consul

Commit Graph

Author	SHA1	Message	Date
Michael Zalimeni	905e371607	[NET-5146] security: Update Go version to 1.20.7 and `x/net` to 0.13.0 (#18358 ) * Update Go version to 1.20.7 This resolves [CVE-2023-29409] (https://nvd.nist.gov/vuln/detail/CVE-2023-29409)(`crypto/tls`). * Bump golang.org/x/net to 0.13.0 Addresses [CVE-2023-3978](https://nvd.nist.gov/vuln/detail/CVE-2023-3978) for security scans (non-impacting).	1 year ago
Michael Zalimeni	e8dd04d662	[NET-4865] security: Update Go version to 1.20.6 (#18190 ) Update Go version to 1.20.6 This resolves [CVE-2023-29406] (https://nvd.nist.gov/vuln/detail/CVE-2023-29406) for uses of the `net/http` standard library. Note that until the follow-up to #18124 is done, the version of Go used in those impacted tests will need to remain on 1.20.5.	1 year ago
John Murret	bdf4fad7c5	Revert "Add workflow to verify linux release packages (#17904 )" (#17942 ) This reverts commit `3368f14fab`.	1 year ago
Nathan Coleman	f7870881e0	Reference hashicorp/consul instead of consul for Docker image (#17914 ) * Reference hashicorp/consul instead of consul for Docker image * Update Make targets that pull consul directly	1 year ago
John Murret	3368f14fab	Add workflow to verify linux release packages (#17904 ) * adding docker files to verify linux packages. * add verifr-release-linux.yml * updating name * pass inputs directly into jobs * add other linux package platforms * remove on push * fix TARGETARCH on debian and ubuntu so it can check arm64 and amd64 * fixing amazon to use the continue line * add ubuntu i386 * fix comment lines * working * remove commented out workflow jobs * Apply suggestions from code review Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com> * update fedora and ubuntu to use latest tag --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	1 year ago
John Murret	6fa104409e	security: update go version to 1.20.4 (#17240 ) * update go version to 1.20.3 * add changelog * rename changelog file to remove underscore * update to use 1.20.4 * update change log entry to reflect 1.20.4	2 years ago
hashicorp-copywrite[bot]	9f81fc01e9	[COMPLIANCE] Add Copyright and License Headers (#16854 ) Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com> Co-authored-by: Ronald <roncodingenthusiast@users.noreply.github.com>	2 years ago
Dhia Ayachi	711179db96	add ability to start container tests in debug mode and attach a debugger (#16887 ) * add ability to start container tests in debug mode and attach a debugger to consul while running it. * add a debug message with the debug port * use pod to get the right port * fix image used in basic test * add more data to identify which container to debug. * fix comment Co-authored-by: Evan Culver <eculver@users.noreply.github.com> * rename debugUri to debugURI --------- Co-authored-by: Evan Culver <eculver@users.noreply.github.com>	2 years ago
Ronald	b64674623e	Copyright headers for missing files/folders (#16708 ) * copyright headers for agent folder	2 years ago
Valeriia Ruban	d75f2ba5da	UI: update Ember to 3.28.6 (#16616 ) --------- Co-authored-by: wenincode <tyler.wendlandt@hashicorp.com>	2 years ago
Dan Stough	f1436109ea	[OSS] security: update go to 1.20.1 (#16263 ) * security: update go to 1.20.1	2 years ago
Chris S. Kim	41019adf56	Update go version to 1.19	2 years ago
DanStough	d8cb7731dd	chore: add multi-arch docker build for testing	2 years ago
Chris S. Kim	f0a9b30174	Update repo to use go:embed (#10996 ) Replace bindata packages with stdlib go:embed. Modernize some uiserver code with newer interfaces introduced in go 1.16 (mainly working with fs.File instead of http.File. Remove steps that are no longer used from our build files. Add Github Action to detect differences in agent/uiserver/dist and verify that the files are correct (by compiling UI assets and comparing contents).	3 years ago
DanStough	95250e7915	Update go version to 1.18.1	3 years ago
R.B. Boyer	96748197fc	build: remove unused tools from being installed (#12671 )	3 years ago
Chris S. Kim	8bdbe7c0fb	Update CI and release go versions to 1.17.5 (#11799 )	3 years ago
