Commit Graph

19642 Commits (0f139f243967aa7b094dec9a15a2b68c263ace27)

Author SHA1 Message Date
hc-github-team-consul-core 76f2bc5c4c
Backport of Documentation update: Adding K8S clusters to external Consul servers into release/1.15.x (#16380)
* backport of commit 7281e9c2d2

* backport of commit bb2b853594

* backport of commit de54853714

* backport of commit 505b8e1e28

---------

Co-authored-by: Ranjandas <thejranjan@gmail.com>
2023-02-22 15:27:46 -05:00
hc-github-team-consul-core 61aeb81919
backport of commit 181bee38c0 (#16378)
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-22 20:24:20 +00:00
cskh bda302b2fa
Revert "feat: envoy extension - http local rate limit (#16196)" (#16373)
This reverts commit e91bc9c058.
2023-02-22 14:59:53 -05:00
hc-github-team-consul-core 92bf0a915b
Backport of Add changelog entry for API Gateway (Beta) into release/1.15.x (#16375)
* backport of commit ba0ddc3c9e

* backport of commit d6d90cb9f4

* backport of commit 559e192473

---------

Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-22 19:54:10 +00:00
hc-github-team-consul-core 3cf61fcba8
Backport of Update existing docs from Consul API Gateway -> API Gateway for Kubernetes into release/1.15.x (#16367)
* backport of commit acac8d3732

* backport of commit 2042464e4c

* backport of commit 631ba62d59

---------

Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-22 19:24:39 +00:00
hc-github-team-consul-core deaef1d6b4
backport of commit 3253386a68 (#16370)
Co-authored-by: Anita Akaeze <anita.akaeze@hashicorp.com>
2023-02-22 18:09:58 +00:00
hc-github-team-consul-core 87d97798bf
backport of commit a0598b81a3 (#16363)
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-22 16:51:54 +00:00
hc-github-team-consul-core 6b5d96744d
backport of commit 813264e160 (#16359)
Co-authored-by: cskh <hui.kang@hashicorp.com>
2023-02-22 16:16:22 +00:00
hc-github-team-consul-core aad218d4d0
backport of commit bb33b6060b (#16357)
Co-authored-by: Xinyi Wang <xinyi.wang@hashicorp.com>
2023-02-22 15:54:59 +00:00
hc-github-team-consul-core fca4b563d4
Backport of [API Gateway] Various fixes for Config Entry fields into release/1.15.x (#16354)
* [API Gateway] Various fixes for Config Entry fields

* simplify logic per PR review

---------

Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-21 23:36:25 -05:00
hc-github-team-consul-core 3d232666ae
Backport of [API Gateway] Fix targeting service splitters in HTTPRoutes into release/1.15.x (#16353)
* backport of commit 06fc59c26f

* backport of commit cd4e6e9677

---------

Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-22 04:34:39 +00:00
hc-github-team-consul-core 9f29e0c4fc
backport of commit 326d5c02c6 (#16352)
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-22 03:33:18 +00:00
hc-github-team-consul-core 2604a03799
backport of commit 817d85df12 (#16344)
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-21 20:36:42 +00:00
hc-github-team-consul-core de2bcabdb8
Backport of Docs/reformat service splitters conf entry into release/1.15.x (#16283)
* backport of commit 99012ae501

* backport of commit 0ffebd8f89

* backport of commit 352d079872

* backport of commit 6b402e9c44

* backport of commit 9da4a1fe0e

* backport of commit fabc679309

* backport of commit b57075ec11

* backport of commit d3cc6ee9e9

* Docs/reformat service splitters conf entry (#16264)

* for tab testing

* updates

* Update

* adding sandbox to test conf ref types

* testing tweaks to the conf ref template

* reintroduce tabbed specification

* applied feedback from MKO session

* applied feedback on format from luke and jared

* Apply suggestions from code review

Co-authored-by: Dan Upton <daniel@floppy.co>

* fixed some minor HCL formatting in complete conf

* Apply suggestions from code review

Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>

* fixed bad link

* resolving conflicts

---------

Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
Co-authored-by: Dan Upton <daniel@floppy.co>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>

resolved cherry-pick conflicts

* trying to get rid of conflicts

---------

Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-02-21 12:23:59 -08:00
hc-github-team-consul-core 1241135e68
Backport of [API Gateway] Validate listener name is not empty into release/1.15.x (#16341)
* backport of commit cabcb052fd

* backport of commit 89baddca25

---------

Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-21 19:34:04 +00:00
hc-github-team-consul-core ca02bf6c73
Backport of new docs for consul and consul-k8s troubleshoot command into release/1.15.x (#16318)
* backport of commit ba5560c2a2

* backport of commit 0f3a7cb26b

* backport of commit effdb9bb57

* fix PR from original OSS PR: 16284

* fix missing tab in docs

* fix missing tab in docs

---------

Co-authored-by: Maliz <maliheh.monshizadeh@hashicorp.com>
2023-02-21 08:36:40 -08:00
hc-github-team-consul-core 84bc971334
Backport of fix: add tls config to unix socket when https is used into release/1.15.x (#16336)
* backport of commit 49f7423ab8

