19582 Commits (3d232666ae06f0f5da749f9bc99915eac342fb19)

 

All Branches   

Search

Author	SHA1	Message	Date
hc-github-team-consul-core	3d232666ae	Backport of [API Gateway] Fix targeting service splitters in HTTPRoutes into release/1.15.x (#16353) ... * backport of commit 06fc59c26f * backport of commit cd4e6e9677 --------- Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>	2 years ago
hc-github-team-consul-core	9f29e0c4fc	backport of commit 326d5c02c6 (#16352) ... Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>	2 years ago
hc-github-team-consul-core	2604a03799	backport of commit 817d85df12 (#16344) ... Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>	2 years ago
hc-github-team-consul-core	de2bcabdb8	Backport of Docs/reformat service splitters conf entry into release/1.15.x (#16283) ... * backport of commit 99012ae501 * backport of commit 0ffebd8f89 * backport of commit 352d079872 * backport of commit 6b402e9c44 * backport of commit 9da4a1fe0e * backport of commit fabc679309 * backport of commit b57075ec11 * backport of commit d3cc6ee9e9 * Docs/reformat service splitters conf entry (#16264) * for tab testing * updates * Update * adding sandbox to test conf ref types * testing tweaks to the conf ref template * reintroduce tabbed specification * applied feedback from MKO session * applied feedback on format from luke and jared * Apply suggestions from code review Co-authored-by: Dan Upton <daniel@floppy.co> * fixed some minor HCL formatting in complete conf * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> * fixed bad link * resolving conflicts --------- Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com> Co-authored-by: Dan Upton <daniel@floppy.co> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> resolved cherry-pick conflicts * trying to get rid of conflicts --------- Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com> Co-authored-by: trujillo-adam <ajosetru@gmail.com> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
hc-github-team-consul-core	1241135e68	Backport of [API Gateway] Validate listener name is not empty into release/1.15.x (#16341) ... * backport of commit cabcb052fd * backport of commit 89baddca25 --------- Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>	2 years ago
hc-github-team-consul-core	ca02bf6c73	Backport of new docs for consul and consul-k8s troubleshoot command into release/1.15.x (#16318) ... * backport of commit ba5560c2a2 * backport of commit 0f3a7cb26b * backport of commit effdb9bb57 * fix PR from original OSS PR: 16284 * fix missing tab in docs * fix missing tab in docs --------- Co-authored-by: Maliz <maliheh.monshizadeh@hashicorp.com>	2 years ago
hc-github-team-consul-core	84bc971334	Backport of fix: add tls config to unix socket when https is used into release/1.15.x (#16336) ... * backport of commit 49f7423ab8 * backport of commit d5408c8d01 --------- Co-authored-by: cskh <hui.kang@hashicorp.com>	2 years ago
hc-github-team-consul-core	a3a9b05e14	backport of commit 748e2a76cb (#16328) ... Co-authored-by: DanStough <dan.stough@hashicorp.com>	2 years ago
hc-github-team-consul-core	065ab57133	backport of commit acf20db763 (#16320) ... Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>	2 years ago
hc-github-team-consul-core	5437e5b789	backport of commit d3daf89ba8 (#16324) ... Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>	2 years ago
Andrew Stucki	9ce2cff600	Backport of Add stricter validation and some normalization code for API Gateway ConfigEntries into release/1.15.x (#16317) ... * Add stricter validation and some normalization code for API Gateway ConfigEntries * Switch to certs with valid hostnames in them	2 years ago
hc-github-team-consul-core	0e89df2b7a	Backport of [OSS] security: update go to 1.20.1 into release/1.15.x (#16314) ... * backport of commit 2a8cdf1747 * backport of commit 716d162048 * backport of commit 2c757fac4f * backport of commit f81c5d4933 * backport of commit ff4f0596f3 * backport of commit 31bbca9fe4 * backport of commit 2f54191353 * backport of commit c263147180 --------- Co-authored-by: DanStough <dan.stough@hashicorp.com>	2 years ago
Andrew Stucki	e4e7c69f44	Fix hostname alignment checks for HTTPRoutes (#16315)	2 years ago
hc-github-team-consul-core	4920cb4a77	Backport of Inline API Gateway TLS cert code into release/1.15.x (#16306) ... * Inline API Gateway TLS cert code (#16295) * Include secret type when building resources from config snapshot * First pass at generating envoy secrets from api-gateway snapshot * Update comments for xDS update order * Add secret type + corresponding golden files to existing tests * Initialize test helpers for testing api-gateway resource generation * Generate golden files for new api-gateway xDS resource test * Support ADS for TLS certificates on api-gateway * Configure TLS on api-gateway listeners * Inline TLS cert code * update tests * Add SNI support so we can have multiple certificates * Remove commented out section from helper * regen deep-copy * Add tcp tls test --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com> * Fix bad merge --------- Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com> Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	2 years ago
