3233 Commits (426565b68cc37d83886089a8478dfd2760f25885)

Author	SHA1	Message	Date
Daniel Nephin	55a677b7d1	rpcclient/health: integrate submatview.Store into rpcclient/health	4 years ago
Daniel Nephin	6f29fa0de8	rpcclient: move streaming cache tests	4 years ago
Daniel Nephin	6ebb0f8b74	submatview: test Store.Run	4 years ago
Daniel Nephin	9854c424eb	submatview: test store with Get and Notify calls together	4 years ago
Daniel Nephin	c1063999fc	submatview: more test cases for Store.Get ... And simplify the return value by using a Result type.	4 years ago
Daniel Nephin	832f1a2847	submatview: reduce the getFromView implementation ... Remove View.Result error return value, it was always nil, and seems like it will likely always remain nill since it is simply reading a stored value. Also replace some cache types with local types.	4 years ago
Daniel Nephin	1d9d7d0aa5	submatview: track requests instead of notifiers ... And only start expiration time when the last request ends. This makes tracking expiry simpler, and ensures that no entry can be expired while there are active requests.	4 years ago
Daniel Nephin	7d13465c7b	submatview: set up expiry of materializers	4 years ago
Daniel Nephin	c574108354	submatview: setup testing structure	4 years ago
Daniel Nephin	ddddbdb990	submatview: rough outline of the Get and Notify methods.	4 years ago
Daniel Nephin	3d52abb5e2	submatview: setup the interface for the store	4 years ago
Matt Keeler	65d73771a5	Add prometheus guage definitions for replication metrics. (#10109)	4 years ago
Matt Keeler	ecbccdc261	Add replication metrics (#10073)	4 years ago
hashicorp-ci	8f3223a984	auto-updated agent/uiserver/bindata_assetfs.go from commit 7a095e7d2	4 years ago
hashicorp-ci	78886e8f4f	auto-updated agent/uiserver/bindata_assetfs.go from commit f6f282ac7	4 years ago
Daniel Nephin	2e4dc7b705	Merge pull request #10045 from hashicorp/dnephin/state-proxy-defaults ... state: remove config-entries kind index	4 years ago
Daniel Nephin	87cd3fc2e8	Handle ErrChunkingResubmit.Error properly ... Previously canRetry was attempting to retrieve this error from args, however there was never any callers that would pass an error to args. With the change to raftApply to move this error to the error return value, it is now possible to receive this error from the err argument. This commit updates canRetry to check for ErrChunkingResubmit in err.	4 years ago
Daniel Nephin	d2ab767fef	Handle FSM.Apply errors in raftApply ... Previously we were inconsistently checking the response for errors. This PR moves the response-is-error check into raftApply, so that all callers can look at only the error response, instead of having to know that errors could come from two places. This should expose a few more errors that were previously hidden because in some calls to raftApply we were ignoring the response return value. Also handle errors more consistently. In some cases we would log the error before returning it. This can be very confusing because it can result in the same error being logged multiple times. Instead return a wrapped error.	4 years ago
Freddy	f265dd635f	Disallow * as service-defaults name (#10069)	4 years ago
R.B. Boyer	70f1ba3a2b	fix test when run in enterprise (#10048)	4 years ago
freddygv	a0f3591aee	Don't panic on nil UpstreamConfiguration.Clone()	4 years ago
Daniel Nephin	b57b3726d2	state: remove unnecessary kind index ... The query can be performed using a prefix query on the ID index. Also backport some enterprise changes to prevent conflicts.	4 years ago
Daniel Nephin	653f41ce41	state: use index constants for ConfigEntry indexes	4 years ago
hashicorp-ci	131599bfab	auto-updated agent/uiserver/bindata_assetfs.go from commit daf897f1a	4 years ago
Freddy	3be304be16	Merge pull request #10016 from hashicorp/topology-update	4 years ago
Freddy	439a7fce2d	Split Upstream.Identifier() so non-empty namespace is always prepended in ent (#10031)	4 years ago
