consul

Commit Graph

Author	SHA1	Message	Date
trujillo-adam	0fb360211a	addtional feedback; added PartitionExports to CRDs section	3 years ago
Chris S. Kim	56fab21582	Refactor test helper (#11689 ) Allow custom ACL root tokens to be passed	3 years ago
Chris S. Kim	36246c5791	acl: Fill authzContext from token in Coordinate endpoints (#11688 )	3 years ago
Daniel Nephin	ba41db5c4e	sdk: upgrade freeport godoc To clarify how it works, and when it is important to use.	3 years ago
trujillo-adam	632e4bd35c	applied additional feedback	3 years ago
David Yu	29c791c90e	docs: Notes about WAN Federation when using Vault as Connect CA (#11143 ) * docs: Notes about WAN Federation when using Vault as Connect CA * Apply suggestions from code review Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * Update website/content/docs/connect/ca/vault.mdx Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * Update website/content/docs/connect/ca/vault.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Update website/content/docs/connect/ca/vault.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Update vault.mdx * Update vault.mdx Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Daniel Nephin	33e8c10583	Merge pull request #11673 from hashicorp/dnephin/ca-remove-raft-apply-resp-err-handle ca: clean up unnecessary raft.Apply response checking	3 years ago
freddygv	7efe3d8c77	Rename partition CLI command	3 years ago
freddygv	dd662d7058	Move ent config test to ent file	3 years ago
freddygv	5e1f7b7c36	Prevent partition-exports entry from OSS usage Validation was added on the config entry kind since that is called when validating config entries to bootstrap via agent configuration and when applying entries via the config RPC endpoint.	3 years ago
Daniel Nephin	e8312d6b5a	testing: remove unnecessary calls to freeport Previously we believe it was necessary for all code that required ports to use freeport to prevent conflicts. https://github.com/dnephin/freeport-test shows that it is actually save to use port 0 (`127.0.0.1:0`) as long as it is passed directly to `net.Listen`, and the listener holds the port for as long as it is needed. This works because freeport explicitly avoids the ephemeral port range, and port 0 always uses that range. As you can see from the test output of https://github.com/dnephin/freeport-test, the two systems never use overlapping ports. This commit converts all uses of freeport that were being passed directly to a net.Listen to use port 0 instead. This allows us to remove a bit of wrapping we had around httptest, in a couple places.	3 years ago
Daniel Nephin	5a61893642	testing: use httptest with freeport	3 years ago
Daniel Nephin	d795a73f78	testing: use the new freeport interfaces	3 years ago
Daniel Nephin	56f9238d15	go-sso: remove returnFunc now that freeport handles return	3 years ago
Daniel Nephin	8c7475d95e	sdk: add freeport functions that use t.Cleanup	3 years ago
Daniel Nephin	59204598c8	ca: clean up unnecessary raft.Apply response checking In `d2ab767fef` raftApply was changed to handle this check in a single place, instad of having every caller check it. It looks like these few places were missed when I did that clean up. This commit removes the remaining resp.(error) checks, since they are all no-ops now.	3 years ago
Daniel Nephin	52f0853ff9	Merge pull request #11339 from hashicorp/dnephin/ca-manager-isolate-secondary-2 ca: reduce use of state in the secondary	3 years ago
Daniel Nephin	91a0c25932	ca: remove state check in secondarySetPrimaryRoots This function is only ever called from operations that have already acquired the state lock, so checking the value of state can never fail. This change is being made in preparation for splitting out a separate type for the secondary logic. The state can't easily be shared, so really only the expored top-level functions should acquire the 'state lock'.	3 years ago
