consul

Commit Graph

Author	SHA1	Message	Date
Michael Zalimeni	a7fb6d7b04	chore: upgrade vault/api to v1.10.0 This moves to the latest version of the module and removes the last transitive dependency on the unmaintained `go-jose` v2.	10 months ago
Michael Zalimeni	341dde1d0d	security: update go-jose and go-oidc to maintained versions Both of these libraries have undergone a v2 to v3 transition. We should upgrade them to ensure we continue to receive the latest bugfixes and security patches. The go-oidc upgrade is partly motivated by go-jose, since v2 of the former has a dependency on v2 of the latter. Upgrading both puts us fully on the new versions of each.	10 months ago
Nathan Coleman	d2e991ddfc	Remove unnecessary fetching of gateway (#20172 ) The fetched gateway isn't currently used anywhere	10 months ago
Ganesh S	4d20e54273	Add additional rules to iptables SDK (#20232 ) * Add additional rules to iptables SDK * Add comments	10 months ago
John Murret	bc4da5f5d6	check error in TestDNSCycleRecursorCheckAllFail before asserting response to stop panic in CI. (#20231 )	10 months ago
Dan Stough	cb384ac068	feat(v2dns): addr. query support (#20224 )	10 months ago
Anita Akaeze	6a85543175	NET-7178: add workload selector to MeshGateway protobuf definition (#20159 ) NET-7178: Add workload selector to MeshGateway proto	10 months ago
Derek Menteer	1d396ba9f1	Add docs for k8s liveness / startup probes. (#20213 ) * Add docs for k8s liveness / startup probes. * Update website/content/docs/k8s/helm.mdx Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> --------- Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	10 months ago
Michael Zalimeni	a317064764	ci: Use Consul Go version for Vault int tests (#20219 ) Unlike the Nomad tests (where Nomad is compiled from source and provides the tests), Vault is installed as a binary, and local Consul tests are run. Fixes incorrect version change introduced in #20058.	10 months ago
wangxinyi7	74b737d4a3	Xw/net 6307 grpc client apply (#20107 ) * add acl token * apply commmand works * add info to error message * add tests to apply method * add more description to flag * code refactor * update the error message * fix the failing test	10 months ago
Melissa Kam	c112a6632d	[CC-7042] Update and enable the HCP metrics sink in the HCP manager (#20072 ) * Option to set HCP client at runtime Allows us to initially set a nil HCP client for the telemetry provider and update it later. * Set telemetry provider HCP client in HCP manager Set the telemetry provider as a dependency and pass it to the manager. Update the telemetry provider's HCP client when the HCP manager starts. * Add a provider interface for the metrics client This provider will allow us to configure and reconfigure the retryable HTTP client and the headers for the metrics client. * Move HTTP retryable client to separate file Copied directly from the metrics client. * Abstract HCP specific values in HTTP client Remove HCP specific references and instead initiate with a generic TLS configuration and authentication source. * Set up HTTP client and headers in the provider Move setup from the metrics client to the HCP telemetry provider. * Update the telemetry provider in the HCP manager Initialize the provider without the HCP configs and then update it in the HCP manager to enable it. * Improve test assertion, fix method comment * Move client provider to metrics client * Stop the manager on setup error * Add separate lock for http configuration * Start telemetry provider in HCP manager * Update HCP client and config as part of Run * Remove option to set config at initialization * Simplify and clean up setting HCP configs * Add test for telemetry provider Run method * Fix race condition * Use clone of HTTP headers * Only allow initial update and run once	10 months ago
Manoj Srinivasamurthy	6bcc5c148c	NET-6862: adding disk-io and disk usage metrics to k8s grafana dashboard (#20169 )	10 months ago
wangxinyi7	a879dea377	add acl token (#20086 )	10 months ago
Derek Menteer	b8b8ad46fc	Various race condition and test fixes. (#20212 ) * Increase timeouts for flakey peering test. * Various test fixes. * Fix race condition in reconcilePeering. This resolves an issue where a peering object in the state store was incorrectly mutated by a function, resulting in the test being flagged as failing when the -race flag was used.	10 months ago
Krastin Krastev	dcba25f118	docs: fix partition target in samenessgroups (#20192 )	10 months ago
