20961 Commits (193c4df5c796498b0c19e4db97ba4712b0acf520)

 

All Branches   

Search

Author	SHA1	Message	Date
Michael Zalimeni	193c4df5c7	find out GOMAXPROCS	11 months ago
John Murret	b9ad0dfa41	NET-7025 - ci: test-integrations failures in compatibility tests. panics occuring in selectionTracker.TrackIDForSelection (#20040) ... * ci: test-integrations failures in compatibility tests. panics occuring in selectionTracker.TrackIDForSelection * Update selection_tracker.go	11 months ago
John Murret	62a07b4204	update makefile, compatibility tests, and nightlies to use latest envoy. (#20048)	11 months ago
John Murret	0f3cc3d631	fix formatting issue in envoy bootstrapping. (#20036)	11 months ago
Nathan Coleman	ab60fec15a	[NET-6426] Add gateway proxy controller that generates empty proxy state template (#19901) ... * NET-6426 Create ProxyStateTemplate when reconciling MeshGateway resource * Add TODO for switching fetch method based on gateway type * Use gateway-kind in workload metadata instead of owner reference * Create ProxyStateTemplate builder for gatewayproxy controller * Update to use new controller interface * Add copyright headers * Set correct name for ProxyStateTemplate identity reference * Generate empty ProxyStateTemplate by fetching MeshGateway This cheats and looks up the MeshGateway directly. In the future, we will need a Workload => xGateway mapper * Specify owner reference when writing ProxyStateTemplate * Update dependency mapper to account for multiple controllers per resource type * Regenerate v2 resource dependencies map * Add helpful trace logs, tag TODOs with ticket identifiers	11 months ago
John Murret	a19df32fa5	NET-6942 - Replace usage of deprecated Envoy field envoy.config.cluster.v3.Cluster.http_protocol_options. (#20010) ... * NET-6942 - Replace usage of deprecated Envoy field envoy.config.cluster.v3.Cluster.http_protocol_options. * add changelog	11 months ago
Michael Zalimeni	fe10339caa	[NET-7009] security: update x/crypto to 0.17.0 (#20023) ... security: update x/crypto to 0.17.0 This addresses CVE-2023-48795 (x/crypto/ssh).	11 months ago
David Yu	e7c7bc74c4	Dockerfile: bump up to `ubi-minimal:9.3` (#20014) ... * Update Dockerfile	11 months ago
Nathan Coleman	874e68f1eb	[NET-6899] Create name-aligned Service when reconciling MeshGateway resource (#19900) ... * NET-6899 Create name-aligned Service when reconciling MeshGateway resource The Service has an owner reference added to it indicating that it belongs to a MeshGateway * Specify port list when creating Service * Use constants, add TODO w/ ticket reference * Include gateway-kind in metadata of Service resource	11 months ago
Michael Zalimeni	d0bc091a60	[NET-6969] security: Re-enable Go Module + secrets security scans for release branches (#19978) ... * security: re-enable security scan release block This was previously disabled due to an unresolved false-positive CVE. Re-enabling both secrets and OSV + Go Modules scanning, which per our current scan results should not be a blocker to future releases. * security: run security scans on main and release branches	11 months ago
Valeriia Ruban	a87ab8b093	feat: updated github checks with frontend-test-ce end frontend-test-e… (#19995)	11 months ago
Nitya Dhanushkodi	9975b8bd73	[NET-5455] Allow disabling request and idle timeouts with negative values in service router and service resolver (#19992) ... * add coverage for testing these timeouts	11 months ago
wangxinyi7	013bcefe5c	grpc client in tls mode (#19680) ... * client in tls mode	11 months ago
cskh	cff872749d	agent: prevent empty server_metadata.json (#19935)	11 months ago
Ashesh Vidyut	4e451f2358	NET 6409 (#19515) ... * Update website/content/docs/k8s/k8s-cli.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/k8s-cli.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * fix doc * Update website/content/docs/k8s/k8s-cli.mdx Co-authored-by: David Yu <dyu@hashicorp.com> --------- Co-authored-by: David Yu <dyu@hashicorp.com>	11 months ago
David Yu	a3fa683ba5	docs: Update network segments in compat matrix for Enterprise features (#19933) ... Update index.mdx	11 months ago
Ashesh Vidyut	f1dee1a718	Net 6603 (#19718) ... * Update docs for NET-6603 * json format * json caps * Update website/content/docs/k8s/k8s-cli.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> --------- Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	11 months ago
Nathan Coleman	010bf533d1	NET-6663 Modify sidecarproxy controller to skip xGateway resources (#19902) ... * NET-6663 Modify sidecarproxy controller to skip xGateway resources * Check workload metadata after nil-check for workload * Add test asserting that workloads with meta gateway-kind are ignored * Use more common pattern for map access to increase readability	11 months ago
David Yu	de86ba76ee	docs: typo formatting consul-k8s docs (#19973) ... Update install-cli.mdx	11 months ago
aahel	ae998a698a	added computed failover policy resource (#19975)	11 months ago
wangxinyi7	cae23821dc	update changelog (#19966)	12 months ago
Derek Menteer	bbdbf3e4f8	Fix bug with prepared queries using sameness-groups. (#19970) ... This commit fixes an issue where the partition was not properly set on the peering query failover target created from sameness-groups. Before this change, it was always empty, meaning that the data would be queried with respect to the default partition always. This resulted in a situation where a PQ that was attempting to use a sameness-group for failover would select peers from the default partition, rather than the partition of the sameness-group itself.	12 months ago
Michael Zalimeni	79e02f8a89	ci: upload test results to DataDog on test failure (#19956) ... Due to the unintuitive behavior of GHA w.r.t. implicit status check `success()`, test results were only being uploaded on success (failures presumably came from retried tests that passed).	12 months ago
Nathan Coleman	02d4520235	Fix typo in service-defaults documentation (#19957)	12 months ago
