15415 Commits (18b3ac33e8379ddedc648ce18e9a7ad6d8b71441)

 

All Branches   

Search

Author	SHA1	Message	Date
Daniel Nephin	18b3ac33e8	acl: remove unused translate rules endpoint ... The CLI command does not use this endpoint, so we can remove it. It was missed in an earlier pass.	3 years ago
Daniel Nephin	2a67c898f3	api-docs: remove duplicate acl-legacy page ... Redirect the url to the copy that is part of the left nav.	3 years ago
Daniel Nephin	ab587f5221	Merge pull request #11182 from hashicorp/dnephin/acl-legacy-remove-upgrade ... acl: remove upgrade from legacy, start in non-legacy mode	3 years ago
Evan Culver	e808620463	Merge pull request #11118 from hashicorp/eculver/remove-envoy-1.15 ... Remove support for Envoy 1.15	3 years ago
Evan Culver	c7747212c3	Merge pull request #11115 from hashicorp/eculver/envoy-1.19.1 ... Add support for Envoy 1.19.1	3 years ago
Daniel Nephin	c7f74deb17	acl: remove updateEnterpriseSerfTags ... The only remaining caller is a test helper, and the tests don't use the enterprise gossip pools.	3 years ago
Daniel Nephin	9b1d2685bf	Merge pull request #11126 from hashicorp/dnephin/acl-legacy-remove-resolve-and-get-policy ... acl: remove ACL.GetPolicy RPC endpoint and ACLResolver.resolveTokenLegacy	3 years ago
Daniel Nephin	2ba9b43ff7	Merge pull request #11210 from hashicorp/dnephin/fix-raft-authz-error ... rpc: include error for AuthorizeServerConn failures	3 years ago
Daniel Nephin	3f873d2257	rpc: include error for AuthorizeServerConn failures ... The errs were not being captured because the value of append was not being assigned.	3 years ago
Daniel Nephin	a1e3fa818c	acl: fix test failures caused by remocving legacy ACLs ... This commit two test failures: 1. Remove check for "in legacy ACL mode", the actual upgrade will be removed in a following commit. 2. Remove the early WaitForLeader in dc2, because with it the test was failing with ACL not found.	3 years ago
Evan Culver	db397d62c5	Add 1.15 versions to too old list	3 years ago
Evan Culver	93ef3fb935	Merge branch 'eculver/envoy-1.19.1' into eculver/remove-envoy-1.15	3 years ago
Evan Culver	df4bc6a924	Update default version in command docs	3 years ago
Chris S. Kim	1c9b58a8af	agent: Reject partitions in legacy intention endpoints (#11181)	3 years ago
Chris S. Kim	53a35181e5	Support partitions in parseIntentionStringComponent (#11202)	3 years ago
Dhia Ayachi	a5b09493ab	fix token list by auth method (#11196) ... * add tests to OIDC authmethod and fix entMeta when retrieving auth-methods * fix oss compilation error	3 years ago
John Cowen	8b002d086a	ui: Address some Admin Partition FIXMEs (#11057) ... This commit addresses some left over admin partition FIXMEs 1. Adds Partition correctly to Service Instances 2. Converts non-important 'we can do this later' FIXMEs to TODOs 3. Removes some FIXMEs that I've double checked and addressed. Most of the remaining FIXMEs I'm waiting on responses to questions from the consul core folks for. I'll address those in a separate PR.	3 years ago
trujillo-adam	887a23deb1	Merge pull request #11185 from hashicorp/docs-improve-agent-overview ... providing additional information about the Consul agent	3 years ago
trujillo-adam	f5108e4683	applied feedback, moved the Lifecycle info to the front	3 years ago
Evan Culver	e41830af8a	Merge branch 'eculver/envoy-1.19.1' into eculver/remove-envoy-1.15	3 years ago
Evan Culver	fdbb742ffd	regenerate more envoy golden files	3 years ago
Kenia	5e7ef183ea	ui: Use of header default ACL policy (#11192) ... * Use of header default ACL policy * Update test for dc serializer	3 years ago
