14991 Commits (31e034215f59dcfa1f79604c4adcffece7d51de0)

 

All Branches   

Search

Author	SHA1	Message	Date
Daniel Nephin	31e034215f	acl: remove ACLResolver config fields from consul.Config	3 years ago
Daniel Nephin	d4701903f6	acl: replace ACLResolver.Config with its own struct ... This is step toward decoupling ACLResolver from the agent/consul package.	3 years ago
Daniel Nephin	fdfc4e0698	Merge pull request #10661 from hashicorp/dnephin/remove-legacy-acls-1 ... http: disable legacy ACL API endpoints	3 years ago
Daniel Nephin	c2b24adb5f	acl: remove ACLRulesTranslateLegacyToken API endpoint	3 years ago
Daniel Nephin	b7bced9bcf	acl: remove legacy bootstrap ... Return an explicit error from the RPC, and remove the flag from the HTTP API.	3 years ago
Daniel Nephin	70c2cdc8f1	cli: remove a test case for updating a legacy token ... Legacy tokens are no longer accepted, so we don't need to test their upgrade path.	3 years ago
Daniel Nephin	de3439b2cc	api: remove client library tests for old API endpoints ... These methods are being kept around in the api module for now to allow the api module to work with older versions of the HTTP API, but we are no longer able to test them. Since the endpoints are removed there is no way for them to change, so there does not appear to be a need to keep running the tests.	3 years ago
Daniel Nephin	858071d55a	agent: update some tests that were using legacy ACL endpoints ... The tests were updated to use the new ACL endpoints now that the legacy ones have been removed.	3 years ago
Daniel Nephin	7ecd2e5466	http: update legacy ACL endpoints to return an error ... Also move a test for the ACLReplicationStatus endpoint into the correct file.	3 years ago
Daniel Nephin	9671dd6b97	acl: add some notes about removing legacy ACL system	3 years ago
Daniel Nephin	887d11923b	Merge pull request #10792 from hashicorp/dnephin/rename-authz-vars ... acl: use authz consistently as the variable name for an acl.Authorizer	3 years ago
Daniel Nephin	c85c62dffb	Merge pull request #10807 from hashicorp/dnephin/remove-acl-datacenter ... config: remove ACLDatacenter	3 years ago
Daniel Nephin	e637cd71f3	acl: use authz consistently as the variable name for an acl.Authorizer ... Follow up to https://github.com/hashicorp/consul/pull/10737#discussion_r682147950 Renames all variables for acl.Authorizer to use `authz`. Previously some places used `rule` which I believe was an old name carried over from the legacy ACL system. A couple places also used authorizer. This commit also removes another couple of authorizer nil checks that are no longer necessary.	3 years ago
Olatunde Alex-Oni	ad07ed705c	Update documentation for enable_key_list_policy ... The current suggests the option expects a string of either "enabled" or "disabled" but this results in an error `'acl.enable_key_list_policy' expected type 'bool', got unconvertible type 'string', value: 'enabled'`. Setting to a boolean value resolves this, also had a quick look at the code (d2b58cd0d6/agent/config/runtime.go (L109)) and it suggests this too	3 years ago
Mike Morris	2a98ed5b7d	ci: make changelog-checker only validate PR number against main base (#10844)	3 years ago
R.B. Boyer	e0d1e2689c	ci: upgrade to use Go 1.16.7 (#10856)	3 years ago
hc-github-team-consul-core	ed85684d96	auto-updated agent/uiserver/bindata_assetfs.go from commit ae9c31338	3 years ago
Kenia	ae9c313382	ui: Update intention permissions notice wording (#10836)	3 years ago
Kenia	019ce785ab	ui: Create Routing Configurations route and page (#10835)	3 years ago
Blake Covarrubias	97b4fdff0d	Document possible risk w.r.t exposing the admin API in Envoy (#10817) ... Add a section to the Connect Security page which highlights the risks of exposing Envoy's administration interface outside of localhost. Resolves #5692 Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>	3 years ago
Blake Covarrubias	8a396ae73f	Document tagged addresses (#10744) ... Add section for tagged addresses on service definition documentation. Resolves #6989 Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Blake Covarrubias	8aa89c2c12	docs: Clarify ingress gateway's -address flag (#10810) ... Clarify the function of `-address` flag when instantiating an ingress gateway. Resolves #9849 Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Kyle Havlovitz	fa5df0349d	Merge pull request #10843 from hashicorp/partitions/rename-default ... oss: Rename default partition	3 years ago
Kyle Havlovitz	073b6c8411	oss: Rename default partition	3 years ago
Daniel Nephin	3e2ec34409	Merge pull request #10824 from hashicorp/dnephin/acl-token-bug ... proxycfg: Use acl.tokens.default token as a default when there is no token in the registration	3 years ago
Daniel Nephin	0575498d0d	proxycfg: Lookup the agent token as a default ... When no ACL token is provided with the service registration.	3 years ago
