239 Commits (21118cafeb21b37111e6ff2a3d5e94528a1deaaa)

Author	SHA1	Message	Date
Preetha Appan	0f4e24f72c	Consolidate server lookup into one place and replace usages of localConsuls.	7 years ago
Preetha Appan	0f418a1bcf	Remove unused function	7 years ago
Preetha Appan	e639154abd	Remove stray commented line	7 years ago
Preetha Appan	00836a6aab	Remove server address tracking logic from manager/router and maintain it as part of lan event listener instead. Used sync.Map to track this, and added unit tests	7 years ago
Preetha Appan	830aca958a	ServerAddressProvider interface also returns an error now	7 years ago
Preetha Appan	c68fce89b5	Use config struct to create NetworkTransport layer when setting up raft	7 years ago
Preetha Appan	393ce1581b	Implement AddressProvider and wire that up to raft transport layer to support server nodes changing their IP addresses in containerized environments	7 years ago
Frank Schroeder	831d84c940	build: make tests independent of build tags ... When the metadata server is scanning the agents for potential servers it is parsing the version number which the agent provided when it joined. This version number has to conform to a certain format, i.e. 'n.n.n'. Without this version number properly set some tests fail with error messages that disguise the root cause. The default version number is currently set to 'unknown' in version/version.go which does not parse and triggers the tests to fail. The work around is to use a build tag 'consul' which will use the version number set in version_base.go instead which has the correct format and is set to the current release version. In addition, some parts of the code also require the version number to be of a certain value. Setting it to '0.0.0' for example makes some tests pass and others fail since they don't pass the semantic check. When using go build/install/test one has to remember to use '-tags consul' or tests will fail with non-obvious error messages. Using build tags makes the build process more complex and error prone since it prevents the use of the plain go toolchain and - at least in its current form - introduces subtle build and test issues. We should try to eliminate build tags for anything else but platform specific code. This patch removes all references to specific version numbers in the code and tests and sets the default version to '9.9.9' which is syntactically correct and passes the semantic check. This solves the issue of running go build/install/test without tags for the OSS build.	7 years ago
Frank Schroeder	d8195b3a4d	agent: drop status code comments	7 years ago
Frank Schroeder	f09a8bb1b6	agent: use http.StatusRequestEntityTooLarge instead of 413	7 years ago
Frank Schroeder	bc5dc32c1d	agent: use http.StatusInternalServerError instead of 500	7 years ago
Frank Schroeder	fa121be33f	agent: use http.StatusMethodNotAllowed instead of 405	7 years ago
Frank Schroeder	ad5c1d9e72	agent: use http.StatusNotFound instead of 404	7 years ago
Frank Schroeder	1a557ee9e9	agent: use http.StatusForbidden instead of 403	7 years ago
Frank Schroeder	7e2bc1b411	agent: use http.StatusUnauthorized instead of 401	7 years ago
Frank Schroeder	5d1546b052	agent: use http.StatusBadRequest instead of 400	7 years ago
Frank Schroeder	14ab5c7641	agent: support go-discover retry-join for wan	7 years ago
Frank Schröder	a3934c263c	acl: consolidate error handling (#3401) ... The error handling of the ACL code relies on the presence of certain magic error messages. Since the error values are sent via RPC between older and newer consul agents we cannot just replace the magic values with typed errors and switch to type checks since this would break compatibility with older clients. Therefore, this patch moves all magic ACL error messages into the acl package and provides default error values and helper functions which determine the type of error.	7 years ago
Frank Schroeder	16c58da27d	agent: drop unused code ... This code from http://github.com/hashicorp/consul/pull/3353 is no longer required.	7 years ago
Frank Schroeder	bf96857b17	dns: replace nameserver lookup with consistent rpc call ... This patch replaces the code which determines the list of servers in the current cluster with an RPC call to get the list of active consul service instances which only run on servers. This replaces the previous implementation which was more complex and relied on serf messages which can provide a different view than the consistent response from the raft log. As a side effect it makes the implementation independent of the server and the agent which means it works consistently across both. Different behavior for server and agent was the root cause for the bug in http://github.com/hashicorp/consul/issue/3047. Fixes #3407	7 years ago
Frank Schroeder	4052c6d2d2	dns: split node lookup from request handling	7 years ago
Frank Schroeder	d4e3d4344a	dns: refactor label by unrolling loop	7 years ago
Frank Schroeder	70be1ab635	dns: move ttl closer to usage	7 years ago
