0f52c25396
Backport of Add custom balancer to always remove subConns into release/1.14.x ( #15836 )
...
* backport of commit c37343dfcc27a0ffb6e8ee5841db5435f72880cee8be8e4d5544d5c20f165420eddfb0ec1b87a98e
2022-12-19 17:50:52 +00:00
7c934a4bf9
Backport of agent: Fix assignment of error when auto-reloading cert and key file changes. into release/1.14.x ( #15772 )
...
* backport of commit 7d0cf566ca024c8a84a6
2022-12-15 21:26:43 +00:00
718a7bc58d
backport of commit 3d6e3b64d6 ( #15815 )
...
Co-authored-by: Semir Patel <semir.patel@hashicorp.com>
2022-12-15 19:17:16 +00:00
2af5419b64
backport of commit ca7bf777aa ( #15811 )
...
Co-authored-by: Semir Patel <semir.patel@hashicorp.com>
2022-12-15 17:21:29 +00:00
2049a041bb
1.14.x updates for 1.14.3 release ( #15803 )
...
* docs: fix ent 3846 changelog
* docs: update changelog from 1.14.3
2022-12-14 18:09:12 -05:00
a643106860
chore(ci): update ubi base to ubi-9 ( #15797 )
2022-12-14 12:27:12 -05:00
8267e640be
backport of commit 7da80a29b6 ( #15784 )
...
Co-authored-by: Paul Glass <pglass@hashicorp.com>
2022-12-13 22:16:13 +00:00
7d2f0d7a33
Backport of docs: Enterprise Feature Table update into release/1.14.x ( #15748 )
...
* backport of commit 5e137dcc287f5fc3bb40
2022-12-13 15:55:53 -06:00
8843452d43
Backport of Fix DialedDirectly configuration for Consul dataplane. into release/1.14.x ( #15779 )
...
* backport of commit 1824f4428ab9b929daaaea07eeb188
2022-12-13 15:31:26 +00:00
86875f8c17
backport of commit 55c7bc8eb3 ( #15777 )
...
Co-authored-by: Kyle Schochenmaier <kschoche@gmail.com>
2022-12-12 18:22:57 -06:00
5361d73e3c
Backport of Fixing CLI instructions so that the installing a cluster that is embedded in the mac instructions is moved outside of the tabbed instructions. into release/1.14.x ( #15765 )
...
Co-authored-by: John Murret <john.murret@hashicorp.com>
Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-12-10 19:14:30 +00:00
4fee9132f1
backport of commit cfac7809b6 ( #15762 )
...
Co-authored-by: Geoffrey Grosenbach <geoffrey@hashicorp.com>
2022-12-09 14:04:14 -08:00
99c65982d4
backport of commit ee0ba0ef63 ( #15756 )
...
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
2022-12-09 16:36:33 +00:00
6d521e21e9
Backport of docs: how to launch envoy when ACLs enabled into release/1.14.x ( #15751 )
...
* backport of commit 80ce1d80b9e18020b2ef55dfb98e5f
2022-12-08 20:16:53 -05:00
83bf3e4b43
Backport of [OSS] security: update x/net module into release/1.14.x ( #15744 )
...
* backport of commit 32688b1ef59c832651d9
2022-12-08 17:20:42 -05:00
192a63c6bc
backport of commit 122173b980 ( #15735 )
...
Co-authored-by: Paul Glass <pglass@hashicorp.com>
2022-12-08 11:33:33 -05:00
1b2b6e496f
backport of commit 122173b980 ( #15732 )
...
Co-authored-by: Paul Glass <pglass@hashicorp.com>
2022-12-08 16:33:16 +00:00
ea781bee8c
backport of commit cbd29f529f ( #15730 )
...
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
2022-12-08 11:28:56 -05:00
fd82c3fc46
Backport of Flakiness test: case-cfg-splitter-peering-ingress-gateways into release/1.14.x ( #15725 )
...
* backport of commit 1ac56cc5ac6d78f4b20e07054a70e40c99f0df59
2022-12-08 01:30:10 +00:00
2dd2cdfddb
backport of commit cbd29f529f ( #15722 )
...
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
2022-12-07 23:04:12 +00:00
334a436fb7
Backport of update go version to 1.19.4 into release/1.14.x ( #15716 )
...
* backport of commit 56aa64f46e9d83b8ec46
2022-12-07 20:22:26 +00:00
17d6705c5a
Backport of Fix local mesh gateway with peering discovery chains. into release/1.14.x ( #15715 )
...
* backport of commit 8aff79edfe3ed9331e48
2022-12-07 13:20:57 -06:00
40c10de3e2
Backport of docs: Small docs updates, peering and K8s CNI into release/1.14.x ( #15714 )
...
* backport of commit 4bd78869a14c0d7d495c89c6f20db6369c084f9c1d2ecf57785726c3e46c9f08daf2ec
2022-12-07 18:09:25 +00:00
8cff9cd8b5
Backport of docs: K8s CNI namespace into release/1.14.x ( #15699 )
...
* backport of commit 99ddbd5ff7ac25c72230
2022-12-06 21:52:31 +00:00
afcffc2385
connect: use -dev-no-store-token for test vaults to reduce source of flakes ( #15691 ) ( #15694 )
...
It turns out that by default the dev mode vault server will attempt to interact with the
filesystem to store the provided root token. If multiple vault instances are running
they'll all awkwardly share the filesystem and if timing results in one server stopping
while another one is starting then the starting one will error with:
Error initializing Dev mode: rename /home/circleci/.vault-token.tmp /home/circleci/.vault-token: no such file or directory
This change uses `-dev-no-store-token` to bypass that source of flakes. Also the
stdout/stderr from the vault process is included if the test fails.