Daniel Nephin	d46f2429ec	build-support: remove test-flake machinery This machinery was not used, and does not appear to be maintained. In practice we really don't need anything to detect flaky tests. Our CI system identifies flaky tests at https://app.circleci.com/insights/github/hashicorp/consul/workflows/go-tests/tests?branch=main Mostly what we need is a way to reproduce flakes, which can be done directly with the Go CLI, using the -race, -count, and (new in Go 1.17) -shuffle flags.	3 years ago
Daniel Nephin	846ff9a2c7	Merge pull request #11364 from hashicorp/use-go1.17 ci: test against go1.17	3 years ago
Daniel Nephin	66798ca42d	ci: test against go1.17	3 years ago
R.B. Boyer	bc912192af	build: fix ui make target to use the same frontend stack as the regular release (#11368 )	3 years ago
R.B. Boyer	e0d1e2689c	ci: upgrade to use Go 1.16.7 (#10856 )	3 years ago
R.B. Boyer	21e855d860	build: ensure make go-build-image target builds tools in isolation (#10534 )	3 years ago
John Cowen	8301e79c56	ui: Bump node to v14 (#10238 )	4 years ago
Iryna Shustava	5755c97bc7	cli: Add new `consul connect redirect-traffic` command for applying traffic redirection rules when Transparent Proxy is enabled. (#9910 ) * Add new consul connect redirect-traffic command for applying traffic redirection rules when Transparent Proxy is enabled. * Add new iptables package for applying traffic redirection rules with iptables.	4 years ago
R.B. Boyer	a2e1cbd061	ci: update to go 1.15.5 (#9187 )	4 years ago
Mike Morris	7af643ac37	ci: update to Go 1.15.4 and alpine:3.12 (#9036 ) * ci: stop building darwin/386 binaries Go 1.15 drops support for 32-bit binaries on Darwin https://golang.org/doc/go1.15#darwin * tls: ConnectionState::NegotiatedProtocolIsMutual is deprecated in Go 1.15, this value is always true * correct error messages that changed slightly * Completely regenerate some TLS test data Co-authored-by: R.B. Boyer <rb@hashicorp.com>	4 years ago
Mike Morris	c0ef425ae5	chore: update to Go 1.14.11	4 years ago
John Cowen	6589cbbd0d	ui: Move to Workspaced Structure (#8994 ) * ui: Add the most basic workspace root in /ui * We already have a LICENSE file in the repository root * Change directory path in build scripts ui-v2 -> ui * Make yarn install flags configurable from elsewhere * Minimal workspace root makefile * Call the new docker specific target * Update yarn in the docker build image * Reconfigure the netlify target and move to the higher makefile * Move ui-v2 -> ui/packages/consul-ui * Change repo root to refleect new folder structure * Temporarily don't hoist consul-api-double * Fixup CI configuration * Fixup lint errors * Fixup Netlify target	4 years ago
Mike Morris	ebc9b27cfa	ci: bump Go to v1.14.7 (#8449 )	4 years ago
John Cowen	662c28307c	ui: Upgrade to node 12 LTS (#7248 ) Upgrading our build tooling to use the latest node LTS and the lastest/current Alpine version in our container	5 years ago
Daniel Nephin	c5b7c072fd	ci: Upgrade Go to 1.14.1	5 years ago
Matt Keeler	646c9f5896	Don’t pass `-u` to get get inside Go build image dockerfile (#7455 )	5 years ago
R.B. Boyer	fdb6b80672	Switch to go 1.13.7 (#7262 ) - You can no longer cross submodule boundaries with ./... in go subcommands like `go list` or `go test`. The makefile and CI scripts were updated accordingly. - Also of note: `go mod vendor` now omits things build ignored.	5 years ago
Hans Hasselberg	fe49ea404d	build: update to golang 1.12.16 (#7153 )	5 years ago
John Cowen	e61dfe2307	ui: Upgrade tooling to node 10 now we are on a more recent ember (#6610 ) * ui: Upgrade tooling to node 10 now we are on a more recent ember * build: Also update the conatiner for building the UI We bump alpine here as 3.8 doesn't have node 10 by default whereas 3.9 does. Yarn is bumped to latest current version while we are here.	5 years ago
Alvin Huang	894bad6162	upgrade go to 1.12.13 (#6759 )	5 years ago
Matt Keeler	a31e7a5d58	Remove `gox` usage (#6596 )	5 years ago
Matt Keeler	6d995246a8	Update toolchain to Go 1.12.8 (#6319 )	5 years ago
Matt Keeler	e81f6aeed0	Update Consul-Dev.dockerfile (#5678 ) This was putting the new binary on the wrong path so this wasn't updating the docker image in any effectual way.	6 years ago