James Phillips	f51d56c80c	Switches to using a read lock for the agent's RPC dispatcher. ... This prevents RPC calls from getting serialized in this spot. Fixes #3376	7 years ago
Frank Schröder	4b642fed2f	agent: honor deprecated flags for retry-join-{ec2,azure,gce} (#3384)	7 years ago
James Phillips	e8a83bb463	Revert "Return 403 rather than a 404 when acls cause all results to be filter…"	7 years ago
James Phillips	02a87df044	Revert "Ensure that we return a permission denied only if the list of keys/en…"	7 years ago
Preetha Appan	42fb49c00b	Added unit test case to kvs_endpointtest	7 years ago
Preetha Appan	3276891142	Ensure that we return a permission denied only if the list of keys/entries prior to filtering by ACL is non empty	7 years ago
Frank Schroeder	7cff50a4df	agent: move agent/consul/agent to agent/metadata	7 years ago
Frank Schroeder	c395599cea	agent: move agent/consul/servers to agent/router	7 years ago
Frank Schroeder	1acff3533e	agent: move agent/consul/structs to agent/structs	7 years ago
James Phillips	cb618918b3	Cleans up some go fmt issues.	7 years ago
James Phillips	7442039c2d	Fixes a vet error.	7 years ago
Kyle Havlovitz	cf02e3bc22	Merge pull request #3369 from hashicorp/metrics-enhancements ... Add support for labels/filters from go-metrics	7 years ago
Kyle Havlovitz	c1c883f441	Add doc links for metrics endpoint	7 years ago
Kyle Havlovitz	0428e9fe9e	Update docs for metrics endpoint	7 years ago
Frank Schroeder	9fa237ddb6	dns: minor cleanups	7 years ago
Kyle Havlovitz	d5634fe2a8	Add support for labels/filters from go-metrics	7 years ago
Preetha Appan	72ae8c8f33	Go back to using <nodename>.node.dc.consul as the name of the ns record being returned.	7 years ago
Frank Schroeder	8a9653bdf8	dns: keep NS names in consul domain	7 years ago
Frank Schroeder	f17bf78bb1	dns: postmaster -> hostmaster	7 years ago
Frank Schroeder	60608b455d	dns: we do not support zone transfers	7 years ago
Frank Schroeder	76b2538915	dns: drop CNAME for primary name server	7 years ago
Preetha Appan	7f34dc08a5	Added test case with IPV6 bind address for NS records, rewrote tests to use verify library and other code review feedback	7 years ago
Preetha Appan	76319f751d	Added back glue records in NS response, expanded unit test. Also reused same function used in node lookup for adding A/AAAA records in the extra section of the NS response	7 years ago
Preetha Appan	f01f17bda3	Don't add A records for NS requests, because the record being returned already resolves correctly. Also fixed all the unit tests, and ignored hostnames that don't meet valid dns hostname criteria	7 years ago
Frank Schroeder	7ea11c2f45	dns: provide correct SOA and NS responses ... This patch changes the behavior of the DNS server as follows: * The SOA response contains the SOA record in the Answer section instead of the Authority section. It also contains NS records in the Authority and the corresponding A glue records in the Extra section. In addition, CNAMEs are added to the Extra section to make the MNAME of the SOA record resolvable. AAAA glue records are not yet supported. * The NS response returns up to three random servers from the consul cluster in the Answer section and the glue A records in the Extra section. AAAA glue records are not yet supported.	7 years ago
Preetha Appan	824fc4ee20	Unify regex used to identify invalid dns characters	7 years ago
Preetha Appan	37f75a393e	Use sanitized version of node name of server in NS record, and start with "server" rather than "ns"	7 years ago
Preetha Appan	794d1afe44	Removed a copy pasted irrelevant comment, and other code review feedback	7 years ago
Preetha Appan	f9db387097	Add NS records and A records for each server. Constructs ns host names using the advertise address of the server.	7 years ago
James Phillips	4bee2e49f5	Adds secure introduction for the ACL replication token. (#3357) ... Adds secure introduction for the ACL replication token, as well as a separate enable config for ACL replication.	7 years ago
Frank Schroeder	9ffeba18ee	agent: fix code for updated go-discover signature ... Closes #3351	7 years ago
James Phillips	c0a5ad7903	Adds a new /v1/acl/bootstrap API (#3349)	7 years ago
Miguel Prokop	6852dec3f2	agent: Fix script quoting on windows (#1875) ... This patch fixes the quoting for executing scripts on windows and splits the platform dependent code. Fixes #1875	7 years ago
Frank Schroeder	2fac427cd4	agent: use github.com/hashicorp/go-discover ... Replace the provider specific node discovery code with go-discover to support AWS, Azure and GCE. Fixes #3282	7 years ago
Preetha Appan	4076c0d741	Return nil instead of empty list when returning a PermissionDenied error, updated unit test	7 years ago
Preetha Appan	6336014a86	Return 403 rather than a 404 when acls cause all results to be filtered out. This fixes #2637	7 years ago
preetapan	0f494d8b86	Merge pull request #3332 from hashicorp/issue_3322 ... This fixes #3322	7 years ago
Preetha Appan	2d84cd2330	Tweaked parsing error message to quote properly	7 years ago