hc-github-team-consul-core	3cba165d78	Backport of Fix panicky xDS test flakes into release/1.15.x (#16310) ... * backport of commit 01ca6e268b * backport of commit 485cb4d88d --------- Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>	2 years ago
Nitya Dhanushkodi	94f4347ffe	Backport: troubleshoot: fixes and updated messages (#16294) (#16309)	2 years ago
hc-github-team-consul-core	6cd08b96c3	Backport of Fix mesh gateways incorrectly matching peer locality. into release/1.15.x (#16287) ... * backport of commit 9bc7f6280a * backport of commit 0c48c9a1e8 --------- Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>	2 years ago
hc-github-team-consul-core	0a32425202	Backport of Fix infinite recursion in inline-certificate config entry into release/1.15.x (#16281) ... * backport of commit ea4dd2bb4c * backport of commit 637d13a0a9 * backport of commit 18f19cecd1 * backport of commit 3e6807bdbc --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	2 years ago
hc-github-team-consul-core	9aa85df0cc	backport of commit e5adc43315 (#16279) ... Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>	2 years ago
hc-github-team-consul-core	6db3c26f54	backport of commit acf75497c8 (#16275) ... Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	2 years ago
hc-github-team-consul-core	1d994d707e	Backport of add integration tests for troubleshoot into release/1.15.x (#16261) ... * backport of commit 74dcceeeb2 * cherry pick from PR 16223 --------- Co-authored-by: Maliz <maliheh.monshizadeh@hashicorp.com>	2 years ago
Nicholas Richu	dc2aa36b6f	Update index.mdx (#16247) ... * Update index.mdx * Update website/content/docs/connect/dataplane/index.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> --------- Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>	2 years ago
malizz	c10ba43eb3	get clusters from route if listener uses RDS (#16243)	2 years ago
cskh	5b7f36c2ce	integ test: fix retry upstream test (#16246)	2 years ago
Andrew Stucki	9bb0ecfc18	[API Gateway] Add integration test for HTTP routes (#16236) ... * [API Gateway] Add integration test for conflicted TCP listeners * [API Gateway] Update simple test to leverage intentions and multiple listeners * Fix broken unit test * [API Gateway] Add integration test for HTTP routes	2 years ago
cskh	ab5dac3414	upgrade test: peering with http router config entry (#16231) ... * upgrade test: peering with http router config entry	2 years ago
Tyler Wendlandt	3f22879106	UI: CC-4032 - Update sidebar width (#16204) ... * Update chrome-width var to be 280px * Formatting & Changelog	2 years ago
Semir Patel	8979e64a94	Bump x/time to 0.3.0 and fix related breakage linked to RPCRateLimit (#16241) ... * Bump x/time to 0.3.0 and fix related breakage linked to RPCRateLimit initialization * Apply limitVal(...) to other rate.Limit config fields	2 years ago
Tyler Wendlandt	a464c158d7	ui: add vercel info to the ui readme (#16239)	2 years ago
Valeriia Ruban	663a5642c2	[UI]: update Ember to 3.27 (#16227) ... * Upgrade to 3.25 via ember-cli-update * v3.25.3...v3.26.1 * v3.26.1...v3.27.0 Co-authored-by: Michael Klein <michael@firstiwaslike.com>	2 years ago
Andrew Stucki	8ff2974dbe	[API Gateway] Update simple test to leverage intentions and multiple listeners (#16228) ... * [API Gateway] Add integration test for conflicted TCP listeners * [API Gateway] Update simple test to leverage intentions and multiple listeners * Fix broken unit test * PR suggestions	2 years ago
Andrew Stucki	4c848a554d	Fix missing references to enterprise metadata (#16237)	2 years ago
Nitya Dhanushkodi	80fb18aa35	troubleshoot: make output have tables and colors (#16235) ... Adds tables and colors using libraries used in consul-k8s. It doesn't add the full `terminal` UI package that consul-k8s uses since there is an existing UI in Consul that I didn't want to affect too much. So instead this adds to the existing UI.	2 years ago
Andrew Stucki	318ba215ab	[API Gateway] Add integration test for conflicted TCP listeners (#16225)	2 years ago
Derek Menteer	4f2ce60654	Fix peering acceptors in secondary datacenters. (#16230) ... Prior to this commit, secondary datacenters could not be initialized as peering acceptors if ACLs were enabled. This is due to the fact that internal server-to-server API calls would fail because the management token was not generated. This PR makes it so that both primary and secondary datacenters generate their own management token whenever a leader is elected in their respective clusters.	2 years ago
