consul

Commit Graph

Author	SHA1	Message	Date
Michael Zalimeni	2fe1264093	security: Remove use of sha1 and md5 hash fns Replace or remove uses of insecure hash algorithms. None of these are currently of particular concern as exploitable, but to avoid future security scan flags and prevent additional tack-on use in the future, we should remove them. None of the current uses should be represented in persistent state in such a way that would cause backwards-incompabitibility for existing clusters.	1 year ago
John Murret	2591318c82	Skip tests with p95 greater than 30 seconds outside of main and release branches. (#19628 ) Skip tests with p95 greater than 30 seconds.	1 year ago
Dan Stough	20f43d81bf	test: update certs for 10 year expiry (#19481 )	1 year ago
Derek Menteer	8f4c43727d	[NET-5916] Fix locality-aware routing config and tests (CE) (#19483 ) Fix locality-aware routing config and tests	1 year ago
Ronald	ea91e58045	Stop use of templated-policy and templated-policy-file simultaneously (#19389 )	1 year ago
wangxinyi7	9417fc2867	gvk partial inference (#19058 ) * gvk partial inference	1 year ago
Iryna Shustava	2ea33e9b86	mesh: add more validations to Destinations resource (#19202 )	1 year ago
Poonam Jadhav	a50a9e984a	Net-5771/apply command stdin input (#19084 ) * feat: apply command now accepts input from stdin * feat: accept first positional non-flag file path arg * fix: detect hcl format	1 year ago
R.B. Boyer	5146810acc	cli: do not hide the resource HCL parsing error and replace it with a JSON error (#19107 ) We serially attempt to decode resources in the consul resource apply command using HCL and then falling back on JSON. This causes the HCL errors to be dropped completely in the case where the HCL decode failed due to a typo instead of it actually being JSON instead. This PR proposes sniffing to see if the first non-whitespace character in the input is { and if so treat it as JSON, otherwise as HCL and not double-decode on error.	1 year ago
Chris S. Kim	92ce814693	Remove old build tags (#19128 )	1 year ago
Poonam Jadhav	6c92dd1359	NET-5600/container-test-acl-enabled (#18887 ) * feat: add container tests for resource http api with acl enabled * refactor: clean up	1 year ago
Iryna Shustava	3ea6afb4d4	mesh: rename Upstreams and UpstreamsConfiguration to Destinations* (#18995 )	1 year ago
Dhia Ayachi	d3bb5ff21a	Add CLI support for json (#18991 ) * add cli support for json format * add tests for json parsing * make owner and id pointers. * add copyright header * remove print --------- Co-authored-by: Poonam Jadhav <poonam.jadhav@hashicorp.com>	1 year ago
Poonam Jadhav	4e77482e95	feat: remove resource api client from api module (#18984 ) * feat: remove resource api client from api module * fix: go mod clean up	1 year ago
Iryna Shustava	d88888ee8b	catalog,mesh,auth: Bump versions to v2beta1 (#18930 )	1 year ago
John Landa	9eaa8eb026	dns token (#17936 ) * dns token fix whitespace for docs and comments fix test cases fix test cases remove tabs in help text Add changelog Peering dns test Peering dns test Partial implementation of Peered DNS test Swap to new topology lib expose dns port for integration tests on client remove partial test implementation remove extra port exposure remove changelog from the ent pr Add dns token to set-agent-token switch Add enterprise golden file Use builtin/dns template in tests Update ent dns policy Update ent dns template test remove local gen certs fix templated policy specs * add changelog * go mod tidy	1 year ago
Ronald	c8299522b5	[NET-5332] Add nomad server templated policy (#18888 ) * [NET-5332] Add nomad server templated policy * slksfd	1 year ago
Ashesh Vidyut	6fd33ba30d	NET-4519 Collecting journald logs in "consul debug" bundle (#18797 ) * debug since * fix docs * chagelog added * fix go mod * debug test fix * fix test * tabs test fix * Update .changelog/18797.txt Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com> --------- Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com>	1 year ago
