consul

Commit Graph

Author	SHA1	Message	Date
John Murret	3c3bdba926	NET-11737 - sec vulnerability - remediate ability to use bexpr to filter results without ACL read on endpoint (#21950 ) * NET-11737 - sec vulnerability - remediate ability to use bexpr to filter results without ACL read on endpoint * add changelog * update test descriptions to make more sense	23 hours ago
Dhia Ayachi	21cca2dc5b	Fix PeerUpstreamEndpoints and UpstreamPeerTrustBundles to only Cancel watch when needed, otherwise keep the watch active (#21871 ) * fix to only reset peering watches when no other target need watching * remove unused logger * add changelog * Update .changelog/21871.txt Co-authored-by: Nitya Dhanushkodi <nitya@hashicorp.com> --------- Co-authored-by: Nitya Dhanushkodi <nitya@hashicorp.com>	2 days ago
sarahalsmiller	6662e48363	Update JWT to resolve CVE-2024-51744 (#21951 ) * update jwt package * add changelog	3 days ago
xwa153	9e75e62a7c	Update CODEOWNER (#21947 ) * update code owners	6 days ago
sarahalsmiller	32ce33825d	[Security] Secvuln 8633 Consul configuration allowed repeated keys (#21908 ) * upgrade hcl package and account for possiblity of duplicates existing already in the cache * upgrade to new tag * add defensive line to prevent potential forever loop * o mod tidy and changelog * Update acl/policy.go * fix raft reversion * go mod tidy * fix test * remove duplicate key in test * remove duplicates from test cases * clean up * go mod tidy * go mod tidy * pull in new hcl tag	1 week ago
R.B. Boyer	a2e69236a2	v2: remove HCP Link integration (#21883 ) Also prevent de-registered retired v2 types from being restored from a snapshot, such as these hcp resources. Without doing this, anyone with any of these types in their state store will retain them forever with no avenue to remove them.	2 weeks ago
Yasmin Lorin Kaygalak	32515c77f2	Added the docs for all the grafana dashboards. (#21795 ) * Added the docs for all the grafana dashboards. Author: Yasmin Lorin Kaygalak <ykaygala@villanova.edu> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	2 weeks ago
Jeff Boruszak	f376b6a227	Docs/CE-749-remove-references-from-consul (#21914 ) * delete HCP Consul Central references * Path correction * missed listing * Nav update	2 weeks ago
Deniz Onur Duzgun	1dfc265abe	ci(security-scanner): add support for Red Hat UBI images and fix typo (#21912 ) * ci(security-scanner): add support for Red Hat UBI images and fix typo * hclfmt * clean-up comments Co-authored-by: Kent Gruber <kent@hashicorp.com> --------- Co-authored-by: Kent Gruber <kent@hashicorp.com>	2 weeks ago
John Maguire	59447e9579	Update changelog (#21896 )	3 weeks ago
Jeff Boruszak	6351a821aa	docs: add missing slash in redirect (#21881 ) missing slash	3 weeks ago
Tom Davies	31aae80389	Allow multiple endpoints in Envoy clusters configured with hostnames (#21655 ) * xds: allow multiple endpoints for strict_dns * xds: fixes typo in multi hostname warning	3 weeks ago
Michael Zalimeni	40c7f73629	[NET-1151 NET-11046] docs: clarify request normalization and L7 headers feature availability (#21855 ) docs: clarify request normalization and L7 headers feature availability - Add notes on feature availability tied to specific fix versions - Add missing 1.20 upgrade entry - Remove erroneous 1.17 upgrade entry (version DNE) - Add missing HCL variant for service intentions config	3 weeks ago
Michael Zalimeni	2618fc1bd9	chore: retain retracted api submodule version (#21861 )	1 month ago
sarahalsmiller	e9dbcedaf3	Upgrade envoy version in nightly integration tests (#21864 ) Update nightly-test-integrations.yml	1 month ago