John Cowen	35a92e856b	ui: Make it hard to not URLEncode DataSource srcs/URIs (#11117) ... Our DataSource came in very iteratively, when we first started using it we specifically tried not to use it for things that would require portions of the @src="" attribute to be URL encoded (so things like service names couldn't be used, but dc etc would be fine). We then gradually added an easy way to url encode the @src="" attributes with a uri helper and began to use the DataSource component more and more. This meant that some DataSource usage continued to be used without our uri helper. Recently we hit #10901 which was a direct result of us not encoding @src values/URIs (I didn't realise this was one of the places that required URL encoding) and not going back over things to finish things off once we had implemented our uri helper, resulting in ~half of the codebase using it and ~half of it not. Now that almost all of the UI uses our DataSource component, this PR makes it even harder to not use the uri helper, by wrapping the string that it requires in a private URI class/object, that is then expected/asserted within the DataSource component/service. This means that as a result of this PR you cannot pass a plain string to the DataSource component without seeing an error in your JS console, which in turn means you have to use the uri helper, and it's very very hard to not URL encode any dynamic/user provided values, which otherwise could lead to bugs/errors similar to the one mentioned above. The error that you see when you don't use the uri helper is currently a 'soft' dev time only error, but like our other functionality that produces a soft error when you mistakenly pass an undefined value to a uri, at some point soon we will make these hard failing "do not do this" errors. Both of these 'soft error' DX features have been used this to great effect to implement our Admin Partition feature and these kind of things will minimize the amount of these types of bugs moving forwards in a preventative rather than curative manner. Hopefully these are the some of the kinds of things that get added to our codebase that prevent a multitude of problems and therefore are often never noticed/appreciated. Additionally here we moved the remaining non-uri using DataSources to use uri (that were now super easy to find), and also fixed up a place where I noticed (due to the soft errors) where we were sometimes passing undefined values to a uri call. The work here also led me to find another couple of non-important 'bugs' that I've PRed already separately, one of which is yet to be merged (#11105), hence the currently failing tests here. I'll rebase that once that PR is in and the tests here should then pass 🤞 Lastly, I didn't go the whole hog here to make DataSink also be this strict with its uri usage, there is a tiny bit more work on DataSink as a result of recently work, so I may (or may not) make DataSink equally as strict as part of that work in a separate PR.	3 years ago
John Cowen	a20bc5dbf1	docs: Call out the UI in README and include details for contributing to it (#11187)	3 years ago
trujillo-adam	0567e2d549	providing additional information about the Consul agent	3 years ago
Daniel Nephin	4faf805716	acl: call stop for the upgrade goroutine when done ... TestAgentLeaks_Server was reporting a goroutine leak without this. Not sure if it would actually be a leak in production or if this is due to the test setup, but seems easy enough to call it this way until we remove legacyACLTokenUpgrade.	3 years ago
Daniel Nephin	02da08ce77	acl: only run startACLUpgrade once ... Since legacy ACL tokens can no longer be created we only need to run this upgrade a single time when leadership is estalbished.	3 years ago
FFMMM	8bb6d8571c	wrap few doRequest calls for error handling (#11158)	3 years ago
Daniel Nephin	3ac910606c	acl: remove reading of serf acl tags ... We no long need to read the acl serf tag, because servers are always either ACL enabled or ACL disabled. We continue to write the tag so that during an upgarde older servers will see the tag.	3 years ago
Daniel Nephin	3d7c07e1e4	acl: fix test failure ... For some reason removing legacy ACL upgrade requires using an ACL token now for this WaitForLeader.	3 years ago
Daniel Nephin	5c721832dc	acl: remove legacy ACL upgrades from Server ... As part of removing the legacy ACL system	3 years ago
