consul

Commit Graph

Author	SHA1	Message	Date
Iryna Shustava	1c0beefc73	docs: add docs for running a single Consul dc in multiple k8s clusters (#10508 )	3 years ago
jkirschner-hashicorp	89f01647fb	Merge pull request #10519 from jkirschner-hashicorp/fix-doc-service-splitter-example docs: fix service splitter example weight sum	3 years ago
Ashwin Venkatesh	48069d18dd	Add docs for gossip encryption key rotation (#10522 ) * Add docs for gossip encryption key rotation with feedback from David, Kyle and Luke.	3 years ago
Daniel Nephin	391a0eae46	Merge pull request #10437 from christopherlai/patch-1 Link to Reverse Proxy from Load Balancer	3 years ago
Blake Covarrubias	8a9dad08b5	docs: Add audit logging examples (#10382 ) * docs: Add audit logging examples Resolves #8375, resolves #9055	3 years ago
Blake Covarrubias	ef6e618753	docs: Clarify serf_lan/retry_join behavior with network segments (#10386 ) * docs: Add info on using cloud auto-join with Network Segments Resolves hashicorp/go-discover#57 * Add note about joining network segments Specifically call out that agents can be configured to join a network segment by either specifying the Serf LAN port in the join address, changing the agent's default Serf LAN port by configuring `ports.serf_lan`, or specifying the port in the `-serf-lan-port` command line flag. Resolves #9972	3 years ago
David Yu	0c63a7b4d4	docs: Remove Helm 2 mention in Consul K8s install and uninstall (#10517 ) * docs: Remove Helm 2 mention in Consul K8s install and uninstall Helm 2 is no longer supported via Consul K8s. Helm 3 is now the supported version for Consul K8s.	3 years ago
Mike Ajala	d87263b5eb	Update self-hosted-kubernetes.mdx (#10518 ) Corrected typo, from you _mean_ need to you _may_ need.	3 years ago
Jared Kirschner	8dae08e30e	Fix service splitter example weight sum Weight sum must be equal to 100.	3 years ago
Daniel Nephin	1041ba71de	Merge pull request #10514 from hashicorp/dnephin/actually-enable-streaming streaming: fix not being able to enable streaming	3 years ago
Daniel Nephin	bc4d349ccf	streaming: support X-Cache-Hit header If a value was already available in the local view the request is considered a cache hit. If the materialized had to wait for a value, it is considered a cache miss.	3 years ago
Daniel Nephin	c78391797d	streaming: fix enable of streaming in the client And add checks to all the tests that explicitly use streaming.	3 years ago
Daniel Nephin	8b365f8271	Remove a racy and failing test This test is super racy (it's not just a single line). This test also starts failing once streaming is enabled, because the cache rate limit no longer applies to the requests in the test. The queries use streaming instead of the cache. This test is no longer valid, and the functionality is already well tested by TestCacheThrottle. Instead of spending time rewriting this test, let's remove it. ``` WARNING: DATA RACE Read at 0x00c01de410fc by goroutine 735: github.com/hashicorp/consul/agent.TestCacheRateLimit.func1() /home/daniel/pers/code/consul/agent/agent_test.go:1024 +0x9af github.com/hashicorp/consul/testrpc.WaitForTestAgent() /home/daniel/pers/code/consul/testrpc/wait.go:99 +0x209 github.com/hashicorp/consul/agent.TestCacheRateLimit.func1() /home/daniel/pers/code/consul/agent/agent_test.go:966 +0x1ad testing.tRunner() /usr/lib/go/src/testing/testing.go:1193 +0x202 Previous write at 0x00c01de410fc by goroutine 605: github.com/hashicorp/consul/agent.TestCacheRateLimit.func1.2() /home/daniel/pers/code/consul/agent/agent_test.go:998 +0xe9 Goroutine 735 (running) created at: testing.(*T).Run() /usr/lib/go/src/testing/testing.go:1238 +0x5d7 github.com/hashicorp/consul/agent.TestCacheRateLimit() /home/daniel/pers/code/consul/agent/agent_test.go:961 +0x375 testing.tRunner() /usr/lib/go/src/testing/testing.go:1193 +0x202 Goroutine 605 (finished) created at: github.com/hashicorp/consul/agent.TestCacheRateLimit.func1() /home/daniel/pers/code/consul/agent/agent_test.go:1022 +0x91e github.com/hashicorp/consul/testrpc.WaitForTestAgent() /home/daniel/pers/code/consul/testrpc/wait.go:99 +0x209 github.com/hashicorp/consul/agent.TestCacheRateLimit.func1() /home/daniel/pers/code/consul/agent/agent_test.go:966 +0x1ad testing.tRunner() /usr/lib/go/src/testing/testing.go:1193 +0x202 ```	3 years ago
