Kyle Havlovitz
3fd040be22
Merge pull request #7623 from FriedCircuits/patch-1
...
Add support for RSA private key to TLS utils.
2021-02-04 11:37:51 -08:00
David Yu
36db3b50e6
docs: fix another broken link to upgrading k8s servers from token rotation page ( #9707 )
...
fix another broken link to upgrading k8s servers from token rotation page
2021-02-04 09:44:04 -08:00
David Yu
94389f9619
docs: Small change to fix broken link to k8s upgrade from k8s tls certs page ( #9705 )
...
Broken link to k8s server upgrade from tls certs page
2021-02-04 09:13:32 -08:00
Pierre Souchay
7a024ed074
Streaming filter tags + case insensitive lookups for Service Names
...
Will fix:
* https://github.com/hashicorp/consul/issues/9695
* https://github.com/hashicorp/consul/issues/9702
2021-02-04 11:00:51 +01:00
Daniel Nephin
2d5b5afec1
state: Remove unnecessary entMeta arg to EnsureConfigEntry
2021-02-03 18:10:38 -05:00
Alvin Huang
0d1301c408
ci: add nightly load testing on master ( #9693 )
2021-02-03 15:59:37 -05:00
Alvin Huang
a4d5738a4e
ci: fix pr file checker ( #9694 )
...
* filter github pr file checker on the right labels object
* only check PR files when the PR is opened
2021-02-03 10:19:37 -05:00
Alvin Huang
7f455b9a42
ci:check that type/docs-cherrypick is attached to website PR changes ( #9690 )
2021-02-02 17:04:05 -05:00
Kim Ngo
6b92b778c5
docs/nia: recommend sensitive variables for module authoring ( #9692 )
2021-02-02 14:57:46 -06:00
Alvin Huang
27e80ce5be
ci: fix changelog check checkout ( #9688 )
...
* ci: fix changelog check checkout
* use fetch-depth 0 to get all commits to find a merge-base
2021-02-02 14:51:20 -05:00
freddygv
5ba14ad41d
Add trace logs to proxycfg state runner and xds srv
2021-02-02 12:26:38 -07:00
Kim Ngo
e48a96eac1
docs/nia: Update verbiage around securely configuring providers ( #9684 )
...
This reorganizes and flags where and when sensitive information may
be written in plain-text
2021-02-02 13:24:25 -06:00
freddygv
37190c0d0d
Avoid potential deadlock using non-blocking send
...
Deadlock scenario:
1. Due to scheduling, the state runner sends one snapshot into
snapCh and then attempts to send a second. The first send succeeds
because the channel is buffered, but the second blocks.
2. Separately, Manager.Watch is called by the xDS server after
getting a discovery request from Envoy. This function acquires the
manager lock and then blocks on receiving the CurrentSnapshot from
the state runner.
3. Separately, there is a Manager goroutine that reads the snapshots
from the channel in step 1. These reads are done to notify proxy
watchers, but they require holding the manager lock. This goroutine
goes to acquire that lock, but can't because it is held by step 2.
Now, the goroutine from step 3 is waiting on the one from step 2 to
release the lock. The goroutine from step 2 won't release the lock until
the goroutine in step 1 advances. But the goroutine in step 1 is waiting
for the one in step 3. Deadlock.
By making this send non-blocking step 1 above can proceed. The coalesce
timer will be reset and a new valid snapshot will be delivered after it
elapses or when one is requested by xDS.