Daniel Nephin	f1944458e4	ca: remove actingSecondaryCA This commit removes the actingSecondaryCA field, and removes the stateLock around it. This field was acting as a proxy for providerRoot != nil, so replace it with that check instead. The two methods which called secondarySetCAConfigured already set the state, so checking the state again at this point will not catch runtime errors (only programming errors, which we can catch with tests). In general, handling state transitions should be done on the "entrypoint" methods where execution starts, not in every internal method. This is being done to remove some unnecessary references to c.state, in preparations for extracting types for primary/secondary.	3 years ago
Daniel Nephin	238a4f13c8	Merge pull request #11660 from hashicorp/dnephin/ca-reduce-consul-provider-state-iface ca: reduce consul provider backend interface a bit	3 years ago
Daniel Nephin	a631378008	Merge pull request #11468 from hashicorp/dnephin/acl-docs-namespace-rules docs: update docs about namespace default policy/role	3 years ago
Daniel Nephin	7bfe50a914	docs: update docs about namespace default policy/role To include details about the permissions the ACL token must have to perform the request.	3 years ago
Daniel Nephin	b92084b8e8	ca: reduce consul provider backend interface a bit This makes it easier to fake, which will allow me to use the ConsulProvider as an 'external PKI' to test a customer setup where the actual root CA is not the root we use for the Consul CA. Replaces a call to the state store to fetch the clusterID with the clusterID field already available on the built-in provider.	3 years ago
John Cowen	f7b8df281b	ui: Add `Service.Namespace` variable to dashboard URL templates (#11640 ) We currently allow only Datacenter, Service.Name, this PR adds Service.Namespace.	3 years ago
John Cowen	3f131dcf34	ui: Notifications re-organization/re-style (#11577 ) - Moves where they appear up to the <App /> component. - Instead of a <Notification /> wrapping component to move whatever you use for a notification up to where they need to appear (via ember-cli-flash), we now use a {{notification}} modifier now we have modifiers. - Global notifications/flashes are no longer special styles of their own. You just use the {{notification}} modifier to hoist whatever component/element you want up to the top of the page. This means we can re-use our existing <Notice /> component for all our global UI notifications (this is the user visible change here)	3 years ago
Dhia Ayachi	3820e09a47	Partition/kv indexid sessions (#11639 ) * state: port KV and Tombstone tables to new pattern * go fmt'ed * handle wildcards for tombstones * Fix graveyard ent vs oss * fix oss compilation error * add partition to tombstones and kv state store indexes * refactor to use `indexWithEnterpriseIndexable` * Apply suggestions from code review Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * partition `tableSessions` table * fix sessions to use UUID and fix prefix index * fix oss build * clean up unused functions * fix oss compilation * add a partition indexer for sessions * Fix oss to not have partition index * fix oss tests * remove unused operations_ent.go and operations_oss.go func * convert `indexNodeCheck` of `session_checks` table * partition `indexID` and `indexSession` of `tableSessionChecks` * remove partition for Checks as it's always use the session partition * partition sessions index id table * fix rebase issues Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>	3 years ago
John Cowen	2b8273bc6e	ui: Support for SSO with Admin Partitions (#11604 ) * Upgrade AuthForm and document current state a little better * Hoist SSO out of the AuthForm * Bare minimum admin partitioned SSO also: ui: Tabbed Login with Token or SSO interface (#11619) - I upgraded our super old, almost the first ember component I wrote, to use glimmer/almost template only. This should use slots/contextual components somehow, but thats a bigger upgrade so I didn't go that far. - I've been wanting to upgrade the shape of our StateChart component for a very long while now, here its very apparent that it would be much better to do this sooner rather than later. I left it as is for now, but there will be a PR coming soon with a slight reshaping of this component. - Added a did-upsert modifier which is a mix of did-insert/did-update - Documentation added/amended for all the new things.	3 years ago
