15844 Commits (52f0853ff95ce64806507586e8fc4d858ebfe6a7)

 

All Branches   

Search

Author	SHA1	Message	Date
Daniel Nephin	52f0853ff9	Merge pull request #11339 from hashicorp/dnephin/ca-manager-isolate-secondary-2 ... ca: reduce use of state in the secondary	3 years ago
Daniel Nephin	91a0c25932	ca: remove state check in secondarySetPrimaryRoots ... This function is only ever called from operations that have already acquired the state lock, so checking the value of state can never fail. This change is being made in preparation for splitting out a separate type for the secondary logic. The state can't easily be shared, so really only the expored top-level functions should acquire the 'state lock'.	3 years ago
Daniel Nephin	f1944458e4	ca: remove actingSecondaryCA ... This commit removes the actingSecondaryCA field, and removes the stateLock around it. This field was acting as a proxy for providerRoot != nil, so replace it with that check instead. The two methods which called secondarySetCAConfigured already set the state, so checking the state again at this point will not catch runtime errors (only programming errors, which we can catch with tests). In general, handling state transitions should be done on the "entrypoint" methods where execution starts, not in every internal method. This is being done to remove some unnecessary references to c.state, in preparations for extracting types for primary/secondary.	3 years ago
Daniel Nephin	238a4f13c8	Merge pull request #11660 from hashicorp/dnephin/ca-reduce-consul-provider-state-iface ... ca: reduce consul provider backend interface a bit	3 years ago
Daniel Nephin	a631378008	Merge pull request #11468 from hashicorp/dnephin/acl-docs-namespace-rules ... docs: update docs about namespace default policy/role	3 years ago
Daniel Nephin	7bfe50a914	docs: update docs about namespace default policy/role ... To include details about the permissions the ACL token must have to perform the request.	3 years ago
Daniel Nephin	b92084b8e8	ca: reduce consul provider backend interface a bit ... This makes it easier to fake, which will allow me to use the ConsulProvider as an 'external PKI' to test a customer setup where the actual root CA is not the root we use for the Consul CA. Replaces a call to the state store to fetch the clusterID with the clusterID field already available on the built-in provider.	3 years ago
John Cowen	f7b8df281b	ui: Add `Service.Namespace` variable to dashboard URL templates (#11640) ... We currently allow only Datacenter, Service.Name, this PR adds Service.Namespace.	3 years ago
John Cowen	3f131dcf34	ui: Notifications re-organization/re-style (#11577) ... - Moves where they appear up to the <App /> component. - Instead of a <Notification /> wrapping component to move whatever you use for a notification up to where they need to appear (via ember-cli-flash), we now use a {{notification}} modifier now we have modifiers. - Global notifications/flashes are no longer special styles of their own. You just use the {{notification}} modifier to hoist whatever component/element you want up to the top of the page. This means we can re-use our existing <Notice /> component for all our global UI notifications (this is the user visible change here)	3 years ago
Dhia Ayachi	3820e09a47	Partition/kv indexid sessions (#11639) ... * state: port KV and Tombstone tables to new pattern * go fmt'ed * handle wildcards for tombstones * Fix graveyard ent vs oss * fix oss compilation error * add partition to tombstones and kv state store indexes * refactor to use `indexWithEnterpriseIndexable` * Apply suggestions from code review Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * partition `tableSessions` table * fix sessions to use UUID and fix prefix index * fix oss build * clean up unused functions * fix oss compilation * add a partition indexer for sessions * Fix oss to not have partition index * fix oss tests * remove unused operations_ent.go and operations_oss.go func * convert `indexNodeCheck` of `session_checks` table * partition `indexID` and `indexSession` of `tableSessionChecks` * remove partition for Checks as it's always use the session partition * partition sessions index id table * fix rebase issues Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>	3 years ago
