github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
11,640 Commits
1,700 Branches
457 Tags
692 MiB
Commit Graph

11640 Commits (249af0a094ee89950b5525678366abba83944d77)

Author SHA1 Message Date
R.B. Boyer db870ba92b
test: make auth method cli crud test helper ignore the default namespace (#7799) 2020-05-06 15:09:47 -05:00
Chris Piraino 01e89f03ea
Merge pull request #7678 from hashicorp/ingress/host-header-routing 
Allow ingress gateways to route traffic based on Host header
 2020-05-06 15:07:36 -05:00
Chris Piraino 905279f5d1 A proxy-default config entry only exists in the default namespace 2020-05-06 15:06:14 -05:00
Chris Piraino d498a0afc9 Correctly set a namespace label in the required domain for xds routes 
If an upstream is not in the default namespace, we expect DNS requests
to be served over "<service-name>.ingress.<namespace>.*"
 2020-05-06 15:06:14 -05:00
Chris Piraino 114a18e890 Remove outdated comment 2020-05-06 15:06:14 -05:00
Chris Piraino d8517bd6fd Better document wildcard specifier interactions 2020-05-06 15:06:14 -05:00
Chris Piraino 45e635286a Re-add comment on connect-proxy virtual hosts 2020-05-06 15:06:14 -05:00
Kyle Havlovitz f9672f9bf1 Make sure IngressHosts isn't parsed during JSON decode 2020-05-06 15:06:14 -05:00
Chris Piraino c44f877758 Comment why it is ok to expect upstreams slice to not be empty 2020-05-06 15:06:13 -05:00
Chris Piraino 881760f701 xds: Use only the port number as the configured route name 
This removes duplication of protocol from the stats_prefix
 2020-05-06 15:06:13 -05:00
Kyle Havlovitz 89e6b16815 Filter wildcard gateway services to match listener protocol 
This now requires some type of protocol setting in ingress gateway tests
to ensure the services are not filtered out.

- small refactor to add a max(x, y) function
- Use internal configEntryTxn function and add MaxUint64 to lib
 2020-05-06 15:06:13 -05:00
Chris Piraino f40833d094 Allow Hosts field to be set on an ingress config entry 
- Validate that this cannot be set on a 'tcp' listener nor on a wildcard
service.
- Add Hosts field to api and test in consul config write CLI
- xds: Configure envoy with user-provided hosts from ingress gateways
 2020-05-06 15:06:13 -05:00
Chris Piraino b73a13fc9e Remove service_subset field from ingress config entry 
We decided that this was not a useful MVP feature, and just added
unnecessary complexity
 2020-05-06 15:06:13 -05:00
Kyle Havlovitz 711d1389aa Support multiple listeners referencing the same service in gateway definitions 2020-05-06 15:06:13 -05:00
Kyle Havlovitz 247f9eaf13 Allow ingress gateways to route traffic based on Host header 
This commit adds the necessary changes to allow an ingress gateway to
route traffic from a single defined port to multiple different upstream
services in the Consul mesh.

To do this, we now require all HTTP requests coming into the ingress
gateway to specify a Host header that matches "<service-name>.*" in
order to correctly route traffic to the correct service.

