0442ef1296
Backport of Fix mesh gateways incorrectly matching peer locality. into release/1.14.x ( #16286 )
...
* backport of commit 9bc7f6280a0c48c9a1e8
2023-02-16 15:31:58 +00:00
6717f6c239
Fix nil-pointer panics from proxycfg package. ( #16280 )
...
Prior to this PR, servers / agents would panic and crash if an ingress
or api gateway were configured to use a discovery chain that both:
1. Referenced a peered service
2. Had a mesh gateway mode of local
This could occur, because code for handling upstream watches was shared
between both connect-proxy and the gateways. As a short-term fix, this
PR ensures that the maps are always initialized for these gateway services.
This PR also wraps the proxycfg execution and service
registration calls with recover statements to ensure that future issues
like this do not put the server into an unrecoverable state.
2023-02-15 12:30:17 -06:00
461a0f7312
Backport of Update index.mdx into release/1.14.x ( #16250 )
...
* backport of commit 54a573a7d593109a2d30
2023-02-14 10:25:43 -05:00
cc1c340484
Backport of Update index.mdx into release/1.14.x ( #16249 )
...
* backport of commit 54a573a7d593109a2d30
2023-02-13 21:39:49 +00:00
49154850b5
Fix peering acceptors in secondary datacenters. ( #16233 )
...
Prior to this commit, secondary datacenters could not be initialized
as peering acceptors if ACLs were enabled. This is due to the fact that
internal server-to-server API calls would fail because the management
token was not generated. This PR makes it so that both primary and
secondary datacenters generate their own management token whenever
a leader is elected in their respective clusters.
2023-02-10 13:06:40 -06:00
a5a99c9d4a
docs: update Nomad 1.14 upgrade note to detail additonal info. ( #16079 )
...
Co-authored-by: James Rasell <jrasell@hashicorp.com>
2023-02-09 10:04:33 +00:00
faaa2c11f0
command: Fix logger not initializing properly in envoy command ( #16148 ) ( #16153 )
...
Co-authored-by: Kyle Havlovitz <kylehav@gmail.com>
2023-02-08 12:55:43 -08:00
112235700d
backport of commit 25caeb0928 ( #16186 )
...
Co-authored-by: dttung2905 <ttdao.2015@accountancy.smu.edu.sg>
2023-02-07 03:13:33 +00:00
79c0cbfcd2
backport of commit d85f040200 ( #16183 )
...
Co-authored-by: Paul Glass <pglass@hashicorp.com>
2023-02-06 23:28:43 +00:00
577a07e821
Backport of docs(service-resolver): clarify the default time unit in service-resolver.ConnectTimeout into release/1.14.x ( #16175 )
...
* backport of commit 305403c4f131540d3343
2023-02-06 19:07:59 +00:00
f9af9a6b56
backport of commit 611c3591af ( #16174 )
...
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-02-06 17:30:43 +00:00
e8606d2028
Backport of Document how numRetries can't be set to 0 into release/1.14.x ( #16168 )
...
* backport of commit 55e197fad71a6cf311c5
2023-02-06 12:20:30 -05:00
6ca8b7491d
Backport of Update helm docs based on consul-k8s release/1.0.x branch into release/1.14.x ( #16159 )
...
Co-authored-by: Curt Bushko <cbushko@gmail.com>
Co-authored-by: david-yu <dyu@hashicorp.com>
2023-02-03 19:19:17 -08:00
166fdd105f
backport of commit 124f625eaf ( #16151 )
...
Co-authored-by: Ashwin Venkatesh <ashwin.what@gmail.com>
2023-02-03 15:04:38 -08:00
70c5a92a38
Backport of Docs: change connect to SM for mTLS page into release/1.14.x ( #16137 )
...
* backport of commit fa27ddb1d6bf5a4ed6e3
2023-02-02 13:57:39 -05:00
757aab81be
Add a flag for enabling debug logs to the `connect envoy` command ( #15988 ) ( #16121 )
...