Dhia Ayachi	bb83624950	Partition session checks store (#11638 ) * state: port KV and Tombstone tables to new pattern * go fmt'ed * handle wildcards for tombstones * Fix graveyard ent vs oss * fix oss compilation error * add partition to tombstones and kv state store indexes * refactor to use `indexWithEnterpriseIndexable` * Apply suggestions from code review Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * add `singleValueID` implementation assertions * partition `tableSessions` table * fix sessions to use UUID and fix prefix index * fix oss build * clean up unused functions * fix oss compilation * add a partition indexer for sessions * Fix oss to not have partition index * fix oss tests * remove unused operations_ent.go and operations_oss.go func * remove unused const * convert `IndexID` of `session_checks` table * convert `indexSession` of `session_checks` table * convert `indexNodeCheck` of `session_checks` table * partition `indexID` and `indexSession` of `tableSessionChecks` * fix oss linter * fix review comments * remove partition for Checks as it's always use the session partition Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>	3 years ago
Chris S. Kim	2350e7e56a	cleanup: Clarify deprecated legacy intention endpoints (#11635 )	3 years ago
Chris S. Kim	9d02bc08c9	docs: fix name for partition resource labels (#11634 )	3 years ago
John Cowen	b84ee47ff0	ui: Fix brand coloring for inline-code plus docs (#11578 ) * ui: Fix brand coloring for inline-code plus docs Also use --tones instead of --black/--white (#11601) Co-authored-by: Evan Rowe <ev.rowe@gmail.com>	3 years ago
trujillo-adam	32f1463901	updated server and client example yamls in usage section	3 years ago
lornasong	3666401ae3	nia/docs 0.4.2 (#11611 ) * nia/docs: Add TLS options for the CTS API * docs: Add workspace tags (#11564) * nia/docs: Change CLI options to table format Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: Michael Wilkerson <62034708+wilkermichael@users.noreply.github.com> * nia/docs: Update TLS CLI defaults Also clarifies some behavior for the CLI options. Co-authored-by: Melissa Kam <mkam@hashicorp.com> Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com> Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: Michael Wilkerson <62034708+wilkermichael@users.noreply.github.com>	3 years ago
Matt Siegel	fa7216ab67	Merge pull request #11625 from hashicorp/version.js-1.10.4 website: bump latest binary version to 1.10.4	3 years ago
99	85312203f2	Merge pull request #11567 from hashicorp/branches_fix ci: update triggers for main branch	3 years ago
99	4c0f40d8fb	ci: update triggers for main branch	3 years ago
Matt Siegel	281a010097	website: bump latest binary version to 1.10.4	3 years ago
99	4b3c3c34b3	Merge pull request #11605 from hashicorp/fix_dockerfile add dumb-init package to Dockerfile	3 years ago
Konstantine	b114124d2b	added missing 'be'	3 years ago
Konstantine	2900f3861a	Update website/content/docs/discovery/dns.mdx Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>	3 years ago
Konstantine	eb21aab1b5	Update website/content/docs/discovery/dns.mdx Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>	3 years ago
Konstantine	90e2828601	Update website/content/docs/discovery/dns.mdx Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>	3 years ago
trujillo-adam	0808e27bd4	removed 'flat network' requirements	3 years ago
Chris S. Kim	db5ee0e4d2	Merge from ent (#11506 )	3 years ago
mrspanishviking	5c33003eb2	Merge pull request #11608 from hashicorp/proxy-codeblocks docs: updated proxy page to use new codeblock	3 years ago
Karl Cardenas	d4cbe68913	docs: updated proxy page to use new codeblock	3 years ago
R.B. Boyer	dd4a59db8e	agent: purge service/check registration files for incorrect partitions on reload (#11607 )	3 years ago
Iryna Shustava	0ee456649f	connect: Support auth methods for the vault connect CA provider (#11573 ) * Support vault auth methods for the Vault connect CA provider * Rotate the token (re-authenticate to vault using auth method) when the token can no longer be renewed	3 years ago
99	bf3ccf5847	add dumb-init package to Dockerfile	3 years ago
John Cowen	392dedc3e2	ui: Upgrades token sourcing related components to Glimmer+docs (#11592 )	3 years ago

1 2 3 4 5 ...

15975 Commits (46a530434ee765907e17b907fd92fa8a394d5db5) All Branches Search

15975 Commits (46a530434ee765907e17b907fd92fa8a394d5db5)

All Branches