10683 Commits (0b346616e997feab580a5380776b3b66f28ce985)

 

All Branches   

Search

Author	SHA1	Message	Date
Matt Keeler	825e19bc5f	Add DirEntry method to fill enterprise authz context	5 years ago
Matt Keeler	d491a3a9d5	Miscellaneous fixes (#6727)	5 years ago
Sarah Adams	ec7aeaaa8e	update CHANGELOG.md	5 years ago
Matt Keeler	8bb5e03c5d	Update CHANGELOG.md	5 years ago
Ferenc Fabian	c90e838495	Case sensitive Authorization header with lower-cased scheme in… (#6724)	5 years ago
Paul Banks	1812e31ab0	Update CHANGELOG.md	5 years ago
Paul Banks	87699eca2f	Fix support for RSA CA keys in Connect. (#6638) ... * Allow RSA CA certs for consul and vault providers to correctly sign EC leaf certs. * Ensure key type ad bits are populated from CA cert and clean up tests * Add integration test and fix error when initializing secondary CA with RSA key. * Add more tests, fix review feedback * Update docs with key type config and output * Apply suggestions from code review Co-Authored-By: R.B. Boyer <rb@hashicorp.com>	5 years ago
R.B. Boyer	5ff8fa9918	docs: mention that all logging flags also work in the config file (#6705)	5 years ago
Alvin Huang	a0896ad59a	update CONTRIBUTING.md to build consul with 1.12+ (#6723)	5 years ago
Luke Kysow	c496fd80c2	Merge pull request #6583 from hashicorp/connect-annotations ... Document new annotations for Connect injections	5 years ago
Alexandra Freeman	00f5fde869	Update mediums on main community page (#6699) ... Updating all .io Community sites to direct practitioners to the Forum as the first medium for communicating with other users and HashiCorp employees. Deleted Gitter link and Google Group link, as these will be phased out over the next few months. Updated what appeared to be a typo on the page description. Chatted with Nic Jackson before submitting PR.	5 years ago
Matt Keeler	5d687ce6a9	Fix the Synthetic Policy Tests (#6715)	5 years ago
Matt Keeler	d554f77d0d	Add hook for validating the enterprise meta attached to a reque… (#6695)	5 years ago
Matt Keeler	16c7ce8b4c	Add note about RPC multiplexing and TLS content type mutual exc… (#6698)	5 years ago
Matt Keeler	8ac79d0b8b	PreVerify acl:read access for listing endpoints (#6696) ... We still will need to filter results based on the authorizer too but this helps to give an early 403.	5 years ago
kaitlincarter-hc	bac8edb7df	removed the term easy and updated the formatting	5 years ago
Charlie Voiselle	c646089c84	Updating Nomad Consul Connect info	5 years ago
Sarah Adams	78ad8203a4	Use encoding/json as JSON decoder instead of mapstructure (#6680) ... Fixes #6147	5 years ago
Sarah Christoff	82f1eacb14	Update CHANGELOG.md	5 years ago
Sarah Christoff	5e1c6e907b	Set MinQuorum variable in Autopilot (#6654) ... * Add MinQuorum to Autopilot	5 years ago
Sarah Christoff	64d099c020	Update -protocol doc (#6681) ... * Update -protocol to have more clear version wording Co-Authored-By: Judith Malnick <judith.patudith@gmail.com>	5 years ago
Matt Keeler	66d138f35e	More Replication Abstractions (#6689) ... Also updated ACL replication to use a function to fill in the desired enterprise meta for all remote listing RPCs.	5 years ago
Luke Kysow	b5cd6f83a3	Merge pull request #6683 from hashicorp/service-account-connect-inject-docs ... Document service account name requirements	5 years ago
Matt Keeler	440f6ea17a	Ensure that cache entries for tokens are prefixed “token-secret… (#6688) ... This will be necessary once we store other types of identities in here.	5 years ago
Matt Keeler	79f78632e1	Update the ACL Resolver to allow for Consul Enterprise specific hooks. (#6687)	5 years ago
Luke Kysow	3524ee0478	Document service account name requirements ... If ACLs are enabled, service account name must match the name of the service in Consul. Fixes https://github.com/hashicorp/consul-helm/issues/202	5 years ago