- Differentiate multiple listener's route names by port
- Adds a case in xds for allowing default discovery chains to create a
  route configuration when on an ingress gateway. This allows default
  services to easily use host header routing
- ingress-gateways have a single route config for each listener
  that utilizes domain matching to route to different services.
 2020-05-06 15:06:13 -05:00
R.B. Boyer a854e4d9c5
acl: oss plumbing to support auth method namespace rules in enterprise (#7794) 
This includes website docs updates.
 2020-05-06 13:48:04 -05:00
Preetha 760368bf1b
Merge pull request #7792 from hashicorp/changelog-fixup 
Remove duplicated entries in CHANGELOG.md
 2020-05-06 13:31:03 -05:00
Preetha 1d5f2fe9b0
Remove duplicated entries in CHANGELOG.md 
Remove some duplicated entries in the unreleased section of the changelog that were released in  1.7.3
 2020-05-06 08:56:41 -05:00
Hans Hasselberg 1d5f12e823
Update CHANGELOG.md 2020-05-06 01:38:59 +02:00
Luke Kysow c33a241438
Merge pull request #7724 from hashicorp/helm-repo 
Update k8s instructions for new helm repo
 2020-05-05 16:17:53 -07:00
R.B. Boyer 3242d0816d
test: make the kube auth method test helper use freeport (#7788) 2020-05-05 16:55:21 -05:00
Hans Hasselberg aa121bc8d2
segments: oss changes for enterprise network area changes (#7786) 
OSS code changes for network segments
 2020-05-05 21:41:19 +02:00
Hans Hasselberg 096a2f2f02 network_segments: stop advertising segment tags 2020-05-05 21:32:05 +02:00
Hans Hasselberg 995a24b8e4 agent: refactor to use a single addrFn 2020-05-05 21:08:10 +02:00
Hans Hasselberg 6994c0d47f agent: rename local/global to src/dst 2020-05-05 21:07:34 +02:00
Chris Piraino 7361e11bc5
Update CHANGELOG.md 2020-05-05 10:56:50 -05:00
Chris Piraino 69b44fb942
Construct a default destination if one does not exist for service-router (#7783) 2020-05-05 10:49:50 -05:00
Matt Keeler 9eafa36fa9
Update CHANGELOG.md 2020-05-05 09:56:56 -04:00
Matt Keeler 50c2297aaa
Update CHANGELOG.md 2020-05-05 09:53:46 -04:00
Mike Morris 291e6af33a
vendor: revert golang.org/x/sys bump to avoid FreeBSD regression (#7780) 2020-05-05 09:26:17 +02:00
Iryna Shustava 543568fd9a
docs: add Helm docs for external servers and bootstrapToken (#7725) 2020-05-04 18:09:59 -07:00
R.B. Boyer 04671ed1b5 update changelog 2020-05-04 17:03:59 -05:00
R.B. Boyer 22eb016153
acl: add MaxTokenTTL field to auth methods (#7779) 
When set to a non zero value it will limit the ExpirationTime of all
tokens created via the auth method.
 2020-05-04 17:02:57 -05:00
s-christoff 08b335d8d6
Update CHANGELOG.md 2020-05-04 16:24:40 -05:00
s-christoff f9956c1c46
cli: Add -config flag to "acl authmethod update/create" (#7776) 2020-05-04 16:21:28 -05:00
R.B. Boyer 68499f0204 update changelog 2020-05-04 15:21:08 -05:00
R.B. Boyer ca52ba7068
acl: add DisplayName field to auth methods (#7769) 
Also add a few missing acl fields in the api.
 2020-05-04 15:18:25 -05:00
Hans Hasselberg b5eab19183
vendor: fix case issue (#7777) 2020-05-04 21:39:01 +02:00
Hans Hasselberg c4093c87cc
agent: don't let left nodes hold onto their node-id (#7747) 2020-05-04 18:39:08 +02:00
Matt Keeler daec810e34
Merge pull request #7714 from hashicorp/oss-sync/msp-agent-token 2020-05-04 11:33:50 -04:00
Matt Keeler 55050beedb
Update go-discover dependency (#7731) 2020-05-04 10:59:48 -04:00
Matt Keeler cbe3a70f56
Update enterprise configurations to be in OSS 
This will emit warnings about the configs not doing anything but still allow them to be parsed.

This also added the warnings for enterprise fields that we already had in OSS but didn’t change their enforcement behavior. For example, attempting to use a network segment will cause a hard error in OSS.
 2020-05-04 10:21:05 -04:00
R.B. Boyer 9533451a63
acl: refactor the authmethod.Validator interface (#7760) 
This is a collection of refactors that make upcoming PRs easier to digest.

The main change is the introduction of the authmethod.Identity struct.
In the one and only current auth method (type=kubernetes) all of the
trusted identity attributes are both selectable and projectable, so they
were just passed around as a map[string]string.

When namespaces were added, this was slightly changed so that the
enterprise metadata can also come back from the login operation, so
login now returned two fields.

Now with some upcoming auth methods it won't be true that all identity
attributes will be both selectable and projectable, so rather than
update the login function to return 3 pieces of data it seemed worth it
to wrap those fields up and give them a proper name.
 2020-05-01 17:35:28 -05:00
R.B. Boyer e17a43553e update changelog 2020-05-01 15:56:25 -05:00
R.B. Boyer 54ba8e3868
acl: change authmethod.Validator to take a logger (#7758) 2020-05-01 15:55:26 -05:00
R.B. Boyer 8927b54121
test: move some test helpers over from enterprise (#7754) 2020-05-01 14:52:15 -05:00
R.B. Boyer 88d5060610
docs: add docs for snapshot agent local_scratch_path option (#7730) 
Also fix some website upgrade bugs.
 2020-05-01 14:51:57 -05:00
Jono Sosulska 5c1858e70c
Adding redirect to discuss, moving question to old (#7732) 2020-05-01 13:02:15 -04:00
R.B. Boyer b282268408
sdk: extracting testutil.RequireErrorContains from various places it was duplicated (#7753) 2020-05-01 11:56:34 -05:00
Hans Hasselberg 51549bd232
rpc: oss changes for network area connection pooling (#7735) 2020-04-30 22:12:17 +02:00