2021-02-02 11:31:14 -07:00
Brandon Romano
cf9a14ab6a
Merge pull request #9677 from hashicorp/km.hcp
...
website: 2/2 Updates for HCP
2021-02-02 08:39:52 -08:00
Kyle MacDonald
d9bbf3d922
website: add utm params for all cloud.hashi links
2021-02-02 09:09:16 -05:00
hashicorp-ci
6fa9a6a1d9
auto-updated agent/uiserver/bindata_assetfs.go from commit e0ff7080a
2021-02-02 10:08:48 +00:00
John Cowen
e0ff7080ae
ui: Adds unique-id helper ( #9676 )
2021-02-02 10:03:46 +00:00
Kyle MacDonald
132e27436f
Website updates for HCP (2/2)
...
website: prep hcp ctas
Add in updated HCP section
Fix broken link
website: remove superflous heading
website: add new try cloud cta to nav
website: adjust homepage hero CTAs
Update HCP description to match latest
Clean up Hero CTAs
Updates banner
2021-02-01 19:09:38 -08:00
Alvin Huang
d94c3b9342
ci: add script to check for .changelog file in PRs ( #9641 )
...
* ci: add .changelog file check for PRs
* Update .github/workflows/changelog-check.yml
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
* add better disclaimer in changelog check script description
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
2021-02-01 18:51:52 -05:00
Matt Keeler
f4dcb094a5
Release 1.9.3 ( #9680 )
2021-02-01 13:34:44 -05:00
hashicorp-ci
90917400c6
auto-updated agent/uiserver/bindata_assetfs.go from commit 0b7d676dc
2021-02-01 17:55:03 +00:00
John Cowen
0b7d676dcb
ui: Add 'Scenario' debug function for easy saving debug scenarios ( #9675 )
2021-02-01 17:50:11 +00:00
hashicorp-ci
a33ff40816
auto-updated agent/uiserver/bindata_assetfs.go from commit 3aef5cde2
2021-02-01 17:35:20 +00:00
John Cowen
3aef5cde20
ui: Adds the dump router dumping function only in dev mode ( #9666 )
2021-02-01 17:29:43 +00:00
Alvin Huang
e889f7dbcd
ci: fail cherrypick if git push fails ( #9673 )
2021-01-29 19:42:14 -05:00
Mike Morris
504aa7c5fe
website: add release notes for 1.9 ( #9189 )
...
* website: initial draft of release notes framework
* website: fixup ref to 1-9-0.mdx
* Update website/pages/docs/release-notes/1-9-0.mdx
* Update website/pages/docs/release-notes/1-9-0.mdx
* website: add draft of 1.9.0 release notes
* website: move release-notes directory from /pages to /content
* Update 1-9-0.mdx
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
2021-01-29 18:00:32 -05:00
Ashwin Venkatesh
3da918089d
Add docs for TLS Server Certificate rotation for K8S ( #9636 )
...
* Add docs for TLS Server Certificate rotation for K8s
2021-01-29 17:13:28 -05:00
Kyle Havlovitz
7dac583863
connect/ca: Allow ForceWithoutCrossSigning for all providers
...
This allows setting ForceWithoutCrossSigning when reconfiguring the CA
for any provider, in order to forcibly move to a new root in cases where
the old provider isn't reachable or able to cross-sign for whatever
reason.
2021-01-29 13:38:11 -08:00
Luke Kysow
b5212fbcc6
Add operations section to k8s notes ( #9625 )
...
* Add operations section to k8s notes
* Unify faq/troubleshooting
2021-01-29 11:15:40 -08:00
John Cowen
67523a1365
chore: changelog for 9660 ( #9668 )
2021-01-29 16:08:39 +00:00
hashicorp-ci
40c2a3d108
auto-updated agent/uiserver/bindata_assetfs.go from commit 3477b1de7
2021-01-29 16:03:41 +00:00
John Cowen
3477b1de77
ui: Keep track of previous node checks and avoid adding them twice ( #9661 )
...
* Keep track of previous node checks and avoid adding them twice
2021-01-29 15:57:47 +00:00
John Cowen
19fd9a87d1
ui: Check for a non-existent items argument/attribute within DataCollection ( #9662 )
2021-01-29 15:53:28 +00:00
John Cowen
7c277aa85b
ui: [BUGFIX] Fix missing or duplicate service instance health checks ( #9660 )
...
