16014 Commits (4116a143e0d27408ac57085daaa780f8087bb0b6)

 

All Branches   

Search

Author	SHA1	Message	Date
Daniel Nephin	4116a143e0	fix misleading errors on vault shutdown	3 years ago
Daniel Nephin	968aeff1bb	ca: prune some unnecessary lookups in the tests	3 years ago
Daniel Nephin	305655a8b1	ca: remove duplicate WaitFor function	3 years ago
Daniel Nephin	1dec6bb815	ca: fix flakes in RenewIntermediate tests ... I suspect one problem was that we set structs.IntermediateCertRenewInterval to 1ms, which meant that in some cases the intermediate could renew before we stored the original value. Another problem was that the 'wait for intermediate' loop was calling the provider.ActiveIntermediate, but the comparison needs to use the RPC endpoint to accurately represent a user request. So changing the 'wait for' to use the state store ensures we don't race. Also moves the patching into a separate function. Removes the addition of ca.CertificateTimeDriftBuffer as part of calculating halfTime. This was added in a previous commit to attempt to fix the flake, but it did not appear to fix the problem. Adding the time here was making the tests fail when using the shared patch function. It's not clear to me why, but there's no reason we should be including this time in the halfTime calculation.	3 years ago
Daniel Nephin	2e4e8bd791	ca: improve RenewIntermediate tests ... Use the new verifyLearfCert to show the cert verifies with intermediates from both sources. This required using the RPC interface so that the leaf pem was constructed correctly. Add IndexedCARoots.Active since that is a common operation we see in a few places.	3 years ago
Daniel Nephin	a4ba1f348d	ca: add a test for Vault in secondary DC	3 years ago
Daniel Nephin	a5d9b1d322	ca: Add CARoots.Active method ... Which will be used in the next commit.	3 years ago
R.B. Boyer	5f5720837b	acl: ensure that the agent recovery token is properly partitioned (#11782)	3 years ago
Daniel Nephin	f72e285fe8	Merge pull request #11721 from hashicorp/dnephin/ca-export-fsm-operation ... ca: use the real FSM operation in tests	3 years ago
Daniel Nephin	214dcf8d0d	ca: use the real FSM operation in tests ... Previously we had a couple copies that reproduced the FSM operation. These copies introduce risk that the test does not accurately match production. This PR removes the test versions of the FSM operation, and exports the real production FSM operation so that it can be used in tests. The consul provider tests did need to change because of this. Previously we would return a hardcoded value of 2, but in production this value is always incremented.	3 years ago
R.B. Boyer	592ac8f96a	test: test server should auto cleanup (#11779)	3 years ago
Evan Culver	7a365fa0da	rpc: Unset partition before forwarding to remote datacenter (#11758)	3 years ago
Freddy	a031de21c0	Add v1.11.0-rc changelog entry (#11776)	3 years ago
Giovanni Torres	38c1f3b9ea	docs: add missing verb ... This change adds a missing verb at the end of the sentence.	3 years ago
Daniel Nephin	d9dd6944f5	Merge pull request #10895 from bigmikes/serve-panic-recovery ... grpc, xds: recovery middleware to return and log error in case of panic	3 years ago
Daniel Nephin	dccd3f5806	Merge remote-tracking branch 'origin/main' into serve-panic-recovery	3 years ago
Melissa Kam	a6a02b5525	Merge pull request #11769 from hashicorp/cts-typo-fix ... docs/nia: Fix typo in CTS CLI options	3 years ago
Noel Quiles	b768f9f97c	website: Upgrade <HashiStackMenu /> to latest (#11760)	3 years ago
Jared Kirschner	8de6e01c2b	Merge pull request #11770 from hashicorp/move-dns-alt-domain-section ... improve location of DNS alt domain docs section	3 years ago
Matthieu MOREL	35f824ebeb	dependabot : add standard and hashicorp labels (#11676)	3 years ago
Jared Kirschner	d3018e6846	improve location of DNS alt domain docs section	3 years ago
Dan Upton	7efab269c0	Rename `Master` and `AgentMaster` fields in config protobuf (#11764)	3 years ago
Melissa Kam	b6310400ab	docs/nia: Fix typo in CTS CLI options	3 years ago
Chris S. Kim	f8f8580ab2	Godocs updates for catalog endpoints (#11716)	3 years ago
Mathew Estafanous	0a9621ec7a	Transition all endpoint tests in agent_endpoint_test.go to go through ServeHTTP (#11499)	3 years ago
Dan Upton	205ce9a69d	Remove references to "master" ACL tokens in tests (#11751)	3 years ago
Dan Upton	7fe81171d9	Rename `ACLMasterToken` => `ACLInitialManagementToken` (#11746)	3 years ago
Dan Upton	3a91815169	agent/token: rename `agent_master` to `agent_recovery` (internally) (#11744)	3 years ago
Freddy	46a530434e	Merge pull request #11757 from hashicorp/ap/discovery-chain	3 years ago
R.B. Boyer	9315a9812f	return the max	3 years ago
R.B. Boyer	f1a11be06e	sync back 1.11.0-beta3 changelogs (#11759)	3 years ago
R.B. Boyer	aa9a22a8fe	fix test failures	3 years ago
freddygv	b629b8f656	Add changelog entry	3 years ago
freddygv	9b44861ce4	Update api module and decoding tests	3 years ago
