13699 Commits (0a4304697ec15def1d7bfd632b70e0830d0866b6)

 

All Branches   

Search

Author	SHA1	Message	Date
Daniel Nephin	0a4304697e	Merge pull request #9727 from mbanikazemi/typos ... Correcting the changed function name in comment	4 years ago
hashicorp-ci	bb67e0939a	auto-updated agent/uiserver/bindata_assetfs.go from commit 96204a21d	4 years ago
John Cowen	96204a21d8	ui: [BUGFIX] Ensure we show the correct count of instances for each node (#9749) ... * Add MeshServiceInstances property to node model * Use MeshServiceInstances property * Make sure we show the 'No * checks' if Checks.length is zero	4 years ago
hashicorp-ci	d5024e64c3	auto-updated agent/uiserver/bindata_assetfs.go from commit 369637aff	4 years ago
John Cowen	369637aff7	ui: Update browser targets to ~2016 browsers (#9729) ... * ui: Reduce range of browsers in targets.js `'Chrome 55', 'Firefox 53', 'Safari 13', 'Edge 15'` * ui: Remove auto-prefixer	4 years ago
hashicorp-ci	673f4690b7	auto-updated agent/uiserver/bindata_assetfs.go from commit eda38a0ba	4 years ago
John Cowen	eda38a0ba1	ui: [BUGFIX] Replace all replaceAll with split.join for older browsers without replaceAll (#9715) ... * ui: replace all `replaceAll` with split.join * Use a div instead of fieldset for flex-box reasons	4 years ago
R.B. Boyer	6eeccc93ce	connect: update supported envoy point releases to 1.16.2, 1.15.3, 1.14.6, 1.13.7 (#9737)	4 years ago
Daniel Nephin	9aa8081e42	Merge pull request #9745 from hashicorp/dnephin/fix-streaming-bugs ... streaming: fix a couple bugs	4 years ago
Daniel Nephin	6b36ab744c	streaming: double the cache TTL ... 10 minutes is the default blocking query timeout. Using the same value results in us hitting the expired cache entry bug frequently. By extending this TTL we at least mitigate the problem. The underlying bug still needs to be fixed.	4 years ago
Daniel Nephin	9423c887c4	submatview: do not reset retry waiter when materializer is reset ... The materializer is often reset when an error is received. By resetting the retryWaiter we effectively never wait. The retryWaiter should only be reset when we get an event without error. This is done in Materializer.updateView().	4 years ago
Daniel Nephin	0fa51e5ba9	api: Use blocking query for health when near is set ... Streaming can not be used for these queries because the near query paramter indicates a specific sort of the results, and that sort requires data that is not available to the client from the streaming API.	4 years ago
Bryce Kalow	7ef8b1c2b7	website: update next and nextjs-scripts (#9698) ... Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com> Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com>	4 years ago
Matt Keeler	8dbe342ec9	Stop background refresh of cached data for requests that result in ACL not found errors (#9738)	4 years ago
Freddy	82c269a7c5	Avoid potential proxycfg/xDS deadlock using non-blocking send	4 years ago
R.B. Boyer	39e4ae25ac	connect: connect CA Roots in the primary datacenter should use a SigningKeyID derived from their local intermediate (#9428) ... This fixes an issue where leaf certificates issued in primary datacenters using Vault as a Connect CA would be reissued very frequently (every ~20 seconds) because the logic meant to detect root rotation was errantly triggering. The hash of the rootCA was being compared against a hash of the intermediateCA and always failing. This doesn't apply to the Consul built-in CA provider because there is no intermediate in use in the primary DC. This is reminiscent of #6513	4 years ago
Derek Strickland	37227f7d11	Crosslink new microservices collection. (#9704)	4 years ago
freddygv	5dca98e870	Add changelog entry	4 years ago
freddygv	ec5f75776b	Update comments on avoiding proxycfg deadlock	4 years ago
R.B. Boyer	43193a35c6	xds: prevent LDS flaps in mesh gateways due to unstable datacenter lists (#9651) ... Also fix a similar issue in Terminating Gateways that was masked by an overzealous test.	4 years ago
Mohammad Banikazemi	bcadd341eb	Correcting the changed function name in comment ... Signed-off-by: Mohammad Banikazemi <mbanikazemi@gmail.com>	4 years ago
freddygv	6e443e5536	Retry send after timer fires, in case no updates occur	4 years ago
Daniel Nephin	ddf292caf6	Merge pull request #9722 from hashicorp/dnephin/fix-master-build ... Fix main build failing	4 years ago
Shantanu Gadgil	d30509e82c	changleog: presense -> presence (#9713) ... presense -> presence	4 years ago
R.B. Boyer	adff0c05a7	xds: deduplicate mesh gateway listeners in a stable way (#9650) ... In a situation where the mesh gateway is configured to bind to multiple network interfaces, we use a feature called 'tagged addresses'. Sometimes an address is duplicated across multiple tags such as 'lan' and 'lan_ipv4'. There is code to deduplicate these things when creating envoy listeners, but that code doesn't ensure that the same tag wins every time. If the winning tag flaps between xDS discovery requests it will cause the listener to be drained and replaced.	4 years ago
