19223 Commits (2db42567340643d56882f1b002e233df917512ed)

 

All Branches   

Search

Author	SHA1	Message	Date
Michael Klein	cc25602df1	Add tests for TokenSecretID handling	2 years ago
Tu Nguyen	e8fcbfe19e	Merge pull request #15036 from hashicorp/update-ent-license-link ... Update enterprise license link	2 years ago
Kyle Havlovitz	5c3427608b	Merge pull request #15035 from hashicorp/vault-ttl-update-warn ... Warn instead of returning error when missing intermediate mount tune permissions	2 years ago
Tyler Wendlandt	d59d0a36cd	Merge pull request #14974 from hashicorp/ui/chore/enable-synthetic-nodes-in-mock-data ... ui: enable synthetic nodes in mock data	2 years ago
Chris S. Kim	3d05a8e9af	Remove unused methods from template	2 years ago
cskh	d562d363fc	peering: skip registering duplicate node and check from the peer (#14994) ... * peering: skip register duplicate node and check from the peer * Prebuilt the nodes map and checks map to avoid repeated for loop * use key type to struct: node id, service id, and check id	2 years ago
Jared Kirschner	f59483bc9e	docs: fix api docs anchor links	2 years ago
wenincode	15d14ba308	Enable synthetic nodes in mock data via env var	2 years ago
Jared Kirschner	04a14e8f07	docs: fix ent feature matrix links	2 years ago
trujillo-adam	588a196c86	Merge pull request #15033 from hashicorp/docs/fix-front-matter-typo ... Docs/fix front matter typo	2 years ago
R.B. Boyer	c3fa46c3f6	test: possibly fix flaky TestEnvoy/case-ingress-gateway-multiple-services test (#15034) ... The integration test TestEnvoy/case-ingress-gateway-multiple-services is flaky and this possibly reduces the flakiness by explicitly waiting for services to show up in the catalog as healthy before waiting for them to show up in envoy as healthy which gives it just a bit more time to sync.	2 years ago
Chris S. Kim	29a297d3e9	Refactor client RPC timeouts (#14965) ... Fix an issue where rpc_hold_timeout was being used as the timeout for non-blocking queries. Users should be able to tune read timeouts without fiddling with rpc_hold_timeout. A new configuration `rpc_read_timeout` is created. Refactor some implementation from the original PR 11500 to remove the misleading linkage between RPCInfo's timeout (used to retry in case of certain modes of failures) and the client RPC timeouts.	2 years ago
Kyle Havlovitz	d122108992	Warn instead of returning an error when intermediate mount tune permission is missing	2 years ago
wenincode	9da2a73785	Call super with arguments to safeguard against future changes	2 years ago
Tu Nguyen	b46172d4a3	Update enterprise license link	2 years ago
wenincode	815439b593	Update yarn lockfile	2 years ago
trujillo-adam	3f3847d651	clarification that Consul K8s in these instructions refers to the the CLI tool	2 years ago
freddygv	ef2127ec51	Fixup links	2 years ago
freddygv	b8ef47f6d6	Add docs about upgrading primary mesh gateways ... Care must be taken when replacing mesh gateways in the primary datacenter, because if the old addresses become unreachable before the secondary datacenters receive the new addresses then the primary datacenter overall will become unreachable. This commit adds docs related to this class of upgrades.	2 years ago
trujillo-adam	55b387b5be	removed quotation marks around front matter and revised the introduction	2 years ago
R.B. Boyer	0cca4c088d	test: possibly fix flake in TestIntentionGetExact (#15021) ... Restructure test setup to be similar to TestAgent_ServerCertificate and see if that's enough to avoid flaking after join.	2 years ago
freddygv	0d4b11c01b	Update upgrade docs for 1.13.2. ... In 1.13.2 we added a new flag called use_auto_cert to address issues previously documented in the upgrade guide. Originally there was no way to disable TLS for gRPC when auto-encrypt was in use, because TLS was enabled for gRPC due to the presence of auto-encrypt certs. As of 1.13.2, using auto-encrypt certs as the signal to enable TLS for gRPC is opt-in only. Meaning that if anyone who had upgraded to 1.13 relied on that side-effect, they now need to explicitly configure it.	2 years ago
wenincode	c450183b4c	Use local-storage service to manage localStorage ... Use local-storage service, prototyped here https://github.com/LevelbossMike/local-storage-service, to manage local storage usage in an octane way. Does not write to local storage in tests by default and is easy to stub out.	2 years ago
Dhia Ayachi	5eb2bad8fd	bump relevant modules versions (#14972)	2 years ago
Michael Klein	47053c185d	Improve testability `env`-service	2 years ago
Iryna Shustava	5cd0ccfc75	Support auth method with snapshot agent [ENT] (#15020) ... Port of hashicorp/consul-enterprise#3303	2 years ago
