17936 Commits (458d0e9c4159627d63aac0997978c4bb309d1af5)

 

All Branches   

Search

Author	SHA1	Message	Date
trujillo-adam	ec12589862	fixed typo	2 years ago
Luke Kysow	3530d3782d	peering: read endpoints can now return failing status (#13849) ... Track streams that have been disconnected due to an error and set their statuses to failing.	2 years ago
Kyle Havlovitz	93de25f87c	Merge pull request #13872 from hashicorp/remove-upstream-log ... Remove extra logging from ingress upstream watch shutdown	2 years ago
David Yu	5867db4b0e	docs: followup on grammar and typo for latency requirements (#13888)	2 years ago
alex	45c3562477	docs: add peering metric doc (#13862) ... Co-authored-by: Freddy <freddygv@users.noreply.github.com> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
Chris S. Kim	73a84f256f	Preserve PeeringState on upsert (#13666) ... Fixes a bug where if the generate token is called twice, the second call upserts the zero-value (undefined) of PeeringState.	2 years ago
David Yu	5786309356	docs: add details around Consul latency requirements (#13881) ... * docs: add details around Consul latency requirements	2 years ago
Chris S. Kim	8ed49ea4d0	Update envoy metrics label extraction for peered clusters and listeners (#13818) ... Now that peered upstreams can generate envoy resources (#13758), we need a way to disambiguate local from peered resources in our metrics. The key difference is that datacenter and partition will be replaced with peer, since in the context of peered resources partition is ambiguous (could refer to the partition in a remote cluster or one that exists locally). The partition and datacenter of the proxy will always be that of the source service. Regexes were updated to make emitting datacenter and partition labels mutually exclusive with peer labels. Listener filter names were updated to better match the existing regex. Cluster names assigned to peered upstreams were updated to be synthesized from local peer name (it previously used the externally provided primary SNI, which contained the peer name from the other side of the peering). Integration tests were updated to assert for the new peer labels.	2 years ago
Michael Klein	f7f26220ba	ui: add peers to node search (#13875) ... * Make nodes searchable by peer * fix only surface peer filter on service search when feature is on	2 years ago
DanStough	dfd50d68ed	chore: ignore vscode files	2 years ago
DanStough	2da8949d78	feat: convert destination address to slice	2 years ago
Luke Kysow	cf4af7c765	Re-document peering disabled (#13879) ... Change wording because it does have effect on clients because it disables peering in the UI served from that client.	2 years ago
Freddy	f03cca7576	[OSS] Add ACL enforcement to peering endpoints (#13878)	2 years ago
Matt Keeler	58e4d8235b	Enable/Disable Peering Support in the UI (#13816) ... We enabled/disable based on the config flag.	2 years ago
freddygv	b544ce6485	Add ACL enforcement to peering endpoints	2 years ago
Kyle Havlovitz	016f963e7e	Remove excess debug log from ingress upstream shutdown	2 years ago
alex	279d458e6e	peering: use ShouldDial to validate peer role (#13823) ... Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
Luke Kysow	a1e6d69454	peering: add config to enable/disable peering (#13867) ... * peering: add config to enable/disable peering Add config: ``` peering { enabled = true } ``` Defaults to true. When disabled: 1. All peering RPC endpoints will return an error 2. Leader won't start its peering establishment goroutines 3. Leader won't start its peering deletion goroutines	2 years ago
Kyle Havlovitz	0786517b56	Merge pull request #13847 from hashicorp/gateway-goroutine-leak ... Fix goroutine leaks in proxycfg when using ingress gateway	2 years ago
Freddy	f99df57840	[OSS] Add new peering ACL rule (#13848) ... This commit adds a new ACL rule named "peering" to authorize actions taken against peering-related endpoints. The "peering" rule has several key properties: - It is scoped to a partition, and MUST be defined in the default namespace. - Its access level must be "read', "write", or "deny". - Granting an access level will apply to all peerings. This ACL rule cannot be used to selective grant access to some peerings but not others. - If the peering rule is not specified, we fall back to the "operator" rule and then the default ACL rule.	2 years ago
NicoletaPopoviciu	a3cdcf0c86	docs: Updates k8s annotation docs (#13809) ... * Updates k8s annotation docs Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: David Yu <dyu@hashicorp.com>	2 years ago
alex	927cee692b	peering: emit exported services count metric (#13811) ... Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
Matt Keeler	77917b6b5d	Rename some protobuf package names to be fqdn like (#13861) ... These are used in various bits of the wire format (for gRPC) and internally with Go’s registry so we want to namespace things properly.	2 years ago
