9913 Commits (29eb83c9c2a3e2fecf679c7154fb20cd903df36f)

 

All Branches   

Search

Author	SHA1	Message	Date
Matt Keeler	f67e12eb6f	Enabling "service" watch handler to accept a slice of tags ... Originally from PR #5347	6 years ago
Paul Banks	93f579dc8b	Update CHANGELOG.md	6 years ago
Paul Banks	421ecd32fc	Connect: allow configuring Envoy for L7 Observability (#5558) ... * Add support for HTTP proxy listeners * Add customizable bootstrap configuration options * Debug logging for xDS AuthZ * Add Envoy Integration test suite with basic test coverage * Add envoy command tests to cover new cases * Add tracing integration test * Add gRPC support WIP * Merged changes from master Docker. get CI integration to work with same Dockerfile now * Make docker build optional for integration * Enable integration tests again! * http2 and grpc integration tests and fixes * Fix up command config tests * Store all container logs as artifacts in circle on fail * Add retries to outer part of stats measurements as we keep missing them in CI * Only dump logs on failing cases * Fix typos from code review * Review tidying and make tests pass again * Add debug logs to exec test. * Fix legit test failure caused by upstream rename in envoy config * Attempt to reduce cases of bad TLS handshake in CI integration tests * bring up the right service * Add prometheus integration test * Add test for denied AuthZ both HTTP and TCP * Try ANSI term for Circle	6 years ago
R.B. Boyer	2febedd17c	update changelog	6 years ago
R.B. Boyer	975c4b87d6	remove reference to deleted branch	6 years ago
Paul Banks	50da2383c0	Update CHANGELOG.md	6 years ago
R.B. Boyer	c6722fc43d	Merge pull request #5617 from hashicorp/f-acl-ux ... Secure ACL Introduction for Kubernetes	6 years ago
Aestek	21a776e202	Fix: fail messages after a node rename replace the new node definition (#5520) ... When receiving a serf faild message for a node which is not in the catalog, do not perform a register request to set is serf heath to critical as it could overwrite the node information and services if it was renamed. Fixes : #5518	6 years ago
R.B. Boyer	e47d7eeddb	acl: adding support for kubernetes auth provider login (#5600) ... * auth providers * binding rules * auth provider for kubernetes * login/logout	6 years ago
R.B. Boyer	cc1aa3f973	acl: adding Roles to Tokens (#5514) ... Roles are named and can express the same bundle of permissions that can currently be assigned to a Token (lists of Policies and Service Identities). The difference with a Role is that it not itself a bearer token, but just another entity that can be tied to a Token. This lets an operator potentially curate a set of smaller reusable Policies and compose them together into reusable Roles, rather than always exploding that same list of Policies on any Token that needs similar permissions. This also refactors the acl replication code to be semi-generic to avoid 3x copypasta.	6 years ago
R.B. Boyer	7928305279	making ACLToken.ExpirationTime a *time.Time value instead of time.Time (#5663) ... This is mainly to avoid having the API return "0001-01-01T00:00:00Z" as a value for the ExpirationTime field when it is not set. Unfortunately time.Time doesn't respect the json marshalling "omitempty" directive.	6 years ago
R.B. Boyer	db43fc3a20	acl: ACL Tokens can now be assigned an optional set of service identities (#5390) ... These act like a special cased version of a Policy Template for granting a token the privileges necessary to register a service and its connect proxy, and read upstreams from the catalog.	6 years ago
R.B. Boyer	2144bd7fbd	acl: tokens can be created with an optional expiration time (#5353)	6 years ago
Matt Keeler	15e80e4e76	Implement bootstrapping proxy defaults from the config file (#5714)	6 years ago
Matt Keeler	5befe0f5d5	Implement config entry replication (#5706)	6 years ago
Matt Keeler	6c885d383a	Update CHANGELOG.md	6 years ago
Matt Keeler	222afeae4c	Move the watch package into the api module (#5664) ... * Move the watch package into the api module It was already just a thin wrapper around the API anyways. The biggest change was to the testing. Instead of using a test agent directly from the agent package it now uses the binary on the PATH just like the other API tests. The other big changes were to fix up the connect based watch tests so that we didn’t need to pull in the connect package (and therefore all of Consul)	6 years ago
Tyler Ryan	cf14e0c2ac	fixing inconsitencies in agent/connect API documentation (#5715)	6 years ago
