15110 Commits (06f3ccebce26f16c4beb4524ed77a8cbd11140f3)

 

All Branches   

Search

Author	SHA1	Message	Date
hc-github-team-consul-core	a163051dbb	auto-updated agent/uiserver/bindata_assetfs.go from commit a0b0ed2bc	3 years ago
John Cowen	a0b0ed2bca	ui: [BUGFIX] Add missing `@` to fix missing non-subset Failovers (#10913) ... This commit fixes a problem where parent Failovers where not showing (subset children were fine). Seems to have been introduced with a move/glimmer upgrade here #9154 so I'm adding a 1.9.x backport.	3 years ago
Freddy	4c3405769d	Merge pull request #10911 from hashicorp/areas/update	3 years ago
Karl Cardenas	b4f47383fa	docs: added information about a conflict when using auto_config and auto_encrypt	3 years ago
freddygv	32c4a65424	Add changelog entry	3 years ago
freddygv	a78390a30b	Update yamux	3 years ago
sridhar	0081443567	Merge pull request #10673 from hashicorp/srikrishmurthy-patch-1 ... Updated a note in the ingress-gateway YAML that the ingress gateway name must match with what's configured in the helm chart	3 years ago
Chris S. Kim	45dcc8b553	api: expose upstream routing configurations in topology view (#10811) ... Some users are defining routing configurations that do not have associated services. This commit surfaces these configs in the topology visualization. Also fixes a minor internal bug with non-transparent proxy upstream/downstream references.	3 years ago
R.B. Boyer	a6d22efb49	acl: some acl authz refactors for nodes (#10909)	3 years ago
hc-github-team-consul-core	11b1dc1f97	auto-updated agent/uiserver/bindata_assetfs.go from commit a777b0a9b	3 years ago
Kenia	a777b0a9ba	ui: Disabling policy form fields from users with 'read' permissions (#10902)	3 years ago
hc-github-team-consul-core	5e31421602	auto-updated agent/uiserver/bindata_assetfs.go from commit 8192dde48	3 years ago
John Cowen	8192dde485	ui: Unskip auth-method serializer test (#10878) ... During #9617 we added a list view only for AuthMethods, but not a detail view. We did add the Adapter/Serializer that collected/reshaped data for a detail view. The test for this serializer was skipped here, but I'm not sure why. We then added #9845 which began to use this AuthMethod Serializer, but we didn't go back to finish up the skipped test here either. This PR unskips this test and finishes off the test correctly.	3 years ago
R.B. Boyer	5b6d96d27d	grpc: ensure that streaming gRPC requests work over mesh gateway based wan federation (#10838) ... Fixes #10796	3 years ago
trujillo-adam	e197fff45c	removed merge conflict chars	3 years ago
trujillo-adam	f1327c6aad	fixed merge conflicts	3 years ago
trujillo-adam	4c7eab88b9	Merge branch 'main' of github.com:hashicorp/consul into docs-tables-service-discovery-services	3 years ago
trujillo-adam	7f823e040f	fixed more typos, applied additional tables, additional edits	3 years ago
trujillo-adam	f69bb3a54f	fixed typos, finished applying tables, minor editing	3 years ago
hc-github-team-consul-core	4993d877d9	auto-updated agent/uiserver/bindata_assetfs.go from commit 05a28c311	3 years ago
John Cowen	05a28c3111	ui: [BUGFIX] Properly encode non-URL safe characters in OIDC responses (#10901) ... This commit fixes 2 problems with our OIDC flow in the UI, the first is straightforwards, the second is relatively more in depth: 1: A typo (1.10.1 only) During #10503 we injected our settings service into the our oidc-provider service, there are some comments in the PR as to the whys and wherefores for this change (https://github.com/hashicorp/consul/pull/10503/files#diff-aa2ffda6d0a966ba631c079fa3a5f60a2a1bdc7eed5b3a98ee7b5b682f1cb4c3R28) Fixing the typo so it was no longer looking for an unknown service (repository/settings > settings) fixed this. 2: URL encoding (1.9.x, 1.10.x) TL;DR: /oidc/authorize/provider/with/slashes/code/with/slashes/status/with/slashes should be /oidc/authorize/provider%2Fwith%2Fslashes/code%2Fwith%2Fslashes/status%2Fwith%2Fslashes When we receive our authorization response back from the OIDC 3rd party, we POST the code and status data from that response back to consul via acallback as part of the OIDC flow. From what I remember back when this feature was originally added, the method is a POST request to avoid folks putting secret-like things into API requests/URLs/query params that are more likely to be visible to the human eye, and POSTing is expected behaviour. Additionally, in the UI we identify all external resources using unique resource identifiers. Our OIDC flow uses these resources and their identifiers to perform the OIDC flow using a declarative state machine. If any information in these identifiers uses non-URL-safe characters then these characters require URL encoding and we added a helper a while back to specifically help us to do this once we started using this for things that required URL encoding. The final fix here make sure that we URL encode code and status before using them with one of our unique resource identifiers, just like we do with the majority of other places where we use these identifiers.	3 years ago
Nitya Dhanushkodi	329ec62582	doc: remove sentence that tproxy works cross-DC with config entries. (#10885) ... It can only work if there is a running service instance in the local DC, so this is a bit misleading, since failover and redirects are typically used when there is not an instance in the local DC.	3 years ago