* Add a flag for enabling debug logs to the `connect envoy` command
* Update website/content/commands/connect/envoy.mdx
* Add changelog note
* Add debug log note to envoy proxy doc page
* Update website/content/docs/connect/proxies/envoy.mdx
* Wording tweak in envoy bootstrap section
---------
Co-authored-by: Kyle Havlovitz <kylehav@gmail.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com>
2023-01-31 17:39:16 -08:00
ea9b104c7d
Apply 1.14.4 changelog and prep for next release
2023-01-27 15:35:15 -06:00
c15132acf4
Backport of docs: Consul at scale guide into release/1.14.x ( #16084 )
...
* backport of commit c57ff557db24756aa6ff7a850531cc036eb9f3c9
2023-01-26 15:10:26 -06:00
9d2b958093
backport of commit 58b23a5515 ( #16048 )
...
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-01-24 00:35:12 +00:00
e076fbb8f5
Backport of Apply agent partition to load services and agent api into release/1.14.x ( #16041 )
...
* backport of commit a42e86ffd84ad0f7aff4
2023-01-23 16:41:26 +00:00
078e28f059
Backport of docs: clarify reloadable config option usage into release/1.14.x ( #16037 )
...
* backport of commit 745df8f313c0329441bedbd69ea28a
2023-01-20 18:43:09 -05:00
174d0763bd
backport of commit 8e54b4b5cf ( #16032 )
...
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2023-01-20 15:11:39 -05:00
1ad9c29dfe
backport of commit e522044bb3 ( #16027 )
...
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-01-20 17:37:05 +00:00
c625d55ad2
Backport of docs: link fixes for Envoy proxy page into release/1.14.x ( #16026 )
...
* backport of commit 9ffd2063ba6b3344481c09ec40e48bd3f1cf4eea
2023-01-20 12:13:12 -05:00
085cb1a207
Add support for envoy readiness flags ( #16015 ) ( #16019 )
...
* Add support for envoy readiness flags
- add flags 'envoy-ready-bind-port` and `envoy-ready-bind-addr` on consul connect envoy to create a ready listener on that address.
2023-01-19 17:09:55 -05:00
0379dabe4e
Fix configuration merging for implicit tproxy upstreams. ( #16000 ) ( #16007 )
...
Fix configuration merging for implicit tproxy upstreams.
Change the merging logic so that the wildcard upstream has correct proxy-defaults
and service-defaults values combined into it. It did not previously merge all fields,
and the wildcard upstream did not exist unless service-defaults existed (it ignored
proxy-defaults, essentially).
Change the way we fetch upstream configuration in the xDS layer so that it falls back
to the wildcard when no matching upstream is found. This is what allows implicit peer
upstreams to have the correct "merged" config.
Change proxycfg to always watch local mesh gateway endpoints whenever a peer upstream
is found. This simplifies the logic so that we do not have to inspect the "merged"
configuration on peer upstreams to extract the mesh gateway mode.
2023-01-19 10:55:27 -06:00
3e3ab25f9b
xds: don't attempt to load-balance sessions for local proxies ( #15789 ) ( #16004 )
...
Previously, we'd begin a session with the xDS concurrency limiter
regardless of whether the proxy was registered in the catalog or in
the server's local agent state.
This caused problems for users who run `consul connect envoy` directly
against a server rather than a client agent, as the server's locally
registered proxies wouldn't be included in the limiter's capacity.
Now, the `ConfigSource` is responsible for beginning the session and we
only do so for services in the catalog.
Fixes: https://github.com/hashicorp/consul/issues/15753
Co-authored-by: Dan Upton <daniel@floppy.co>
2023-01-19 10:34:01 +00:00
aa3f89496d
backport of commit 8cdb0e7fd2 ( #16002 )
...
Co-authored-by: Chris S. Kim <ckim@hashicorp.com>
2023-01-18 16:55:57 +00:00
ad5bd1181c
backport of commit 6199f234e2 ( #15995 )
...