* backport of commit d5408c8d01

---------

Co-authored-by: cskh <hui.kang@hashicorp.com>
2023-02-21 13:43:27 +00:00
hc-github-team-consul-core a3a9b05e14
backport of commit 748e2a76cb (#16328)
Co-authored-by: DanStough <dan.stough@hashicorp.com>
2023-02-18 20:17:58 +00:00
hc-github-team-consul-core 065ab57133
backport of commit acf20db763 (#16320)
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-17 23:23:16 +00:00
hc-github-team-consul-core 5437e5b789
backport of commit d3daf89ba8 (#16324)
Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-17 22:53:13 +00:00
Andrew Stucki 9ce2cff600
Backport of Add stricter validation and some normalization code for API Gateway ConfigEntries into release/1.15.x (#16317)
* Add stricter validation and some normalization code for API Gateway ConfigEntries

* Switch to certs with valid hostnames in them
2023-02-17 21:03:30 +00:00
hc-github-team-consul-core 0e89df2b7a
Backport of [OSS] security: update go to 1.20.1 into release/1.15.x (#16314)
* backport of commit 2a8cdf1747

* backport of commit 716d162048

* backport of commit 2c757fac4f

* backport of commit f81c5d4933

* backport of commit ff4f0596f3

* backport of commit 31bbca9fe4

* backport of commit 2f54191353

* backport of commit c263147180

---------

Co-authored-by: DanStough <dan.stough@hashicorp.com>
2023-02-17 21:00:25 +00:00
Andrew Stucki e4e7c69f44
Fix hostname alignment checks for HTTPRoutes (#16315) 2023-02-17 20:47:38 +00:00
hc-github-team-consul-core 4920cb4a77
Backport of Inline API Gateway TLS cert code into release/1.15.x (#16306)
* Inline API Gateway TLS cert code (#16295)

* Include secret type when building resources from config snapshot

* First pass at generating envoy secrets from api-gateway snapshot

* Update comments for xDS update order

* Add secret type + corresponding golden files to existing tests

* Initialize test helpers for testing api-gateway resource generation

* Generate golden files for new api-gateway xDS resource test

* Support ADS for TLS certificates on api-gateway

* Configure TLS on api-gateway listeners

* Inline TLS cert code

* update tests

* Add SNI support so we can have multiple certificates

* Remove commented out section from helper

* regen deep-copy

* Add tcp tls test

---------

Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>

* Fix bad merge

---------

Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-17 14:46:49 -05:00
hc-github-team-consul-core 3cba165d78
Backport of Fix panicky xDS test flakes into release/1.15.x (#16310)
* backport of commit 01ca6e268b

* backport of commit 485cb4d88d

---------

Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>
2023-02-17 19:24:01 +00:00
Nitya Dhanushkodi 94f4347ffe
Backport: troubleshoot: fixes and updated messages (#16294) (#16309) 2023-02-17 10:53:20 -08:00
hc-github-team-consul-core 6cd08b96c3
Backport of Fix mesh gateways incorrectly matching peer locality. into release/1.15.x (#16287)
* backport of commit 9bc7f6280a

* backport of commit 0c48c9a1e8

---------

Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-16 15:51:57 +00:00
hc-github-team-consul-core 0a32425202
Backport of Fix infinite recursion in inline-certificate config entry into release/1.15.x (#16281)
* backport of commit ea4dd2bb4c

* backport of commit 637d13a0a9

* backport of commit 18f19cecd1

* backport of commit 3e6807bdbc

---------

Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-15 20:03:29 +00:00
hc-github-team-consul-core 9aa85df0cc
backport of commit e5adc43315 (#16279)
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-15 18:17:15 +00:00
hc-github-team-consul-core 6db3c26f54
backport of commit acf75497c8 (#16275)
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-15 16:30:44 +00:00
hc-github-team-consul-core 1d994d707e
Backport of add integration tests for troubleshoot into release/1.15.x (#16261)
* backport of commit 74dcceeeb2

* cherry pick from PR 16223

---------

Co-authored-by: Maliz <maliheh.monshizadeh@hashicorp.com>
2023-02-15 08:11:57 -08:00
Nicholas Richu dc2aa36b6f
Update index.mdx (#16247)
* Update index.mdx

* Update website/content/docs/connect/dataplane/index.mdx

Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>

---------

Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
2023-02-13 16:38:05 -05:00
malizz c10ba43eb3
get clusters from route if listener uses RDS (#16243) 2023-02-13 12:50:32 -08:00
cskh 5b7f36c2ce
integ test: fix retry upstream test (#16246) 2023-02-13 15:16:56 -05:00
Andrew Stucki 9bb0ecfc18
[API Gateway] Add integration test for HTTP routes (#16236)
* [API Gateway] Add integration test for conflicted TCP listeners

