17468 Commits (1c6dcbe0ed030e1d40fcb1cbb850d405a8c843f8)

 

All Branches   

Search

Author	SHA1	Message	Date
Kyle Havlovitz	d86bcd0583	Merge pull request #12677 from hashicorp/expanded-token-read-docs ... docs: Add examples for expanded token read CLI and API	3 years ago
Kyle Havlovitz	763f728df4	Add doc examples for expanded token read CLI and API	3 years ago
Kyle Havlovitz	3dc4f50125	Add changelog note	3 years ago
Kyle Havlovitz	1a3b885027	Use the GatewayService SNI field for upstream SAN validation	3 years ago
Eric	e0a15690ae	Implement Lambda Patching in the Serverless Plugin	3 years ago
FFMMM	64e35777e0	docs: new rpc metric (#12608)	3 years ago
Kyle Havlovitz	059bd0a92e	Merge pull request #12670 from hashicorp/token-read-expanded ... oss: Add expanded token read flag and endpoint option	3 years ago
Kyle Havlovitz	51527907ab	Recommend SNI with TLS in the terminating gateway docs	3 years ago
Kyle Havlovitz	f8efe9a208	Log a warning when a terminating gateway service has TLS but not SNI configured	3 years ago
Dhia Ayachi	16b19dd82d	auto-reload configuration when config files change (#12329) ... * add config watcher to the config package * add logging to watcher * add test and refactor to add WatcherEvent. * add all API calls and fix a bug with recreated files * add tests for watcher * remove the unnecessary use of context * Add debug log and a test for file rename * use inode to detect if the file is recreated/replaced and only listen to create events. * tidy ups (#1535) * tidy ups * Add tests for inode reconcile * fix linux vs windows syscall * fix linux vs windows syscall * fix windows compile error * increase timeout * use ctime ID * remove remove/creation test as it's a use case that fail in linux * fix linux/windows to use Ino/CreationTime * fix the watcher to only overwrite current file id * fix linter error * fix remove/create test * set reconcile loop to 200 Milliseconds * fix watcher to not trigger event on remove, add more tests * on a remove event try to add the file back to the watcher and trigger the handler if success * fix race condition * fix flaky test * fix race conditions * set level to info * fix when file is removed and get an event for it after * fix to trigger handler when we get a remove but re-add fail * fix error message * add tests for directory watch and fixes * detect if a file is a symlink and return an error on Add * rename Watcher to FileWatcher and remove symlink deref * add fsnotify@v1.5.1 * fix go mod * do not reset timer on errors, rename OS specific files * rename New func * events trigger on write and rename * add missing test * fix flaking tests * fix flaky test * check reconcile when removed * delete invalid file * fix test to create files with different mod time. * back date file instead of sleeping * add watching file in agent command. * fix watcher call to use new API * add configuration and stop watcher when server stop * add certs as watched files * move FileWatcher to the agent start instead of the command code * stop watcher before replacing it * save watched files in agent * add add and remove interfaces to the file watcher * fix remove to not return an error * use `Add` and `Remove` to update certs files * fix tests * close events channel on the file watcher even when the context is done * extract `NotAutoReloadableRuntimeConfig` is a separate struct * fix linter errors * add Ca configs and outgoing verify to the not auto reloadable config * add some logs and fix to use background context * add tests to auto-config reload * remove stale test * add tests to changes to config files * add check to see if old cert files still trigger updates * rename `NotAutoReloadableRuntimeConfig` to `StaticRuntimeConfig` * fix to re add both key and cert file. Add test to cover this case. * review suggestion Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * add check to static runtime config