19189 Commits (1483c945319301072019d138007b661bbc6b501f)

 

All Branches   

Search

Author	SHA1	Message	Date
Freddy	678f8b8876	Merge pull request #15065 from hashicorp/gh-15051-advertise_addr_wan	2 years ago
wenincode	f0cdbb00b3	Pre-populate partition on sso login	2 years ago
freddygv	6d9be5fb15	Use plain TaggedAddressWAN	2 years ago
freddygv	8d211cc9cc	Add unit test	2 years ago
cskh	eae5f87002	changelog	2 years ago
cskh	058ee4fb84	fix: wan address isn't used by peering token	2 years ago
Curt Bushko	00cf1fbd44	Merge pull request #15064 from hashicorp/curtbushko/update-envoy-bootstrap ... update prometheus template args	2 years ago
Curt Bushko	161273a931	Update command/connect/envoy/bootstrap_tpl.go ... Co-authored-by: Paul Glass <pglass@hashicorp.com>	2 years ago
Curt Bushko	cd185c4c2c	update prometheus template args	2 years ago
Michele Degges	45cfb1272f	[CI-only] Update RedHat registry tag ... There are a few changes being made to RedHat's registry on October 20, 2022 that affect the way images need to be tagged prior to being pushed to the registry. This PR changes the tag to conform to the new standard. We have other work queued up in crt-workflows-common and actions-docker-build to support the other required changes. This PR should be merged to `main` and all release branches on or after October 20, 2022, and MUST be merged before your next production release. Otherwise, the automation to push to the RedHat registry will not work. ---- A detailed list of changes shared from RedHat (as an FYI): The following changes will occur for container certification projects that leverage the Red Hat hosted registry [[registry.connect.redhat.com](http://registry.connect.redhat.com/)] for image distribution: - All currently published images are migrating to a NEW, Red Hat hosted quay registry. Partners do not have to do anything for this migration, and this will not impact customers. The registry will still utilize [registry.connect.redhat.com](http://registry.connect.redhat.com/) as the registry URL. - The registry URL currently used to push, tag, and certify images, as well as the registry login key, will change. You can see these changes under the “Images” tab of the container certification project. You will now see a [quay.io](http://quay.io/) address and will no longer see [scan.connect.redhat.com](http://scan.connect.redhat.com/). - Partners will have the opportunity to auto-publish images by selecting “Auto-publish” in the Settings tab of your certification project. This will automatically publish images that pass all certification tests. - For new container image projects, partners will have the option to host within their own chosen image registry while using [registry.connect.redhat.com](http://registry.connect.redhat.com/) as a proxy address. This means the end user can authenticate to the Red Hat registry to pull a partner image without having to provide additional authentication to the partner’s registry.	2 years ago
Nitya Dhanushkodi	5e156772f6	Remove ability to specify external addresses in GenerateToken endpoint (#14930) ... * Reverts "update generate token endpoint to take external addresses (#13844)" This reverts commit f47319b7c6.	2 years ago
Tyler Wendlandt	2a9cc3f084	Merge pull request #14971 from hashicorp/ui/feature/agentless-nodes-banner ... ui: agentless nodes notice banner banner	2 years ago
cskh	6a9739ad7e	chore: fix the module path to align with the code structure (#15053)	2 years ago
Michael Klein	7285a9160f	Cleanup app boot by using hcp service	2 years ago
Michael Klein	14b90314e9	Encapsulate hcp related logic in service	2 years ago
Michael Klein	dcdcdbc5ea	Fix `TokenSecretID`-handling	2 years ago
Michael Klein	cc25602df1	Add tests for TokenSecretID handling	2 years ago
Tu Nguyen	e8fcbfe19e	Merge pull request #15036 from hashicorp/update-ent-license-link ... Update enterprise license link	2 years ago
Kyle Havlovitz	5c3427608b	Merge pull request #15035 from hashicorp/vault-ttl-update-warn ... Warn instead of returning error when missing intermediate mount tune permissions	2 years ago
Tyler Wendlandt	d59d0a36cd	Merge pull request #14974 from hashicorp/ui/chore/enable-synthetic-nodes-in-mock-data ... ui: enable synthetic nodes in mock data	2 years ago
Chris S. Kim	3d05a8e9af	Remove unused methods from template	2 years ago
cskh	d562d363fc	peering: skip registering duplicate node and check from the peer (#14994) ... * peering: skip register duplicate node and check from the peer * Prebuilt the nodes map and checks map to avoid repeated for loop * use key type to struct: node id, service id, and check id	2 years ago
Jared Kirschner	f59483bc9e	docs: fix api docs anchor links	2 years ago
wenincode	15d14ba308	Enable synthetic nodes in mock data via env var	2 years ago
Jared Kirschner	04a14e8f07	docs: fix ent feature matrix links	2 years ago
trujillo-adam	588a196c86	Merge pull request #15033 from hashicorp/docs/fix-front-matter-typo ... Docs/fix front matter typo	2 years ago
R.B. Boyer	c3fa46c3f6	test: possibly fix flaky TestEnvoy/case-ingress-gateway-multiple-services test (#15034) ... The integration test TestEnvoy/case-ingress-gateway-multiple-services is flaky and this possibly reduces the flakiness by explicitly waiting for services to show up in the catalog as healthy before waiting for them to show up in envoy as healthy which gives it just a bit more time to sync.	2 years ago