Nathan Coleman	94ca67463b	Update Envoy compatibility matrices to include consul 1.20.x and dataplane 1.6.x (#21852 ) * Update Envoy compatibility matrices to include consul 1.20.x and dataplane 1.6.x * Remove non-LTS version from LTS table * Fix incorrect version in dataplane release matrix * Remove releases that don't span versions from the matrix of releases that span versions	1 month ago
Nathan Coleman	77daebd3f8	Update compatibility matrix to include 1.20.x (#21843 ) * Update compatibility matrix to include 1.20.x * Update compatibility.mdx	1 month ago
Michael Zalimeni	0ce6730cbe	docs: clarify Envoy and dataplane LTS support policy (#21337 ) Update matrices and clarify statements as to when Consul expands support to new major versions of Envoy and Consul dataplane in light of Consul LTS or Envoy EOL status.	1 month ago
sarahalsmiller	28b37812b8	Suppress CVE-2024-9143 (#21848 ) Update security-scan.hcl	1 month ago
Michael Zalimeni	d9206fc7e2	[NET-1151 NET-11228] security: Add request normalization and header match options to prevent L7 intentions bypass (#21816 ) mesh: add options for HTTP incoming request normalization Expose global mesh configuration to enforce inbound HTTP request normalization on mesh traffic via Envoy xDS config. mesh: enable inbound URL path normalization by default mesh: add support for L7 header match contains and ignore_case Enable partial string and case-insensitive matching in L7 intentions header match rules. ui: support L7 header match contains and ignore_case Co-authored-by: Phil Renaud <phil@riotindustries.com> test: add request normalization integration bats tests Add both "positive" and "negative" test suites, showing normalization in action as well as expected results when it is not enabled, for the same set of test cases. Also add some alternative service container test helpers for verifying raw HTTP request paths, which is difficult to do with Fortio. docs: update security and reference docs for L7 intentions bypass prevention - Update security docs with best practices for service intentions configuration - Update configuration entry references for mesh and intentions to reflect new values and add guidance on usage	1 month ago
Michael Zalimeni	3370f6b250	chore: remove unintentionally committed consul-k8s submodule (#21833 ) Also prevent future re-commits of this submodule path by adding to .gitignore.	1 month ago
Jeff Boruszak	7e61148f86	docs: Consul v1.20 release notes (#21826 ) * Page creation * DNS views description * Catalog sync and openshift * Grafana + consul-k8s release notes * nav update * Fix known issues language	1 month ago
Nathan Coleman	044e408391	Post-release updates for 1.20.0 (#21829 ) * Update active version list in .release/versions.hcl * Remove nightly tests for 1.17.x * Add nightly tests for 1.20.x * Gate nightly tests for 1.19.x to Enterprise only * Update CHANGELOG.md	1 month ago
Jeff Boruszak	8f78d7cafd	docs: Consul DNS views on Kubernetes (#21802 ) * Backport of ci: update the security-scanner gha token into release/1.20.x (#21754) backport of commit `eb9dbc93f8` Co-authored-by: dduzgun-security <deniz.duzgun@hashicorp.com> * Backport of Initialize 1.20 Release into release/1.20.x (#21753) * backport of commit `a33e903cdf` * backport of commit `37163dc1a8` * backport of commit `38f0907c7a` * backport of commit `6ab7ec254b` * backport of commit `7ac4178186` * backport of commit `5dfebb2cf3` * backport of commit `316d68cb84` --------- Co-authored-by: Sarah Alsmiller <sarah.alsmiller@hashicorp.com> Co-authored-by: sarahalsmiller <100602640+sarahalsmiller@users.noreply.github.com> * Backport of Stage rc release into release/1.20.x (#21772) backport of commit `d311f2b638` Co-authored-by: Sarah Alsmiller <sarah.alsmiller@hashicorp.com> * Backport of Upgrade ubi image to 9.4 into release/1.20.x (#21773) * backport of commit `888e302f6e` * backport of commit `17499dc4dc` * backport of commit `d933d3727d` --------- Co-authored-by: Dhia Ayachi <dhia.ayachi@gmail.com> Co-authored-by: sarahalsmiller <100602640+sarahalsmiller@users.noreply.github.com> * Backport of security: update alpine base image to 3.20 into release/1.20.x (#21774) * backport of commit `4421ce1677` * Upgrade ubi image to 9.4 (#21750) --------- Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com> Co-authored-by: Sarah Alsmiller <sarah.alsmiller@hashicorp.com> Co-authored-by: sarahalsmiller <100602640+sarahalsmiller@users.noreply.github.com> * Backport of fix spacing of bash scripts into release/1.20.x (#21769) * backport of commit `1e97297215` * backport of commit `b7053f5361` * backport of commit `a391f2fa3c` --------- Co-authored-by: jm96441n <john.maguire@hashicorp.com> * Backport of [NET-11150] ci: fix conditional skip and add safeguard into release/1.20.x (#21783) backport of commit `c3db6c9001` Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com> * initial commit * Initial pages * Edits to other pages + nav & redirects * minor fixes * Backport of security: update alpine base image to 3.20 into release/1.20.x (#21774) * backport of commit `4421ce1677` * Upgrade ubi image to 9.4 (#21750) --------- Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com> Co-authored-by: Sarah Alsmiller <sarah.alsmiller@hashicorp.com> Co-authored-by: sarahalsmiller <100602640+sarahalsmiller@users.noreply.github.com> * CE-679 * align with main * Content updates * minor edit * Apply suggestions from code review Co-authored-by: Aimee Ukasick <aimee.ukasick@hashicorp.com> Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * CoreDNS config update * small edits * typo fix --------- Co-authored-by: hc-github-team-consul-core <github-team-consul-core@hashicorp.com> Co-authored-by: dduzgun-security <deniz.duzgun@hashicorp.com> Co-authored-by: Sarah Alsmiller <sarah.alsmiller@hashicorp.com> Co-authored-by: sarahalsmiller <100602640+sarahalsmiller@users.noreply.github.com> Co-authored-by: Dhia Ayachi <dhia.ayachi@gmail.com> Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com> Co-authored-by: jm96441n <john.maguire@hashicorp.com> Co-authored-by: Aimee Ukasick <aimee.ukasick@hashicorp.com> Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	1 month ago
Michael Zalimeni	1648c890dd	ci: ensure int test docker pull goes through proxy (#21819 )	1 month ago
Nathan Coleman	4275e8fa82	Update ENVOY_VERSIONS (#21820 ) No new minor versions, just incrementing the patches for hygiene's sake	1 month ago
Nathan Coleman	eda961f4a2	Upgrade test improvements for 1.20.x (#21813 ) * Bump Envoy version used for 1.20.x upgrade tests * Improve README + docstrings	1 month ago
Yasmin Lorin Kaygalak	738acfee1a	Adds grafana dashboards (#21806 )	1 month ago
Lens0021 / Leslie	09735ec72f	docs: Add missing `&&` in DNS forwading tutorial (#21804 ) Add missing `&&` to iptables command. The original commands fail when being directly pasted into a shell.	2 months ago
John Murret	029ac10acc	update serf links (#21797 ) * update serf links * add .markdown file extension * update serf links to use /blob/master/ * fix broken links --------- Co-authored-by: github-team-consul-core <github-team-consul-core@hashicorp.com>	2 months ago
John Maguire	a689893991	Add partition field for catalog deregister docs (#21788 ) * Add partition field for catalog deregister docs * Update website/content/api-docs/catalog.mdx Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> --------- Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	2 months ago
sarahalsmiller	718bf7496f	Fix changelog for 1.20-rc1 (#21776 ) fix changelog	2 months ago
