17449 Commits (1b69366a394b4be39a0b9bd1c444e841d1c61029)

 

All Branches   

Search

Author	SHA1	Message	Date
R.B. Boyer	be631ebdce	peering: disable requirement for mesh gateways initially (#13213)	3 years ago
Kyle Havlovitz	0ed9ff8ef7	Merge pull request #13143 from hashicorp/envoy-connection-limit ... Add connection limit setting to service defaults	3 years ago
John Cowen	a61e5cc08b	ui: Icon related fixups (#13183) ... * ui: Use new icon-size and icon-color for popover-menus * Remove the default currentColor plus add some more defaults * Undo transparency overwrites now we don't need them * Fixup discochain icons * Undo a default icon rule for vert align * Fixup expanded icon for meatball popovers * Fixup intention permission labels/badges/icons * Remove different res icon * Remove icon resolutions	3 years ago
Kyle Havlovitz	f2fbe8aec9	Fix proto lint errors after version bump	3 years ago
Michele Degges	bfe7f0ad63	[CI-only] Update tagging for dev_tags (#13199) ... Remove the hardcoded `-dev` suffix from dev_tags, which is causing tags to be in the format `1.12.0-dev-dev` instead of just `1.12.0-dev`. I'll clean up the old tags before making the dockerhub repo public, which will be available https://hub.docker.com/r/hashicorppreview/consul	3 years ago
Kyle Havlovitz	dbed8ae10b	Specify go_package explicitly	3 years ago
cskh	8712a088b1	fix: non-leader agents return 404 on Get Intention exact api (#13179) ... * fix: non-leader agents return 404 on Get Intention exact api - rpc call method appends extra error message, so change == to "Strings.Contains" Co-authored-by: Chris S. Kim <ckim@hashicorp.com>	3 years ago
Kyle Havlovitz	4bc6c23357	Add connection limit setting to service defaults	3 years ago
Jasmine W	4c04d70fb6	Merge pull request #13188 from hashicorp/ui/bugfix/permission-alignment ... ui: Alignment of L7 permissions	3 years ago
DanStough	817449041d	chore(test): Update bats version	3 years ago
DanStough	147fd96d97	feat: add endpoint struct to ServiceConfigEntry	3 years ago
alex	876f3bb971	peering: expose IsLeader, hung up on dialer if follower (#13164) ... Signed-off-by: acpana <8968914+acpana@users.noreply.github.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>	3 years ago
Jasmine W	30f6be389a	ui: Center alignment of L7 permissions	3 years ago
R.B. Boyer	9e1f362499	ci: github actions run with TERM=dumb and can't do tput commands (#13187)	3 years ago
R.B. Boyer	7b72ddfb60	build: wire up remaining 5 helper tools into the same auto-install logic used for protobuf tools (#13184)	3 years ago
Matt Keeler	26f4ea3f01	Migrate from `protoc` to `buf` (#12841) ... * Install `buf` instead of `protoc` * Created `buf.yaml` and `buf.gen.yaml` files in the two proto directories to control how `buf` generates/lints proto code. * Invoke `buf` instead of `protoc` * Added a `proto-format` make target. * Committed the reformatted proto files. * Added a `proto-lint` make target. * Integrated proto linting with CI * Fixed tons of proto linter warnings. * Got rid of deprecated builtin protoc-gen-go grpc plugin usage. Moved to direct usage of protoc-gen-go-grpc. * Unified all proto directories / go packages around using pb prefixes but ensuring all proto packages do not have the prefix.	3 years ago
cskh	c986940fda	Upgrade golangci-lint for go v1.18 (#13176)	3 years ago
R.B. Boyer	21bb0eef4a	test: fix flaky test TestEventBufferFuzz (#13175)	3 years ago
Matt Keeler	d0fdf22f83	Fix tests broken in #13173 (#13178) ... I changed the error type returned in a situation but didn’t update the tests to expect that error.	3 years ago
Matt Keeler	3c1e17cbd5	Fix flaky tests in the agent/grpc/public/services/serverdiscovery package (#13173) ... Occasionally we had seen the TestWatchServers_ACLToken_PermissionDenied be flagged as flaky in circleci. This change should fix that. Why it fixes it is complicated. The test was failing with a panic when a mocked ACL Resolver was being called more times than expected. I struggled for a while to determine how that could be. This test should call authorize once and only once and the error returned should cause the stream to be terminated and the error returned to the gRPC client. Another oddity was no amount of running this test locally seemed to be able to reproduce the issue. I ran the test hundreds of thousands of time and it always passed. It turns out that there is nothing wrong with the test. It just so happens that the panic from unexpected invocation of a mocked call happened during the test but was caused by a previous test (specifically the TestWatchServers_StreamLifecycle test) The stream from the previous test remained open after all the test Cleanup functions were run and it just so happened that when the EventPublisher eventually picked up that the context was cancelled during cleanup, it force closes all subscriptions which causes some loops to be re-entered and the streams to be reauthorized. Its that looping in response to forced subscription closures that causes the mock to eventually panic. All the components, publisher, server, client all operate based on contexts. We cancel all those contexts but there is no syncrhonous way to know when they are stopped. We could have implemented a syncrhonous stop but in the context of an actual running Consul, context cancellation + async stopping is perfectly fine. What we (Dan and I) eventually thought was that the behavior of grpc streams such as this when a server was shutting down wasn’t super helpful. What we would want is for a client to be able to distinguish between subscription closed because something may have changed requiring re-authentication and subscription closed because the server is shutting down. That way we can send back appropriate error messages to detail that the server is shutting down and not confuse users with potentially needing to resubscribe. So thats what this PR does. We have introduced a shutting down state to our event subscriptions and the various streaming gRPC services that rely on the event publisher will all just behave correctly and actually stop the stream (not attempt transparent reauthorization) if this particular error is the one we get from the stream. Additionally the error that gets transmitted back through gRPC when this does occur indicates to the consumer that the server is going away. That is more helpful so that a client can then attempt to reconnect to another server.	3 years ago