Matt Keeler	e4ea9b0a96	Updates to allow for Namespacing ACL resources in Consul Enterp… (#6675) ... Main Changes: • method signature updates everywhere to account for passing around enterprise meta. • populate the EnterpriseAuthorizerContext for all ACL related authorizations. • ACL resource listings now operate like the catalog or kv listings in that the returned entries are filtered down to what the token is allowed to see. With Namespaces its no longer all or nothing. • Modified the acl.Policy parsing to abstract away basic decoding so that enterprise can do it slightly differently. Also updated method signatures so that when parsing a policy it can take extra ent metadata to use during rules validation and policy creation. Secondary Changes: • Moved protobuf encoding functions out of the agentpb package to eliminate circular dependencies. • Added custom JSON unmarshalers for a few ACL resource types (to support snake case and to get rid of mapstructure) • AuthMethod validator cache is now an interface as these will be cached per-namespace for Consul Enterprise. • Added checks for policy/role link existence at the RPC API so we don’t push the request through raft to have it fail internally. • Forward ACL token delete request to the primary datacenter when the secondary DC doesn’t have the token. • Added a bunch of ACL test helpers for inserting ACL resource test data.	5 years ago
kaitlincarter-hc	749915ce0f	missed UTM parameter (#6679)	5 years ago
kaitlincarter-hc	73832ed80b	fixing ACL reset links (#6678)	5 years ago
Alvin Huang	3361bab1bc	modify netlify-cli installation (#6674) ... * modify netlify CLI installation * bump middleman-hashicorp to 0.3.40 to include ssh	5 years ago
Sarah Adams	0c9487ae72	regression tests for existing agent/ decoding behavior (#6624) ... tests for existing JSON decoding behavior	5 years ago
kaitlincarter-hc	30ae048f85	Top Navigation change (#6630) ... * Changed Guides to Learn in the top nav and added utm parameters to the guide index page * Update website/source/docs/guides/index.html.md * Update website/source/docs/guides/index.html.md * Update website/source/layouts/layout.erb	5 years ago
Sarah Christoff	b1f10663f2	Fix indention problems with stale.yml (#6663)	5 years ago
Sarah Christoff	3bb5ad4e56	chore: Add probot (#6642) ... * add stalebot	5 years ago
Matt Keeler	22e0b6c674	Update CHANGELOG.md	5 years ago
rerorero	86c8e48dd9	fix: incorrect struct tag and WaitGroup usage (#6649) ... * remove duplicated json tag * fix: incorrect wait group usage	5 years ago
R.B. Boyer	d0f14cb5c0	update changelog	5 years ago
R.B. Boyer	97aa050c20	agent: allow mesh gateways to initialize even if there are no connect services registered yet (#6576) ... Fixes #6543 Also improved some of the proxycfg tests to cover snapshot validity better.	5 years ago
R.B. Boyer	8c1b3f6a6e	update changelog	5 years ago
R.B. Boyer	8dcba472a2	xds: tcp services using the discovery chain should not assume RDS during LDS (#6623) ... Previously the logic for configuring RDS during LDS for L7 upstreams was overapplied to TCP proxies resulting in a cluster name of <emptystring> being used incorrectly. Fixes #6621	5 years ago
Freddy	895a82ed78	Update CHANGELOG.md	5 years ago
Freddy	60f6ec0c2f	Store check type in catalog (#6561)	5 years ago
R.B. Boyer	7a13850db2	update changelog	5 years ago
R.B. Boyer	274b5a46b3	sdk: ignore panics due to stray goroutines logging after a test completes (#6632) ... If there is imperfect goroutine lifespan tracking if we pipe our logs through testing.T.Logf there is a chance of a stray goroutine attempting to log after the test that spawned it completes. This results in a panic of: panic: Log in goroutine after TestLeader_SecondaryCA_Initialize has completed... This isn't great and should be fixed, but quickly runs into situations around externally cancelling blocking queries which isn't terribly possible at the moment. The concession here is to ignore these specific panics for now. This can be triggered easily when running some tests with a high `-count=YYY` value.	5 years ago
R.B. Boyer	3c58d29fad	update changelog	5 years ago
R.B. Boyer	de6ce5b1d9	server: ensure the primary dc and ACL dc match (#6634) ... This is mostly a sanity check for server tests that skip the normal config builder equivalent fixup.	5 years ago
R.B. Boyer	3aeb740430	unflake TestLeader_SecondaryCA_Initialize (#6631)	5 years ago
kaitlincarter-hc	4f9e639d49	updating broken link (#6633)	5 years ago
R.B. Boyer	e6bfcb0ca8	fix flaky multidc acl tests that failed to wait for token replication (#6628) ... If acls have not yet replicated to the secondary then authz requests will be remotely resolved by the primary. Now these tests explicitly wait until replication has caught up first.	5 years ago
R.B. Boyer	040f47c46e	appease the retry linter (#6629)	5 years ago