11989 Commits (0cd4178a4c373668ad5cca5a11093dca0ddf1d8e)

 

All Branches   

Search

Author	SHA1	Message	Date
Chris Piraino	5e0cd7ede5	Remove unnecessary defer from api.health_test.go ... We do not need to deregister services because every test gets its own instance of the client agent and the tmp directories are all deleted at the end.	5 years ago
Chris Piraino	ca41f80493	Set connect or ingress boolean after checking for query param	5 years ago
Daniel Nephin	08f1ed16b4	Merge pull request #7900 from hashicorp/dnephin/add-linter-staticcheck-2 ... intentions: fix a bug in Intention.SetHash	5 years ago
Daniel Nephin	62a1125c7b	Merge pull request #8037 from hashicorp/dnephin/add-linter-staticcheck-5 ... ci: Enabled SA2002 staticcheck check	5 years ago
Daniel Nephin	27ba56f3cd	Merge pull request #8067 from hashicorp/dnephin/update-vendor-1 ... Update protobuf and golang.org/x/... vendor	5 years ago
Hans Hasselberg	242994a016	acl: do not resolve local tokens from remote dcs (#8068)	5 years ago
Kyle Havlovitz	0c8966220f	Merge pull request #8040 from hashicorp/ingress/expose-cli ... Ingress expose CLI command	5 years ago
Daniel Nephin	db74f09b6b	Update protobuf and golang.org/x/... vendor ... Partially extracted from #7547 Updates protobuf to the most recent in the 1.3.x series, and updates golang.org/x/sys to a7d97aace0b0 because of https://github.com/shirou/gopsutil/issues/853 prevents updating to a more recent version. This breaking change in x/sys also prevents us from getting a newer version of x/net. In the future, if gopsutil is not patched, we may want to run a fork version of gopsutil so that we can update both x/net and x/sys.	5 years ago
Kyle Havlovitz	e3a725c4e0	Always allow updating the exposed service and differentiate by namespace	5 years ago
Chris Piraino	4837069fe0	api: update api module with health.Ingress() method	5 years ago
Chris Piraino	3c037d9b96	Add ?ingress query parameter on /v1/health/connect ... Refactor boolean query parameter logic from ?passing value to re-use with ingress	5 years ago
Kenia	328874ad4f	ui: Reorder items in the Proxy Info tab (#8061)	5 years ago
Preetha	25fe12053a	Merge pull request #8056 from hashicorp/docs-helm-survey ... Update banner.js to call out helm chart survey	5 years ago
Kenia	0ea5250cf6	ui: Reorder the tabs for Ingress/Terminating Gateway Service Detail page (#8060)	5 years ago
John Cowen	aafbfa167c	ui: ConsulKind explanatory tooltip panels (#8048) ... * ui: Add tooltip panels to ConsulKind	5 years ago
Preetha	62b894a2d6	fix link	5 years ago
Kyle Havlovitz	edab5588d8	Add -host flag to expose command	5 years ago
Daniel Nephin	c66c533d73	Merge pull request #7964 from hashicorp/dnephin/remove-patch-slice-of-maps-forward-compat ... config: Use HookWeakDecodeFromSlice in place of PatchSliceOfMaps	5 years ago
Kyle Havlovitz	5958328552	Allow multiple listeners per service via expose command	5 years ago
Preetha	7983ab0fce	Update banner.js to call out helm chart survey	5 years ago
Daniel Nephin	75cbbe2702	config: add HookWeakDecodeFromSlice ... Currently opaque config blocks (config entries, and CA provider config) are modified by PatchSliceOfMaps, making it impossible for these opaque config sections to contain slices of maps. In order to fix this problem, any lazy-decoding of these blocks needs to support weak decoding of []map[string]interface{} to a struct type before PatchSliceOfMaps is replaces. This is necessary because these config blobs are persisted, and during an upgrade an older version of Consul could read one of the new configuration values, which would cause an error. To support the upgrade path, this commit first introduces the new hooks for weak decoding of []map[string]interface{} and uses them only in the lazy-decode paths. That way, in a future release, new style configuration will be supported by the older version of Consul. This decode hook has a number of advantages: 1. It no longer panics. It allows mapstructure to report the error 2. It no longer requires the user to declare which fields are slices of structs. It can deduce that information from the 'to' value. 3. It will make it possible to preserve opaque configuration, allowing for structured opaque config.	5 years ago
Hans Hasselberg	98eea08d3b	Tokens converted from legacy ACLs get their Hash computed (#8047) ... * Fixes #5606: Tokens converted from legacy ACLs get their Hash computed This allows new style token replication to work for legacy tokens as well when they change. * tests: fix timestamp comparison Co-authored-by: Matt Keeler <mjkeeler7@gmail.com>	5 years ago
Chris Piraino	1a853fc954	Always require Host header values for http services (#7990) ... Previously, we did not require the 'service-name.*' host header value when on a single http service was exposed. However, this allows a user to get into a situation where, if they add another service to the listener, suddenly the previous service's traffic might not be routed correctly. Thus, we always require the Host header, even if there is only 1 service. Also, we add the make the default domain matching more restrictive by matching "service-name.ingress.*" by default. This lines up better with the namespace case and more accurately matches the Consul DNS value we expect people to use in this case.	5 years ago
