13796 Commits (41b2ba1e587ed71dd4dd902da49b875158e2e909)

 

All Branches   

Search

Author	SHA1	Message	Date
Daniel Nephin	9423c887c4	submatview: do not reset retry waiter when materializer is reset ... The materializer is often reset when an error is received. By resetting the retryWaiter we effectively never wait. The retryWaiter should only be reset when we get an event without error. This is done in Materializer.updateView().	4 years ago
Daniel Nephin	0fa51e5ba9	api: Use blocking query for health when near is set ... Streaming can not be used for these queries because the near query paramter indicates a specific sort of the results, and that sort requires data that is not available to the client from the streaming API.	4 years ago
Pierre Souchay	6f91085869	Use lower case for serviceName computation of cache keys	4 years ago
Bryce Kalow	7ef8b1c2b7	website: update next and nextjs-scripts (#9698) ... Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com> Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com>	4 years ago
Matt Keeler	8dbe342ec9	Stop background refresh of cached data for requests that result in ACL not found errors (#9738)	4 years ago
Freddy	82c269a7c5	Avoid potential proxycfg/xDS deadlock using non-blocking send	4 years ago
R.B. Boyer	39e4ae25ac	connect: connect CA Roots in the primary datacenter should use a SigningKeyID derived from their local intermediate (#9428) ... This fixes an issue where leaf certificates issued in primary datacenters using Vault as a Connect CA would be reissued very frequently (every ~20 seconds) because the logic meant to detect root rotation was errantly triggering. The hash of the rootCA was being compared against a hash of the intermediateCA and always failing. This doesn't apply to the Consul built-in CA provider because there is no intermediate in use in the primary DC. This is reminiscent of #6513	4 years ago
Derek Strickland	37227f7d11	Crosslink new microservices collection. (#9704)	4 years ago
Pierre Souchay	36feacecd0	Updated changelog	4 years ago
Pierre Souchay	2fe3ab7db0	[Streaming] Properly filters node-meta queries on health ... This wil fix https://github.com/hashicorp/consul/issues/9730	4 years ago
freddygv	5dca98e870	Add changelog entry	4 years ago
freddygv	ec5f75776b	Update comments on avoiding proxycfg deadlock	4 years ago
R.B. Boyer	43193a35c6	xds: prevent LDS flaps in mesh gateways due to unstable datacenter lists (#9651) ... Also fix a similar issue in Terminating Gateways that was masked by an overzealous test.	4 years ago
Mohammad Banikazemi	bcadd341eb	Correcting the changed function name in comment ... Signed-off-by: Mohammad Banikazemi <mbanikazemi@gmail.com>	4 years ago
freddygv	6e443e5536	Retry send after timer fires, in case no updates occur	4 years ago
Daniel Nephin	30332ffb43	state: Use the tableIndex constant	4 years ago
Daniel Nephin	3ecbeda234	state: Document index table ... And move the IndexEntry (which is stored in the table) next to the table schema definition.	4 years ago
Daniel Nephin	ddf292caf6	Merge pull request #9722 from hashicorp/dnephin/fix-master-build ... Fix main build failing	4 years ago
Shantanu Gadgil	d30509e82c	changleog: presense -> presence (#9713) ... presense -> presence	4 years ago
R.B. Boyer	adff0c05a7	xds: deduplicate mesh gateway listeners in a stable way (#9650) ... In a situation where the mesh gateway is configured to bind to multiple network interfaces, we use a feature called 'tagged addresses'. Sometimes an address is duplicated across multiple tags such as 'lan' and 'lan_ipv4'. There is code to deduplicate these things when creating envoy listeners, but that code doesn't ensure that the same tag wins every time. If the winning tag flaps between xDS discovery requests it will cause the listener to be drained and replaced.	4 years ago
Daniel Nephin	f744e03c05	Fix main build failing ... An old PR (#7623) was merged after #9585. The old code was incompatible with the new changes, but none of the lines caused a git conflict so the merge was allowed. The incompatible changes caused the tests to fail. This fixes the old code to work with the new changes.	4 years ago
freddygv	de0cb1af7f	Make xDS labeling consistent with proxycfg	4 years ago
freddygv	95e7641faa	Update proxycfg logging, labels were already attached	4 years ago
Daniel Nephin	a4690ac7d9	Merge pull request #9719 from hashicorp/oss/state-store-4 ... state: remove registerSchema	4 years ago
Daniel Nephin	1c4e0cfa2a	Merge pull request #9718 from hashicorp/oss/dnephin/ent-meta-in-state-store-3 ... state: convert all table name constants to the new prefix pattern	4 years ago