John Cowen	2b8273bc6e	ui: Support for SSO with Admin Partitions (#11604) ... * Upgrade AuthForm and document current state a little better * Hoist SSO out of the AuthForm * Bare minimum admin partitioned SSO also: ui: Tabbed Login with Token or SSO interface (#11619) - I upgraded our super old, almost the first ember component I wrote, to use glimmer/almost template only. This should use slots/contextual components somehow, but thats a bigger upgrade so I didn't go that far. - I've been wanting to upgrade the shape of our StateChart component for a very long while now, here its very apparent that it would be much better to do this sooner rather than later. I left it as is for now, but there will be a PR coming soon with a slight reshaping of this component. - Added a did-upsert modifier which is a mix of did-insert/did-update - Documentation added/amended for all the new things.	3 years ago
Dhia Ayachi	bb83624950	Partition session checks store (#11638) ... * state: port KV and Tombstone tables to new pattern * go fmt'ed * handle wildcards for tombstones * Fix graveyard ent vs oss * fix oss compilation error * add partition to tombstones and kv state store indexes * refactor to use `indexWithEnterpriseIndexable` * Apply suggestions from code review Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * add `singleValueID` implementation assertions * partition `tableSessions` table * fix sessions to use UUID and fix prefix index * fix oss build * clean up unused functions * fix oss compilation * add a partition indexer for sessions * Fix oss to not have partition index * fix oss tests * remove unused operations_ent.go and operations_oss.go func * remove unused const * convert `IndexID` of `session_checks` table * convert `indexSession` of `session_checks` table * convert `indexNodeCheck` of `session_checks` table * partition `indexID` and `indexSession` of `tableSessionChecks` * fix oss linter * fix review comments * remove partition for Checks as it's always use the session partition Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>	3 years ago
Chris S. Kim	2350e7e56a	cleanup: Clarify deprecated legacy intention endpoints (#11635)	3 years ago
Chris S. Kim	9d02bc08c9	docs: fix name for partition resource labels (#11634)	3 years ago
John Cowen	b84ee47ff0	ui: Fix brand coloring for inline-code plus docs (#11578) ... * ui: Fix brand coloring for inline-code plus docs Also use --tones instead of --black/--white (#11601) Co-authored-by: Evan Rowe <ev.rowe@gmail.com>	3 years ago
lornasong	3666401ae3	nia/docs 0.4.2 (#11611) ... * nia/docs: Add TLS options for the CTS API * docs: Add workspace tags (#11564) * nia/docs: Change CLI options to table format Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: Michael Wilkerson <62034708+wilkermichael@users.noreply.github.com> * nia/docs: Update TLS CLI defaults Also clarifies some behavior for the CLI options. Co-authored-by: Melissa Kam <mkam@hashicorp.com> Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com> Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: Michael Wilkerson <62034708+wilkermichael@users.noreply.github.com>	3 years ago
Matt Siegel	fa7216ab67	Merge pull request #11625 from hashicorp/version.js-1.10.4 ... website: bump latest binary version to 1.10.4	3 years ago
99	85312203f2	Merge pull request #11567 from hashicorp/branches_fix ... ci: update triggers for main branch	3 years ago
99	4c0f40d8fb	ci: update triggers for main branch	3 years ago
Matt Siegel	281a010097	website: bump latest binary version to 1.10.4	3 years ago
99	4b3c3c34b3	Merge pull request #11605 from hashicorp/fix_dockerfile ... add dumb-init package to Dockerfile	3 years ago