Chris S. Kim	91e6c3a82f	Remove flaky test assertions (#18870 )	1 year ago
Ronald	49cb84297f	Move ACL templated policies to hcl files (#18853 )	1 year ago
Poonam Jadhav	bf4e0b1aa9	fix: provide meaningful error messages and add test (#18772 ) * fix: provide meaningful error messages and add test * fix: return error instead of warning when extra args are provided	1 year ago
Chris S. Kim	edf56ee970	Fix nondeterministic test (#18828 )	1 year ago
James Hartig	b2e21c103f	consul operator raft transfer-leader should send the id (#17107 ) Fixes #16955 Co-authored-by: Dhia Ayachi <dhia@hashicorp.com>	1 year ago
Ronald	aff13cd4c2	Use embedded strings for templated policies (#18829 )	1 year ago
Ronald	e24b3d9b3f	fix templated policy cli output (#18821 )	1 year ago
R.B. Boyer	66e1cdf40c	mesh: Wire ComputedRoutes into the ProxyStateTemplate via the sidecar controller (#18752 ) Reworks the sidecar controller to accept ComputedRoutes as an input and use it to generate appropriate ProxyStateTemplate resources containing L4/L7 mesh configuration.	1 year ago
Ronald	1afeb6e040	[NET-5334] Added CLI commands for templated policies (#18816 )	1 year ago
Ronald	802122640b	[NET-5329] use acl templated policy under the hood for node/service identities (#18813 )	1 year ago
wangxinyi7	426c906ee1	delete command ready (#18679 ) * delete command for resource management	1 year ago
Dhia Ayachi	b1688ad856	Run copyright after running deep-copy as part of the Makefile/CI (#18741 ) * execute copyright headers after performing deep-copy generation. * fix copyright install * Apply suggestions from code review Co-authored-by: Semir Patel <semir.patel@hashicorp.com> * Apply suggestions from code review Co-authored-by: Semir Patel <semir.patel@hashicorp.com> * rename steps to match codegen naming * remove copywrite install category --------- Co-authored-by: Semir Patel <semir.patel@hashicorp.com>	1 year ago
Poonam Jadhav	48ef8b679c	Net-4292/list command (#18649 ) * feat: implement list command * refactor: apply command file parsing	1 year ago
Ronald	40d7ebc318	[NET-5330] Support templated policies in Binding rules (#18719 ) * [NET-5330] Support templated policies in Binding rules * changelog for templated policy support in binding rules	1 year ago
Poonam Jadhav	235988b3bc	Net-2713/resource apply command (#18610 ) * feat: implement apply command * fix: resolve lint issues * refactor: use fixed types * fix: ci lint failures after main rebase	1 year ago
Ronald	bbef879f85	[NET-5325] ACL templated policies support in tokens and roles (#18708 ) * [NET-5325] ACL templated policies support in tokens and roles - Add API support for creating tokens/roles with templated-policies - Add CLI support for creating tokens/roles with templated-policies * adding changelog	1 year ago
Ashesh Vidyut	60b0485497	Removed nodename and status from consul snapshot save -append-filename command and using leader version in version (#18680 ) * init * fix tests * fix tests lint * fix api call inside dc * updated doc * address comments	1 year ago
wangxinyi7	df9d12a56a	Net 2714/xw cli read command (#18462 ) enable `consul resource read` command in cli	1 year ago
Dan Stough	ac867d67e8	test: fix snapshot save w/ append test for ENT (#18656 )	1 year ago
skpratt	cd3bfc5508	remove stray FIPS file (#18651 )	1 year ago
Ashesh Vidyut	78e3cbe156	NET 1594 - Snapshot Agent Filename Should Include Consul Version / Datacenter (#18625 ) * init * tests added and few fixes * revert arg message * changelog added * removed var declaration * fix CI * fix test * added node name and status * updated save.mdx * added example * fix tense * fix description	1 year ago
Ashesh Vidyut	2cc2c6b88d	Fix Windows FIPS Build (#18357 ) * Fix Windows FIPS Build * create new file for windows arm * removed build tag * fix buidl tags * fix multiple go build	1 year ago
Semir Patel	53e28a4963	OSS -> CE (community edition) changes (#18517 )	1 year ago
