hc-github-team-consul-core
76f2bc5c4c
Backport of Documentation update: Adding K8S clusters to external Consul servers into release/1.15.x ( #16380 )
...
* backport of commit 7281e9c2d2
* backport of commit bb2b853594
* backport of commit de54853714
* backport of commit 505b8e1e28
---------
Co-authored-by: Ranjandas <thejranjan@gmail.com>
2023-02-22 15:27:46 -05:00
hc-github-team-consul-core
61aeb81919
backport of commit 181bee38c0
( #16378 )
...
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-22 20:24:20 +00:00
cskh
bda302b2fa
Revert "feat: envoy extension - http local rate limit ( #16196 )" ( #16373 )
...
This reverts commit e91bc9c058
.
2023-02-22 14:59:53 -05:00
hc-github-team-consul-core
92bf0a915b
Backport of Add changelog entry for API Gateway (Beta) into release/1.15.x ( #16375 )
...
* backport of commit ba0ddc3c9e
* backport of commit d6d90cb9f4
* backport of commit 559e192473
---------
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-22 19:54:10 +00:00
hc-github-team-consul-core
3cf61fcba8
Backport of Update existing docs from Consul API Gateway -> API Gateway for Kubernetes into release/1.15.x ( #16367 )
...
* backport of commit acac8d3732
* backport of commit 2042464e4c
* backport of commit 631ba62d59
---------
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-22 19:24:39 +00:00
hc-github-team-consul-core
deaef1d6b4
backport of commit 3253386a68
( #16370 )
...
Co-authored-by: Anita Akaeze <anita.akaeze@hashicorp.com>
2023-02-22 18:09:58 +00:00
hc-github-team-consul-core
87d97798bf
backport of commit a0598b81a3
( #16363 )
...
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-22 16:51:54 +00:00
hc-github-team-consul-core
6b5d96744d
backport of commit 813264e160
( #16359 )
...
Co-authored-by: cskh <hui.kang@hashicorp.com>
2023-02-22 16:16:22 +00:00
hc-github-team-consul-core
aad218d4d0
backport of commit bb33b6060b
( #16357 )
...
Co-authored-by: Xinyi Wang <xinyi.wang@hashicorp.com>
2023-02-22 15:54:59 +00:00
hc-github-team-consul-core
fca4b563d4
Backport of [API Gateway] Various fixes for Config Entry fields into release/1.15.x ( #16354 )
...
* [API Gateway] Various fixes for Config Entry fields
* simplify logic per PR review
---------
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-21 23:36:25 -05:00
hc-github-team-consul-core
3d232666ae
Backport of [API Gateway] Fix targeting service splitters in HTTPRoutes into release/1.15.x ( #16353 )
...
* backport of commit 06fc59c26f
* backport of commit cd4e6e9677
---------
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-22 04:34:39 +00:00
hc-github-team-consul-core
9f29e0c4fc
backport of commit 326d5c02c6
( #16352 )
...
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-22 03:33:18 +00:00
hc-github-team-consul-core
2604a03799
backport of commit 817d85df12
( #16344 )
...
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-21 20:36:42 +00:00
hc-github-team-consul-core
de2bcabdb8
Backport of Docs/reformat service splitters conf entry into release/1.15.x ( #16283 )
...
* backport of commit 99012ae501
* backport of commit 0ffebd8f89
* backport of commit 352d079872
* backport of commit 6b402e9c44
* backport of commit 9da4a1fe0e
* backport of commit fabc679309
* backport of commit b57075ec11
* backport of commit d3cc6ee9e9
* Docs/reformat service splitters conf entry (#16264 )
* for tab testing
* updates
* Update
* adding sandbox to test conf ref types
* testing tweaks to the conf ref template
* reintroduce tabbed specification
* applied feedback from MKO session
* applied feedback on format from luke and jared
* Apply suggestions from code review
Co-authored-by: Dan Upton <daniel@floppy.co>
* fixed some minor HCL formatting in complete conf
* Apply suggestions from code review
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
* fixed bad link
* resolving conflicts
---------
Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
Co-authored-by: Dan Upton <daniel@floppy.co>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
resolved cherry-pick conflicts
* trying to get rid of conflicts
---------
Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-02-21 12:23:59 -08:00
hc-github-team-consul-core
1241135e68
Backport of [API Gateway] Validate listener name is not empty into release/1.15.x ( #16341 )
...
* backport of commit cabcb052fd
* backport of commit 89baddca25
---------
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-21 19:34:04 +00:00
hc-github-team-consul-core
ca02bf6c73
Backport of new docs for consul and consul-k8s troubleshoot command into release/1.15.x ( #16318 )
...
* backport of commit ba5560c2a2
* backport of commit 0f3a7cb26b
* backport of commit effdb9bb57
* fix PR from original OSS PR: 16284
* fix missing tab in docs
* fix missing tab in docs
---------
Co-authored-by: Maliz <maliheh.monshizadeh@hashicorp.com>
2023-02-21 08:36:40 -08:00
hc-github-team-consul-core
84bc971334
Backport of fix: add tls config to unix socket when https is used into release/1.15.x ( #16336 )
...