Daniel Nephin	b313f495b8	proxycfg: Add a test to show the bug ... When a token is not provided at registration, the agent token is not being used.	3 years ago
Mike Morris	3bae53a989	deps: upgrade gogo-protobuf to v1.3.2 (#10813) ... * deps: upgrade gogo-protobuf to v1.3.2 * go mod tidy using go 1.16 * proto: regen protobufs after upgrading gogo/protobuf Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	3 years ago
Mark Anderson	d3cebbd32c	Fixup to support unix domain socket via command line (#10758) ... Missed the need to add support for unix domain socket config via api/command line. This is a variant of the problems described in it is easy to drop one. Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
Daniel Nephin	525bc2d763	Merge pull request #10832 from hashicorp/dnephin/contrib-check-register-flows ... contrib: add list of check register flows	3 years ago
Daniel Nephin	ccf3a3bbb3	contrib: add list of check register flows	3 years ago
Chris Piraino	8f5e2a440b	docs: remove note on ingress gateway hosts field needing a port number (#10827) ... This was necessary in older versions of Consul, but was obsoleted by making Consul add the port number itself when constructing the Envoy configuration.	3 years ago
Blake Covarrubias	99b1d8ed8c	docs: Update code blocks across website ... * Use CodeTabs for examples in multiple formats. * Ensure correct language on code fences. * Use CodeBlockConfig for examples with filenames, or which need highlighted content.	3 years ago
hc-github-team-consul-core	199e850d16	auto-updated agent/uiserver/bindata_assetfs.go from commit ab6a67520	3 years ago
Kenia	ab6a675209	ui: Split up the socket mode from the socket path (#10581)	3 years ago
Blake Covarrubias	3363da7d35	docs: Add JSON examples to all config entries ... This commit adds example JSON configs for several config entry resources were missing examples in this language. The examples have been updated to use the new CodeTabs resource instead of the Tab component.	3 years ago
Blake Covarrubias	1ee8655bfc	cli: Fix broken KV import on Windows (#10820) ... Consul 1.10 (PR #9792) introduced the ability to specify a prefix when importing KV's. This however introduced a regression on Windows systems which breaks `kv import`. The key name is joined with specified`-prefix` using `filepath.Join()` which uses a forward slash (/) to delimit values on Unix-based systems, and a backslash (\) to delimit values on Windows – the latter of which is incompatible with Consul KV paths. This commit replaces filepath.Join() with path.Join() which uses a forward slash as the delimiter, providing consistent key join behavior across supported operating systems. Fixes #10583	3 years ago
Blake Covarrubias	e41d6ee60f	cli: Use admin bind address in self_admin cluster (#10757) ... Configure the self_admin cluster to use the admin bind address provided when starting Envoy. Fixes #10747	3 years ago
trujillo-adam	067c8c2c5c	Merge pull request #10812 from hashicorp/docs-envoy-proxy-breaks-when-enabling-tls ... docs: adding env var info	3 years ago
trujillo-adam	9e348edfaf	Merge branch 'main' into docs-envoy-proxy-breaks-when-enabling-tls	3 years ago
trujillo-adam	ec7526caaa	Update website/content/docs/connect/proxies/envoy.mdx ... Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
trujillo-adam	7d00adb824	Update website/content/docs/connect/proxies/envoy.mdx ... Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
trujillo-adam	3fabe18acd	docs: adding env var info, resolves #7926	3 years ago
Blake Covarrubias	6a68bfc5e1	cli: Test API access using /status/leader in consul watch (#10795) ... Replace call to /agent/self with /status/leader to verify agent reachability before initializing a watch. This endpoint is not guarded by ACLs, and as such can be queried by any API client regardless of their permissions. Fixes #9353	3 years ago
Daniel Nephin	67fc97522f	server: remove defaulting of PrimaryDatacenter ... The constructor for Server is not at all the appropriate place to be setting default values for a config struct that was passed in. In production this value is always set from agent/config. In tests we should set the default in a test helper.	3 years ago
Daniel Nephin	d3325b0253	Merge pull request #10612 from bigmikes/acl-replication-fix ... acl: acl replication routine to report the last error message	3 years ago
Daniel Nephin	7160f7a614	acl: remove ACLDatacenter ... This field has been unnecessary for a while now. It was always set to the same value as PrimaryDatacenter. So we can remove the duplicate field and use PrimaryDatacenter directly. This change was made by GoLand refactor, which did most of the work for me.	3 years ago
Giulio Micheloni	d4a3fe33e8	String type instead of error type and changelog.	3 years ago
Mike Morris	cbab337803	changelog: add 1.10.1, 1.9.8 and 1.8.14	3 years ago
Daniel Nephin	5c7589c84a	Merge pull request #10743 from hashicorp/dnephin/acl-resolver-2 ... acl: decouple filtering from ACLResolver and remove a couple methods	3 years ago