Daniel Nephin	f744e03c05	Fix main build failing ... An old PR (#7623) was merged after #9585. The old code was incompatible with the new changes, but none of the lines caused a git conflict so the merge was allowed. The incompatible changes caused the tests to fail. This fixes the old code to work with the new changes.	4 years ago
freddygv	de0cb1af7f	Make xDS labeling consistent with proxycfg	4 years ago
freddygv	95e7641faa	Update proxycfg logging, labels were already attached	4 years ago
Daniel Nephin	a4690ac7d9	Merge pull request #9719 from hashicorp/oss/state-store-4 ... state: remove registerSchema	4 years ago
Daniel Nephin	1c4e0cfa2a	Merge pull request #9718 from hashicorp/oss/dnephin/ent-meta-in-state-store-3 ... state: convert all table name constants to the new prefix pattern	4 years ago
Daniel Nephin	0814f22715	Merge pull request #9665 from hashicorp/dnephin/state-store-indexes-2 ... state: move config-entries table definition to config_entries_schema.go	4 years ago
Alvin Huang	3c673418a7	ci: escape backticks in github comment for website/ change check (#9711)	4 years ago
Daniel Nephin	912dbb4cb4	Merge pull request #9664 from hashicorp/dnephin/state-store-indexes ... state: move ACL schema and index definitions to acl_schema.go	4 years ago
Daniel Nephin	05d5ec4804	state: remove the need for registerSchema ... registerSchema creates some indirection which is not necessary in this case. newDBSchema can call each of the tables. Enterprise tables can be added from the existing withEnterpriseSchema shim.	4 years ago
Daniel Nephin	2cbf8b5fd0	state: rename table name constants to use pattern ... the 'table' prefix is shorter, and also reads better in queries.	4 years ago
Daniel Nephin	8ac9d54ccc	state: rename connect constants	4 years ago
Daniel Nephin	0c34e474c5	state: rename table name constants to new pattern ... Using Apps Hungarian Notation for these constants makes the memdb queries more readable.	4 years ago
Daniel Nephin	eed2f0b804	Merge pull request #9701 from hashicorp/dnephin/ent-meta-remove-extra-arg ... state: Remove extra entMeta arg to EnsureConfigEntry	4 years ago
Kyle Havlovitz	3fd040be22	Merge pull request #7623 from FriedCircuits/patch-1 ... Add support for RSA private key to TLS utils.	4 years ago
David Yu	36db3b50e6	docs: fix another broken link to upgrading k8s servers from token rotation page (#9707) ... fix another broken link to upgrading k8s servers from token rotation page	4 years ago
David Yu	94389f9619	docs: Small change to fix broken link to k8s upgrade from k8s tls certs page (#9705) ... Broken link to k8s server upgrade from tls certs page	4 years ago
Daniel Nephin	2d5b5afec1	state: Remove unnecessary entMeta arg to EnsureConfigEntry	4 years ago
Alvin Huang	0d1301c408	ci: add nightly load testing on master (#9693)	4 years ago
Alvin Huang	a4d5738a4e	ci: fix pr file checker (#9694) ... * filter github pr file checker on the right labels object * only check PR files when the PR is opened	4 years ago
Alvin Huang	7f455b9a42	ci:check that type/docs-cherrypick is attached to website PR changes (#9690)	4 years ago
Kim Ngo	6b92b778c5	docs/nia: recommend sensitive variables for module authoring (#9692)	4 years ago
Alvin Huang	27e80ce5be	ci: fix changelog check checkout (#9688) ... * ci: fix changelog check checkout * use fetch-depth 0 to get all commits to find a merge-base	4 years ago
freddygv	5ba14ad41d	Add trace logs to proxycfg state runner and xds srv	4 years ago
Kim Ngo	e48a96eac1	docs/nia: Update verbiage around securely configuring providers (#9684) ... This reorganizes and flags where and when sensitive information may be written in plain-text	4 years ago
freddygv	37190c0d0d	Avoid potential deadlock using non-blocking send ... Deadlock scenario: 1. Due to scheduling, the state runner sends one snapshot into snapCh and then attempts to send a second. The first send succeeds because the channel is buffered, but the second blocks. 2. Separately, Manager.Watch is called by the xDS server after getting a discovery request from Envoy. This function acquires the manager lock and then blocks on receiving the CurrentSnapshot from the state runner. 3. Separately, there is a Manager goroutine that reads the snapshots from the channel in step 1. These reads are done to notify proxy watchers, but they require holding the manager lock. This goroutine goes to acquire that lock, but can't because it is held by step 2. Now, the goroutine from step 3 is waiting on the one from step 2 to release the lock. The goroutine from step 2 won't release the lock until the goroutine in step 1 advances. But the goroutine in step 1 is waiting for the one in step 3. Deadlock. By making this send non-blocking step 1 above can proceed. The coalesce timer will be reset and a new valid snapshot will be delivered after it elapses or when one is requested by xDS.	4 years ago