* backport of commit 49f7423ab8
* backport of commit d5408c8d01
---------
Co-authored-by: cskh <hui.kang@hashicorp.com>
2023-02-21 13:43:27 +00:00
hc-github-team-consul-core
a3a9b05e14
backport of commit 748e2a76cb
( #16328 )
...
Co-authored-by: DanStough <dan.stough@hashicorp.com>
2023-02-18 20:17:58 +00:00
hc-github-team-consul-core
065ab57133
backport of commit acf20db763
( #16320 )
...
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-17 23:23:16 +00:00
hc-github-team-consul-core
5437e5b789
backport of commit d3daf89ba8
( #16324 )
...
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-17 22:53:13 +00:00
Andrew Stucki
9ce2cff600
Backport of Add stricter validation and some normalization code for API Gateway ConfigEntries into release/1.15.x ( #16317 )
...
* Add stricter validation and some normalization code for API Gateway ConfigEntries
* Switch to certs with valid hostnames in them
2023-02-17 21:03:30 +00:00
hc-github-team-consul-core
0e89df2b7a
Backport of [OSS] security: update go to 1.20.1 into release/1.15.x ( #16314 )
...
* backport of commit 2a8cdf1747
* backport of commit 716d162048
* backport of commit 2c757fac4f
* backport of commit f81c5d4933
* backport of commit ff4f0596f3
* backport of commit 31bbca9fe4
* backport of commit 2f54191353
* backport of commit c263147180
---------
Co-authored-by: DanStough <dan.stough@hashicorp.com>
2023-02-17 21:00:25 +00:00
Andrew Stucki
e4e7c69f44
Fix hostname alignment checks for HTTPRoutes ( #16315 )
2023-02-17 20:47:38 +00:00
hc-github-team-consul-core
4920cb4a77
Backport of Inline API Gateway TLS cert code into release/1.15.x ( #16306 )
...
* Inline API Gateway TLS cert code (#16295 )
* Include secret type when building resources from config snapshot
* First pass at generating envoy secrets from api-gateway snapshot
* Update comments for xDS update order
* Add secret type + corresponding golden files to existing tests
* Initialize test helpers for testing api-gateway resource generation
* Generate golden files for new api-gateway xDS resource test
* Support ADS for TLS certificates on api-gateway
* Configure TLS on api-gateway listeners
* Inline TLS cert code
* update tests
* Add SNI support so we can have multiple certificates
* Remove commented out section from helper
* regen deep-copy
* Add tcp tls test
---------
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
* Fix bad merge
---------
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-17 14:46:49 -05:00
hc-github-team-consul-core
3cba165d78
Backport of Fix panicky xDS test flakes into release/1.15.x ( #16310 )
...
* backport of commit 01ca6e268b
* backport of commit 485cb4d88d
---------
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-17 19:24:01 +00:00
Nitya Dhanushkodi
94f4347ffe
Backport: troubleshoot: fixes and updated messages ( #16294 ) ( #16309 )
2023-02-17 10:53:20 -08:00
hc-github-team-consul-core
6cd08b96c3
Backport of Fix mesh gateways incorrectly matching peer locality. into release/1.15.x ( #16287 )
...
* backport of commit 9bc7f6280a
* backport of commit 0c48c9a1e8
---------
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-16 15:51:57 +00:00
hc-github-team-consul-core
0a32425202
Backport of Fix infinite recursion in inline-certificate config entry into release/1.15.x ( #16281 )
...
* backport of commit ea4dd2bb4c
* backport of commit 637d13a0a9
* backport of commit 18f19cecd1
* backport of commit 3e6807bdbc
---------
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-15 20:03:29 +00:00
hc-github-team-consul-core
9aa85df0cc
backport of commit e5adc43315
( #16279 )
...
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-15 18:17:15 +00:00
hc-github-team-consul-core
6db3c26f54
backport of commit acf75497c8
( #16275 )
...
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-15 16:30:44 +00:00
hc-github-team-consul-core
1d994d707e
Backport of add integration tests for troubleshoot into release/1.15.x ( #16261 )
...
* backport of commit 74dcceeeb2
* cherry pick from PR 16223
---------
Co-authored-by: Maliz <maliheh.monshizadeh@hashicorp.com>
2023-02-15 08:11:57 -08:00
Nicholas Richu
dc2aa36b6f
Update index.mdx ( #16247 )
...
* Update index.mdx
* Update website/content/docs/connect/dataplane/index.mdx
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
---------
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
2023-02-13 16:38:05 -05:00
malizz
c10ba43eb3
get clusters from route if listener uses RDS ( #16243 )
2023-02-13 12:50:32 -08:00
cskh
5b7f36c2ce
integ test: fix retry upstream test ( #16246 )
2023-02-13 15:16:56 -05:00
Andrew Stucki
9bb0ecfc18
[API Gateway] Add integration test for HTTP routes ( #16236 )
...