Daniel Nephin	16b21b0864	http: add an X-Consul-Query-Backend header to responses So that it is easier to detect and test when streaming is being used.	3 years ago
Daniel Nephin	2e1e80266a	Merge pull request #10506 from hashicorp/dnephin/docs-rpc-query-metrics docs: correct some misleading telemetry docs	3 years ago
Daniel Nephin	7531a6681d	docs: correct some misleading telemetry docs The query metrics are actually reported for all read queries, not only ones that use a MinIndex to block for updates. Also clarify the raft.apply metric is only on the leader.	3 years ago
Kendall Strautman	794029b8ac	chore: upgrade react-head and deps (#10499 )	3 years ago
Daniel Nephin	7470647b85	Merge pull request #10497 from hashicorp/dnephin/tls-cert-exploration-3 tlsutil: unexport and remove methods	3 years ago
R.B. Boyer	ed8a901be7	connect: include optional partition prefixes in SPIFFE identifiers (#10507 ) NOTE: this does not include any intentions enforcement changes yet	3 years ago
Freddy	1c28aa732b	Update CONTRIBUTING.md	3 years ago
R.B. Boyer	a2876453a5	connect/ca: cease including the common name field in generated certs (#10424 ) As part of this change, we ensure that the SAN extensions are marked as critical when the subject is empty so that AWS PCA tolerates the loss of common names well and continues to function as a Connect CA provider. Parts of this currently hack around a bug in crypto/x509 and can be removed after https://go-review.googlesource.com/c/go/+/329129 lands in a Go release. Note: the AWS PCA tests do not run automatically, but the following passed locally for me: ENABLE_AWS_PCA_TESTS=1 go test ./agent/connect/ca -run TestAWS	3 years ago
hc-github-team-consul-core	f24ee5d842	auto-updated agent/uiserver/bindata_assetfs.go from commit `ace794d21`	3 years ago
John Cowen	ace794d214	ui: Enable specifying additional docfy config as json (#10464 )	3 years ago
Dhia Ayachi	a64c9a3e62	return an empty record when asked for an addr dns with type other then A, AAAA and ANY (#10401 ) * return an invalid record when asked for an addr dns with type other then A and AAAA * add changelog * fix ANY use case and add a test for it * update changelog type Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * return empty response if the question record type do not match for addr * set comment in the right place * return A\AAAA record in extra section if record type is not A\AAAA for addr * Fix failing test * remove commented code Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * use require for test validation * use variable to init struct * fix failing test * Update agent/dns.go Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * Update .changelog/10401.txt Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * Update agent/dns.go Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * Update agent/dns.go Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * Update agent/dns.go Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * fix compilation error Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	3 years ago
Daniel Nephin	dc67042eac	Invert the logic of outgoingRPCTLSDisabled To remove the double negatives, which should make it easier to read.	3 years ago
Daniel Nephin	39f282c425	tlsutil: inline verifyIncomingHTTPS This function was only used in one place, and the indirection makes it slightly harder to see what the one caller is doing. Since it's only accesing a couple fields it seems like the logic can exist in the one caller.	3 years ago
Daniel Nephin	a25c817478	tlsutil: remove indirection and duplication VerifyIncomingRPC and verifyIncomingRPC were duplicate functions, and once one is removed, Config.verifyIncomingRPC is only called in one place. Remove 2 of the 3 functions to make the behaviour easier to follow (less indirection).	3 years ago