Kyle Havlovitz	6e1dd05a19	Add changelog note	2 years ago
A.J. Sanon	90ae5ffd16	Add ECS audit logging docs (#13729)	2 years ago
Michael Klein	bcbc36ecec	Improve peered service empty downstreams message (#13854)	2 years ago
Daniel Upton	a8df87f574	proxycfg-glue: server-local implementation of `ExportedPeeredServices` ... This is the OSS portion of enterprise PR 2377. Adds a server-local implementation of the proxycfg.ExportedPeeredServices interface that sources data from a blocking query against the server's state store.	2 years ago
Eric Haberkorn	501089292e	Add Cluster Peering Failover Support to Prepared Queries (#13835) ... Add peering failover support to prepared queries	2 years ago
Nitya Dhanushkodi	f47319b7c6	update generate token endpoint to take external addresses (#13844) ... Update generate token endpoint (rpc, http, and api module) If ServerExternalAddresses are set, it will override any addresses gotten from the "consul" service, and be used in the token instead, and dialed by the dialer. This allows for setting up a load balancer for example, in front of the consul servers.	2 years ago
alex	58d66a002e	Merge pull request #13845 from hashicorp/acpana/peering-rename-oss ... [SYNC] Rename peering internal to ~	2 years ago
acpana	12b773ab02	Rename peering internal to ~ ... sync ENT to 5679392c81 Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
Luke Kysow	0c87be0845	peering: Add heartbeating to peering streams (#13806) ... * Add heartbeating to peering streams	2 years ago
Chris Thain	af40b9b144	Add Consul Lambda integration tests (#13770)	2 years ago
John Cowen	c9898fb38e	ui: Change initiate > establish for peering the modal tab (#13839)	2 years ago
John Cowen	e2908679c6	ui: Allow searching for peerings by ID (#13837)	2 years ago
John Cowen	b960cb671f	ui: Remove peering detail page (#13836) ... * ui: Remove links to the peering detail page * 404 everything	2 years ago
Michael Klein	2f81c7b292	ui: peered services only show instance- and tags-tabs (#13840) ... * Only show instances- and tags-tab peered services * Adapt show-with-slashes test to peering changes Tests always have the peering feature turned on and the default service we load from the mock-api will be peered. This is why the topology view of the service.show page will not be accessible in the updated test it will show the instances instead. This change does not change what the test is actually testing so just putting changing to the now different url is fine.	2 years ago
Michael Klein	b1a39fc12f	ui: Surface peer info in nodes.show view (#13832)	2 years ago
Michael Klein	07f30687d5	ui: Update peerings empty state copy (#13834)	2 years ago
Daniel Upton	3655802fdc	proxycfg-glue: server-local implementation of `PeeredUpstreams` ... This is the OSS portion of enterprise PR 2352. It adds a server-local implementation of the proxycfg.PeeredUpstreams interface based on a blocking query against the server's state store. It also fixes an omission in the Virtual IP freeing logic where we were never updating the max index (and therefore blocking queries against VirtualIPsForAllImportedServices would not return on service deletion).	2 years ago
Krastin Krastev	8d4baafd84	Merge pull request #12592 from krastin/krastin/docs/sidecarservice-typo ... docs: clean-up sidecar service expanded definition	2 years ago
Krastin Krastev	25b6148aa8	Merge branch 'main' into krastin/docs/sidecarservice-typo	2 years ago
Jared Kirschner	e0d9f07c28	Merge pull request #13682 from hashicorp/docs/deemphasize-token-query-param ... docs: suggest using token header, not query param	2 years ago
Luke Kysow	c411e6b326	Add send mutex to protect against concurrent sends (#13805)	2 years ago
Jared Kirschner	443f4bc2a2	docs: suggest using token header, not query param	2 years ago
Jared Kirschner	281892ab7c	Merge pull request #13405 from hashicorp/jkirschner-hashicorp-patch-3 ... docs: correct Vault CA multiple namespace support	2 years ago
Kyle Havlovitz	0be7d923dc	Cancel upstream watches when the discovery chain has been removed	2 years ago
Kyle Havlovitz	31318d7049	Fix duplicate Notify calls for discovery chains in ingress gateways	2 years ago
Luke Kysow	741c906b0d	Add heartbeat proto to peer stream (#13804)	2 years ago
Michael Klein	cab88bcd1e	ui: no partition and peer in bucket-list at the same time (#13812) ... * don't show partition / peer at the same time in bucket-list * use bucket-list in intentions table * add bucket-list tests * Simplify bucket list - match old behavior Refactor the bucket-list component to be easier to grok and match how the old template based approach worked. I.e. do not surface partition or namespace when it matches the passed nspace or partition property. * Update docs for bucket-list * fix linting	2 years ago