R.B. Boyer	cf8b76b2e5	docs: fix some minor acl related typos (#5711)	6 years ago
Alvin Huang	abdd8a294c	fix sidebar for install (#5611)	6 years ago
Alvin Huang	8ceca2ace3	Add fmt and vet (#5671) ... * add go fmt and vet * go fmt fixes	6 years ago
Alvin Huang	05946afa0c	Add website analytics back (#5699) ... * add website analytics to build * add segment analytics env var check	6 years ago
Kyle Havlovitz	d8f8400fe1	Merge pull request #5700 from hashicorp/service-reg-manager ... Use centralized service config on agent service registrations	6 years ago
Kyle Havlovitz	43bfc20dc8	Test an index=0 value in cache.Notify	6 years ago
Freddy	f2213f60e0	Update alias checks on local add and remove	6 years ago
Matt Keeler	1a7406885b	Update CHANGELOG.md	6 years ago
Aestek	f669bb7b0f	Add support for DNS config hot-reload (#4875) ... The DNS config parameters `recursors` and `dns_config.*` are now hot reloaded on SIGHUP or `consul reload` and do not need an agent restart to be modified. Config is stored in an atomic.Value and loaded at the beginning of each request. Reloading only affects requests that start _after_ the reload. Ongoing requests are not affected. To match the current behavior the recursor handler is loaded and unloaded as needed on config reload.	6 years ago
Kyle Havlovitz	cba47aa0ca	Fix a race in the ready logic	6 years ago
Kyle Havlovitz	c269369760	Make central service config opt-in and rework the initial registration	6 years ago
Kyle Havlovitz	b58572afbd	Fix a race in the service updates	6 years ago
Kyle Havlovitz	88e1d8ce03	Fill out the service manager functionality and fix tests	6 years ago
Kyle Havlovitz	7c25869e67	Add the service registration manager to the agent	6 years ago
Kyle Havlovitz	b186c3020c	Merge pull request #5615 from hashicorp/config-entry-rpc ... Add RPC endpoints for config entry operations	6 years ago
Kyle Havlovitz	fed7595d45	Rename config entry ACL methods	6 years ago
Freddy	3fe3b3e6dc	Clarify -log-rotate-duration string format and default value	6 years ago
Alvin Huang	ad36886f90	Remove old redirects file (#5688) ... * add directions on how to update the redirects file * remove old redirects file	6 years ago
Matt Keeler	032d299072	Add missing token field in the service definition in the docs (#5685) ... Fixes #5684	6 years ago
Matt Keeler	c96faa613d	Update CHANGELOG.md	6 years ago
Matt Keeler	e55afa9252	Update go-msgpack version (#5683) ... Fixes #4673 Supercedes: #5677 There was an error decoding `map[string]string` values due to Go strings being immutable. This was fixes in our go-msgpack fork.	6 years ago
Heechul Ryu	66f0e4a2c7	Update consul-containers.html.md (#5645) ... To reflect the most recent version	6 years ago
joelcollin	9ca16fcad5	Fixed minor typos. (#5681)	6 years ago
kaitlincarter-hc	66a49e60ea	[docs] Leader Election Guide Updates (#5654) ... * Updating the Leader Election guide. * Update website/source/docs/guides/leader-election.html.md * updating key name * Update website/source/docs/guides/leader-election.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> * Update website/source/docs/guides/leader-election.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	6 years ago
kaitlincarter-hc	5c3d3dd894	Updating network connectivity section based on feedback from Pavani. (#5612)	6 years ago
R.B. Boyer	6269d1f130	tests: actually have TestSessionTTLRenew sleep during execution (#5669) ... Due to an unintended order of operations issue with integer division TestSessionTTLRenew was sleeping for 0s every time. Also add explicit failures for when the various session renewal returns nil unexpectedly.	6 years ago
kaitlincarter-hc	59c0174de5	[docs] Geo Failover (#5641) ... * Updated the headers, code snippets, and some language. * Update website/source/docs/guides/geo-failover.html.md * Changed banking-app to payments * Update website/source/docs/guides/geo-failover.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	6 years ago
kaitlincarter-hc	7dcc727b4d	[docs] Server Performance (#5627) ... * Moving server performance guide to docs. * fixing broken links * updating broken link * fixing broken links	6 years ago
Paul Banks	b427648887	Update CHANGELOG.md	6 years ago
Matt Keeler	e81f6aeed0	Update Consul-Dev.dockerfile (#5678) ... This was putting the new binary on the wrong path so this wasn't updating the docker image in any effectual way.	6 years ago
Judith Malnick	d909766403	Remove redundant word.	6 years ago
kaitlincarter-hc	8b7e2a3e32	[docs] Windows Guide (#5626) ... * Updating the windows guide for the migration. * adding config dir option	6 years ago