R.B. Boyer	4db8b78854	connect: update centralized upstreams representation in service-defaults (#10015)	4 years ago
Kent 'picat' Gruber	9f7190a4fe	Merge pull request #10023 from hashicorp/fix-raw-kv-xss ... Add content type headers to raw KV responses	4 years ago
Daniel Nephin	88f83b41aa	snapshot: fix saving of auth methods ... Previously only a single auth method would be saved to the snapshot. This commit fixes the typo and adds to the test, to show that all auth methods are now saved.	4 years ago
Kent 'picat' Gruber	cf1fce3d0c	Add content type headers to raw KV responses	4 years ago
freddygv	f7094f91c7	Avoid returning a nil slice	4 years ago
Matt Keeler	bbf5993534	Move static token resolution into the ACLResolver (#10013)	4 years ago
R.B. Boyer	06848ce67e	fix broken golden tests	4 years ago
Freddy	3ec4556114	Merge pull request #10006 from hashicorp/api-ptrs	4 years ago
freddygv	8e74eaa684	Update viz endpoint to include topology from intentions	4 years ago
Freddy	55a3697b83	Merge pull request #9987 from hashicorp/remove-kube-dns-hack	4 years ago
freddygv	e1808af729	Fixup tests	4 years ago
freddygv	7cb3f32672	Convert new tproxy structs in api module into ptrs ... This way we avoid serializing these when empty. Otherwise users of the latest version of the api submodule cannot interact with older versions of Consul, because a new api client would send keys that the older Consul doesn't recognize yet.	4 years ago
Freddy	1f119aec7c	Merge pull request #10005 from hashicorp/tproxy-fixes	4 years ago
Freddy	8fc60a6ca6	Merge pull request #10000 from hashicorp/remove-upstream-cfg-validation ... Remove zero-value validation of upstream cfg structs	4 years ago
freddygv	4e509aa768	Remove todo that was todone	4 years ago
freddygv	75edc9bc7c	Avoid nil panic when cluster config doesn't exist	4 years ago
freddygv	932fbddd27	Augment intention decision summary with DefaultAllow mode	4 years ago
freddygv	8857195437	Fixup wildcard ent assertion	4 years ago
Freddy	18decbba9d	Merge pull request #9999 from hashicorp/update-enabling-tproxy	4 years ago
freddygv	b8ed82b808	Fixup bexpr filtering	4 years ago
freddygv	d7c43049fa	Remove zero-value validation of upstream cfg structs ... The zero value of these flags was already being excluded in the xDS generation of circuit breaker/outlier detection config. See: makeThresholdsIfNeeded and ToOutlierDetection.	4 years ago
freddygv	7bd51ff536	Replace TransparentProxy bool with ProxyMode ... This PR replaces the original boolean used to configure transparent proxy mode. It was replaced with a string mode that can be set to: - "": Empty string is the default for when the setting should be defaulted from other configuration like config entries. - "direct": Direct mode is how applications originally opted into the mesh. Proxy listeners need to be dialed directly. - "transparent": Transparent mode enables configuring Envoy as a transparent proxy. Traffic must be captured and redirected to the inbound and outbound listeners. This PR also adds a struct for transparent proxy specific configuration. Initially this is not stored as a pointer. Will revisit that decision before GA.	4 years ago
freddygv	9e194b4b3c	Avoid failing test due to undiscoverable node name	4 years ago
hashicorp-ci	2995d0e437	auto-updated agent/uiserver/bindata_assetfs.go from commit 84064f972	4 years ago
freddygv	98ba582797	Fixup mesh gateway docs	4 years ago
Tara Tufano	9deb52e868	add http2 ping health checks (#8431) ... * add http2 ping checks * fix test issue * add h2ping check to config resources * add new test and docs for h2ping * fix grammatical inconsistency in H2PING documentation * resolve rebase conflicts, add test for h2ping tls verification failure * api documentation for h2ping * update test config data with H2PING * add H2PING to protocol buffers and update changelog * fix typo in changelog entry	4 years ago
