19915 Commits (391ed069c46187aafc235e2cc754d8a62a6a9806)

 

All Branches   

Search

Author	SHA1	Message	Date
Dan Upton	4fa2537b3b	Resource `Write` endpoint (#16786)	2 years ago
John Murret	ad3a68a040	temporarily disable macos-arm64 tests job in go-tests (#16898)	2 years ago
John Murret	3f74827593	always test oss and conditionally test enterprise (#16827)	2 years ago
Dan Bond	bdff71500f	ci: fixes missing deps in frontend gha workflows (#16872) ... Signed-off-by: Dan Bond <danbond@protonmail.com>	2 years ago
Eddie Rowe	25f9da48d7	Omit false positives from 404 checker (#16881) ... * Remove false positives from 404 checker * fix remaining 404s	2 years ago
John Murret	dcb9da2eb2	ad arm64 testing (#16876)	2 years ago
Dan Upton	671d5825ca	Raft storage backend (#16619)	2 years ago
John Murret	afc8f978a2	ci: increase deep-copy and lint-enum jobs to use large runner as they hang in ENT (#16866) ... * docs: add envoy to the proxycfg diagram (#16834) * docs: add envoy to the proxycfg diagram * increase dee-copy job to use large runner. disable lint-enums on ENT * set lint-enums to a large * remove redunant installation of deep-copy --------- Co-authored-by: cskh <hui.kang@hashicorp.com>	2 years ago
cskh	a319953576	docs: add envoy to the proxycfg diagram (#16834) ... * docs: add envoy to the proxycfg diagram	2 years ago
Dao Thanh Tung	0582f137c5	Fix broken doc in consul-k8s upgrade (#16852) ... Signed-off-by: dttung2905 <ttdao.2015@accountancy.smu.edu.sg> Co-authored-by: David Yu <dyu@hashicorp.com>	2 years ago
John Eikenberry	40854125a5	CA mesh CA expiration to it's own section ... This is part of an effort to raise awareness that you need to monitor your mesh CA if coming from an external source as you'll need to manage the rotation.	2 years ago
Freddy	f6de5ff635	Allow dialer to re-establish terminated peering (#16776) ... Currently, if an acceptor peer deletes a peering the dialer's peering will eventually get to a "terminated" state. If the two clusters need to be re-peered the acceptor will re-generate the token but the dialer will encounter this error on the call to establish: "failed to get addresses to dial peer: failed to refresh peer server addresses, will continue to use initial addresses: there is no active peering for "<<<ID>>>"" This is because in `exchangeSecret().GetDialAddresses()` we will get an error if fetching addresses for an inactive peering. The peering shows up as inactive at this point because of the existing terminated state. Rather than checking whether a peering is active we can instead check whether it was deleted. This way users do not need to delete terminated peerings in the dialing cluster before re-establishing them.	2 years ago
Hariram Sankaran	71c32b4607	Fix typo on cli-flags.mdx (#16843) ... Change "segements" to segments	2 years ago
Michael Zalimeni	f54e310d4e	Update changelog with patch releases (#16856) ... * Update changelog with patch releases * Backport missed 1.0.4 patch release to changelog	2 years ago
Chris S. Kim	a5397b1f23	Connect CA Primary Provider refactor (#16749) ... * Rename Intermediate cert references to LeafSigningCert Within the Consul CA subsystem, the term "Intermediate" is confusing because the meaning changes depending on provider and datacenter (primary vs secondary). For example, when using the Consul CA the "ActiveIntermediate" may return the root certificate in a primary datacenter. At a high level, we are interested in knowing which CA is responsible for signing leaf certs, regardless of its position in a certificate chain. This rename makes the intent clearer. * Move provider state check earlier * Remove calls to GenerateLeafSigningCert GenerateLeafSigningCert (formerly known as GenerateIntermediate) is vestigial in non-Vault providers, as it simply returns the root certificate in primary datacenters. By folding Vault's intermediate cert logic into `GenerateRoot` we can encapsulate the intermediate cert handling within `newCARoot`. * Move GenerateLeafSigningCert out of PrimaryProvidder Now that the Vault Provider calls GenerateLeafSigningCert within GenerateRoot, we can remove the method from all other providers that never used it in a meaningful way. * Add test for IntermediatePEM * Rename GenerateRoot to GenerateCAChain "Root" was being overloaded in the Consul CA context, as different providers and configs resulted in a single root certificate or a chain originating from an external trusted CA. Since the Vault provider also generates intermediates, it seems more accurate to call this a CAChain.	2 years ago
malizz	fc64a702f4	add region field (#16825) ... * add region field * fix syntax error in test file * go fmt * go fmt * remove test	2 years ago