Matt Keeler	c6be3b525b	Build System Fixes for Go Modules (#5655 ) * Docker based builds can now use the module cache * Simplify building the consul-dev docker image. * Make sure to pull the latest consul image. * Allow selecting base image version for the dev image	6 years ago
Freddy	b2c12550d7	Remove old UI, option to use it, and its build processes	6 years ago
R.B. Boyer	d8c19a9701	allow 'make dev-docker' to cache resolved modules (#5588 )	6 years ago
R.B. Boyer	27446a19e2	remove remaining references to govendor and vendorfmt (#5587 )	6 years ago
Hans Hasselberg	ac45b17482	fix remaining CI failures after Go 1.12.1 Upgrade (#5576 )	6 years ago
Jeff Mitchell	47c390025b	Convert to Go Modules (#5517 ) * First conversion * Use serf 0.8.2 tag and associated updated deps * * Move freeport and testutil into internal/ * Make internal/ its own module * Update imports * Add replace statements so API and normal Consul code are self-referencing for ease of development * Adapt to newer goe/values * Bump to new cleanhttp * Fix ban nonprintable chars test * Update lock bad args test The error message when the duration cannot be parsed changed in Go 1.12 (ae0c435877d3aacb9af5e706c40f9dddde5d3e67). This updates that test. * Update another test as well * Bump travis * Bump circleci * Bump go-discover and godo to get rid of launchpad dep * Bump dockerfile go version * fix tar command * Bump go-cleanhttp	6 years ago
R.B. Boyer	607f0df628	ui: pin to using bundler v1 for now (#5274 )	6 years ago
Matt Keeler	ec712b7ecf	Update to Go 1.11.4 and UI build container (#5257 ) * Update to Go 1.11.4 * Update to Go 1.11.4 for travis * Update UI build to fix ember issues.	6 years ago
Matt Keeler	18b29c45c4	New ACLs (#4791 ) This PR is almost a complete rewrite of the ACL system within Consul. It brings the features more in line with other HashiCorp products. Obviously there is quite a bit left to do here but most of it is related docs, testing and finishing the last few commands in the CLI. I will update the PR description and check off the todos as I finish them over the next few days/week. Description At a high level this PR is mainly to split ACL tokens from Policies and to split the concepts of Authorization from Identities. A lot of this PR is mostly just to support CRUD operations on ACLTokens and ACLPolicies. These in and of themselves are not particularly interesting. The bigger conceptual changes are in how tokens get resolved, how backwards compatibility is handled and the separation of policy from identity which could lead the way to allowing for alternative identity providers. On the surface and with a new cluster the ACL system will look very similar to that of Nomads. Both have tokens and policies. Both have local tokens. The ACL management APIs for both are very similar. I even ripped off Nomad's ACL bootstrap resetting procedure. There are a few key differences though. Nomad requires token and policy replication where Consul only requires policy replication with token replication being opt-in. In Consul local tokens only work with token replication being enabled though. All policies in Nomad are globally applicable. In Consul all policies are stored and replicated globally but can be scoped to a subset of the datacenters. This allows for more granular access management. Unlike Nomad, Consul has legacy baggage in the form of the original ACL system. The ramifications of this are: A server running the new system must still support other clients using the legacy system. A client running the new system must be able to use the legacy RPCs when the servers in its datacenter are running the legacy system. The primary ACL DC's servers running in legacy mode needs to be a gate that keeps everything else in the entire multi-DC cluster running in legacy mode. So not only does this PR implement the new ACL system but has a legacy mode built in for when the cluster isn't ready for new ACLs. Also detecting that new ACLs can be used is automatic and requires no configuration on the part of administrators. This process is detailed more in the "Transitioning from Legacy to New ACL Mode" section below.	6 years ago
Paul Banks	f0c06a912e	Bump Go version for CI and build to 1.11.1 (#4782 )	6 years ago

1 2

57 Commits (59bfc81d49a905480329a38c0d8d0109ea100d3e)