Evan Culver	7ccbb3489b	ci: name unnamed GHA workflows (#13162)	3 years ago
R.B. Boyer	bbcb1fa805	agent: allow for service discovery queries involving peer name to use streaming (#13168)	3 years ago
Dan Upton	d7f8a8e4ef	proxycfg: remove dependency on `cache.UpdateEvent` (#13144) ... OSS portion of enterprise PR 1857. This removes (most) references to the `cache.UpdateEvent` type in the `proxycfg` package. As we're going to be direct usage of the agent cache with interfaces that can be satisfied by alternative server-local datasources, it doesn't make sense to depend on this type everywhere anymore (particularly on the `state.ch` channel). We also plan to extract `proxycfg` out of Consul into a shared library in the future, which would require removing this dependency. Aside from a fairly rote find-and-replace, the main change is that the `cache.Cache` and `health.Client` types now accept a callback function parameter, rather than a `chan<- cache.UpdateEvents`. This allows us to do the type conversion without running another goroutine.	3 years ago
Evan Culver	0378372bde	telemetry: remove unused arg (#13161)	3 years ago
funkiestj	6167400b28	api: add the ability to specify a path prefix (#12914) ... Specifically meant for when consul is behind a reverse proxy / API gateway Co-authored-by: Evan Culver <eculver@hashicorp.com>	3 years ago
R.B. Boyer	2e72f44fda	peering: accept replication stream of discovery chain information at the importing side (#13151)	3 years ago
R.B. Boyer	c27e186334	test: TestServer_RPC_MetricsIntercept should use a concurrency-safe metrics store (#13157)	3 years ago
DanStough	8513566872	chore(ci): fix rate-limiting for backport-assistant	3 years ago
cskh	364d4f5efe	Retry on bad dogstatsd connection (#13091) ... - Introduce a new telemetry configurable parameter retry_failed_connection. User can set the value to true to let consul agent continue its start process on failed connection to datadog server. When set to false, agent will stop on failed start. The default behavior is true. Co-authored-by: Dan Upton <daniel@floppy.co> Co-authored-by: Evan Culver <eculver@users.noreply.github.com>	3 years ago
R.B. Boyer	c9602bf23e	Merge pull request #13150 from hashicorp/peering-replicate-connect-endpoints ... peering: replicate discovery chains information to importing peers	3 years ago
R.B. Boyer	3e4a522882	peering: replicate discovery chains information to importing peers ... Treat each exported service as a "discovery chain" and replicate one synthetic CheckServiceNode for each chain and remote mesh gateway. The health will be a flattened generated check of the checks for that mesh gateway node.	3 years ago
R.B. Boyer	5a03536040	prefactor some functions out of the monolithic file	3 years ago
R.B. Boyer	851c8c32b4	test: fix more flakes in the compatibility test (#13145)	3 years ago
R.B. Boyer	1e31dc891a	test: fix incorrect use of t instead of r in retry test (#13146)	3 years ago
DanStough	8b88ad873f	chore(ci): squash backport-assistant commits in PRs	3 years ago
Dhia Ayachi	4f17f3ba44	fix 'releases/*.*.x' to 'release/*.*.x' (#13132)	3 years ago
Dmytro	a11358ac48	docs: Update service/node identities text on ACL index (#13022) ... Modify node and service identities paragraphs on ACL index to better conform with the style guide. Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	3 years ago
R.B. Boyer	2a4d474d28	test: cleanup and unflake parts of the upgrade compat tests (#13126)	3 years ago
John Murret	0f67ffb984	Updating compatibility matrix for consul-k8s version 0.44.0 (#13111)	3 years ago
Dan Upton	a76f63a695	config: prevent top-level `verify_incoming` enabling mTLS on gRPC port (#13118) ... Fixes #13088 This is a backwards-compatibility bug introduced in 1.12.	3 years ago
Jasmine W	15b6494d0b	Merge pull request #13110 from hashicorp/ui/bugfix/misspelling ... Corrected "visualization" typo	3 years ago
Jasmine W	a52400ade0	Corrected "visualization" typo	3 years ago
cskh	53563d5925	Merge pull request #13108 from hashicorp/remove-unused-constant ... Remove unused constant in retry.go	3 years ago
Hui Kang	8885979858	Remove unused constant in retry.go	3 years ago
Michele Degges	b4ea16dd83	[CI-only] Build and publish dev dockerhub images (#13084)	3 years ago
Dhia Ayachi	a4e940907c	fix yaml alignment (#13105)	3 years ago
Dhia Ayachi	0d6df0850c	add a github workflow to trigger ent->oss merge on every PR merged (#13072) ... * add a github workflow to trigger ent->oss merge on every PR merged * remove the workflow automation ref to trigger-oss-merge in circle-ci * remove workflow automation * revert circle-ci changes * add actor * remove cherrypicker * add condition to avoid running in enterprise	3 years ago
R.B. Boyer	4418ee0f97	update the version of the underlying vm for these two test types (#13099)	3 years ago
Michael Schurter	9acce31237	docs: specify 1.12.0+ent incompat with nomad (#12883) ... Due to build changes in Consul 1.12.0 the `+ent` modifier is missing from the version reported by `/v1/agent/self`. Nomad looks for the `ent` modifier when determining whether to reconcile services in non-default namespaces. Without the modifier Nomad will only end up removing services from the default Consul namespace.	3 years ago
cskh	bac9cfc99c	Merge pull request #13098 from hashicorp/fix-insecure-load-test ... fix insecure cidr_blocks in load test	3 years ago