Michael Zalimeni	bfc25b1757	[NET-11150] ci: fix conditional skip and add safeguard (#21781 ) ci: fix conditional skip and add safeguard Adopt a third-party action to avoid script bugs, and to fix a current issue where the script fails to detect all changes when processing push events on PR branches. Adapted from hashicorp/consul-dataplane#637. See that PR for testing details and background context.	2 months ago
R.B. Boyer	1986c558a8	api: remove dependency on proto-public, protobuf, and grpc (#21780 )	2 months ago
Dhia Ayachi	39104a3ce1	Update raft to 1.7.0 and add configuration for prevote (#21758 ) * update raft to 1.7.0 * add config to disable raft prevote * add changelog	2 months ago
Michael Zalimeni	c16d6831e8	chore: Update VERSION for next major release (#21756 ) This should be set to the next major version now that `release/1.20.x` has been created.	2 months ago
sarahalsmiller	dc0fa032e8	Stage rc release (#21770 ) stage rc release	2 months ago
John Maguire	2d19cd5810	fix spacing of bash scripts (#21760 ) * fix spacing of bash scripts * shellcheck all the things * cat filename rather than concatenating pr number	2 months ago
danielehc	250b1dece5	CE-654 - TLS Encryption docs + CE-713 - Gossip Encryption key rotation (#21509 ) * New proposed structure * Fix structure and add some content * Fix structure and add some content * Fix structure and add some content * Add content * Add content * mtls steps * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * Encryption docs structure change * spacing fixes * Replace <CodeTabs> * <CodeBlockConfig> alignment * indent fixes * spacing * More Code tabs fixes * Structure chenges * Structure chenges * Extra content and CE-713 migration * Extra content * Extra content * Extra content * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> * Apply suggestions from code review * Test CodeTabs * Test CodeTabs * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> --------- Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	2 months ago
Nick Wales	ac9e694b98	Adds initial sg documentation for the health API (#21763 ) Adds initial sg documentation	2 months ago
NicoletaPopoviciu	1a0b1e045b	Update test-integrations.yml to capture latest versions of Nomad and Vault (#21749 ) * Update test-integrations.yml Update Vault/Nomad versions to ensure we're testing the latest versions . * Update test to test latest available CE versions	2 months ago
Dhia Ayachi	fe820d561a	Upgrade ubi image to 9.4 (#21750 ) * upgrade go to 1.23.1, upgrade ubi image to 9.4 * add changelog * revert go version upgrade	2 months ago
Michael Zalimeni	29c2cbcbe2	ci: fix versions.hcl parsing by removing extraneous comma (#21752 ) Commas are not expected after HCL blocks. This is causing parsing in BPA to fail and may interfere w/ other release-related workflows.	2 months ago
Deniz Onur Duzgun	176ea31ed9	ci: update the security-scanner gha token (#21748 )	2 months ago
sarahalsmiller	e0785bc4f9	Initialize 1.20 Release (#21746 ) * init release branch * init 1.20 nightly tests * drop 1.17 nightly tests for new release cycle * drop 1.17 from test matrix * Update nightly-test-integrations-1.20.x.yml	2 months ago
Michael Zalimeni	5e20e13c8e	ci: fix CI skip script hole (#21741 ) In some environments, the script will not fail despite SKIP_CHECK_BRANCH being unset, leading to the script explicitly skipping CI when it should fail fast. Prevent this by explicitly checking for the env var.	2 months ago
sarahalsmiller	17d43c6316	Fix supression (#21744 ) fix supression	2 months ago
sarahalsmiller	5a84cd1abf	Update security-scan.hcl (#21739 )	2 months ago
Deniz Onur Duzgun	ac41822332	ci: fix security-scanner conditional skip (#21740 )	2 months ago
sarahalsmiller	667eac2ac5	Suppress CVE-2024-8096 (#21737 )	2 months ago

1 2 3 4 5 ...

21495 Commits (3c3bdba926f97fa65fac00c50bf4ff081d4889d7) All Branches Search

21495 Commits (3c3bdba926f97fa65fac00c50bf4ff081d4889d7)

All Branches