John Murret	83cbe15b44	cli: Deprecate the `-admin-access-log-path` flag from `consul connect envoy` command in favor of: `-admin-access-log-config`. (#19943) ... * cli: Deprecate the `-admin-access-log-path` flag from `consul connect envoy` command in favor of: `-admin-access-log-config`. * fix changelog * add in documentation change.	12 months ago
John Murret	a995505976	NET-6317 - update usage of deprecated fields: http2_protocol_options and access_log_path (#19940) ... * updating usage of http2_protocol_options and access_log_path * add changelog * update template for AdminAccessLogConfig * remove mucking with AdminAccessLogConfig	12 months ago
natemollica-dev	afc6fe8308	Update telemetry.mdx RPC Metrics (#19593) ... * Update telemetry.mdx RPC Metrics Update Server Workload telemetry section to demonstrate explicitly enabling metric emission as they're [default disabled](f5bf256425/agent/config/builder.go (L2763C1-L2763C1)). * Update telemetry.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Update telemetry.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> --------- Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	12 months ago
Tauhid Anjum	0250e230a3	NET-6785: updating peering docs to include stream status and remote data (#19929) ... Updating peering docs to include stream status and remote data	12 months ago
aahel	a6496898de	added tenancy to TestBuildL4TrafficPermissions (#19932)	12 months ago
cskh	33a90edfab	Upgrade test(LTS): use network area to federate cluster (#19934) ... - Join areas - wait for members alive and validate cross area service discovery	12 months ago
Ashesh Vidyut	3443db7885	NET 6762 (#19931) ... NET-6762	12 months ago
Matt Keeler	123bc95e1a	Add Common Controller Caching Infrastructure (#19767) ... * Add Common Controller Caching Infrastructure	12 months ago
Jeff Boruszak	c870c00e70	docs: service rate limiting examples (#19925) ... * Include examples on usage page. * Description/example alignment	12 months ago
Semir Patel	69e3f93ee8	resource: add partition resource to proto-public to keep ENT and CE in sync (#19920)	12 months ago
John Murret	a5d5fd348b	fix actions to no longer use envoy 1.24.x to match supported versions. (#19918)	12 months ago
Valeriia Ruban	d7e0fca28b	fix: token list in Role details page is updated with tokens linked to… (#19912)	12 months ago
Tyler Wendlandt	e8164c7c04	NET-6900: stop reconciling services when peering is enabled (#19907) ... stop reconciling services when peering is enabled	12 months ago
Dhia Ayachi	f2b26ac194	Hash based config entry replication (#19795) ... * add a hash to config entries when normalizing * add GetHash and implement comparing hashes * only update if the Hash is different * only update if the Hash is different and not 0 * fix proto to include the Hash * fix proto gen * buf format * add SetHash and fix tests * fix config load tests * fix state test and config test * recalculate hash when restoring config entries * fix snapshot restore test * add changelog * fix missing normalize, fix proto indexes and add normalize test	12 months ago
Ganesh S	90010587f0	Move enterprise multicluster types to Register function (#19913) ... * Move enterprise types to Register function * Fix function name * Address comments	12 months ago
Ganesh S	173fe11c2b	Refactor exported services controller tests (#19906)	12 months ago
Tauhid Anjum	1484c6db47	NET-6771 - Adding sameness group protobuff in consul CE (#19883) ... Adding sameness group protobuff in consul CE	12 months ago
Ashesh Vidyut	c5cce63777	NET 6761 (#19837) ... NET-6761 explicit destinations tests updated	12 months ago
Valeriia Ruban	a6d6164ba0	fix: remove test to unblock CI (#19908)	12 months ago
Ronald	e13fbc743e	Remove warning for consul 1.17 deprecation (#19897)	12 months ago
Jeff Boruszak	659868ee73	docs: Updates to required ports (#19755) ... * improvements * Anchor link fixes * Apply suggestions from code review Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Explicit list of six ports * Apply suggestions from code review --------- Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	12 months ago
Derek Menteer	ccb2bf6170	Add documentation for proxy-config-map and xds_fetch_timeout_ms. (#19893) ... Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	12 months ago
Ronald	195e3aab8c	[NET-6842] splitting go version on different lines (#19887)	12 months ago
Derek Menteer	dfab5ade50	Fix ClusterLoadAssignment timeouts dropping endpoints. (#19871) ... When a large number of upstreams are configured on a single envoy proxy, there was a chance that it would timeout when waiting for ClusterLoadAssignments. While this doesn't always immediately cause issues, consul-dataplane instances appear to consistently drop endpoints from their configurations after an xDS connection is re-established (the server dies, random disconnect, etc). This commit adds an `xds_fetch_timeout_ms` config to service registrations so that users can set the value higher for large instances that have many upstreams. The timeout can be disabled by setting a value of `0`. This configuration was introduced to reduce the risk of causing a breaking change for users if there is ever a scenario where endpoints would never be received. Rather than just always blocking indefinitely or for a significantly longer period of time, this config will affect only the service instance associated with it.	12 months ago
John Murret	5ec84dbfd8	security: update supported envoy version 1.28.0 in addition to 1.25.11, 1.26.6, 1.27.2, 1.28.0 to address CVE-2023-44487 (#19879) ... * update too support envoy 1.28.0 * add changelog * update docs	12 months ago
Michael Zalimeni	1d9234a87a	ci: sanitize commit message for Slack failure alerts (#19876) ... To ensure that shell code cannot be injected, capture the commit message in an env var, then format it as needed. Also fix several other issues with formatting and JSON escaping by wrapping the entire message in a `toJSON` expression.	12 months ago