Chris S. Kim	db5ee0e4d2	Merge from ent (#11506)	3 years ago
mrspanishviking	5c33003eb2	Merge pull request #11608 from hashicorp/proxy-codeblocks ... docs: updated proxy page to use new codeblock	3 years ago
Karl Cardenas	d4cbe68913	docs: updated proxy page to use new codeblock	3 years ago
R.B. Boyer	dd4a59db8e	agent: purge service/check registration files for incorrect partitions on reload (#11607)	3 years ago
Iryna Shustava	0ee456649f	connect: Support auth methods for the vault connect CA provider (#11573) ... * Support vault auth methods for the Vault connect CA provider * Rotate the token (re-authenticate to vault using auth method) when the token can no longer be renewed	3 years ago
99	bf3ccf5847	add dumb-init package to Dockerfile	3 years ago
John Cowen	392dedc3e2	ui: Upgrades token sourcing related components to Glimmer+docs (#11592)	3 years ago
John Cowen	b4a7278e72	ui: Add eng docs for our render-template helper (#11359) ... Adds Engineer documentation for our recently improved render-template helper, plus some ideas for further work/improvement here should anyone ever want to pick that up.	3 years ago
99	7ad6ab3425	Merge pull request #11600 from hashicorp/fix_entrypoint_main ... Make entrypoint script always executable	3 years ago
99	b462e59ffc	Make entrypoint script always executable	3 years ago
ultrafear	854d6e6d59	Fixing spelling under Matching and Prefix Values	3 years ago
Luke Kysow	3c68766286	Add docs for Consul Ent on ECS (#11537)	3 years ago
John Cowen	b7bd938411	ui: Store the default partition when logging in (#11591) ... Make sure we store the default Partition for a users token.	3 years ago
John Cowen	35ccc2bc29	ui: Adding partitions + icons to upstreams/upstream instances (#11556) ... Adds a partition badge/label/visual to upstreams and upstream instances.	3 years ago
Daniel Nephin	87c703484f	Merge pull request #11589 from hashicorp/dnephin/ca-cleanup-cluster-id-1 ... ca: small cleanup of SpiffeIDSigningForCluster args	3 years ago
Eric Haberkorn	1bf778f9c7	Merge pull request #11583 from hashicorp/consul-ecs-ga-docs ... Consul ECS GA Docs	3 years ago
Paul Glass	a3cc7ad2bd	Merge pull request #11584 from hashicorp/pglass/ecs-ga ... docs: ECS GA doc update	3 years ago
Paul Glass	de8c830a93	docs: Fix some typos in ECS overview	3 years ago
John Cowen	2ef9ea00b1	ui: When certain menus are selected reset either nspace/partition (#11479) ... For our dc, nspace and partition 'bucket' menus, sometimes when selecting one 'bucket' we need to reset a different 'bucket' back to the one that your token has by default (or the default if not). For example when switching to a different partition whilst you are in a non-default namespace of another partition, we need to switch you to the token default namespace of the partition you are switching to.	3 years ago
danielehc	eddd648095	Connect.enabled config option (#11533)	3 years ago
Dan Upton	b51dc2f758	changelog: entry for snapshot agent `license_path` bug (#11561)	3 years ago
Daniel Nephin	b4080bc0dc	ca: use the cluster ID passed to the primary ... instead of fetching it from the state store.	3 years ago
Daniel Nephin	b9ab9bae12	ca: accept only the cluster ID to SpiffeIDSigningForCluster ... To make it more obivous where ClusterID is used, and remove the need to create a struct when only one field is used.	3 years ago
R.B. Boyer	2d37085faf	update changelog (#11575)	3 years ago
Mike Morris	25826e3ee4	deps: update gopsutil to fix Windows ARM and macOS non-Apple LLVM builds (#11586) ... Bumps transitive dep go-ole to v1.2.6 with fixes	3 years ago
R.B. Boyer	75bbe893e8	add 1.11.x beta1/beta2 changelog entries (#11587)	3 years ago
Will Jordan	68efecafed	Update node info sync comment (#11465)	3 years ago
R.B. Boyer	e6956893fb	api: ensure new partition fields are omit empty for back compat (#11585)	3 years ago
R.B. Boyer	9db6645352	build: switch to 'go install' over 'go get' (#11582) ... Also add lint-consul-retry to the 'make tools' set.	3 years ago