* [API Gateway] Add integration test for conflicted TCP listeners
* [API Gateway] Update simple test to leverage intentions and multiple listeners
* Fix broken unit test
* [API Gateway] Add integration test for HTTP routes
2023-02-13 14:18:05 -05:00
cskh
ab5dac3414
upgrade test: peering with http router config entry ( #16231 )
...
* upgrade test: peering with http router config entry
2023-02-13 14:09:12 -05:00
Tyler Wendlandt
3f22879106
UI: CC-4032 - Update sidebar width ( #16204 )
...
* Update chrome-width var to be 280px
* Formatting & Changelog
2023-02-13 11:48:31 -07:00
Semir Patel
8979e64a94
Bump x/time to 0.3.0 and fix related breakage linked to RPCRateLimit ( #16241 )
...
* Bump x/time to 0.3.0 and fix related breakage linked to RPCRateLimit initialization
* Apply limitVal(...) to other rate.Limit config fields
2023-02-13 11:11:51 -06:00
Tyler Wendlandt
a464c158d7
ui: add vercel info to the ui readme ( #16239 )
2023-02-13 10:05:01 -07:00
Valeriia Ruban
663a5642c2
[UI]: update Ember to 3.27 ( #16227 )
...
* Upgrade to 3.25 via ember-cli-update
* v3.25.3...v3.26.1
* v3.26.1...v3.27.0
Co-authored-by: Michael Klein <michael@firstiwaslike.com>
2023-02-10 13:32:19 -08:00
Andrew Stucki
8ff2974dbe
[API Gateway] Update simple test to leverage intentions and multiple listeners ( #16228 )
...
* [API Gateway] Add integration test for conflicted TCP listeners
* [API Gateway] Update simple test to leverage intentions and multiple listeners
* Fix broken unit test
* PR suggestions
2023-02-10 21:13:44 +00:00
Andrew Stucki
4c848a554d
Fix missing references to enterprise metadata ( #16237 )
2023-02-10 20:47:16 +00:00
Nitya Dhanushkodi
80fb18aa35
troubleshoot: make output have tables and colors ( #16235 )
...
Adds tables and colors using libraries used in consul-k8s. It doesn't add the full `terminal` UI package that consul-k8s uses since there is an existing UI in Consul that I didn't want to affect too much. So instead this adds to the existing UI.
2023-02-10 11:12:13 -08:00
Andrew Stucki
318ba215ab
[API Gateway] Add integration test for conflicted TCP listeners ( #16225 )
2023-02-10 11:34:01 -06:00
Derek Menteer
4f2ce60654
Fix peering acceptors in secondary datacenters. ( #16230 )
...
Prior to this commit, secondary datacenters could not be initialized
as peering acceptors if ACLs were enabled. This is due to the fact that
internal server-to-server API calls would fail because the management
token was not generated. This PR makes it so that both primary and
secondary datacenters generate their own management token whenever
a leader is elected in their respective clusters.
2023-02-10 09:47:17 -06:00
Nitya Dhanushkodi
78a4b5fd6f
update the api in envoyextensions and troubleshoot modules ( #16226 )
2023-02-09 15:39:03 -08:00
Andrew Stucki
3b9c569561
Simple API Gateway e2e test for tcp routes ( #16222 )
...
* Simple API Gateway e2e test for tcp routes
* Drop DNSSans since we don't front the Gateway with a leaf cert
2023-02-09 16:20:12 -05:00
skpratt
db2bd404bf
Synthesize anonymous token pre-bootstrap when needed ( #16200 )
...
* add bootstrapping detail for acl errors
* error detail improvements
* update acl bootstrapping test coverage
* update namespace errors
* update test coverage
* consolidate error message code and update changelog
* synthesize anonymous token
* Update token language to distinguish Accessor and Secret ID usage (#16044 )
* remove legacy tokens
* remove lingering legacy token references from docs
* update language and naming for token secrets and accessor IDs
* updates all tokenID references to clarify accessorID
* remove token type references and lookup tokens by accessorID index
* remove unnecessary constants
* replace additional tokenID param names
* Add warning info for deprecated -id parameter
Co-authored-by: Paul Glass <pglass@hashicorp.com>
* Update field comment
Co-authored-by: Paul Glass <pglass@hashicorp.com>
---------
Co-authored-by: Paul Glass <pglass@hashicorp.com>
* revert naming change
* add testing
* revert naming change
---------
Co-authored-by: Paul Glass <pglass@hashicorp.com>
2023-02-09 20:34:02 +00:00
Andrew Stucki
99cf421e7b
Add some fixes to allow for registering via consul connect envoy -gateway api ( #16219 )
...
* Add some fixes to allow for registering via consul connect envoy -gateway api
* Fix infinite recursion
---------
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-09 20:28:04 +00:00
malizz
ba862ab6ad
troubleshoot basic envoy stats for an upstream ( #16215 )
...
* troubleshoot basic envoy stats for an upstream
* remove envoyID arg
2023-02-09 12:06:31 -08:00