* Use NodeName not Node for cross checking proxies/instances
* Also copy over the meta data to keep the correct cursor/index
* When we sync checks to the ProxyInstance replace rather than accumulate
2021-01-29 15:51:23 +00:00
Daniel Nephin
5b4703f0e4
state: rename config-entries table const to match new pattern
2021-01-28 20:34:34 -05:00
Daniel Nephin
cd06b5728c
state: move config-entries table to new pattern
2021-01-28 20:34:15 -05:00
Daniel Nephin
e8931b868c
state: use indexID
...
this change was already made to enterprise, so backporting it.
2021-01-28 20:30:08 -05:00
Daniel Nephin
1cccdc45c2
state: Move ACL schema indexes to match Ent
...
and use constants for table and index names.
2021-01-28 20:05:09 -05:00
Daniel Nephin
cae4b2c0eb
Update go-memdb
...
To use a version that will not panic when an iterator is used with modifications.
2021-01-28 17:19:55 -05:00
Daniel Nephin
727a402810
Merge pull request #9302 from hashicorp/dnephin/add-service-3
...
agent: remove ServiceManager.Start goroutine
2021-01-28 16:59:41 -05:00
Kyle Havlovitz
b2dc7f7d9b
Merge pull request #9541 from sadedil/patch-1
...
Add a CLI tool for "Client Libraries & SDKs" page
2021-01-28 10:18:41 -08:00
Kyle Havlovitz
9565f2c2a4
Merge pull request #9493 from Mongey/master
...
Allow setting arbitrary headers in API client
2021-01-28 10:16:48 -08:00
Daniel Nephin
f56a645a5d
Merge pull request #9451 from hashicorp/dnephin/config-tests-full
...
config: make config.TestLoad_FullConfig use config.Load
2021-01-27 18:48:16 -05:00
Daniel Nephin
603c692190
Merge pull request #9448 from hashicorp/dnephin/config-load-interface
...
config: reduce interface to a single Load function
2021-01-27 17:54:05 -05:00
Daniel Nephin
5a3814b0f7
contrib: Update contributing checklist for config
2021-01-27 17:52:54 -05:00
Daniel Nephin
1dcafa51a4
config: make config.TestLoad_FullConfig use config.Load
...
This commit makes a number of changes that should make
TestLoad_FullConfig easier to work with, and make the test more like
real world scenarios.
* use separate files in testdata/ dir to store the config source.
Separate files are much easier to edit because editors can syntax
highlight json/hcl, and it makes strings easier to find. Previously
trying to find strings would match strings used in other tests.
* use the exported config.Load interface instead of internal NewBuilder
and BuildAndValidate.
* remove the tail config overrides, which are only necessary with
nonZero works.
2021-01-27 17:51:53 -05:00
Daniel Nephin
a0dd45941b
config: Unexport Builder and NewBuilder
...
This type and constructor are implementation details of config loading.
All callers should use config.Load.
2021-01-27 17:41:53 -05:00
David Yu
b2d00dce7a
docs: Update Compat Matrix for Consul Helm 0.29 ( #9657 )
...
* docs: Update Compat Matrix for Consul Helm 0.29
Adding 0.29
* Update compatibility.mdx
2021-01-27 14:39:03 -08:00
Daniel Nephin
32d36d0dd4
config: replace calls to config.NewBuilder with config.Load
...
This is another incremental change to reduce config loading to a single
small interface. All calls to NewBuilder can be replaced with Load.
2021-01-27 17:34:43 -05:00
Daniel Nephin
97a577502d
config: improve the interface of Load
...
This commit reduces the interface to Load() a bit, in preparation for
unexporting NewBuilder and having everything call Load.
The three arguments are reduced to a single argument by moving the other
two into the options struct.
The three return values are reduced to two by moving the RuntimeConfig
and Warnings into a LoadResult struct.
2021-01-27 17:34:43 -05:00