Nitya Dhanushkodi	78a4b5fd6f	update the api in envoyextensions and troubleshoot modules (#16226)	2 years ago
Andrew Stucki	3b9c569561	Simple API Gateway e2e test for tcp routes (#16222) ... * Simple API Gateway e2e test for tcp routes * Drop DNSSans since we don't front the Gateway with a leaf cert	2 years ago
skpratt	db2bd404bf	Synthesize anonymous token pre-bootstrap when needed (#16200) ... * add bootstrapping detail for acl errors * error detail improvements * update acl bootstrapping test coverage * update namespace errors * update test coverage * consolidate error message code and update changelog * synthesize anonymous token * Update token language to distinguish Accessor and Secret ID usage (#16044) * remove legacy tokens * remove lingering legacy token references from docs * update language and naming for token secrets and accessor IDs * updates all tokenID references to clarify accessorID * remove token type references and lookup tokens by accessorID index * remove unnecessary constants * replace additional tokenID param names * Add warning info for deprecated -id parameter Co-authored-by: Paul Glass <pglass@hashicorp.com> * Update field comment Co-authored-by: Paul Glass <pglass@hashicorp.com> --------- Co-authored-by: Paul Glass <pglass@hashicorp.com> * revert naming change * add testing * revert naming change --------- Co-authored-by: Paul Glass <pglass@hashicorp.com>	2 years ago
Andrew Stucki	99cf421e7b	Add some fixes to allow for registering via consul connect envoy -gateway api (#16219) ... * Add some fixes to allow for registering via consul connect envoy -gateway api * Fix infinite recursion --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	2 years ago
malizz	ba862ab6ad	troubleshoot basic envoy stats for an upstream (#16215) ... * troubleshoot basic envoy stats for an upstream * remove envoyID arg	2 years ago
oneoneonepig	dae88b16e8	Fix typo in checks.mdx (#16187) ... Typo severeal -> several	2 years ago
Thomas Eckert	e81a0c2855	API Gateway to Ingress Gateway Snapshot Translation and Routes to Virtual Routers and Splitters (#16127) ... * Stub proxycfg handler for API gateway * Add Service Kind constants/handling for API Gateway * Begin stubbing for SDS * Add new Secret type to xDS order of operations * Continue stubbing of SDS * Iterate on proxycfg handler for API gateway * Handle BoundAPIGateway config entry subscription in proxycfg-glue * Add API gateway to config snapshot validation * Add API gateway to config snapshot clone, leaf, etc. * Subscribe to bound route + cert config entries on bound-api-gateway * Track routes + certs on API gateway config snapshot * Generate DeepCopy() for types used in watch.Map * Watch all active references on api-gateway, unwatch inactive * Track loading of initial bound-api-gateway config entry * Use proper proto package for SDS mapping * Use ResourceReference instead of ServiceName, collect resources * Fix typo, add + remove TODOs * Watch discovery chains for TCPRoute * Add TODO for updating gateway services for api-gateway * make proto * Regenerate deep-copy for proxycfg * Set datacenter on upstream ID from query source * Watch discovery chains for http-route service backends * Add ServiceName getter to HTTP+TCP Service structs * Clean up unwatched discovery chains on API Gateway * Implement watch for ingress leaf certificate * Collect upstreams on http-route + tcp-route updates * Remove unused GatewayServices update handler * Remove unnecessary gateway services logic for API Gateway * Remove outdate TODO * Use .ToIngress where appropriate, including TODO for cleaning up * Cancel before returning error * Remove GatewayServices subscription * Add godoc for handlerAPIGateway functions * Update terminology from Connect => Consul Service Mesh Consistent with terminology changes in https://github.com/hashicorp/consul/pull/12690 * Add missing TODO * Remove duplicate switch case * Rerun deep-copy generator * Use correct property on config snapshot * Remove unnecessary leaf cert watch * Clean up based on code review feedback * Note handler properties that are initialized but set elsewhere * Add TODO for moving helper func into structs pkg * Update generated DeepCopy code * gofmt * Begin stubbing for SDS * Start adding tests * Remove second BoundAPIGateway case in glue * TO BE PICKED: fix formatting of str * WIP * Fix merge conflict * Implement HTTP Route to Discovery Chain config entries * Stub out function to create discovery chain * Add discovery chain