freddygv	60fe5f75bb	Remove support for failover to partition ... Failing over to a partition is more siimilar to failing over to another datacenter than it is to failing over to a namespace. In a future release we should update how localities for failover are specified. We should be able to accept a list of localities which can include both partition and datacenter.	3 years ago
freddygv	5c1f7aa372	Allow cross-partition references in disco chain ... * Add partition fields to targets like service route destinations * Update validation to prevent cross-DC + cross-partition references * Handle partitions when reading config entries for disco chain * Encode partition in compiled targets	3 years ago
R.B. Boyer	b1605639fc	light refactors to support making partitions and serf-based wan federation are mutually exclusive (#11755)	3 years ago
John Cowen	05fabbe898	ui: Improve error messaging for when we can't make a slug (#11697) ... Ember Data requires the usage of unique ID to identify its records in the frontend, and we use a centralized function to do that for all records. There are occasions where it can't make an ID, usually this is a bug our side, but there are occasions where Consul might not be giving us the data needed to make an ID, for example if a Service comes down to us with a blank Name. Whilst this isn't a problem to be fixed in the UI, I thought we could make an improvement here by giving a little more info as to why the UI cannot make a unique ID. This is currently semi-hidden away in the javascript console, but we could potentially surface this in the UI itself as a larger task. I figured this smaller task could help folks in the meantime if they hit upon this as they might open up the javascript console themselves to see whats up and they'd at least get this extra clue.	3 years ago
John Cowen	c04701b387	ui: remove old head.hbs file we don't need (#11678)	3 years ago
John Cowen	77412fd2e0	ui: Stop tables overlapping with their headers when scrolling (#11670)	3 years ago
R.B. Boyer	e20e6348dd	areas: make the gRPC server tracker network area aware (#11748) ... Fixes a bug whereby servers present in multiple network areas would be properly segmented in the Router, but not in the gRPC mirror. This would lead servers in the current datacenter leaving from a network area (possibly during the network area's removal) from deleting their own records that still exist in the standard WAN area. The gRPC client stack uses the gRPC server tracker to execute all RPCs, even those targeting members of the current datacenter (which is unlike the net/rpc stack which has a bypass mechanism). This would manifest as a gRPC method call never opening a socket because it would block forever waiting for the current datacenter's pool of servers to be non-empty.	3 years ago
Freddy	a725f06c83	Merge pull request #11739 from hashicorp/ap/exports-rename	3 years ago
John Cowen	85c39092c0	ui: Adds basic support for partition exports to Service listings (#11702) ... Also: * ui: Add cross partition linking and rollout BucketList (#11712) * ui: Add exported service partition to the source filter menu (#11727)	3 years ago
John Cowen	171cb0a247	ui: Adds partition support to Service and Node Identity templates (#11696)	3 years ago
John Cowen	f27685cc40	ui: Adds basic support for the Routing tab viz with partitions (#11679)	3 years ago
John Cowen	b07ff88874	ui: Add documentation link for partitions (#11668)	3 years ago
freddygv	e91509383f	Clean up additional refs to partition exports	3 years ago
Freddy	f24a206712	Merge pull request #11738 from hashicorp/ap/tproxy	3 years ago
Mike Morris	93f937f238	types: add types/tls.go for strongly-typed TLS versions and cipher suites (#11645) ... types: add TLS constants types: distinguish between human and Envoy serialization for TLSVersion constants types: add DeprecatedAgentTLSVersions for backwards compatibility types: add methods for printing TLSVersion as strings types: add TLSVersionInvalid error value types: add a basic test for TLSVersion comparison types: add TLS cihper suite mapping using IANA constant names and values types: adding ConsulAutoConfigTLSVersionStrings changelog: add entry for TLSVersion and TLSCipherSuite types types: initialize TLSVerison constants starting at zero types: remove TLSVersionInvalid < 0 test types: update note for ConsulAutoConfigTLSVersionStrings types: programmatically invert TLSCipherSuites for HumanTLSCipherSuiteStrings lookup map Co-authored-by: Dan Upton <daniel@floppy.co> types: add test for TLSVersion zero-value types: remove unused EnvoyTLSVersionStrings types: implement MarshalJSON for TLSVersion types: implement TLSVersionUnspecified as zero value types: delegate TLS.MarshalJSON to json.Marshal, use ConsulConfigTLSVersionStrings as default String() values Co-authored-by: Dan Upton <daniel@floppy.co>	3 years ago
Freddy	ddb151aa7e	Merge pull request #11737 from hashicorp/ap/ap-rename	3 years ago