3537 Commits (293aba329f69d33e1c8b95e9e3de1d6dda90b45d)

 

All Branches   

Search

Author	SHA1	Message	Date
captainill	293aba329f	add announcement banner for Consul Enterprise launch	9 years ago
James Phillips	3bf56f7fb4	Merge pull request #1786 from moofish32/consol_node_schema_fix ... Session Table index require Node	9 years ago
Mike Cowgill	5435055c5f	one line schema change to not allow missing for sessions Table node index, Fixes #1774	9 years ago
James Phillips	ad13b34c09	Merge pull request #1785 from hashicorp/f-check-put-api ... Adds a PUT-based API for TTL checks and retains output on timeouts.	9 years ago
James Phillips	f46fa33278	Tweaks formatting of inline output messages.	9 years ago
James Phillips	70575002d9	Retains the last output when a TTL check times out.	9 years ago
James Phillips	7ebad899da	Adds a new PUT-based TTL check update endpoint.	9 years ago
James Phillips	ef1a588b7a	Merge pull request #1777 from hashicorp/b-port-docfix ... TLS example and correcting error	9 years ago
James Phillips	b92243d8d0	Tweaks the address and advertise docs.	9 years ago
James Phillips	2a4436075d	Merge pull request #1766 from hashicorp/b-redact-in-get ... Adds missing token redact in the GET path.	9 years ago
James Phillips	90898dff98	Adds missing token redact in the GET path.	9 years ago
James Phillips	f996433df0	Merge pull request #1759 from hashicorp/f-prep-version ... Preps for 0.6.4 release before 0.7.0.	9 years ago
James Phillips	7284a5e8fc	Preps for 0.6.4 release before 0.7.0.	9 years ago
Ryan Breen	6f5b783da9	Merge pull request #1758 from matschaffer/patch-1 ... Metric name typo	9 years ago
Mat Schaffer	3142a51688	Metric name typo	9 years ago
James Phillips	213026b033	Merge pull request #1757 from hashicorp/f-revert-1667 ... Reverts server connection rebalancing changes from #1667	9 years ago
James Phillips	ad77f20867	Merge pull request #1748 from hashicorp/f-client-pq-acls ... Creates new "prepared-query" ACL type and new token capture behavior.	9 years ago
James Phillips	dca480e284	Cleans up the documents.	9 years ago
James Phillips	7d392118d2	Adds a check for users re-submitting the redacted token.	9 years ago
James Phillips	483898abe5	Renames "prepared_query" ACL policy to "query".	9 years ago
James Phillips	87ceb2f3de	Changes to more idiomatic "ok" pattern for prefix getter.	9 years ago
James Phillips	e283f9512e	Renames a unit test.	9 years ago
James Phillips	93a9ed1a79	Reverts the change log for GH-1667.	9 years ago
James Phillips	ff25d033a6	Revert "Merge pull request #1667 from hashicorp/b-redistribute-clients" ... This reverts commit 8f30dea420, reversing changes made to eb27a02956.	9 years ago
James Phillips	2b2c1a583a	Fixes a typo in the change log.	9 years ago
James Phillips	b64f19bb08	Adds an upgrade note about the new ACL behavior.	9 years ago
James Phillips	899dcfe053	Completes switch of prepared_query ACLs to govern query names.	9 years ago
James Phillips	880cd21667	Refactors docs into a more complete state for prepared query ACLs.	9 years ago
James Phillips	67de77482e	Creates new "prepared-query" ACL type and new token capture behavior. ... Prior to this change, prepared queries had the following behavior for ACLs, which will need to change to support templates: 1. A management token, or a token with read access to the service being queried needed to be provided in order to create a prepared query. 2. The token used to create the prepared query was stored with the query in the state store and used to execute the query. 3. A management token, or the token used to create the query needed to be supplied to perform and CRUD operations on an existing prepared query. This was pretty subtle and complicated behavior, and won't work for templates since the service name is computed at execution time. To solve this, we introduce a new "prepared-query" ACL type, where the prefix applies to the query name for static prepared query types and to the prefix for template prepared query types. With this change, the new behavior is: 1. A management token, or a token with "prepared-query" write access to the query name or (soon) the given template prefix is required to do any CRUD operations on a prepared query, or to list prepared queries (the list is filtered by this ACL). 2. You will no longer need a management token to list prepared queries, but you will only be able to see prepared queries that you have access to (you get an empty list instead of permission denied). 