cskh	748458a07b	upgrade test (LTS): utility functions to support ent users (#20186 ) * upgrade test (LTS): utility functions to support ent users * go mod tidy * add comment	10 months ago
John Murret	93e06b799e	v1 dns - add doc strings for functions and update function names to be consistent and more descriptive. (#20194 ) v1 dns - add doc strings for functions and update function names to be consistent and mre descriptive.	10 months ago
R.B. Boyer	7f9ed032fd	agent: remove data race in agent config (#20200 ) To fix an issue displaying the current reloaded config in the v1/agent/self endpoint #18681 caused the agent's internal config struct member to be deepcopied and replaced on reload. This is not safe because the field is not protected by a lock, nor should it be due to how it is accessed by the rest of the system. This PR does the same deepcopy, but into a new field solely for the point of capturing the current reloaded values for display purposes. If there has been no reload then the original config is used.	10 months ago
John Murret	d4b67677c6	always run agent tests alone on their own runner (#20199 ) * always run agent tests alone on their own runner * deal with runner count = 1 * prevent runners less than 2	10 months ago
Jeff Boruszak	80ed31acac	docs: Remove ACLs section from k8s cluster peering page (#20176 ) * Remove ACLs section * Tech specs removal	10 months ago
cskh	cba3b25196	integ test: import missing changes from ent (#20187 )	10 months ago
Matt Keeler	326c0ecfbe	In-Memory gRPC (#19942 ) * Implement In-Process gRPC for use by controller caching/indexing This replaces the pipe base listener implementation we were previously using. The new style CAN avoid cloning resources which our controller caching/indexing is taking advantage of to not duplicate resource objects in memory. To maintain safety for controllers and for them to be able to modify data they get back from the cache and the resource service, the client they are presented in their runtime will be wrapped with an autogenerated client which clones request and response messages as they pass through the client. Another sizable change in this PR is to consolidate how server specific gRPC services get registered and managed. Before this was in a bunch of different methods and it was difficult to track down how gRPC services were registered. Now its all in one place. * Fix race in tests * Ensure the resource service is registered to the multiplexed handler for forwarding from client agents * Expose peer streaming on the internal handler	10 months ago
Semir Patel	98dcfaf783	compliance: license checker to enforce MPL pre-EOY 2023 no longer necessary (#20175 )	10 months ago
Michael Zalimeni	76b5de5039	[NET-4968] Upgrade Go to 1.21 (#20062 ) * Upgrade Go to 1.21 * ci: detect Go backwards compatibility test version automatically For our submodules and other places we choose to test against previous Go versions, detect this version automatically from the current one rather than hard-coding it.	10 months ago
sarahalsmiller	1e351e286e	NET-7189 Add Protocol to MeshGatewayListeners (#20171 ) add protocol to listeners struct	11 months ago
Ganesh S	10baf87421	Sort peer list in expander (#20167 )	11 months ago
John Murret	3fa4a21edd	remove the skipping of slow tests in go-tests-ce and go-test-enterprise (#20139 ) * remove the skipping of slow tests in go-tests-ce and go-test-enterprise * add license header	11 months ago
sarahalsmiller	7d92a5dfd6	Add min/max kubetags to meshgatewaylistener (#20149 ) * add kubetags * generate proto	11 months ago
Nathan Coleman	cff5f0ce3b	Fix broken link (#20147 )	11 months ago
Semir Patel	25b37d75b0	license: MPL'ify proto-public (#20143 )	11 months ago
Dan Stough	d52e80b619	[OSS] feat: add experiments flag for v2 dns and skeleton interfaces (#20115 ) feat: add experiments flag for v2 dns and skeleton interfaces	11 months ago
Manoj Srinivasamurthy	fa6eb61f70	NET-6813: adding resolver default subset test in agentless upgrade test (#20046 )	11 months ago
loshz	7724bb88d5	[NET-6593] agent: check for minimum RSA key size (#20112 ) * agent: check for minimum RSA key size * add changelog * agent: add test for RSA generated key sizes * use constants in generating priv key func * update key size error message	11 months ago
Nathan Coleman	670b140d87	[NET-7106] Add kubebuilder validation annotations to ExportedServicesConsumer proto (#20126 ) * Add kubebuilder annotations for validation of ExportedServicesConsumer * Generate proto	11 months ago
Derek Menteer	131ef2a133	Fix broken tests. (#20134 )	11 months ago