hashicorp-copywrite[bot]	5fb9df1640	[COMPLIANCE] License changes (#18443 ) * Adding explicit MPL license for sub-package This directory and its subdirectories (packages) contain files licensed with the MPLv2 `LICENSE` file in this directory and are intentionally licensed separately from the BSL `LICENSE` file at the root of this repository. * Adding explicit MPL license for sub-package This directory and its subdirectories (packages) contain files licensed with the MPLv2 `LICENSE` file in this directory and are intentionally licensed separately from the BSL `LICENSE` file at the root of this repository. * Updating the license from MPL to Business Source License Going forward, this project will be licensed under the Business Source License v1.1. Please see our blog post for more details at <Blog URL>, FAQ at www.hashicorp.com/licensing-faq, and details of the license at www.hashicorp.com/bsl. * add missing license headers * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 --------- Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com>	1 year ago
John Maguire	6c8ca0f89d	NET-4984: Update APIGW Config Entries for JWT Auth (#18366 ) * Added oss config entries for Policy and JWT on APIGW * Updated structs for config entry * Updated comments, ran deep-copy * Move JWT configuration into OSS file * Add in the config entry OSS file for jwts * Added changelog * fixing proto spacing * Moved to using manually written deep copy method * Use pointers for override/default fields in apigw config entries * Run gen scripts for changed types	1 year ago
Michael Zalimeni	05604eeec1	[NET-5217] [OSS] Derive sidecar proxy locality from parent service (#18437 ) * Add logging to locality policy application In OSS, this is currently a no-op. * Inherit locality when registering sidecars When sidecar locality is not explicitly configured, inherit locality from the proxied service.	1 year ago
Jeremy Jacobson	8e5e16de60	Fix policy lookup to allow for slashes (#18347 ) * Fix policy lookup to allow for slashes * Fix suggestions * Fix other test * Revert some lines	1 year ago
cui fliter	18a5edd232	docs: Fix some comments (#17118 ) Signed-off-by: cui fliter <imcusg@gmail.com>	1 year ago
cskh	31d2813714	member cli: add -filter expression to flags (#18223 ) * member cli: add -filter expression to flags * changelog * update doc * Add test cases * use quote	1 year ago
Ashesh Vidyut	f7c5ba5f90	Support Consul Connect Envoy Command on Windows (#17694 ) ### Description Add support for consul connect envoy command on windows. This PR fixes the comments of PR - https://github.com/hashicorp/consul/pull/15114 ### Testing * Built consul.exe from this branch on windows and hosted here - [AWS S3](https://asheshvidyut-bucket.s3.ap-southeast-2.amazonaws.com/consul.zip) * Updated the [tutorial](https://developer.hashicorp.com/consul/tutorials/developer-mesh/consul-windows-workloads) and changed the `consul_url.default` value to [AWS S3](https://asheshvidyut-bucket.s3.ap-southeast-2.amazonaws.com/consul.zip) * Followed the steps in the tutorial and verified that everything is working as described. ### PR Checklist * [x] updated test coverage * [ ] external facing docs updated * [x] appropriate backport labels added * [x] not a security concern --------- Co-authored-by: Franco Bruno Lavayen <cocolavayen@gmail.com> Co-authored-by: Jose Ignacio Lorenzo <74208929+joselo85@users.noreply.github.com> Co-authored-by: Jose Ignacio Lorenzo <joseignaciolorenzo85@gmail.com> Co-authored-by: Dhia Ayachi <dhia@hashicorp.com>	1 year ago
Dan Stough	1b08626358	[OSS] Fix initial_fetch_timeout to wait for all xDS resources (#18024 ) * fix(connect): set initial_fetch_time to wait indefinitely * changelog * PR feedback 1	1 year ago
Dan Stough	b94095d92e	[OSS] Improve Gateway Test Coverage of Catalog Health (#18011 ) * fix(cli): remove failing check from 'connect envoy' registration for api gateway * test(integration): add tests to check catalog statsus of gateways on startup * remove extra sleep comment * Update test/integration/consul-container/libs/assert/service.go * changelog	1 year ago

1 2 3 4 5 ...

2382 Commits (zalimeni/net-6600-remove-insecure-hash-use)