3. When listing or getting a query, because it was easy to capture management tokens given the past behavior, this will always blank out the "Token" field (replacing the contents as <hidden>) for all tokens unless a management token is supplied. Going forward, we should discourage people from binding tokens for execution unless strictly necessary. 4. No token will be captured by default when a prepared query is created. If the user wishes to supply an execution token then can pass it in via the "Token" field in the prepared query definition. Otherwise, this field will default to empty. 5. At execution time, we will use the captured token if it exists with the prepared query definition, otherwise we will use the token that's passed in with the request, just like we do for other RPCs (or you can use the agent's configured token for DNS). 6. Prepared queries with no name (accessible only by ID) will not require ACLs to create or modify (execution time will depend on the service ACL configuration). Our argument here is that these are designed to be ephemeral and the IDs are as good as an ACL. Management tokens will be able to list all of these. These changes enable templates, but also enable delegation of authority to manage the prepared query namespace.	9 years ago
Ryan Breen	05bc9149a5	Merge pull request #1741 from benhinchley/master ... Add asia pacific region to list in terraform module	9 years ago
Ben Hinchley	d1c8f3b384	Merge pull request #1 from benhinchley/benhinchley-patch-1 ... add asia pacific region to list for ubuntu	9 years ago
Ben Hinchley	9f903928c3	add asia pacific region to list for ubuntu ... using these images ap-northeast-1 => ubuntu/images/hvm-ssd/ubuntu-trusty-14.04-amd64-server-20150528 ap-southeast-1 => ubuntu/images/hvm-ssd/ubuntu-trusty-14.04-amd64-server-20150528 ap-southeast-2 => ubuntu/images/hvm-ssd/ubuntu-trusty-14.04-amd64-server-20150528	9 years ago
James Phillips	4d5b13f417	Merge pull request #1740 from hashicorp/f-1.6-only-ci ... Takes away Go tip build which is failing for odd reasons.	9 years ago
James Phillips	aa5806a1df	Takes away Go tip build which is failing for odd reasons. ... This should cut down on build noise. When we get further with 1.6 we can reintroduce the tip build to help spot issues with the next version of Go.	9 years ago
James Phillips	d5735c555d	Merge pull request #1736 from hashicorp/f-makefile-cleanup ... Refactors dist into a Docker-based build with extra safety checks.	9 years ago
James Phillips	f873dda184	Sets CGO_ENABLED to 0 in the Dockerfile.	9 years ago
James Phillips	33829cdc34	Moves release build into Docker container and adds web asset check at dist time.	9 years ago
James Phillips	3f7bd5dec2	Tweaks some of the default makefile targets.	9 years ago
James Phillips	baef89a8f6	Removes from cruft from the makefile.	9 years ago
James Phillips	09e60af97c	Merge pull request #1735 from hashicorp/f-go-1.6 ... Starts switch to Go 1.6.	9 years ago
James Phillips	a8f8d63460	Starts switch to Go 1.6.	9 years ago
James Phillips	aed82bf7d7	Merge pull request #1726 from hashicorp/f-tag-override-api ... Adds support for EnableTagOverride to the API client.	9 years ago
James Phillips	d31d50c45e	Merge pull request #1732 from hashicorp/pr/1716 ... Don't run `go vet` on vendor/	9 years ago
James Phillips	6643c94b11	Makes vet check more sure fire now that it's xargs-ed.	9 years ago
James Phillips	a84e5b8d66	Adds a note about the new go-cleanhttp behavior to the change log.	9 years ago
James Phillips	1bfbe7e918	Merge pull request #1731 from hashicorp/update-cleanhttp ... Update go-cleanhttp	9 years ago
Jeff Mitchell	14a3a14543	Update go-cleanhttp	9 years ago
Ryan Breen	628343ea73	Merge pull request #1729 from xenji/add-new-eu-amis ... Add ubuntu AMIs for eu-west-1 and eu-central-1 to the map.	9 years ago
Mario Mueller	c62c5de185	Add eu-west-1 and eu-central-1 to the map. ... Used image: ubuntu/images/hvm-ssd/ubuntu-trusty-14.04-amd64-server-20150325	9 years ago
Michael Crilly	4c8725ef63	TLS example and correcting error ... The example configuration file omits TLS support in the HTTP API. This is fine, but a second example demonstrating how to enable TLS over the HTTP API is harmless and, in fact, should be default practice. Using the format `ip:port` in the "addresses" block will cause Consul to crash on reload/start. See issue (#1727)[https://github.com/hashicorp/consul/issues/1727#issuecomment-184980751]	9 years ago