Daniel Nephin	94be1835b2	acl: fix test failures caused by remocving legacy ACLs ... This commit two test failures: 1. Remove check for "in legacy ACL mode", the actual upgrade will be removed in a following commit. 2. Use the root token in WaitForLeader, because without it the test was failing with ACL not found.	3 years ago
Daniel Nephin	8e9773e20b	acl: remove ACL.GetPolicy endpoint and resolve legacy acls ... And all code that was no longer used once those two were removed.	3 years ago
Daniel Nephin	d12dd48c61	acl: remove ACL upgrading from Clients ... As part of removing the legacy ACL system ACL upgrading and the flag for legacy ACLs is removed from Clients. This commit also removes the 'acls' serf tag from client nodes. The tag is only ever read from server nodes. This commit also introduces a constant for the acl serf tag, to make it easier to track where it is used.	3 years ago
Daniel Nephin	19040586ce	Merge pull request #11136 from hashicorp/dnephin/acl-resolver-fix-default-authz ... acl: fix default Authorizer for down_policy extend-cache/async-cache	3 years ago
Daniel Nephin	a53fdd68c8	Merge pull request #11110 from hashicorp/dnephin/acl-legacy-remove-initialize ... acl: remove initializeLegacyACL and the rest of the legacy FSM commands	3 years ago
Daniel Nephin	8f754aba14	Merge pull request #10999 from hashicorp/dnephin/revert-config-xds-port ... Revert config xds_port	3 years ago
Daniel Nephin	cc310224aa	command/envoy: stop using the DebugConfig from Self endpoint ... The DebugConfig in the self endpoint can change at any time. It's not a stable API. This commit adds the XDSPort to a stable part of the XDS api, and changes the envoy command to read this new field. It includes support for the old API as well, in case a newer CLI is used with an older API, and adds a test for both cases.	3 years ago
Daniel Nephin	053174f0c9	Add changelog	3 years ago
Daniel Nephin	6e1ebd3df7	acl: remove the last of the legacy FSM ... Replace it with an implementation that returns an error, and rename some symbols to use a Deprecated suffix to make it clear. Also remove the ACLRequest struct, which is no longer referenced.	3 years ago
Daniel Nephin	ed928511ca	acl: remove bootstrap-init FSM operation	3 years ago
Daniel Nephin	dab5d1bdc8	acl: remove initializeLegacyACL from leader init	3 years ago
Daniel Nephin	05f0cc3993	acl: remove ACLDelete FSM command, and state store function ... These are no longer used now that ACL.Apply has been removed.	3 years ago
Daniel Nephin	966e50e00e	acl: remove legacy field to ACLBoostrap	3 years ago
Daniel Nephin	1502547e38	Revert "Merge pull request #10588 from hashicorp/dnephin/config-fix-ports-grpc" ... This reverts commit 74fb650b6b, reversing changes made to 58bd817336.	3 years ago
Daniel Nephin	0330966315	Merge pull request #11101 from hashicorp/dnephin/acl-legacy-remove-rpc-2 ... acl: remove legacy ACL.Apply RPC	3 years ago
Daniel Nephin	c321879d1e	Revert "Merge pull request #10618 from hashicorp/dnephin/docs-add-deprecation-version-grpc-port" ... This reverts commit 81bb5f33eb, reversing changes made to 20feb42d3a.	3 years ago
Daniel Nephin	ea4a8343cd	Merge pull request #11177 from hashicorp/dnephin/remove-entmeta-methods ... structs: remove EnterpriseMeta helper methods	3 years ago
Daniel Nephin	4c579a49ed	Merge pull request #10986 from hashicorp/dnephin/acl-legacy-remove-rpc ... acl: remove legacy ACL RPC - part 1	3 years ago
lornasong	cf01379db4	nia/docs 0.4.0-beta1 (#11170) ... * docs/nia: Add Consul KV condition * docs/nia: Clarify boolean Consul KV condition options Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * nia/docs: Remove TFE-only restriction Also updates Terraform Enterprise references to the more general Terraform Cloud term. * nia/docs: Update Terraform Cloud features * nia/docs: Callouts for v0.4.0-beta * docs/nia: Indicate version for removal of tag field Clarifying when this tag will be removed so there is no confusion when it is not present in the v0.4.0-beta release. Co-authored-by: Melissa Kam <mkam@hashicorp.com> Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago