Commit Graph

868 Commits (194b2568617ae606e0d68637a42dbc9c85905637)

Author SHA1 Message Date
Mitchell Hashimoto 194b256861
agent/cache: send the total entries count on eviction to go-metrics
7 years ago
Mitchell Hashimoto e0d964188c
agent/cache: make edge case with prev/next idx == 0 handled better
7 years ago
Mitchell Hashimoto 3b550d2b72
agent/cache: rework how expiry data is stored to be more efficient
7 years ago
Mitchell Hashimoto 595193a781
agent/cache: initial TTL work
7 years ago
Mitchell Hashimoto 1df99514ca
agent/cache: send the RefreshTimeout into the backend fetch
7 years ago
Mitchell Hashimoto db4c47df27
agent/cache: on error, return from Get immediately, don't block forever
7 years ago
Mitchell Hashimoto cc2c98f961
agent/cache: lots of comment/doc updates
7 years ago
Mitchell Hashimoto 6c01e402e0
agent: augment /v1/connect/authorize to cache intentions
7 years ago
Mitchell Hashimoto 0f3f3d13ca
agent/cache-types: support intention match queries
7 years ago
Mitchell Hashimoto e1c1b8812a
agent/cache: return the error as part of Get
7 years ago
Mitchell Hashimoto 00e7ab3cd5
agent/cache: integrate go-metrics so the cache is debuggable
7 years ago
Mitchell Hashimoto 9f3dbf7b2a
agent/structs: DCSpecificRequest sets all the proper fields for
7 years ago
Mitchell Hashimoto be873d2558
agent/cache-types/ca-leaf: proper result for timeout, race on setting CA
7 years ago
Mitchell Hashimoto fcb15e15ae
agent/cache: support timeouts for cache reads and empty fetch results
7 years ago
Mitchell Hashimoto e81942df7a
agent/cache-types: rename to separate root and leaf cache types
7 years ago
Mitchell Hashimoto 8e7c517db1
agent/cache-types: got basic CA leaf caching work, major problems still
7 years ago
Mitchell Hashimoto 917a9e63d5
agent: check cache hit count to verify CA root caching, background update
7 years ago
Mitchell Hashimoto 6902d721d6
agent: initialize the cache and cache the CA roots
7 years ago
Mitchell Hashimoto c329b4cb34
agent/cache: partition by DC/ACL token
7 years ago
Mitchell Hashimoto e3c1162881
agent/cache: Reorganize some files, RequestInfo struct, prepare for partitioning
7 years ago
Mitchell Hashimoto b0db5657c4
agent/cache: ConnectCA roots caching type
7 years ago
Mitchell Hashimoto 975be337a9
agent/cache: blank cache key means to always fetch
7 years ago
Mitchell Hashimoto 1cfb0f1922
agent/cache: initial kind-of working cache
7 years ago
Kyle Havlovitz 33418afd3c
Add cross-signing mechanism to root rotation
7 years ago
Kyle Havlovitz d83fbfc766
Add the root rotation mechanism to the CA config endpoint
7 years ago
Kyle Havlovitz f9d92d795e
Have the built in CA store its state in raft
7 years ago
Kyle Havlovitz 30c1973e8b
Fix the testing endpoint's root set op
7 years ago
Kyle Havlovitz 75f62e3117
Update the CA config endpoint to enable GETs
7 years ago
Kyle Havlovitz ab737ef0f8
Hook the CA RPC endpoint into the provider interface
7 years ago
Kyle Havlovitz 1f6501895f
Add CA bootstrapping on establishing leadership
7 years ago
Kyle Havlovitz 682f105c7c
Add the bootstrap config for the CA
7 years ago
Kyle Havlovitz 9fc33d2a62
Add the CA provider interface and built-in provider
7 years ago
Kyle Havlovitz 1787f88618
Add CA config set to fsm operations
7 years ago
Kyle Havlovitz 6b3416e480
Add the Connect CA config to the state store
7 years ago
Paul Banks 36dbd878c9
Adds `api` client code and tests for new Proxy Config endpoint, registering with proxy and seeing proxy config in /agent/services list.
7 years ago
Paul Banks 730da74369
Fix various test failures and vet warnings.
7 years ago
Paul Banks 1e72ad66f5
Refactor localBlockingQuery to use memdb.WatchSet. Much simpler and correct as a bonus!
7 years ago
Paul Banks 8d09381b96
Super ugly hack to get TeamCity build to work for this PR without adding a vendor that is being added elsewhere and will conflict...
7 years ago
Paul Banks d73f079d0f
Add X-Consul-ContentHash header; implement removing all proxies; add load/unload test.
7 years ago
Paul Banks 2a69663448
Agent Connect Proxy config endpoint with hash-based blocking
7 years ago
Paul Banks 3e3f0e1f31
HTTP agent registration allows proxy to be defined.
7 years ago
Paul Banks e6071051cf
Added connect proxy config and local agent state setup on boot.
7 years ago
Paul Banks 88541bba17
Add tests all the way up through the endpoints to ensure duplicate src/destination is supported and so ultimately deny/allow nesting works.
7 years ago
Paul Banks ed9f07c361
Allow duplicate source or destination, but enforce uniqueness across all four.
7 years ago
Paul Banks 10db79c8ae
Rework connect/proxy and command/connect/proxy. End to end demo working again
7 years ago
Paul Banks 26e65f6bfd
connect.Service based implementation after review feedback.
7 years ago
Mitchell Hashimoto 95da20ffd7
agent: rename authorize param ClientID to ClientCertURI
7 years ago
Mitchell Hashimoto 6e57233913
agent: add TODO for verification
7 years ago
Mitchell Hashimoto 5a47a53c70
acl: IntentionDefault => IntentionDefaultAllow
7 years ago
Mitchell Hashimoto ac72a0c5fd
agent: ACL checks for authorize, default behavior
7 years ago