consul

Commit Graph

Author	SHA1	Message	Date
John Murret	2f335113f8	NET-6943 - Replace usage of deprecated Envoy field envoy.config.router.v3.WeightedCluster.total_weight. (#20011 )	11 months ago
John Murret	90cd56c5c3	NET-4774 - replace usage of deprecated Envoy field match_subject_alt_names (#19954 )	11 months ago
John Murret	21ea5c92fd	NET-6944 - Replace usage of deprecated Envoy field envoy.extensions.filters.http.lua.v3.Lua.inline_code (#20012 )	11 months ago
John Murret	b9ad0dfa41	NET-7025 - ci: test-integrations failures in compatibility tests. panics occuring in selectionTracker.TrackIDForSelection (#20040 ) * ci: test-integrations failures in compatibility tests. panics occuring in selectionTracker.TrackIDForSelection * Update selection_tracker.go	11 months ago
John Murret	62a07b4204	update makefile, compatibility tests, and nightlies to use latest envoy. (#20048 )	11 months ago
John Murret	0f3cc3d631	fix formatting issue in envoy bootstrapping. (#20036 )	11 months ago
Nathan Coleman	ab60fec15a	[NET-6426] Add gateway proxy controller that generates empty proxy state template (#19901 ) * NET-6426 Create ProxyStateTemplate when reconciling MeshGateway resource * Add TODO for switching fetch method based on gateway type * Use gateway-kind in workload metadata instead of owner reference * Create ProxyStateTemplate builder for gatewayproxy controller * Update to use new controller interface * Add copyright headers * Set correct name for ProxyStateTemplate identity reference * Generate empty ProxyStateTemplate by fetching MeshGateway This cheats and looks up the MeshGateway directly. In the future, we will need a Workload => xGateway mapper * Specify owner reference when writing ProxyStateTemplate * Update dependency mapper to account for multiple controllers per resource type * Regenerate v2 resource dependencies map * Add helpful trace logs, tag TODOs with ticket identifiers	11 months ago
John Murret	a19df32fa5	NET-6942 - Replace usage of deprecated Envoy field envoy.config.cluster.v3.Cluster.http_protocol_options. (#20010 ) * NET-6942 - Replace usage of deprecated Envoy field envoy.config.cluster.v3.Cluster.http_protocol_options. * add changelog	11 months ago
Michael Zalimeni	fe10339caa	[NET-7009] security: update x/crypto to 0.17.0 (#20023 ) security: update x/crypto to 0.17.0 This addresses CVE-2023-48795 (x/crypto/ssh).	11 months ago
David Yu	e7c7bc74c4	Dockerfile: bump up to `ubi-minimal:9.3` (#20014 ) * Update Dockerfile	11 months ago
Nathan Coleman	874e68f1eb	[NET-6899] Create name-aligned Service when reconciling MeshGateway resource (#19900 ) * NET-6899 Create name-aligned Service when reconciling MeshGateway resource The Service has an owner reference added to it indicating that it belongs to a MeshGateway * Specify port list when creating Service * Use constants, add TODO w/ ticket reference * Include gateway-kind in metadata of Service resource	11 months ago
Michael Zalimeni	d0bc091a60	[NET-6969] security: Re-enable Go Module + secrets security scans for release branches (#19978 ) * security: re-enable security scan release block This was previously disabled due to an unresolved false-positive CVE. Re-enabling both secrets and OSV + Go Modules scanning, which per our current scan results should not be a blocker to future releases. * security: run security scans on main and release branches	11 months ago
Valeriia Ruban	a87ab8b093	feat: updated github checks with frontend-test-ce end frontend-test-e… (#19995 )	11 months ago
Nitya Dhanushkodi	9975b8bd73	[NET-5455] Allow disabling request and idle timeouts with negative values in service router and service resolver (#19992 ) * add coverage for testing these timeouts	11 months ago
wangxinyi7	013bcefe5c	grpc client in tls mode (#19680 ) * client in tls mode	11 months ago
cskh	cff872749d	agent: prevent empty server_metadata.json (#19935 )	11 months ago
Ashesh Vidyut	4e451f2358	NET 6409 (#19515 ) * Update website/content/docs/k8s/k8s-cli.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/k8s-cli.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * fix doc * Update website/content/docs/k8s/k8s-cli.mdx Co-authored-by: David Yu <dyu@hashicorp.com> --------- Co-authored-by: David Yu <dyu@hashicorp.com>	11 months ago
David Yu	a3fa683ba5	docs: Update network segments in compat matrix for Enterprise features (#19933 ) Update index.mdx	11 months ago
Ashesh Vidyut	f1dee1a718	Net 6603 (#19718 ) * Update docs for NET-6603 * json format * json caps * Update website/content/docs/k8s/k8s-cli.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> --------- Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	11 months ago
Nathan Coleman	010bf533d1	NET-6663 Modify sidecarproxy controller to skip xGateway resources (#19902 ) * NET-6663 Modify sidecarproxy controller to skip xGateway resources * Check workload metadata after nil-check for workload * Add test asserting that workloads with meta gateway-kind are ignored * Use more common pattern for map access to increase readability	11 months ago
David Yu	de86ba76ee	docs: typo formatting consul-k8s docs (#19973 ) Update install-cli.mdx	11 months ago
aahel	ae998a698a	added computed failover policy resource (#19975 )	11 months ago
wangxinyi7	cae23821dc	update changelog (#19966 )	11 months ago
Derek Menteer	bbdbf3e4f8	Fix bug with prepared queries using sameness-groups. (#19970 ) This commit fixes an issue where the partition was not properly set on the peering query failover target created from sameness-groups. Before this change, it was always empty, meaning that the data would be queried with respect to the default partition always. This resulted in a situation where a PQ that was attempting to use a sameness-group for failover would select peers from the default partition, rather than the partition of the sameness-group itself.	11 months ago