merging code (#16131) * Test adding TCP and HTTP routes * Add some tests for the synthesizer * Run go mod tidy * Pairing with N8 * Run deep copy * Clean up GatewayChainSynthesizer * Fix missing assignment of BoundAPIGateway topic * Separate out synthesizeChains and toIngressTLS * Fix build errors * Ensure synthesizer skips non-matching routes by protocol * Rebase on N8s work * Generate DeepCopy() for API gateway listener types * Improve variable name * Regenerate DeepCopy() code * Fix linting issue * fix protobuf import * Fix more merge conflict errors * Fix synthesize test * Run deep copy * Add URLRewrite to proto * Update agent/consul/discoverychain/gateway_tcproute.go Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com> * Remove APIGatewayConfigEntry that was extra * Error out if route kind is unknown * Fix formatting errors in proto --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com> Co-authored-by: Andrew Stucki <andrew.stucki@hashicorp.com>	2 years ago
Andrew Stucki	f4210d47dd	Add basic smoke test to make sure an APIGateway runs (#16217)	2 years ago
Andrew Stucki	0891b4554d	Clean-up Gateway Controller Binding Logic (#16214) ... * Fix detecting when a route doesn't bind to a gateway because it's already bound * Clean up status setting code * rework binding a bit * More cleanup * Flatten all files * Fix up docstrings	2 years ago
Anita Akaeze	d72ad5fb95	Merge pull request #4216 from hashicorp/NET-2252-add-assert-fortioname (#16212) ... NET-2252: integration tests: add assert.FortioName	2 years ago
malizz	f5391ef142	update troubleshoot CLI, update flags and upstreams output (#16211) ... * update troubleshoot CLI, update flags and upstreams output * update troubleshoot upstreams output	2 years ago
skpratt	6f0b226b0d	ACL error improvements: incomplete bootstrapping and non-existent token (#16105) ... * add bootstrapping detail for acl errors * error detail improvements * update acl bootstrapping test coverage * update namespace errors * update test coverage * add changelog * update message for unbootstrapped error * consolidate error message code and update changelog * logout message change	2 years ago
Nitya Dhanushkodi	ad7b71dbd7	troubleshoot: handle tproxy dialed directly case (#16210)	2 years ago
Tyler Wendlandt	33881cf94b	UI: Update padding for the content wrapper (#16209)	2 years ago
Nathan Coleman	72a73661c9	Implement APIGateway proxycfg snapshot (#16194) ... * Stub proxycfg handler for API gateway * Add Service Kind constants/handling for API Gateway * Begin stubbing for SDS * Add new Secret type to xDS order of operations * Continue stubbing of SDS * Iterate on proxycfg handler for API gateway * Handle BoundAPIGateway config entry subscription in proxycfg-glue * Add API gateway to config snapshot validation * Add API gateway to config snapshot clone, leaf, etc. * Subscribe to bound route + cert config entries on bound-api-gateway * Track routes + certs on API gateway config snapshot * Generate DeepCopy() for types used in watch.Map * Watch all active references on api-gateway, unwatch inactive * Track loading of initial bound-api-gateway config entry * Use proper proto package for SDS mapping * Use ResourceReference instead of ServiceName, collect resources * Fix typo, add + remove TODOs * Watch discovery chains for TCPRoute * Add TODO for updating gateway services for api-gateway * make proto * Regenerate deep-copy for proxycfg * Set datacenter on upstream ID from query source * Watch discovery chains for http-route service backends * Add ServiceName getter to HTTP+TCP Service structs * Clean up unwatched discovery chains on API Gateway * Implement watch for ingress leaf certificate * Collect upstreams on http-route + tcp-route updates * Remove unused GatewayServices update handler * Remove unnecessary gateway services logic for API Gateway * Remove outdate TODO * Use .ToIngress where appropriate, including TODO for cleaning up * Cancel before returning error * Remove GatewayServices subscription * Add godoc for handlerAPIGateway functions * Update terminology from Connect => Consul Service Mesh Consistent with terminology changes in https://github.com/hashicorp/consul/pull/12690 * Add missing TODO * Remove duplicate switch case * Rerun deep-copy generator * Use correct property on config snapshot * Remove unnecessary leaf cert watch * Clean up based on code review feedback * Note handler properties that are initialized but set elsewhere * Add TODO for moving helper func into structs pkg * Update generated DeepCopy code * gofmt * Generate DeepCopy() for API gateway listener types * Improve variable name * Regenerate DeepCopy() code * Fix linting issue * Temporarily remove the secret type from resource generation	2 years ago