changes * fix test * add changelog file * fix review comments * Apply suggestions from code review Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * update flag description Co-authored-by: FFMMM <FFMMM@users.noreply.github.com> * fix compilation error * add static runtime config support * fix test * fix review comments * fix log test * Update .changelog/12329.txt Co-authored-by: Dan Upton <daniel@floppy.co> * transfer tests to runtime_test.go * fix filewatcher Replace to not deadlock. * avoid having lingering locks Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * split ReloadConfig func * fix warning message Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * convert `FileWatcher` into an interface * fix compilation errors * fix tests * extract func for adding and removing files Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> Co-authored-by: FFMMM <FFMMM@users.noreply.github.com> Co-authored-by: Daniel Upton <daniel@floppy.co>	3 years ago
R.B. Boyer	dc62293978	build: run mog separately after the protobufs are generated (#12665) ... Also ensure that we run mog serially on each package in dependency order.	3 years ago
Kyle Havlovitz	b21b4346b4	Add expanded token read flag and endpoint option	3 years ago
FFMMM	1adfd7b94c	polish rpc.service.call metric behavior (#12624)	3 years ago
Paul Glass	706c844423	Add IAM Auth Method (#12583) ... This adds an aws-iam auth method type which supports authenticating to Consul using AWS IAM identities. Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>	3 years ago
Bryce Kalow	6bf67b7ef4	website: redirect /api to /api-docs (#12660)	3 years ago
Mike Morris	7cb9bfdfa9	website(api-gateway): add common errors page (#12643) ... * Adding common errors page for API Gateway * website(api-gateway): add missing CRDs common error message * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> * Update website/content/docs/api-gateway/common-errors.mdx * Additional page editing instructions and formating * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Apply suggestions from code review Co-authored-by: Jeff-Apple <79924108+Jeff-Apple@users.noreply.github.com> Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Eric Haberkorn	458b1838db	Merge pull request #12659 from hashicorp/bump-go-control-plane ... Bump Go Control Plane	3 years ago
R.B. Boyer	e79ce8ab03	xds: adding control of the mesh-wide min/max TLS versions and cipher suites from the mesh config entry (#12601) ... - `tls.incoming`: applies to the inbound mTLS targeting the public listener on `connect-proxy` and `terminating-gateway` envoy instances - `tls.outgoing`: applies to the outbound mTLS dialing upstreams from `connect-proxy` and `ingress-gateway` envoy instances Fixes #11966	3 years ago
R.B. Boyer	c98f2acd75	similar bump	3 years ago
R.B. Boyer	33fcc83d00	fail on error and use ptypes.MarshalAny for now instead of anypb.New	3 years ago
Eric	e4b4f175ed	Bump go-control-plane ... * `go get cloud.google.com/go@v0.59.0` * `go get github.com/envoyproxy/go-control-plane@v0.9.9` * `make envoy-library` * Bumpprotoc to 3.15.8	3 years ago
Matt Keeler	15ddbbc686	Update raft-boltdb to pull in new writeCapacity metric (#12646)	3 years ago
R.B. Boyer	e1e610d0ae	need two dollar signs for a shell variable in makefiles (#12657)	3 years ago
R.B. Boyer	82bfc04f87	build: auto install correct version of protoc locally (#12651)	3 years ago
R.B. Boyer	ac5bea862a	server: ensure that service-defaults meta is incorporated into the discovery chain response (#12511) ... Also add a new "Default" field to the discovery chain response to clients	3 years ago
FFMMM	bbab030beb	introduce EmptyReadRequest for status_endpoint (#12653) ... Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	3 years ago