Michael Zalimeni	79e02f8a89	ci: upload test results to DataDog on test failure (#19956 ) Due to the unintuitive behavior of GHA w.r.t. implicit status check `success()`, test results were only being uploaded on success (failures presumably came from retried tests that passed).	11 months ago
Nathan Coleman	02d4520235	Fix typo in service-defaults documentation (#19957 )	11 months ago
John Murret	83cbe15b44	cli: Deprecate the `-admin-access-log-path` flag from `consul connect envoy` command in favor of: `-admin-access-log-config`. (#19943 ) * cli: Deprecate the `-admin-access-log-path` flag from `consul connect envoy` command in favor of: `-admin-access-log-config`. * fix changelog * add in documentation change.	11 months ago
John Murret	a995505976	NET-6317 - update usage of deprecated fields: http2_protocol_options and access_log_path (#19940 ) * updating usage of http2_protocol_options and access_log_path * add changelog * update template for AdminAccessLogConfig * remove mucking with AdminAccessLogConfig	11 months ago
natemollica-dev	afc6fe8308	Update telemetry.mdx RPC Metrics (#19593 ) * Update telemetry.mdx RPC Metrics Update Server Workload telemetry section to demonstrate explicitly enabling metric emission as they're [default disabled](`f5bf256425/agent/config/builder.go (L2763C1-L2763C1)`). * Update telemetry.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Update telemetry.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> --------- Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	11 months ago
Tauhid Anjum	0250e230a3	NET-6785: updating peering docs to include stream status and remote data (#19929 ) Updating peering docs to include stream status and remote data	11 months ago
aahel	a6496898de	added tenancy to TestBuildL4TrafficPermissions (#19932 )	11 months ago
cskh	33a90edfab	Upgrade test(LTS): use network area to federate cluster (#19934 ) - Join areas - wait for members alive and validate cross area service discovery	11 months ago
Ashesh Vidyut	3443db7885	NET 6762 (#19931 ) NET-6762	11 months ago
Matt Keeler	123bc95e1a	Add Common Controller Caching Infrastructure (#19767 ) * Add Common Controller Caching Infrastructure	11 months ago
Jeff Boruszak	c870c00e70	docs: service rate limiting examples (#19925 ) * Include examples on usage page. * Description/example alignment	12 months ago
Semir Patel	69e3f93ee8	resource: add partition resource to proto-public to keep ENT and CE in sync (#19920 )	12 months ago
John Murret	a5d5fd348b	fix actions to no longer use envoy 1.24.x to match supported versions. (#19918 )	12 months ago
Valeriia Ruban	d7e0fca28b	fix: token list in Role details page is updated with tokens linked to… (#19912 )	12 months ago
Tyler Wendlandt	e8164c7c04	NET-6900: stop reconciling services when peering is enabled (#19907 ) stop reconciling services when peering is enabled	12 months ago
Dhia Ayachi	f2b26ac194	Hash based config entry replication (#19795 ) * add a hash to config entries when normalizing * add GetHash and implement comparing hashes * only update if the Hash is different * only update if the Hash is different and not 0 * fix proto to include the Hash * fix proto gen * buf format * add SetHash and fix tests * fix config load tests * fix state test and config test * recalculate hash when restoring config entries * fix snapshot restore test * add changelog * fix missing normalize, fix proto indexes and add normalize test	12 months ago
Ganesh S	90010587f0	Move enterprise multicluster types to Register function (#19913 ) * Move enterprise types to Register function * Fix function name * Address comments	12 months ago
Ganesh S	173fe11c2b	Refactor exported services controller tests (#19906 )	12 months ago
Tauhid Anjum	1484c6db47	NET-6771 - Adding sameness group protobuff in consul CE (#19883 ) Adding sameness group protobuff in consul CE	12 months ago
Ashesh Vidyut	c5cce63777	NET 6761 (#19837 ) NET-6761 explicit destinations tests updated	12 months ago
Valeriia Ruban	a6d6164ba0	fix: remove test to unblock CI (#19908 )	12 months ago
Ronald	e13fbc743e	Remove warning for consul 1.17 deprecation (#19897 )	12 months ago
Jeff Boruszak	659868ee73	docs: Updates to required ports (#19755 ) * improvements * Anchor link fixes * Apply suggestions from code review Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Explicit list of six ports * Apply suggestions from code review --------- Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	12 months ago
Derek Menteer	ccb2bf6170	Add documentation for proxy-config-map and xds_fetch_timeout_ms. (#19893 ) Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	12 months ago
Ronald	195e3aab8c	[NET-6842] splitting go version on different lines (#19887 )	12 months ago
Derek Menteer	dfab5ade50	Fix ClusterLoadAssignment timeouts dropping endpoints. (#19871 ) When a large number of upstreams are configured on a single envoy proxy, there was a chance that it would timeout when waiting for ClusterLoadAssignments. While this doesn't always immediately cause issues, consul-dataplane instances appear to consistently drop endpoints from their configurations after an xDS connection is re-established (the server dies, random disconnect, etc). This commit adds an `xds_fetch_timeout_ms` config to service registrations so that users can set the value higher for large instances that have many upstreams. The timeout can be disabled by setting a value of `0`. This configuration was introduced to reduce the risk of causing a breaking change for users if there is ever a scenario where endpoints would never be received. Rather than just always blocking indefinitely or for a significantly longer period of time, this config will affect only the service instance associated with it.	12 months ago

1 2 3 4 5 ...

20963 Commits (2f335113f885b0b0304ac1ae57ffcacfa5818b32) All Branches Search

20963 Commits (2f335113f885b0b0304ac1ae57ffcacfa5818b32)

All Branches