Dan Bond	3e6f8b7e95	[NET-3029] Migrate dev-* jobs to GHA (#16792) ... * ci: add build-artifacts workflow Signed-off-by: Dan Bond <danbond@protonmail.com> * makefile for gha dev-docker Signed-off-by: Dan Bond <danbond@protonmail.com> * use docker actions instead of make Signed-off-by: Dan Bond <danbond@protonmail.com> * Add context Signed-off-by: Dan Bond <danbond@protonmail.com> * testing push Signed-off-by: Dan Bond <danbond@protonmail.com> * set short sha Signed-off-by: Dan Bond <danbond@protonmail.com> * upload to s3 Signed-off-by: Dan Bond <danbond@protonmail.com> * rm s3 upload Signed-off-by: Dan Bond <danbond@protonmail.com> * use runner setup job Signed-off-by: Dan Bond <danbond@protonmail.com> * on push Signed-off-by: Dan Bond <danbond@protonmail.com> * testing Signed-off-by: Dan Bond <danbond@protonmail.com> * on pr Signed-off-by: Dan Bond <danbond@protonmail.com> * revert testing Signed-off-by: Dan Bond <danbond@protonmail.com> * OSS/ENT logic Signed-off-by: Dan Bond <danbond@protonmail.com> * add comments Signed-off-by: Dan Bond <danbond@protonmail.com> * Update .github/workflows/build-artifacts.yml Co-authored-by: John Murret <john.murret@hashicorp.com> --------- Signed-off-by: Dan Bond <danbond@protonmail.com> Co-authored-by: John Murret <john.murret@hashicorp.com>	2 years ago
Eric Haberkorn	a6d69adcf5	Add default resolvers to disco chains based on the default sameness group (#16837)	2 years ago
Derek Menteer	8d40cf9858	Add sameness-group to exported-services config entries (#16836) ... This PR adds the sameness-group field to exported-service config entries, which allows for services to be exported to multiple destination partitions / peers easily.	2 years ago
Ronald	bf64a33caa	Remove UI brand-loader copyright headers as they do not render appropriately (#16835)	2 years ago
Dan Upton	651549c97d	storage: fix resource leak in Watch (#16817)	2 years ago
John Murret	99ba13b9fc	updating command to reflect the additional package exclusions in CircleCI (#16829)	2 years ago
Jared Kirschner	cc23b0e4dc	docs: raise awareness of GH-16779 (#16823)	2 years ago
Nick Irvine	4ae59923ff	port ENT upgrade tests flattening (#16824)	2 years ago
John Murret	aab9397bc2	ci: changes resulting from running on consul-enterprise (#16816) ... * changes resulting from running on consul-enterprise * removing comment line	2 years ago
Eric Haberkorn	0d1d2fc4c9	add order by locality failover to Consul enterprise (#16791)	2 years ago
hashicorp-copywrite[bot]	39a0c4f5c4	[COMPLIANCE] Add Copyright and License Headers (#16807) ... * [COMPLIANCE] Add Copyright and License Headers * fix headers for generated files * ignore dist folder --------- Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com> Co-authored-by: Ronald Ekambi <ronekambi@gmail.com> Co-authored-by: Ronald <roncodingenthusiast@users.noreply.github.com>	2 years ago
Nick Irvine	32358ddf7e	port ENT ingress gateway upgrade tests [NET-2294] [NET-2296] (#16804)	2 years ago
Jeff Boruszak	4c038df0ab	docs: Updates to support HCP Consul cluster peering release (#16774) ... * New HCP Consul documentation section + links * Establish cluster peering usage cross-link * unrelated fix to backport to v1.15 * nav correction + fixes * Tech specs fixes * specifications for headers * Tech specs fixes + alignments * sprawl edits * Tip -> note	2 years ago
Poonam Jadhav	3e69ff1cd2	fix: export ReadWriteRatesConfig struct as it needs to referenced from consul-k8s (#16766)	2 years ago
Ronald	b64674623e	Copyright headers for missing files/folders (#16708) ... * copyright headers for agent folder	2 years ago
John Murret	a3973a82ae	Github Actions Migration - move go-tests workflows to GHA (#16761) ... * go-tests workflow * add test splitting to go-tests * fix re-reun fails report path * fix re-reun fails report path another place * fixing tests for32bit and race * use script file to generate runners * fixing run path * add checkout * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * passing runs-on * setting up runs-on as a parameter to check-go-mod * making on pull_request * Update .github/scripts/rerun_fails_report.sh Co-authored-by: Dan Bond <danbond@protonmail.com> * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * make runs-on required * removing go-version param that is not used. * removing go-version param that is not used. * Modify build-distros to use medium runners (#16773) * go-tests workflow * add test splitting to go-tests * fix re-reun fails report path * fix re-reun fails report path another place * fixing tests for32bit and race * use script file to generate runners * fixing run path * add checkout * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * passing runs-on * setting up runs-on as a parameter to check-go-mod * trying mediums * adding in script * fixing runs-on to be parameter * fixing merge conflict * changing to on push * removing whitespace * go-tests workflow * add test splitting to go-tests * fix re-reun fails report path * fix re-reun fails report path another place * fixing tests for32bit and race * use script file to generate runners * fixing run path * add checkout * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * passing runs-on * setting up runs-on as a parameter to check-go-mod * changing back to on pull_request --------- Co-authored-by: Dan Bond <danbond@protonmail.com> * Github Actions Migration - move verify-ci workflows to GHA (#16777) * add verify-ci workflow * adding comment and changing to on pull request. * changing to pull_requests * changing to pull_request * Apply suggestions from code review Co-authored-by: Dan Bond <danbond@protonmail.com> * [NET-3029] Migrate frontend to GHA (#16731) * changing set up to a small * using consuls own custom runner pool. --------- Co-authored-by: Dan Bond <danbond@protonmail.com>	2 years ago