trujillo-adam	44e9f8ed94	Update website/content/docs/discovery/services.mdx ... Co-authored-by: Geoffrey Grosenbach <26+topfunky@users.noreply.github.com>	3 years ago
trujillo-adam	6a5fedbf84	Update website/content/docs/discovery/services.mdx ... Co-authored-by: Geoffrey Grosenbach <26+topfunky@users.noreply.github.com>	3 years ago
Freddy	997547bd7f	Merge pull request #10873 from hashicorp/fix/10825-pq-san-validation	3 years ago
freddygv	01936ddb70	Avoid passing zero value into variadic	3 years ago
freddygv	f52bd80f6d	Update comment for test function	3 years ago
freddygv	a83300bad8	Add changelog entry	3 years ago
freddygv	af52d21884	Update prepared query cluster SAN validation ... Previously SAN validation for prepared queries was broken because we validated against the name, namespace, and datacenter for prepared queries. However, prepared queries can target: - Services with a name that isn't their own - Services in multiple datacenters This means that the SpiffeID to validate needs to be based on the prepared query endpoints, and not the prepared query's upstream definition. This commit updates prepared query clusters to account for that.	3 years ago
freddygv	85878685b7	Fixup proxy config test fixtures ... - The TestNodeService helper created services with the fixed name "web", and now that name is overridable. - The discovery chain snapshot didn't have prepared query endpoints so the endpoints tests were missing data for prepared queries	3 years ago
trujillo-adam	cc42b49e4f	testing markdown table format for ref docs	3 years ago
Daniel Nephin	a1fbd2d007	docs: move the remaining content from INTERNALS.md ... Into the appropriate section of the docs.	3 years ago
Daniel Nephin	bb69b699b3	docs: add important top level directories to the README	3 years ago
R.B. Boyer	fb27c1b24f	agent: add partition labels to catalog API metrics where appropriate (#10890)	3 years ago
R.B. Boyer	d66a43f5f2	fixing various bits of enterprise meta plumbing to be more correct (#10889)	3 years ago
Dhia Ayachi	1950ebbe1f	oss portion of ent #1069 (#10883)	3 years ago
Zachary Shilton	c42ea82883	Upgrade global styles (#10692) ... * website: upgrade global-styles packages * website: move community page to CSS modules * website: replace g-container with g-grid-container * website: hide alert-banner on mobile * website: backfill missing global type styles * website: fix code font-size in download custom content * website: bump to latest patched dependencies	3 years ago
R.B. Boyer	ac41e30614	state: partition the nodes.uuid and nodes.meta indexes as well (#10882)	3 years ago
R.B. Boyer	097e1645e3	agent: ensure that most agent behavior correctly respects partition configuration (#10880)	3 years ago
Blake Covarrubias	e62b1d05d8	docs: Add common CA config options to provider doc pages (#10842) ... Add the list of common Connect CA configuration options to the provider-specific CA docs. Previously these options were only documented under the agent configuration options. This change makes it so that all supported CA provider configuration options are available from a single location. Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	3 years ago
Mike Wickett	39b3c3e2bd	chore: update alert banner (#10816)	3 years ago
Daniel Nephin	a2c4069de2	Merge pull request #10806 from hashicorp/dnephin/debug-filenames-2 ... debug: use human readable dates for filenames and improve the tests	3 years ago
Daniel Nephin	271352dbb7	Merge pull request #10849 from hashicorp/dnephin/contrib-doc-xds-auth ... xds: document how authorization works	3 years ago
Daniel Nephin	a98b5bc31c	Merge pull request #10804 from hashicorp/dnephin/debug-filenames ... debug: rename cluster.json -> members.json and fix handling of Interrupt Signal	3 years ago
Daniel Nephin	797ee061e4	debug: use human readable dates for filenames ... The unix timestamps that were used make the debug data a little bit more difficult to consume. By using human readable dates we can easily see when the profile data was collected. This commit also improves the test coverage. Two test cases are removed and the assertions from those cases are moved to TestDebugCommand. Now TestDebugCommand is able to validate the contents of all files. This change reduces the test runtime of the command/debug package by almost 50%. It also makes much more strict assertions about the contents by using gotest.tools/v3/fs.	3 years ago
Daniel Nephin	049c4e9623	add changelog	3 years ago
Daniel Nephin	2f8d0e12cf	debug: small cleanup ... Use the new WriteJsonFile function to write index.json Remove .String() from time.local() since that is done by %s Remove an unused field.	3 years ago
Daniel Nephin	26ef0df458	docs: update CLI reference docs for debug ... the cluster target was renamed to members.	3 years ago
Daniel Nephin	4359e38114	debug: restore cancel on SigInt ... Some previous changes broke interrupting the debug on SigInterupt. This change restores the original behaviour by passing a context to requests. Since a new API client function was required to pass the context, I had it also return an io.ReadCloser, so that output can be streamed to files instead of fully buffering in process memory.	3 years ago
Daniel Nephin	31bcd80528	debug: improve a couple of the test cases ... Use gotest.tools/v3/fs to make better assertions about the files Remove the TestAgent from TestDebugCommand_Prepare_ValidateTiming, since we can test that validation without making any API calls.	3 years ago