Daniel Nephin	13e5448c17	tlsutil: remove unnecessary getter functions These functions did nothing but hide the fields they were returning.	3 years ago
Daniel Nephin	66ba2e2463	tlsutil: unexport and remove indirection Unexport outgoingALPNRPCConfig since it is only used internally Remove the MutualTLSCapable->mutualTLSCapable indirection, we only need the exported method. Inline enableAgentTLSForChecks to make it more clear what it does, since it only has a single caller and is wrapping a single field lookup.	3 years ago
Ludovic Ortega	c138c38392	[Fix] Add missing quote (#10484 )	3 years ago
R.B. Boyer	d7fb3543fc	sdk: Stop making a special /tmp/consul-test directory for testutil.TempFile and testutil.TempDir (#10494 )	3 years ago
lornasong	d43f3af2c6	docs/nia: fix catalog-services typos pt 2 (#10493 )	3 years ago
R.B. Boyer	ca0a58ff71	connect/proxy: fixes logic bug preventing builtin/native proxy from starting upstream listeners (#10486 ) Fixes #10480 Also fixed a data race in the `connect/proxy` package that was unearthed by the tests changed for this bugfix.	3 years ago
Kim Ngo	993f4715fd	docs/nia: fix typo (#10492 )	3 years ago
Daniel Nephin	bbf52ddd04	Merge pull request #10490 from hashicorp/dnephin/fix-tls-for-health-check tlsutil: fix ServerName used for health checks that use TLS	3 years ago
Daniel Nephin	bb37c4dfe8	Merge pull request #10476 from hashicorp/dnephin/ca-primary-uses-intermediate ca: replace ca.PrimaryIntermediateProviders	3 years ago
Daniel Nephin	d09027caf6	tlsutils: more test cases for OutgoingTLSConfigForCheck	3 years ago
Daniel Nephin	486b97e2c9	tlsutil: fix default server name for health checks Don't use the agent node name or agent server name when EnableAgentTLSForChecks=false.	3 years ago
Daniel Nephin	3a734c8303	Merge pull request #10488 from hashicorp/dnephin/ci-lib-testing ci: test api/sdk against last 2 Go versions	3 years ago
Daniel Nephin	a920936c86	tlsutil: convert tests for OutgoingTLSConfigForCheck to a table In preparation for adding more test cases.	3 years ago
Daniel Nephin	8054ea3ff1	ci: test api/sdk against last 2 Go versions So that we catch any incompatibilities with the preivous Go version.	3 years ago
David Yu	e7557ab4a1	docs: Remove beta version references from Helm reference (#10477 ) Removing references from the 1.10 beta that were included in Helm Configuration Reference	3 years ago
Daniel Nephin	0e86083351	Merge pull request #10473 from knusbaum/ioutil {api,command/agent}: change io.Discard to ioutil.Discard	3 years ago
Kim Ngo	491bd51033	docs/nia: Update CTS compatible versions (#10487 )	3 years ago
David Yu	2872fc6b26	docs: Removal of Consul vs ZooKeeper analysis (#10469 ) * docs: Removal of Consul vs ZooKeeper Although Consul does have a KV, we are not positioning Consul as a first class KV store versus other alternatives such as etcd or Zookeeper. Will remove this since this has not been updated with further analysis since this content was created. * Removing from Zookeeper analysis Navbar * Removing Zookeeper analysis from redirects	3 years ago
Mike Wickett	401fc0783c	update content param for improved attribution (#10468 )	3 years ago
R.B. Boyer	e3835ac6a1	structs: prohibit config entries from referencing more than one partition at a time (#10478 ) affected kinds: service-defaults, ingress-gateway, terminating-gateway, service-intentions	3 years ago
R.B. Boyer	8344b7fe2e	structs: prevent service-defaults upstream configs from using wildcard names or namespaces (#10475 )	3 years ago
Peter M	8db2865e86	Updating alert for 1.10 announcement (#10474 )	3 years ago
Daniel Nephin	f52d76f096	ca: replace ca.PrimaryIntermediateProviders With an optional interface that providers can use to indicate if they use an intermediate cert in the primary DC. This removes the need to look up the provider config when renewing the intermediate.	3 years ago

1 2 3 4 5 ...

14675 Commits (1c0beefc73366998c8cb723924916f21543e4a34) All Branches Search

14675 Commits (1c0beefc73366998c8cb723924916f21543e4a34)

All Branches