3617 Commits (5c40b717edda62ab353195f8af74001c5b720057)

Author	SHA1	Message	Date
Daniel Nephin	5c40b717ed	config: move acl_ttl to DeprecatedConfig	3 years ago
Daniel Nephin	977f6d8888	config: move acl_{default,down}_policy to DeprecatedConfig	3 years ago
Daniel Nephin	5eafcea4d4	config: Deprecate EnableACLReplication ... replaced by ACL.TokenReplication	3 years ago
Daniel Nephin	5dc16180ad	config: move ACL master token and replication to DeprecatedConfig	3 years ago
Daniel Nephin	54256fb751	config: Move two more fields to DeprecatedConfig ... And add a test for deprecated config fields.	3 years ago
Daniel Nephin	8ed14296ea	config: Introduce DeprecatedConfig ... This struct allows us to move all the deprecated config options off of the main config struct, and keeps all the deprecation logic in a single place, instead of spread across 3+ places.	3 years ago
Connor	1e3ba26223	Merge pull request #11090 from hashicorp/clly/kv-usage-metrics ... Add KVUsage to consul state usage metrics	3 years ago
Connor Kelly	ba706501e1	Strip out go 1.17 bits	3 years ago
Matt Keeler	a6a359cc80	Add a mock Agent delegate to ease/improve some types of testing	3 years ago
hc-github-team-consul-core	47b99d0b78	auto-updated agent/uiserver/bindata_assetfs.go from commit 9c0233cf5	3 years ago
hc-github-team-consul-core	7efb015ca9	auto-updated agent/uiserver/bindata_assetfs.go from commit cfbd1bb84	3 years ago
Daniel Nephin	aee8a9511d	Merge pull request #10985 from hashicorp/dnephin/acl-legacy-remove-replication ... acl: remove legacy ACL replication	3 years ago
Connor	1ddee0680c	Apply suggestions from code review ... Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com>	3 years ago
R.B. Boyer	b2d17ac448	xds: fix representation of incremental xDS subscriptions (#10987) ... Fixes #10563 The `resourceVersion` map was doing two jobs prior to this PR. The first job was to track what version of every resource we know envoy currently has. The second was to track subscriptions to those resources (by way of the empty string for a version). This mostly works out fine, but occasionally leads to consul removing a resource and accidentally (effectively) unsubscribing at the same time. The fix separates these two jobs. When all of the resources for a subscription are removed we continue to track the subscription until envoy explicitly unsubscribes	3 years ago
Connor Kelly	ae3457b96a	Fix test	3 years ago
Connor Kelly	052f224ee5	Add KVUsage to consul state usage metrics ... This change will add the number of entries in the consul KV store to the already existing usage metrics.	3 years ago
R.B. Boyer	5fe613dd05	xds: ensure the active streams counters are 64 bit aligned on 32 bit systems (#11085)	3 years ago
Freddy	8591620b5d	Merge pull request #11071 from hashicorp/partitions/ixn-decisions	3 years ago
freddygv	49248a0802	Fixup proxycfg tproxy case	3 years ago
freddygv	fc8fc060a7	Remove ent checks from oss test	3 years ago
R.B. Boyer	faa6fd0919	acl: ensure the global management policy grants all necessary partition privileges (#11072)	3 years ago
freddygv	bf7a1358d6	Ensure partition is defaulted in authz	3 years ago
freddygv	47109e0c0c	Default the partition in ixn check	3 years ago
freddygv	82d2caa288	Fixup test	3 years ago
freddygv	95a6db9cfa	Account for partitions in ixn match/decision	3 years ago
Jeff Widman	2dc62aa0c4	Bump `go-discover` to fix broken dep tree (#10898)	3 years ago
hc-github-team-consul-core	42b7fd3e60	auto-updated agent/uiserver/bindata_assetfs.go from commit 1d9d3349c	3 years ago
R.B. Boyer	ca73abdea1	acl: fix intention:*:write checks (#11061) ... This is a partial revert of #10793	3 years ago
Freddy	cd08a36ce0	Merge pull request #11051 from hashicorp/partitions/fixes	3 years ago
Freddy	fcef19f94b	acl: small resolver changes to account for partitions (#11052) ... Also refactoring the enterprise side of a test to make it easier to reason about.	3 years ago