* [API Gateway] Update simple test to leverage intentions and multiple listeners

* Fix broken unit test

* [API Gateway] Add integration test for HTTP routes
2023-02-13 14:18:05 -05:00
cskh ab5dac3414
upgrade test: peering with http router config entry (#16231)
* upgrade test: peering with http router config entry
2023-02-13 14:09:12 -05:00
Tyler Wendlandt 3f22879106
UI: CC-4032 - Update sidebar width (#16204)
* Update chrome-width var to be 280px

* Formatting & Changelog
2023-02-13 11:48:31 -07:00
Semir Patel 8979e64a94
Bump x/time to 0.3.0 and fix related breakage linked to RPCRateLimit (#16241)
* Bump x/time to 0.3.0 and fix related breakage linked to RPCRateLimit initialization

* Apply limitVal(...) to other rate.Limit config fields
2023-02-13 11:11:51 -06:00
Tyler Wendlandt a464c158d7
ui: add vercel info to the ui readme (#16239) 2023-02-13 10:05:01 -07:00
Valeriia Ruban 663a5642c2
[UI]: update Ember to 3.27 (#16227)
* Upgrade to 3.25 via ember-cli-update

* v3.25.3...v3.26.1

* v3.26.1...v3.27.0


Co-authored-by: Michael Klein <michael@firstiwaslike.com>
2023-02-10 13:32:19 -08:00
Andrew Stucki 8ff2974dbe
[API Gateway] Update simple test to leverage intentions and multiple listeners (#16228)
* [API Gateway] Add integration test for conflicted TCP listeners

* [API Gateway] Update simple test to leverage intentions and multiple listeners

* Fix broken unit test

* PR suggestions
2023-02-10 21:13:44 +00:00
Andrew Stucki 4c848a554d
Fix missing references to enterprise metadata (#16237) 2023-02-10 20:47:16 +00:00
Nitya Dhanushkodi 80fb18aa35
troubleshoot: make output have tables and colors (#16235)
Adds tables and colors using libraries used in consul-k8s. It doesn't add the full `terminal` UI package that consul-k8s uses since there is an existing UI in Consul that I didn't want to affect too much. So instead this adds to the existing UI.
2023-02-10 11:12:13 -08:00
Andrew Stucki 318ba215ab
[API Gateway] Add integration test for conflicted TCP listeners (#16225) 2023-02-10 11:34:01 -06:00
Derek Menteer 4f2ce60654
Fix peering acceptors in secondary datacenters. (#16230)
Prior to this commit, secondary datacenters could not be initialized
as peering acceptors if ACLs were enabled. This is due to the fact that
internal server-to-server API calls would fail because the management
token was not generated. This PR makes it so that both primary and
secondary datacenters generate their own management token whenever
a leader is elected in their respective clusters.
2023-02-10 09:47:17 -06:00
Nitya Dhanushkodi 78a4b5fd6f
update the api in envoyextensions and troubleshoot modules (#16226) 2023-02-09 15:39:03 -08:00
Andrew Stucki 3b9c569561
Simple API Gateway e2e test for tcp routes (#16222)
* Simple API Gateway e2e test for tcp routes

* Drop DNSSans since we don't front the Gateway with a leaf cert
2023-02-09 16:20:12 -05:00
skpratt db2bd404bf
Synthesize anonymous token pre-bootstrap when needed (#16200)
* add bootstrapping detail for acl errors

* error detail improvements

* update acl bootstrapping test coverage

* update namespace errors

* update test coverage

* consolidate error message code and update changelog

* synthesize anonymous token

* Update token language to distinguish Accessor and Secret ID usage (#16044)

* remove legacy tokens

* remove lingering legacy token references from docs

* update language and naming for token secrets and accessor IDs

* updates all tokenID references to clarify accessorID

* remove token type references and lookup tokens by accessorID index

* remove unnecessary constants

* replace additional tokenID param names

* Add warning info for deprecated -id parameter

Co-authored-by: Paul Glass <pglass@hashicorp.com>

* Update field comment

Co-authored-by: Paul Glass <pglass@hashicorp.com>

---------

Co-authored-by: Paul Glass <pglass@hashicorp.com>

* revert naming change

* add testing

* revert naming change

---------

Co-authored-by: Paul Glass <pglass@hashicorp.com>
2023-02-09 20:34:02 +00:00
Andrew Stucki 99cf421e7b
Add some fixes to allow for registering via consul connect envoy -gateway api (#16219)
* Add some fixes to allow for registering via consul connect envoy -gateway api

* Fix infinite recursion

---------

Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
2023-02-09 20:28:04 +00:00
malizz ba862ab6ad
troubleshoot basic envoy stats for an upstream (#16215)
* troubleshoot basic envoy stats for an upstream

* remove envoyID arg
2023-02-09 12:06:31 -08:00