The introduction of more `t.Parallel` use in https://github.com/hashicorp/consul/pull/15669
increased the likelihood of this failure, but any of the tests with multiple vaults in use
(or running multiple package tests in parallel that all use vault) were eventually going
to flake on this.
Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>
2022-12-06 13:28:49 -06:00
8d4bcfb06f
connect: ensure all vault connect CA tests use limited privilege tokens ( #15689 )
...
All of the current integration tests where Vault is the Connect CA now use non-root tokens for the test. This helps us detect privilege changes in the vault model so we can keep our guides up to date.
One larger change was that the RenewIntermediate function got refactored slightly so it could be used from a test, rather than the large duplicated function we were testing in a test which seemed error prone.
Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>
2022-12-06 12:30:45 -06:00
9e25552415
Backport of Detect Vault 1.11+ import in secondary datacenters and update default issuer into release/1.14.x ( #15683 )
...
* backport of commit 97fcd595d4fc847e4edf0207f1d54c38f182481751f8e56fe04c7c84292d5a2a1e5f13e3b26c40b50bf754af30
2022-12-05 21:56:47 +00:00
e9cebc1c4d
backport of commit 0fd1b2b0b6 ( #15680 )
...
Co-authored-by: Curt Bushko <cbushko@gmail.com>
2022-12-05 21:21:05 +00:00
2ea33fa689
Backport of docs: Update Consul K8s CRDs into release/1.14.x ( #15677 )
...
* backport of commit a09f1d0e7a615493e11a
2022-12-05 16:06:47 -05:00
4927154c53
Backport of docs: Agentless performance clarifications into release/1.14.x ( #15674 )
...
Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
2022-12-05 12:44:47 -08:00
8e2c52ac36
Backport of docs: Agentless performance clarifications into release/1.14.x ( #15673 )
...
* backport of commit 89699d7d62cd587e923a
2022-12-05 20:44:05 +00:00
4f5c7d8317
docs: clarify Vault CA provider permissions needed ( #15478 ) ( #15664 )
...
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2022-12-05 09:20:36 -05:00
bd8bf9e0ec
backport of commit 64683d291c ( #15667 )
...
Co-authored-by: Evan Culver <eculver@users.noreply.github.com>
2022-12-03 18:28:44 +00:00
fd69f08edf
Backport of docs: fix agent catalog-services caching method into release/1.14.x ( #15656 )
...
* backport of commit fe777fc95a523495dd53
2022-12-02 11:03:16 -08:00
647f916d54
chore: updates from 1.14.2 release ( #15634 )
2022-11-30 22:17:00 -05:00
a9be8ce04d
backport of commit 7505c10d6d ( #15637 )
...
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-30 15:51:09 -08:00
20dd26e35f
Backport of docs: fix typos helm install into release/1.14.x ( #15630 )
...
* backport of commit 88516e978afcff6d5592
2022-11-30 15:40:21 -05:00
8c3c8f0a66
backport of commit dc0d93d0dd ( #15624 )
...
Co-authored-by: Michael Wilkerson <mwilkerson@hashicorp.com>
2022-11-30 19:56:58 +00:00
13836d5ca8
Backport of ui: Add ServerExternalAddresses to peer token create form into release/1.14.x ( #15620 )
...
* backport of commit ea23bac1fba4d1535116f782c16ae5198eb09e7038c0e32c79b388266150
2022-11-30 18:59:52 +00:00
18dffc51dc
Backport of peering: better represent non-passing states during peer check flattening into release/1.14.x ( #15618 )
...
* backport of commit 4deb06690165c70e84ec4372a5221c
2022-11-30 18:14:26 +00:00
a445588093
Backport of docs: Update acl-tokens.mdx into release/1.14.x ( #15609 )
...
* backport of commit ae2b999c5982b076d0f7
2022-11-29 18:27:58 -05:00
e674f36110
backport of commit 9cc1010534 ( #15606 )
...
Co-authored-by: Conrad Kleinespel <conradk@conradk.com>
2022-11-29 18:27:39 -05:00
657616a744
Backport of Remove log line about server mgmt token init into release/1.14.x ( #15612 )
...
Co-authored-by: freddygv <freddy@hashicorp.com>
2022-11-29 16:21:42 -07:00
b1526699ef
backport of commit 6f18c57f5b ( #15529 )
...
Co-authored-by: Chris Thain <chris.m.thain@gmail.com>
2022-11-29 18:05:15 -05:00
7c0eec4c1f
Add support for configuring Envoys route idle_timeout ( #14340 ) ( #15611 )
...
* Add idleTimeout
Co-authored-by: James Oulman <oulman@users.noreply.github.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Dhia Ayachi <dhia@hashicorp.com>
2022-11-29 17:58:00 -05:00
c5dd81e2c1
Backport of docs: typo on cluster peering k8s into release/1.14.x ( #15604 )
...
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-29 11:51:16 -08:00
9a235cbc01
Backport of docs: Clean up k8s cluster peering instructions into release/1.14.x ( #15601 )
...
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-29 11:24:05 -08:00
e7f8505e1d
Backport of Add peering `.service` and `.node` DNS lookups. into release/1.14.x ( #15599 )
2022-11-29 13:18:48 -06:00
7d4d859dbe
backport of commit a0c46c1c9d ( #15594 )
...
Co-authored-by: cskh <hui.kang@hashicorp.com>
2022-11-29 11:10:59 -05:00
3a03f2697e
Backport of Fix Vault managed intermediate PKI bug into release/1.14.x ( #15579 )
2022-11-29 09:33:13 -05:00
hc-github-team-consul-core