R.B. Boyer	fe2d41ddad	cache: prevent goroutine leak in agent cache (#14908) ... There is a bug in the error handling code for the Agent cache subsystem discovered: 1. NotifyCallback calls notifyBlockingQuery which calls getWithIndex in a loop (which backs off on-error up to 1 minute) 2. getWithIndex calls fetch if there’s no valid entry in the cache 3. fetch starts a goroutine which calls Fetch on the cache-type, waits for a while (again with backoff up to 1 minute for errors) and then calls fetch to trigger a refresh The end result being that every 1 minute notifyBlockingQuery spawns an ancestry of goroutines that essentially lives forever. This PR ensures that the goroutine started by `fetch` cancels any prior goroutine spawned by the same line for the same key. In isolated testing where a cache type was tweaked to indefinitely error, this patch prevented goroutine counts from skyrocketing.	2 years ago
R.B. Boyer	02a858efa0	ca: fix a masked bug in leaf cert generation that would not be notified of root cert rotation after the first one (#15005) ... In practice this was masked by #14956 and was only uncovered fixing the other bug. go test ./agent -run TestAgentConnectCALeafCert_goodNotLocal would fail when only #14956 was fixed.	2 years ago
David Yu	efe25cfe46	docs: formatting on backend application and delete peering CRDs (#15007) ... * docs: formatting on backend application and delete peering CRDs Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
Dan Upton	641347fe14	proto: deep-copy PeeringTrustBundle using proto.Clone (#15004) ... Fixes a `go vet` warning caused by the pragma.DoNotCopy on the protobuf message type. Originally I'd hoped we wouldn't need any reflection in the proxycfg hot path, but it seems proto.Clone is the only supported way to copy a message.	2 years ago
Chris S. Kim	3d2dffff16	Merge pull request #13388 from deblasis/feature/health-checks_windows_service ... Feature: Health checks windows service	2 years ago
Dan Upton	f8b4b41205	proxycfg: fix goroutine leak when service is re-registered (#14988) ... Fixes a bug where we'd leak a goroutine in state.run when the given context was canceled while there was a pending update.	2 years ago
Kyle Havlovitz	3a60885259	Merge pull request #14800 from hashicorp/mgw-tcp-keepalives ... Add TCP keepalive settings to proxy config for mesh gateways	2 years ago
Kyle Havlovitz	aaf892a383	Extend tcp keepalive settings to work for terminating gateways as well	2 years ago
Kyle Havlovitz	2c569f6b9c	Update docs and add tcp_keepalive_probes setting	2 years ago
Kyle Havlovitz	2242d1ec4a	Add TCP keepalive settings to proxy config for mesh gateways	2 years ago
David Yu	1a883891a7	docs: improvements on language from cluster peering steps (#14993) ... * docs: improvements on language from cluster peering steps Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
wenincode	63c4d670d9	Set postfix for agentless-notice storage key based on partition and dc	2 years ago
wenincode	6c2ca0ba3f	Save agentless node notice dismissal per dc	2 years ago
Derek Menteer	2a33d0ff96	Fix issue with incorrect method signature on test.	2 years ago
Freddy	24d0c8801a	Merge pull request #14981 from hashicorp/peering/dial-through-gateways	2 years ago
Tyler Wendlandt	0c8563f060	Merge pull request #14986 from hashicorp/ui/feature/filter-node-healthchecks-agentless ... UI: filter node healthchecks on agentless service instances	2 years ago
Dan Upton	328e3ff563	proxycfg: rate-limit delivery of config snapshots (#14960) ... Adds a user-configurable rate limiter to proxycfg snapshot delivery, with a default limit of 250 updates per second. This addresses a problem observed in our load testing of Consul Dataplane where updating a "global" resource such as a wildcard intention or the proxy-defaults config entry could starve the Raft or Memberlist goroutines of CPU time, causing general cluster instability.	2 years ago
Derek Menteer	29ebcf5ff0	Add tests for peering state snapshots / restores.	2 years ago
Derek Menteer	e3ff9912d0	Add test for ExportedServicesForAllPeersByName	2 years ago
Alessandro De Blasis	5f99f578a9	Update website/content/api-docs/agent/check.mdx	2 years ago
Dan Upton	e6b55d1d81	perf: remove expensive reflection from xDS hot path (#14934) ... Replaces the reflection-based implementation of proxycfg's ConfigSnapshot.Clone with code generated by deep-copy. While load testing server-based xDS (for consul-dataplane) we discovered this method is extremely expensive. The ConfigSnapshot struct, directly or indirectly, contains a copy of many of the structs in the agent/structs package, which creates a large graph for copystructure.Copy to traverse at runtime, on every proxy reconfiguration.	2 years ago
Michael Klein	03734a1bac	Merge pull request #14977 from hashicorp/ui/fix/scrollbar-bento-box ... ui: Bento-Box show scrollbars only when necessary	2 years ago
wenincode	c85d70e80d	Address linting errors	2 years ago
wenincode	363db8c849	Add changelog entry	2 years ago