Commit Graph

3871 Commits (52f0853ff95ce64806507586e8fc4d858ebfe6a7)

Author SHA1 Message Date
Daniel Nephin 52f0853ff9
Merge pull request #11339 from hashicorp/dnephin/ca-manager-isolate-secondary-2
3 years ago
Daniel Nephin 91a0c25932 ca: remove state check in secondarySetPrimaryRoots
3 years ago
Daniel Nephin f1944458e4 ca: remove actingSecondaryCA
3 years ago
Daniel Nephin b92084b8e8 ca: reduce consul provider backend interface a bit
3 years ago
Dhia Ayachi 3820e09a47
Partition/kv indexid sessions (#11639)
3 years ago
Dhia Ayachi bb83624950
Partition session checks store (#11638)
3 years ago
Chris S. Kim 2350e7e56a
cleanup: Clarify deprecated legacy intention endpoints (#11635)
3 years ago
Chris S. Kim db5ee0e4d2
Merge from ent (#11506)
3 years ago
R.B. Boyer dd4a59db8e
agent: purge service/check registration files for incorrect partitions on reload (#11607)
3 years ago
Iryna Shustava 0ee456649f
connect: Support auth methods for the vault connect CA provider (#11573)
3 years ago
Daniel Nephin b4080bc0dc ca: use the cluster ID passed to the primary
3 years ago
Daniel Nephin b9ab9bae12 ca: accept only the cluster ID to SpiffeIDSigningForCluster
3 years ago
Will Jordan 68efecafed
Update node info sync comment (#11465)
3 years ago
R.B. Boyer 1e02460bd1
re-run gofmt on 1.17 (#11579)
3 years ago
R.B. Boyer eb21649f82
partitions: various refactors to support partitioning the serf LAN pool (#11568)
3 years ago
freddygv 0e507492d0 Update proxycfg for ingress service partitions
3 years ago
freddygv e5b7c4713f Accept partition for ingress services
3 years ago
freddygv 400697507b Move assertion to after config fetch
3 years ago
freddygv da5bcc574e Use ClusterID to check for readiness
3 years ago
freddygv 6976044bc4 Prevent replicating partition-exports
3 years ago
freddygv 5c121d7a48 handle error scenario of empty local DC
3 years ago
freddygv af29cda415 Restrict DC for partition-exports writes
3 years ago
Freddy 00b5b0a0a2
Update filter chain creation for sidecar/ingress listeners (#11245)
3 years ago
Kyle Havlovitz 6c0bd0550f
Merge pull request #11461 from deblasis/feature/empty_client_addr_warning
3 years ago
Daniel Upton 50a1f20ff9
xds: prefer fed state gateway definitions if they're fresher (#11522)
3 years ago
Freddy 7d95d90fce
Merge pull request #11514 from hashicorp/dnephin/ca-fix-secondary-init
3 years ago
freddygv cc5a7ed36c Avoid returning empty roots with uninitialized CA
3 years ago
Dhia Ayachi 7916268c40
refactor session state store tables to use the new index pattern (#11525)
3 years ago
Dhia Ayachi 98735a6d12
KV refactoring, part 2 (#11512)
3 years ago
Dhia Ayachi 520cb5858c
KV state store refactoring and partitioning (#11510)
3 years ago
Daniel Nephin d9110136f2 ca: Only initialize clusterID in the primary
3 years ago
Daniel Nephin 01bd3d118d ca: return an error when secondary fails to initialize
3 years ago
Daniel Nephin 8ba760a2fc acl: remove id and revision from Policy constructors
3 years ago
Daniel Nephin 7c679c11e6 acl: remove Policy.ID and Policy.Revision
3 years ago
R.B. Boyer c7c5013edd
rename helper method to reflect the non-deprecated terminology (#11509)
3 years ago
Connor efe4b21287
Support Vault Namespaces explicitly in CA config (#11477)
3 years ago
R.B. Boyer 44c023a302
segments: ensure that the serf_lan_allowed_cidrs applies to network segments (#11495)
3 years ago
Mark Anderson 7e8228a20b
Remove some usage of md5 from the system (#11491)
3 years ago
FFMMM 61bd417a82
plumb thru root cert tll to the aws ca provider (#11449)
3 years ago
FFMMM 6004a21f35
fix aws pca certs (#11470)
3 years ago
Mathew Estafanous 8fb90aacef
Convert (some) test endpoints to use ServeHTTP instead of direct calls to handlers. (#11445)
3 years ago
FFMMM 4ddf973a31
add root_cert_ttl option for consul connect, vault ca providers (#11428)
3 years ago
Daniel Nephin 51d8417545
Merge pull request #10690 from tarat44/h2c-support-in-ping-checks
3 years ago
Alessandro De Blasis 2f970555d9 config: warn the user if client_addr is empty
3 years ago
Daniel Nephin b57cae94de
Merge pull request #10771 from hashicorp/dnephin/emit-telemetry-metrics-immediately
3 years ago
freddygv 60066e5154 Exclude default partition from GatewayKey string
3 years ago
freddygv e3666b0bc4 Update GatewayKeys deduplication
3 years ago
freddygv 90ce897456 Store GatewayKey in proxycfg snapshot for re-use
3 years ago
freddygv bbe46e9522 Update locality check in xds
3 years ago
freddygv 4d4ccedb3a Update locality check in proxycfg
3 years ago