James Phillips	10b660d77a	Adds missing autopilot snapshot test and avoids snapshotting nil. (#3333)	7 years ago
Preetha Appan	5aeab1463b	Validate unix sockets and ip addresses as needed, more test cases	7 years ago
Preetha Appan	4cec55e8db	Modify ResolveTmplAddrs to parse advertise IPs, added test cases that fail to parse correctly	7 years ago
Preetha Appan	13c118ea51	Removed extra newlines	7 years ago
Preetha Appan	840749db7e	Fix comments, and remove redundant TestConfig init from a couple of unit tests	7 years ago
Frank Schroeder	b19b062194	add tests for go-sockaddr template parsing	7 years ago
Frank Schroeder	ac9602e798	agent: unix sockets are not ip addrs	7 years ago
Frank Schroeder	2fcdb35cbb	config: refactor tmpl resolution fn	7 years ago
Preetha Appan	aa98aeb4b1	Moved handling advertise address to readConfig and out of the agent's constructor, plus unit test fixes	7 years ago
Preetha Appan	25acd1534a	Move go-socketaddr template parsing into config package to make it happen before creating a new agent. Also removed redundant parsetemplate calls from agent.go.	7 years ago
James Phillips	6250cd70f5	Adds option to prepared queries to remove empty tags. (#3330)	7 years ago
James Phillips	496b0bcf07	Adds support for agent-side ACL token management via API instead of config files. (#3324) ... * Adds token store and removes all runtime use of config for ACL tokens. * Adds a new API for changing agent tokens on the fly.	7 years ago
Preetha Appan	b94617b281	Add extra test case for deleting entire tree with empty prefix	7 years ago
Preetha Appan	4498814843	Don't insert tombstone for empty prefix delete. Other minor unit test fixes	7 years ago
Preetha Appan	fee418d378	Removed redundant comments and unit test	7 years ago
Preetha Appan	b772c477c2	Removed redundant call to reap tombstone from unit test	7 years ago
Preetha Appan	ae443e21d6	Improved unit test per code review	7 years ago
Preetha Appan	36acf8d6a4	Use new DeletePrefixMethod for implementing KVSDeleteTree operation. This makes deletes on sub trees larger than one million nodes about 100 times faster. Added unit tests.	7 years ago
James Phillips	c413a9161e	Removes an unnecessary close.	7 years ago
Preetha Appan	f8b633c69e	Removed redundant logging	7 years ago
Preetha Appan	c26fd66edd	Clean up temporary files on write errors, and ignore any temporary service files on load with a warning. This fixes #3207	7 years ago
James Phillips	1774fdc237	Tweaks the error when scripts are disabled. ... This will hopefully help people self-serve if they upgrade without accounting for this.	7 years ago
Kyle Havlovitz	d74390ef86	Fix UpgradeVersionTag field not being passed correctly (#3304)	7 years ago
Preetha Appan	1f35aa6ff2	Made unit test for AddCheck error check the actual error string	7 years ago
Preetha Appan	c32e4ebe26	Unit test for failure case of AddCheck	7 years ago
Frank Schroeder	0047b7d3f0	fix spelling in filenames ... Fixes #3301	7 years ago
Frank Schroeder	83577e0daa	agent: make docker client work on windows	7 years ago
Frank Schroeder	b97ab92d87	build: add missing build tags	7 years ago
preetapan	fb43953894	Merge pull request #3296 from hashicorp/ensure_registration_race ... Fix race condition between removing a service and adding a check for …	7 years ago
Preetha Appan	e50f0e6722	Clean up any watch monitors associated with a failed AddCheck	7 years ago
Preetha Appan	6a257f242e	Removed unit test, added clarifying comment and returned a friendlier error message similar to the one in agent's AddService method ... Fixes #3297	7 years ago
Preetha Appan	9f048afe29	Fix race condition between removing a service and adding a check for the same service, which was causing orphaned checks	7 years ago
Kyle Havlovitz	19eae3d14b	Add UpgradeVersionTag to autopilot config	7 years ago
Frank Schroeder	0d9b53730f	agent: stop docker checks on shutdown	7 years ago
Frank Schroeder	60540c2417	agent: stop and remove docker checks ... Note that there is no test since the correct way to solve (and test) this is to replace the different maps with a single one or to hide that functionality behind a separate data structure. This will be addressed in #3294. Fixes #3265	7 years ago
Frank Schroeder	2123700056	agent: replace docker check ... This patch replaces the Docker client which is used for health checks with a simplified version tailored for that purpose. See #3254 See #3257 Fixes #3270	7 years ago
James Phillips	fff0f9698f	Prevents disabling gossip keyring file from disabling gossip encryption. (#3278)	7 years ago
James Phillips	1791d99a10	Adds new config to make script checks opt-in, updates documentation. (#3284)	7 years ago
James Phillips	780e68a753	Changes remote exec KV read to call GetTokenForAgent(). (#3283) ... * Changes remote exec KV read to call GetTokenForAgent(), which can use the acl_agent_token instead of the acl_token. Fixes #3160. * Fixes remote exec unit test with ACLs. * Adds unhappy ACL path to unit tests for remote exec.	7 years ago