Chris S. Kim	29a297d3e9	Refactor client RPC timeouts (#14965) ... Fix an issue where rpc_hold_timeout was being used as the timeout for non-blocking queries. Users should be able to tune read timeouts without fiddling with rpc_hold_timeout. A new configuration `rpc_read_timeout` is created. Refactor some implementation from the original PR 11500 to remove the misleading linkage between RPCInfo's timeout (used to retry in case of certain modes of failures) and the client RPC timeouts.	2 years ago
Kyle Havlovitz	d122108992	Warn instead of returning an error when intermediate mount tune permission is missing	2 years ago
wenincode	9da2a73785	Call super with arguments to safeguard against future changes	2 years ago
Tu Nguyen	b46172d4a3	Update enterprise license link	2 years ago
wenincode	815439b593	Update yarn lockfile	2 years ago
trujillo-adam	3f3847d651	clarification that Consul K8s in these instructions refers to the the CLI tool	2 years ago
freddygv	ef2127ec51	Fixup links	2 years ago
freddygv	b8ef47f6d6	Add docs about upgrading primary mesh gateways ... Care must be taken when replacing mesh gateways in the primary datacenter, because if the old addresses become unreachable before the secondary datacenters receive the new addresses then the primary datacenter overall will become unreachable. This commit adds docs related to this class of upgrades.	2 years ago
trujillo-adam	55b387b5be	removed quotation marks around front matter and revised the introduction	2 years ago
R.B. Boyer	0cca4c088d	test: possibly fix flake in TestIntentionGetExact (#15021) ... Restructure test setup to be similar to TestAgent_ServerCertificate and see if that's enough to avoid flaking after join.	2 years ago
freddygv	0d4b11c01b	Update upgrade docs for 1.13.2. ... In 1.13.2 we added a new flag called use_auto_cert to address issues previously documented in the upgrade guide. Originally there was no way to disable TLS for gRPC when auto-encrypt was in use, because TLS was enabled for gRPC due to the presence of auto-encrypt certs. As of 1.13.2, using auto-encrypt certs as the signal to enable TLS for gRPC is opt-in only. Meaning that if anyone who had upgraded to 1.13 relied on that side-effect, they now need to explicitly configure it.	2 years ago
wenincode	c450183b4c	Use local-storage service to manage localStorage ... Use local-storage service, prototyped here https://github.com/LevelbossMike/local-storage-service, to manage local storage usage in an octane way. Does not write to local storage in tests by default and is easy to stub out.	2 years ago
Dhia Ayachi	5eb2bad8fd	bump relevant modules versions (#14972)	2 years ago
Michael Klein	47053c185d	Improve testability `env`-service	2 years ago
Iryna Shustava	5cd0ccfc75	Support auth method with snapshot agent [ENT] (#15020) ... Port of hashicorp/consul-enterprise#3303	2 years ago
R.B. Boyer	fe2d41ddad	cache: prevent goroutine leak in agent cache (#14908) ... There is a bug in the error handling code for the Agent cache subsystem discovered: 1. NotifyCallback calls notifyBlockingQuery which calls getWithIndex in a loop (which backs off on-error up to 1 minute) 2. getWithIndex calls fetch if there’s no valid entry in the cache 3. fetch starts a goroutine which calls Fetch on the cache-type, waits for a while (again with backoff up to 1 minute for errors) and then calls fetch to trigger a refresh The end result being that every 1 minute notifyBlockingQuery spawns an ancestry of goroutines that essentially lives forever. This PR ensures that the goroutine started by `fetch` cancels any prior goroutine spawned by the same line for the same key. In isolated testing where a cache type was tweaked to indefinitely error, this patch prevented goroutine counts from skyrocketing.	2 years ago
R.B. Boyer	02a858efa0	ca: fix a masked bug in leaf cert generation that would not be notified of root cert rotation after the first one (#15005) ... In practice this was masked by #14956 and was only uncovered fixing the other bug. go test ./agent -run TestAgentConnectCALeafCert_goodNotLocal would fail when only #14956 was fixed.	2 years ago
David Yu	efe25cfe46	docs: formatting on backend application and delete peering CRDs (#15007) ... * docs: formatting on backend application and delete peering CRDs Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
Dan Upton	641347fe14	proto: deep-copy PeeringTrustBundle using proto.Clone (#15004) ... Fixes a `go vet` warning caused by the pragma.DoNotCopy on the protobuf message type. Originally I'd hoped we wouldn't need any reflection in the proxycfg hot path, but it seems proto.Clone is the only supported way to copy a message.	2 years ago
Chris S. Kim	3d2dffff16	Merge pull request #13388 from deblasis/feature/health-checks_windows_service ... Feature: Health checks windows service	2 years ago
Dan Upton	f8b4b41205	proxycfg: fix goroutine leak when service is re-registered (#14988) ... Fixes a bug where we'd leak a goroutine in state.run when the given context was canceled while there was a pending update.	2 years ago
Kyle Havlovitz	3a60885259	Merge pull request #14800 from hashicorp/mgw-tcp-keepalives ... Add TCP keepalive settings to proxy config for mesh gateways	2 years ago
Kyle Havlovitz	aaf892a383	Extend tcp keepalive settings to work for terminating gateways as well	2 years ago