Mike Morris	885edde8c1	website(api-gateway): add consul namespace to helm install (#12644) ... * website: api-gateway helm install consul namespace To mirror instructions at https://learn.hashicorp.com/tutorials/consul/kubernetes-api-gateway * website(api-gateway): add notes on where to find available versions * website(api-gateway): fixup link to more clearly indicate Consul Helm chart releases * Update website/content/docs/api-gateway/api-gateway-usage.mdx	3 years ago
R.B. Boyer	cef336a0a3	build: install mog and execute it during protobuf compilation (#12647) ... - also import replace isn't needed anymore	3 years ago
Fulvio	b94bbf7f43	remove DualStack field from check TCP #12629 (#12630)	3 years ago
R.B. Boyer	64e1501bda	add missing line from prototest.AssertDeepEqual (#12645)	3 years ago
R.B. Boyer	8aebca5794	build: enforce protoc binary is the expected version (#12641)	3 years ago
Eric Haberkorn	e5ed4fe493	Merge pull request #12639 from hashicorp/gogo-away ... Remove the Rest of Gogo	3 years ago
Eric	76c65e873c	code review changes	3 years ago
Eric	5f050614e5	remove the rest of gogo	3 years ago
Eric Haberkorn	9bc15e2f1a	Merge pull request #12638 from hashicorp/remove-gogo-from-acls ... Remove gogo from ACL Protobufs	3 years ago
Michele Degges	535edfa247	[RelAPI Onboarding] Add release API metadata file (#12591)	3 years ago
Eric	02d8a11ff0	remove gogo from acl protobufs	3 years ago
R.B. Boyer	4676960b93	proto-gen-rpc-glue: support QueryMeta and QueryOptions (#12637)	3 years ago
R.B. Boyer	dc023cb0dd	proto-gen-rpc-glue: use a shallow copy of proto/pbcommon instead of a consul dependency (#12634)	3 years ago
Connor	922619dfc3	Fix leaked Vault LifetimeRenewers (#12607) ... * Fix leaked Vault LifetimeRenewers When the Vault CA Provider is reconfigured we do not stop the LifetimeRenewers which can cause them to leak until the Consul processes recycles. On Configure execute stopWatcher if it exists and is not nil before starting a new renewal * Add jitter before restarting the LifetimeWatcher If we fail to login to Vault or our token is no longer valid we can overwhelm a Vault instance with many requests very quickly by restarting the LifetimeWatcher. Before restarting the LifetimeWatcher provide a backoff time of 1 second or less. * Use a retry.Waiter instead of RandomStagger * changelog * gofmt'd * Swap out bool for atomic.Unit32 in test * Provide some extra clarification in comment and changelog	3 years ago
Chris S. Kim	fb3a4a5db5	Merge pull request #12632 from hashicorp/kisunji-patch-1 ... Add example of goimports -local to contributing docs	3 years ago
R.B. Boyer	9736e33897	proto-gen-rpc-glue: fix behavior of renamed fields (#12633)	3 years ago
Chris S. Kim	1de2632684	Add example of goimports -local	3 years ago
driesgroblerw	750e5270c8	Updated the link to acl-policies ... https://www.consul.io/docs/security/acl was pointing to https://www.consul.io/docs/security/acl/policies (broken) and is now pointing to https://www.consul.io/docs/security/acl/acl-policies (working)	3 years ago
Luke Kysow	633e510f23	Fix logic for website checker (#12627) ... Workflow should run when no docs/cherry-pick label && no pr/docs-label	3 years ago
mrspanishviking	7da80ddbb4	Merge pull request #12595 from hashicorp/k8s-cli-install ... docs: add link to k8s cli install page	3 years ago
R.B. Boyer	3d725a1762	regenerate rpc glue stubs in protobuf files using comments (#12625)	3 years ago
Luke Kysow	c8cdebd9cc	Update consul-enterprise.mdx (#12622)	3 years ago
Mark Anderson	667fac8db1	Fixups for error messages from ACL Errors (#12620) ... Fixups for error messages from ACL Errors Alter error messages to be more verbose and explanatory, something like: Permission denied: token with AccessorID '8a2d52a0-6b41-7077-8374-09d4fafa2d30 ' lacks permission 'service:read' on "foobar" on "foobar" in partition "foo" in namespace "bar" Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
Eric Haberkorn	fb7462c8dd	Merge pull request #12616 from hashicorp/more-gogo-removal ... Assorted changes required to remove gogo	3 years ago