Iryna Shustava	5755c97bc7	cli: Add new `consul connect redirect-traffic` command for applying traffic redirection rules when Transparent Proxy is enabled. (#9910) ... * Add new consul connect redirect-traffic command for applying traffic redirection rules when Transparent Proxy is enabled. * Add new iptables package for applying traffic redirection rules with iptables.	4 years ago
Freddy	a02245b75a	Merge pull request #9976 from hashicorp/centralized-upstream-fixups	4 years ago
Freddy	e385e5992f	Merge pull request #9042 from lawliet89/tg-rewrite	4 years ago
freddygv	c6d64a8078	Stable sort cidr ranges to match on	4 years ago
freddygv	b21224a4c8	PR comments	4 years ago
Daniel Nephin	34f1facebb	Merge pull request #9950 from hashicorp/dnephin/state-use-txn-everywhere ... state: use Txn interface everywhere	4 years ago
Daniel Nephin	c40e1a2ac6	Merge pull request #9880 from hashicorp/dnephin/catalog-events-test-pattern ... state: use runCase pattern for large test	4 years ago
Paul Banks	1406671290	cache: Fix bug where connection errors can cause early cache expiry (#9979) ... Fixes a cache bug where TTL is not updated while a value isn't changing or cache entry is returning fetch errors.	4 years ago
Paul Banks	ee04d452be	cache: fix bug where TTLs were ignored leading to leaked memory in client agents (#9978) ... * Fix bug in cache where TTLs are effectively ignored This mostly affects streaming since streaming will immediately return from Fetch calls when the state is Closed on eviction which causes the race condition every time. However this also affects all other cache types if the fetch call happens to return between the eviction and then next time around the Get loop by any client. There is a separate bug that allows cache items to be evicted even when there are active clients which is the trigger here. * Add changelog entry * Update .changelog/9978.txt	4 years ago
Paul Banks	8e00e327b0	Merge pull request #9977 from hashicorp/grpc-tuning ... streaming: Grpc tuning	4 years ago
freddygv	ab752c1c86	Avoid sending zero-value upstream defaults from api	4 years ago
freddygv	a6388c7e2f	Revert "Avoid accumulating synthetic upstreams" ... This reverts commit 86672df4fa.	4 years ago
freddygv	02f6768cd2	Remove kube-dns resolution since clusterip will be a tagged addr	4 years ago
hashicorp-ci	dedf2861be	auto-updated agent/uiserver/bindata_assetfs.go from commit a0d12ff16	4 years ago
freddygv	86672df4fa	Avoid accumulating synthetic upstreams ... Synthetic upstreams from service-defaults config are stored locally in the Upstreams list. Since these come from service-defaults they should be cleaned up locally when no longer present in the service config response.	4 years ago
freddygv	49a4a78fd5	Ensure mesh gateway mode override is set for upstreams for intentions	4 years ago
freddygv	5140c3e51f	Finish resolving upstream defaults in proxycfg	4 years ago
freddygv	986bcccbea	Pass down upstream defaults to client proxies ... This is needed in case the client proxy is in TransparentProxy mode. Typically they won't have explicit configuration for every upstream, so this ensures the settings can be applied to all of them when generating xDS config.	4 years ago
freddygv	77ead5cca9	Prevent wildcard destinations for proxies and upstreams	4 years ago
freddygv	24ee8a0488	Prevent requests without UpstreamIDs from being flagged as legacy. ... New clients in transparent proxy mode can send requests for service config resolution without any upstream args because they do not have explicitly defined upstreams. Old clients on the other hand will never send requests without the Upstreams args unless they don't have upstreams, in which case we do not send back upstream config.	4 years ago
freddygv	2b49cc39ed	Fixup doc phrasing	4 years ago
freddygv	458eb41be1	Prevent synthetic upstreams without addresses from failing duplicate ip/port validation	4 years ago