Blake Covarrubias	dd1e4ffd0d	docs: Fix rendering of markdown on performance page ... Fix issue with markdown not being rendered on /docs/install/performance.mdx. Resolves #8049	5 years ago
Hans Hasselberg	c7e6c9ebec	http: use default minsize for gzip handler. (#7354) ... Fixes #6306	5 years ago
Hans Hasselberg	72f92ae7ca	agent: add option to disable agent cache for HTTP endpoints (#8023) ... This allows the operator to disable agent caching for the http endpoint. It is on by default for backwards compatibility and if disabled will ignore the url parameter `cached`.	5 years ago
Krastin	9262d7a79a	website: fix a link in docs/agent/options ... fixing the link to gopsutil in the -disable-host-node-id option text body	5 years ago
Jeff Escalante	9977c1df80	a few more naming adjustments	5 years ago
Jeff Escalante	f9051298c8	change page path, add redirect	5 years ago
Peter M	45f43476e8	Update Homepage Use Case Name and Link ... resubmitting this PR to include a link change.	5 years ago
Peter M	8df640401b	Updating NMA use case to reflect new name ... Recently changed Network Middleware Automation use case to Network Infrastructure Automation, adding changes to the site to reflect this.	5 years ago
Kyle Havlovitz	acae044df4	Document the namespace format for expose CLI command	5 years ago
Kyle Havlovitz	ada9e2b3ab	Add docs for expose command	5 years ago
Kyle Havlovitz	b874c8ef0c	Add connect expose CLI command	5 years ago
Daniel Nephin	caa692deea	ci: Enabled SA2002 staticcheck check ... And handle errors in the main test goroutine	5 years ago
Hans Hasselberg	5281cb74db	Setup intermediate_pki_path on secondary when using vault (#8001) ... Make sure to mount vault backend for intermediate_pki_path on secondary dc.	5 years ago
Daniel Nephin	ce6cc094a1	intentions: fix a bug in Intention.SetHash ... Found using staticcheck. binary.Write does not accept int types without a size. The error from binary.Write was ignored, so we never saw this error. Casting the data to uint64 produces a correct hash. Also deprecate the Default{Addr,Port} fields, and prevent them from being encoded. These fields will always be empty and are not used. Removing these would break backwards compatibility, so they are left in place for now. Co-authored-by: Hans Hasselberg <me@hans.io>	5 years ago
R.B. Boyer	fed7489a37	Use linkmode=external for the arm builds (#8029) ... This gets around some issues regarding too large plt offsets when compiling with CGO Co-authored-by: Matt Keeler <mjkeeler7@gmail.com>	5 years ago
John Cowen	439ae6b4bf	ui: Blocking with filtering intentions amends (#8027) ... * ui: Now intentions use blocking queries invalidation isn't needed * ui: Ensure reconciliation doesn't happen when filtering for intentions	5 years ago
R.B. Boyer	9cfa4a3fc9	tests: ensure that the ServiceExists helper function normalizes entmeta (#8025) ... This fixes a unit test failure over in enterprise due to https://github.com/hashicorp/consul/pull/7384	5 years ago
R.B. Boyer	b88bd6660e	server: don't activate federation state replication or anti-entropy until all servers are running 1.8.0+ (#8014)	5 years ago
Hans Hasselberg	dfcf45c6cf	tests: use constructor instead init (#8024)	5 years ago
Alexander Mykolaichuk	9fa605f077	fixed links (#8020)	5 years ago
John Cowen	7dd7fc566d	Merge pull request #8022 from hashicorp/ui/bugfix/switch-help-icons ... ui: Switch help menu icons to use the correct icons	5 years ago
John Cowen	8a586c04e6	ui: Switch help menu icons to use the correct icons	5 years ago
Pierre Souchay	9813ae512b	checks: when a service does not exists in an alias, consider it failing (#7384) ... In current implementation of Consul, check alias cannot determine if a service exists or not. Because a service without any check is semantically considered as passing, so when no healthchecks are found for an agent, the check was considered as passing. But this make little sense as the current implementation does not make any difference between: * a non-existing service (passing) * a service without any check (passing as well) In order to make it work, we have to ensure that when a check did not find any healthcheck, the service does indeed exists. If it does not, lets consider the check as failing.	5 years ago
Hans Hasselberg	0f343332da	Merge pull request #7966 from hashicorp/pool_improvements ... Agent connection pool cleanup	5 years ago
Freddy	891a0029b6	Update CHANGELOG.md	5 years ago
Freddy	9ed325ba8b	Enable gateways to resolve hostnames to IPv4 addresses (#7999) ... The DNS resolution will be handled by Envoy and defaults to LOGICAL_DNS. This discovery type can be overridden on a per-gateway basis with the envoy_dns_discovery_type Gateway Option. If a service contains an instance with a hostname as an address we set the Envoy cluster to use DNS as the discovery type rather than EDS. Since both mesh gateways and terminating gateways route to clusters using SNI, whenever there is a mix of hostnames and IP addresses associated with a service we use the hostname + CDS rather than the IPs + EDS. Note that we detect hostnames by attempting to parse the service instance's address as an IP. If it is not a valid IP we assume it is a hostname.	5 years ago
Kevin Pruett	9b0d0de178	Merge pull request #8002 from pruett/pruett.quickfix-acl-docs ... Add newline to fix rendering bug	5 years ago