sarahalsmiller	96790a814c	NET-6822 Add kubebuilder tag to struct (#20120 ) add kubebuilder tag	11 months ago
Derek Menteer	6854e1e90d	Fix broken tests. (#20130 ) This fixes some tests that were broken, but not caught, due to the CICD pipeline only running a subset of the overall tests on PRs.	11 months ago
Pascal Hofmann	800279098a	Update gateway.mdx (#20113 ) Co-authored-by: David Yu <dyu@hashicorp.com>	11 months ago
Nick Cellino	0deebaf637	Add Link resource type and controller skeleton (#19788 ) * Add HCCLink resource type * Register HCCLink resource type with basic validation * Add validation for required fields * Add test for default ACLs * Add no-op controller for HCCLink * Add resource-apis semantic validation check in hcclink controller * Add copyright headers * Rename HCCLink to Link * Add hcp_cluster_url to link proto * Update 'disabled' reason with more detail * Update link status name to consul.io/hcp/link * Change link version from v1 to v2 * Use feature flag/experiment to enable v2 resources with HCP	11 months ago
Tyler Wendlandt	dbcba7aec7	fix: stop re-clicking dc dropdown in dc-switch test (#20127 ) * fix: stop re-clicking dc dropdown in dc-switch test * fix: keep nspaces dropdown open in manage nspaces test	11 months ago
Ashesh Vidyut	69f775da9a	Fixes issue - 20109 (#20111 ) * Fixes #20109 * add @hasA11yRefocus false * add changelog * Update ui/packages/consul-ui/app/components/hashicorp-consul/index.hbs Co-authored-by: Tauhid Anjum <tauhidanjum@gmail.com> --------- Co-authored-by: Tauhid Anjum <tauhidanjum@gmail.com>	11 months ago
John Maguire	c6c2d8bf82	[NET-6426] Modify Reconcile Loop for Mesh Gateway Resources to Correctly Write Proxy State Template (#20085 )	11 months ago
Michael Zalimeni	3b111277ad	ci: Single source of truth for Go version in CI and Dockerfile (#20058 ) ci: Set Go version consistently via .go-version Ensure Go version is determined consistently for CI and Docker builds rather than spread across several different files. The intent is to eventually replace this with use of the `toolchain` directive in Go 1.21.	11 months ago
Nathan Coleman	8233303876	Adjust type + field names for ComputedExportedServices (#20030 ) Adjust type + field names for ComputedExportedServices The existing type and field names in `ComputedExportedServices` are confusing to work with. For example, the mechanics of looping through services and their consumers wind up being: ```go // The field name here doesn't reflect what is actually at each index of the list for _, service := range exportedServices.Consumers { for _, consumer := range service.Consumers { // The prefix matching the type here causes stutter when reading and // isn't consistent with naming conventions for tenancy in pbresource tenancy := consumer.ConsumerTenancy } } ```	11 months ago
John Murret	21e2bb2a67	Make DNS test run across a matrix of dns and catalog versions. (#20114 ) * Make DNS test run across a matrix of dns and catalog versions. * node tests * add version hcl config to service lookup tests	11 months ago
Melissa Kam	5dc8eabcce	[CC-7041] Update and start the SCADA provider in HCP manager (#19976 ) * Update SCADA provider version Also update mocks for SCADA provider. * Create SCADA provider w/o HCP config, then update Adds a placeholder config option to allow us to initialize a SCADA provider without the HCP configuration. Also adds an update method to then add the HCP configuration. We need this to be able to eventually always register a SCADA listener at startup before the HCP config values are known. * Pass cloud configuration to HCP manager Save the entire cloud configuration and pass it to the HCP manager. * Update and start SCADA provider in HCP manager Move config updating and starting to the HCP manager. The HCP manager will eventually be responsible for all processes that contribute to linking to HCP.	11 months ago
Ganesh S	0d57acc549	Add sameness group references in exported services controller (#20100 )	11 months ago
John Murret	c12245be3c	Break up DNS tests into 3 files to help with GH UI and IDE issues. (#20103 )	11 months ago
cskh	15b40f36f3	Use safeio to write server metadata file (#20101 ) * Use safeio to write server metadata file * guard the conversion	11 months ago
Dan Stough	d2f6a25c28	docs: remove unsupported critical flag from DNS weights (#19801 )	11 months ago

1 2 3 4 5 ...

21025 Commits (zalimeni/net-6597-upgrade-go-jose-go-oidc) All Branches Search

21025 Commits (zalimeni/net-6597-upgrade-go-jose-go-oidc)

All Branches