Ronald	4b2137c2fa	Add copyright headers for acl, api and bench folders (#16706) ... * copyright headers for agent folder * Ignore test data files * fix proto files and remove headers in agent/uiserver folder * ignore deep-copy files * copyright headers for agent folder * fix merge conflicts * copyright headers for agent folder * Ignore test data files * fix proto files * ignore agent/uiserver folder for now * copyright headers for agent folder * Add copyright headers for acl, api and bench folders	2 years ago
Ronald	4c070c38e4	Copyright headers for command folder (#16705) ... * copyright headers for agent folder * Ignore test data files * fix proto files and remove headers in agent/uiserver folder * ignore deep-copy files * copyright headers for agent folder * Copyright headers for command folder * fix merge conflicts	2 years ago
Ronald	94ec4eb2f4	copyright headers for agent folder (#16704) ... * copyright headers for agent folder * Ignore test data files * fix proto files and remove headers in agent/uiserver folder * ignore deep-copy files	2 years ago
John Maguire	c833464daf	Update normalization of route refs (#16789) ... * Use merge of enterprise meta's rather than new custom method * Add merge logic for tcp routes * Add changelog * Normalize certificate refs on gateways * Fix infinite call loop * Explicitly call enterprise meta	2 years ago
Valeriia Ruban	12be12f3a4	add scripts for testing locally consul-ui-toolkit (#16794)	2 years ago
Michael Wilkerson	e5d58c59c9	changes to support new PQ enterprise fields (#16793)	2 years ago
Semir Patel	440f11203f	Resource service List(..) endpoint (#16753)	2 years ago
Dhia Ayachi	10df4d83aa	add ip rate limiter controller OSS parts (#16790)	2 years ago
Kyle Havlovitz	42c5b29713	Allocate virtual ip for resolver/router/splitter config entries (#16760)	2 years ago
Semir Patel	032aba3175	WatchList(..) endpoint for the resource service (#16726)	2 years ago
John Maguire	9217ac19bd	Expand route flattening test for multiple namespaces (#16745) ... * Exand route flattening test for multiple namespaces * Add helper for checking http route config entry exists without checking for bound status * Fix port and hostname check for http route flattening test	2 years ago
John Maguire	351bdc3c0d	Fix struct tags for TCPService enterprise meta (#16781) ... * Fix struct tags for TCPService enterprise meta * Add changelog	2 years ago
Tu Nguyen	c085b1e2a0	Fix Edu Jira automation (#16778)	2 years ago
Semir Patel	3415689eb6	Read(...) endpoint for the resource service (#16655)	2 years ago
John Maguire	d4603a4db4	Fix bug in changelog checker where bash variable is not quoted (#16681)	2 years ago
Dan Upton	81df781e5f	Add storage backend interface and in-memory implementation (#16538) ... Introduces `storage.Backend`, which will serve as the interface between the Resource Service and the underlying storage system (Raft today, but in the future, who knows!). The primary design goal of this interface is to keep its surface area small, and push as much functionality as possible into the layers above, so that new implementations can be added with little effort, and easily proven to be correct. To that end, we also provide a suite of "conformance" tests that can be run against a backend implementation to check it behaves correctly. In this commit, we introduce an initial in-memory storage backend, which is suitable for tests and when running Consul in development mode. This backend is a thin wrapper around the `Store` type, which implements a resource database using go-memdb and our internal pub/sub system. `Store` will also be used to handle reads in our Raft backend, and in the future, used as a local cache for external storage systems.	2 years ago
trujillo-adam	90bbae5d75	Docs/intentions refactor docs day 2022 (#16758) ... * converted intentions conf entry to ref CT format * set up intentions nav * add page for intentions usage * final intentions usage page * final intentions overview page * fixed old relative links * updated diagram for overview * updated links to intentions content * fixed typo in updated links * rename intentions overview page file to index * rollback link updates to intentions overview * fixed nav * Updated custom HTML in API and CLI pages to MD * applied suggestions from review to index page * moved conf examples from usage to conf ref * missed custom HTML section * applied additional feedback * Apply suggestions from code review Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * updated headings in usage page * renamed files and udpated nav * updated links to new file names * added redirects and final tweaks * typo --------- Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>	2 years ago
Derek Menteer	2236975011	Change partition for peers in discovery chain targets (#16769) ... This commit swaps the partition field to the local partition for discovery chains targeting peers. Prior to this change, peer upstreams would always use a value of default regardless of which partition they exist in. This caused several issues in xds / proxycfg because of id mismatches. Some prior fixes were made to deal with one-off id mismatches that this PR also cleans up, since they are no longer needed.	2 years ago