Daniel Nephin	0814f22715	Merge pull request #9665 from hashicorp/dnephin/state-store-indexes-2 ... state: move config-entries table definition to config_entries_schema.go	4 years ago
Alvin Huang	3c673418a7	ci: escape backticks in github comment for website/ change check (#9711)	4 years ago
Daniel Nephin	912dbb4cb4	Merge pull request #9664 from hashicorp/dnephin/state-store-indexes ... state: move ACL schema and index definitions to acl_schema.go	4 years ago
Daniel Nephin	05d5ec4804	state: remove the need for registerSchema ... registerSchema creates some indirection which is not necessary in this case. newDBSchema can call each of the tables. Enterprise tables can be added from the existing withEnterpriseSchema shim.	4 years ago
Daniel Nephin	2cbf8b5fd0	state: rename table name constants to use pattern ... the 'table' prefix is shorter, and also reads better in queries.	4 years ago
Daniel Nephin	8ac9d54ccc	state: rename connect constants	4 years ago
Daniel Nephin	0c34e474c5	state: rename table name constants to new pattern ... Using Apps Hungarian Notation for these constants makes the memdb queries more readable.	4 years ago
Daniel Nephin	eed2f0b804	Merge pull request #9701 from hashicorp/dnephin/ent-meta-remove-extra-arg ... state: Remove extra entMeta arg to EnsureConfigEntry	4 years ago
Kyle Havlovitz	3fd040be22	Merge pull request #7623 from FriedCircuits/patch-1 ... Add support for RSA private key to TLS utils.	4 years ago
David Yu	36db3b50e6	docs: fix another broken link to upgrading k8s servers from token rotation page (#9707) ... fix another broken link to upgrading k8s servers from token rotation page	4 years ago
David Yu	94389f9619	docs: Small change to fix broken link to k8s upgrade from k8s tls certs page (#9705) ... Broken link to k8s server upgrade from tls certs page	4 years ago
Pierre Souchay	7a024ed074	Streaming filter tags + case insensitive lookups for Service Names ... Will fix: * https://github.com/hashicorp/consul/issues/9695 * https://github.com/hashicorp/consul/issues/9702	4 years ago
Daniel Nephin	2d5b5afec1	state: Remove unnecessary entMeta arg to EnsureConfigEntry	4 years ago
Alvin Huang	0d1301c408	ci: add nightly load testing on master (#9693)	4 years ago
Alvin Huang	a4d5738a4e	ci: fix pr file checker (#9694) ... * filter github pr file checker on the right labels object * only check PR files when the PR is opened	4 years ago
Alvin Huang	7f455b9a42	ci:check that type/docs-cherrypick is attached to website PR changes (#9690)	4 years ago
Kim Ngo	6b92b778c5	docs/nia: recommend sensitive variables for module authoring (#9692)	4 years ago
Alvin Huang	27e80ce5be	ci: fix changelog check checkout (#9688) ... * ci: fix changelog check checkout * use fetch-depth 0 to get all commits to find a merge-base	4 years ago
freddygv	5ba14ad41d	Add trace logs to proxycfg state runner and xds srv	4 years ago
Kim Ngo	e48a96eac1	docs/nia: Update verbiage around securely configuring providers (#9684) ... This reorganizes and flags where and when sensitive information may be written in plain-text	4 years ago
freddygv	37190c0d0d	Avoid potential deadlock using non-blocking send ... Deadlock scenario: 1. Due to scheduling, the state runner sends one snapshot into snapCh and then attempts to send a second. The first send succeeds because the channel is buffered, but the second blocks. 2. Separately, Manager.Watch is called by the xDS server after getting a discovery request from Envoy. This function acquires the manager lock and then blocks on receiving the CurrentSnapshot from the state runner. 3. Separately, there is a Manager goroutine that reads the snapshots from the channel in step 1. These reads are done to notify proxy watchers, but they require holding the manager lock. This goroutine goes to acquire that lock, but can't because it is held by step 2. Now, the goroutine from step 3 is waiting on the one from step 2 to release the lock. The goroutine from step 2 won't release the lock until the goroutine in step 1 advances. But the goroutine in step 1 is waiting for the one in step 3. Deadlock. By making this send non-blocking step 1 above can proceed. The coalesce timer will be reset and a new valid snapshot will be delivered after it elapses or when one is requested by xDS.	4 years ago
Brandon Romano	cf9a14ab6a	Merge pull request #9677 from hashicorp/km.hcp ... website: 2/2 Updates for HCP	4 years ago
Kyle MacDonald	d9bbf3d922	website: add utm params for all cloud.hashi links	4 years ago
hashicorp-ci	6fa9a6a1d9	auto-updated agent/uiserver/bindata_assetfs.go from commit e0ff7080a	4 years ago
John Cowen	e0ff7080ae	ui: Adds unique-id helper (#9676)	4 years ago