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
2023-01-17 13:10:25 -05:00
6523de1392
backport of commit 6199f234e2 ( #15991 )
...
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
2023-01-17 13:10:16 -05:00
ff1f79dc2f
Backport of Enforce lowercase peer names. into release/1.14.x ( #15977 )
...
* backport of commit e1889324d05382b39390
2023-01-13 20:30:50 +00:00
b0de16c688
backport of commit 6336255e6a ( #15973 )
...
Co-authored-by: Ranjandas <thejranjan@gmail.com>
2023-01-12 22:56:25 -05:00
7ac2df3f3c
Update go-discover to support ECS discovery ( #13782 ) ( #15966 )
...
Co-authored-by: Frank DiRocco <160608+fdr2@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-01-12 12:31:14 -06:00
768648f066
backport of commit 4420869997 ( #15939 )
...
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-01-11 17:13:28 +00:00
879e92f5ea
backport of commit f27c077de6 ( #15934 )
...
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-01-06 14:08:00 -06:00
5989784016
Pin protoc-gen-go-binary version ( #15929 )
2023-01-06 11:48:17 -05:00
821869ba04
backport of commit ae4dea5e16 ( #15932 )
...
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-01-06 16:38:05 +00:00
fac609854a
backport of commit 5952f019b4 ( #15924 )
...
Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>
2023-01-06 08:24:41 -08:00
397a588ca7
backport of commit 822c3fea8a ( #15907 )
...
Co-authored-by: Daniel Upton <daniel@floppy.co>
2023-01-06 09:37:43 +00:00
c0a8070a6b
Backport of docs: Fix link into release/1.14.x ( #15915 )
...
* no-op commit due to failed cherry-picking
* docs: Fix link (#14890 )
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: lbausch <lbausch@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2023-01-05 21:28:45 -08:00
9d086792a2
Backport of Update api gateway version to latest into release/1.14.x ( #15901 )
...
* backport of commit f083928e0a72e8fba8bc
2023-01-04 15:21:41 -08:00
4ccea91d96
backport of commit ae9b6a948e ( #15893 )
...
Co-authored-by: Daniel Upton <daniel@floppy.co>
2023-01-04 14:39:33 +00:00
64eafb312e
backport of commit 699d4b0bac ( #15889 )
...
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-01-03 17:05:31 +00:00
48380a9840
Backport of Fix agent cache incorrectly notifying unchanged protobufs. into release/1.14.x ( #15888 )
...
* backport of commit cb2a978198e9ac0df2db
2023-01-03 16:24:04 +00:00
fd7dbf9fb2
backport of commit 7d648582dc ( #15877 )
...
Co-authored-by: Gerard Nguyen <gerard@hashicorp.com>
2022-12-22 12:09:15 -08:00
7f2377e32e
backport of commit 0c6051ec5f ( #15875 )
...
Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
2022-12-22 18:53:28 +00:00
e0c47559da
Backport of Update service-discovery.mdx into release/1.14.x ( #15862 )
...
* backport of commit 93fc1a3b96e6921def76
2022-12-20 14:18:24 -06:00
ddd12e6c1b
backport of commit 36891f355e ( #15854 )
...
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2022-12-20 16:25:54 +00:00
01b28de1e8
Backport of Docs/network segments tutorial docs conversion into release/1.14.x ( #15851 )
...
* no-op commit due to failed cherry-picking
* Docs/network segments tutorial docs conversion (#15829 )
* added a NS folder and refactored main page into the overview page
* added NS usage page to NS folder
* updated links to NS docs
* updated nav
* addressed feedback from review
fixed merge conflicts during manual cherrypick
Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2022-12-19 16:11:04 -08:00
78619334ba
Backport of connect: Add support for ConsulResolver to specifies a filter expression into release/1.14.x ( #15800 )
...
* backport of commit b73068cdf1
2022-12-19 18:23:39 +00:00
hc-github-team-consul-core