Paul Banks	5529cb7347	Tune streaming backoff on errors to retry a bit faster when TCP connections drop	4 years ago
Paul Banks	44718456b5	Set gRPC keepalives to mirror Yamux keepalive behaviour	4 years ago
R.B. Boyer	d4c401b350	missed build tag on this file (#9974)	4 years ago
R.B. Boyer	499fee73b3	connect: add toggle to globally disable wildcard outbound network access when transparent proxy is enabled (#9973) ... This adds a new config entry kind "cluster" with a single special name "cluster" where this can be controlled.	4 years ago
Daniel Nephin	f0ba6f858a	Merge pull request #9958 from hashicorp/dnephin/state-improve-indexer-tests ... state: support additional test cases in indexer tests	4 years ago
Yong Wen Chua	409768d6e5	Merge branch 'master' of github.com:hashicorp/consul into tg-rewrite	4 years ago
R.B. Boyer	e494313e7b	api: ensure v1/health/ingress/:service endpoint works properly when streaming is enabled (#9967) ... The streaming cache type for service health has no way to handle v1/health/ingress/:service queries as there is no equivalent topic that would return the appropriate data. Ensure that attempts to use this endpoint will use the old cache-type for now so that they return appropriate data when streaming is enabled.	4 years ago
Daniel Nephin	6e69829edb	state: support additional test cases in indexer tests ... And add a few additional cases.	4 years ago
Kyle Havlovitz	a2869b280b	Backport enterprise changes to prevent merge conflicts ... Co-Authored-By: Kyle Havlovitz <kylehav@gmail.com>	4 years ago
Daniel Nephin	26440d9e1f	Merge pull request #9949 from hashicorp/dnephin/state-index-checks ... state: convert remaining checks table indexers to functional pattern	4 years ago
Daniel Nephin	909348e546	Merge pull request #9948 from hashicorp/dnephin/state-index-service ... state: convert remaining services table indexers to functions	4 years ago
Daniel Nephin	1e32dbca29	Merge pull request #9947 from hashicorp/dnephin/state-ent-index-3 ... state: move indexer functions out of oss files	4 years ago
hashicorp-ci	352061c72e	auto-updated agent/uiserver/bindata_assetfs.go from commit ee5c3e3aa	4 years ago
Daniel Nephin	1f64b3a7de	state: use tableIndex constant	4 years ago
Daniel Nephin	9514698b10	state: use ReadTxn and WriteTxn interface ... Instead of *txn, so that we can replace the txn implementation with others, and so that the function is easily documented as a read or write function.	4 years ago
Daniel Nephin	80827e8615	Merge pull request #9932 from hashicorp/dnephin/use-ent-meta-default ... Set default enterprise meta in test case	4 years ago
Daniel Nephin	d0e5cd66f0	state: convert checks.service index to new pattern	4 years ago
Daniel Nephin	3092c627fe	state: convert checks.status indexer ... As part of this change the indexer will now be case insensitive by using the lower case value. This should be safe because previously we always had lower case strings. This change was made out of convenience. All the other indexers use lowercase, so we can re-use the indexFromQuery function by using lowercase here as well.	4 years ago
Daniel Nephin	628eed3748	state: add tests for checks indexers	4 years ago
Daniel Nephin	ce631d0bba	state: use constants for table checks	4 years ago
Daniel Nephin	cf2646e0d1	state: pass Query in from caller ... To reduce the number of arguments	4 years ago
Daniel Nephin	9eea19da59	state: convert services.kind to functional indexer pattern	4 years ago
Daniel Nephin	b6553af222	state: add tests for services.kind indexer	4 years ago
Daniel Nephin	0c61abcc31	state: convert services table service and connect indexer ... To the new functional indexer pattern	4 years ago
Daniel Nephin	395ebce510	state: add tests for services table service and connect indexers	4 years ago
Daniel Nephin	2d2c3e1190	state: use constant for tableServices	4 years ago