway config entry subscription in proxycfg-glue * Add API gateway to config snapshot validation * Add API gateway to config snapshot clone, leaf, etc. * Subscribe to bound route + cert config entries on bound-api-gateway * Track routes + certs on API gateway config snapshot * Generate DeepCopy() for types used in watch.Map * Watch all active references on api-gateway, unwatch inactive * Track loading of initial bound-api-gateway config entry * Use proper proto package for SDS mapping * Use ResourceReference instead of ServiceName, collect resources * Fix typo, add + remove TODOs * Watch discovery chains for TCPRoute * Add TODO for updating gateway services for api-gateway * make proto * Regenerate deep-copy for proxycfg * Set datacenter on upstream ID from query source * Watch discovery chains for http-route service backends * Add ServiceName getter to HTTP+TCP Service structs * Clean up unwatched discovery chains on API Gateway * Implement watch for ingress leaf certificate * Collect upstreams on http-route + tcp-route updates * Remove unused GatewayServices update handler * Remove unnecessary gateway services logic for API Gateway * Remove outdate TODO * Use .ToIngress where appropriate, including TODO for cleaning up * Cancel before returning error * Remove GatewayServices subscription * Add godoc for handlerAPIGateway functions * Update terminology from Connect => Consul Service Mesh Consistent with terminology changes in https://github.com/hashicorp/consul/pull/12690 * Add missing TODO * Remove duplicate switch case * Rerun deep-copy generator * Use correct property on config snapshot * Remove unnecessary leaf cert watch * Clean up based on code review feedback * Note handler properties that are initialized but set elsewhere * Add TODO for moving helper func into structs pkg * Update generated DeepCopy code * gofmt * Generate DeepCopy() for API gateway listener types * Improve variable name * Regenerate DeepCopy() code * Fix linting issue * Temporarily remove the secret type from resource generation	2 years ago
Nitya Dhanushkodi	b8b37c2357	refactor: remove troubleshoot module dependency on consul top level module (#16162 ) Ensure nothing in the troubleshoot go module depends on consul's top level module. This is so we can import troubleshoot into consul-k8s and not import all of consul. * turns troubleshoot into a go module [authored by @curtbushko] * gets the envoy protos into the troubleshoot module [authored by @curtbushko] * adds a new go module `envoyextensions` which has xdscommon and extensioncommon folders that both the xds package and the troubleshoot package can import * adds testing and linting for the new go modules * moves the unit tests in `troubleshoot/validateupstream` that depend on proxycfg/xds into the xds package, with a comment describing why those tests cannot be in the troubleshoot package * fixes all the imports everywhere as a result of these changes Co-authored-by: Curt Bushko <cbushko@gmail.com>	2 years ago

18 Commits (CC-6363/downgrade-node-for-v-1-point-15)