freddygv	3f3a61c6e1	Fixup manager tests	3 years ago
freddygv	99c6e4fe41	Default partition in match endpoint	3 years ago
freddygv	77681b9f6c	Pass partition to intention match query	3 years ago
freddygv	9cd30e8650	Ensure partition is used for SAN validation	3 years ago
Mark Anderson	9f12fbd3cc	ACL Binding Rules table partitioning (#11044) ... * ACL Binding Rules table partitioning Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
hc-github-team-consul-core	02051c141e	auto-updated agent/uiserver/bindata_assetfs.go from commit fc14a412f	3 years ago
hc-github-team-consul-core	0eb4a98fab	auto-updated agent/uiserver/bindata_assetfs.go from commit b16a6fa03	3 years ago
Dhia Ayachi	af21578039	use const instead of literals for `tableIndex` (#11039)	3 years ago
Mark Anderson	6be54052f7	Refactor `indexAuthMethod` in `tableACLBindingRules` (#11029) ... * Port consul-enterprise #1123 to OSS Signed-off-by: Mark Anderson <manderson@hashicorp.com> * Fixup missing query field Signed-off-by: Mark Anderson <manderson@hashicorp.com> * change to re-trigger ci system Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
Freddy	ce04ce13dd	Merge pull request #11024 from hashicorp/partitions/rbac	3 years ago
Freddy	e18f3c1f6d	Update error texts (#11022) ... Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	3 years ago
freddygv	d90e30f009	Update spiffe ID patterns used for RBAC	3 years ago
freddygv	5e54f253d7	Expand testing of simplifyNotSourceSlice for partitions	3 years ago
freddygv	19da23be28	Expand testing of removeSameSourceIntentions for partitions	3 years ago
freddygv	beab0cd962	Account for partition when matching src intentions	3 years ago
Daniel Nephin	1f9479603c	Add failures_before_warning to checks (#10969) ... Signed-off-by: Jakub Sokołowski <jakub@status.im> * agent: add failures_before_warning setting The new setting allows users to specify the number of check failures that have to happen before a service status us updated to be `warning`. This allows for more visibility for detected issues without creating alerts and pinging administrators. Unlike the previous behavior, which caused the service status to not update until it reached the configured `failures_before_critical` setting, now Consul updates the Web UI view with the `warning` state and the output of the service check when `failures_before_warning` is breached. The default value of `FailuresBeforeWarning` is the same as the value of `FailuresBeforeCritical`, which allows for retaining the previous default behavior of not triggering a warning. When `FailuresBeforeWarning` is set to a value higher than that of `FailuresBeforeCritical it has no effect as `FailuresBeforeCritical` takes precedence. Resolves: https://github.com/hashicorp/consul/issues/10680 Signed-off-by: Jakub Sokołowski <jakub@status.im> Co-authored-by: Jakub Sokołowski <jakub@status.im>	3 years ago
Dhia Ayachi	b4d5860197	convert expiration indexed in ACLToken table to use `indexerSingle` (#11018) ... * move intFromBool to be available for oss * add expiry indexes * remove dead code: `TokenExpirationIndex` * fix remove indexer `TokenExpirationIndex` * fix rebase issue	3 years ago
Dhia Ayachi	11f44dfcf8	add locality indexer partitioning (#11016) ... * convert `Roles` index to use `indexerSingle` * split authmethod write indexer to oss and ent * add index locality * add locality unit tests * move intFromBool to be available for oss * use Bool func * refactor `aclTokenList` to merge func	3 years ago
Dhia Ayachi	ba4ee6e67c	convert `indexAuthMethod` index to use `indexerSingle` (#11014) ... * convert `Roles` index to use `indexerSingle` * fix oss build * split authmethod write indexer to oss and ent * add auth method unit tests	3 years ago
Paul Banks	b38e84df63	Include namespace and partition in error messages when validating ingress header manip	3 years ago