20247 Commits (62005369b54c63ccd7842c001de740ff3795d02c)

 

All Branches   

Search

Author	SHA1	Message	Date
Semir Patel	176945aa86	GRPC stub for the ResourceService (#16528)	2 years ago
Andrew Stucki	040647e0ba	auto-updated agent/uiserver/dist/ from commit 63204b518 (#16587) ... Co-authored-by: hc-github-team-consul-core <github-team-consul-core@hashicorp.com>	2 years ago
Michael Wilkerson	47db3d7ab9	added a backport-checker GitHub action (#16567) ... * added a backport-checker GitHub action * Update .github/workflows/backport-checker.yml	2 years ago
Bryce Kalow	e2c4a787a5	website: adds content-check command and README update (#16579)	2 years ago
Semir Patel	9a5cb20570	Bump submodules from latest 1.15.1 patch release (#16578) ... * Update changelog with Consul patch releases 1.13.7, 1.14.5, 1.15.1 * Bump submodules from latest patch release * Forgot one	2 years ago
Semir Patel	e5c2818ccc	Update changelog with patch releases (#16576)	2 years ago
Eric Haberkorn	89de91b263	fix bug that can lead to peering service deletes impacting the state of local services (#16570)	2 years ago
Anita Akaeze	280bdd3ea0	NET-2954: Improve integration tests CI execution time (#16565) ... * NET-2954: Improve integration tests CI execution time * fix ci * remove comments and modify config file	2 years ago
Eddie Rowe	3d75ab8a41	Broken link fixes (#16566)	2 years ago
Paul Glass	58016d1aa2	docs: Document config entry permissions (#16556)	2 years ago
Eric Haberkorn	dbaf8bf49c	add agent locality and replicate it across peer streams (#16522)	2 years ago
cskh	b649a5e8e4	upgrade test: use retry with ModifyIndex and remove ent test file (#16553)	2 years ago
Tu Nguyen	a5b8256111	Update docs to reflect functionality (#16549) ... * Update docs to reflect functionality * make consistent with other client runtimes	2 years ago
John Eikenberry	f5641ffccc	support vault auth config for alicloud ca provider ... Add support for using existing vault auto-auth configurations as the provider configuration when using Vault's CA provider with AliCloud. AliCloud requires 2 extra fields to enable it to use STS (it's preferred auth setup). Our vault-plugin-auth-alicloud package contained a method to help generate them as they require you to make an http call to a faked endpoint proxy to get them (url and headers base64 encoded).	2 years ago
Ronald	f135b14bdd	Fix flakey tests related to ACL token updates (#16545) ... * Fix flakey tests related to ACL token updates * update all acl token update tests * extra create_token function to its own thing	2 years ago
Valeriia Ruban	63204b5183	feat: update notification to use hds toast component (#16519)	2 years ago
Ashlee M Boyer	7ea2bd6731	Delete test-link-rewrites.yml (#16546)	2 years ago
John Maguire	6166889d44	Update the consul-k8s cli docs for the new `proxy log` subcommand (#16458) ... * Update the consul-k8s cli docs for the new `proxy log` subcommand * Updated consul-k8s docs from PR feedback * Added proxy log command to release notes	2 years ago
cskh	94ecb9c5d5	upgrade test: discovery chain across partition (#16543)	2 years ago
Anita Akaeze	9d8e00db24	Merge pull request #4573 from hashicorp/NET-2841 (#16544) ... * Merge pull request #4573 from hashicorp/NET-2841 NET-2841: PART 2 refactor upgrade tests to include version 1.15 * update upgrade versions	2 years ago
Chris S. Kim	8daddff08d	Follow-up fixes to consul connect envoy command (#16530)	2 years ago
Ronald	bf501a337b	Improve ux around ACL token to help users avoid overwriting node/service identities (#16506) ... * Deprecate merge-node-identities and merge-service-identities flags * added tests for node identities changes * added changelog file and docs	2 years ago
Melisa Griffin	fc232326a0	NET-2904 Fixes API Gateway Route Service Weight Division Error	2 years ago
trujillo-adam	9e93a30f4d	fixes empty link in DNS usage page (#16534)	2 years ago
Andrew Stucki	897e5ef2d3	Add some basic UI improvements for api-gateway services (#16508) ... * Add some basic ui improvements for api-gateway services * Add changelog entry * Use ternary for null check * Update gateway doc links * rename changelog entry for new PR * Fix test	2 years ago
Melisa Griffin	129eca8fdb	NET-2903 Normalize weight for http routes (#16512) ... * NET-2903 Normalize weight for http routes * Update website/content/docs/connect/gateways/api-gateway/configuration/http-route.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
R.B. Boyer	9a485cdb49	proxycfg: ensure that an irrecoverable error in proxycfg closes the xds session and triggers a replacement proxycfg watcher (#16497) ... Receiving an "acl not found" error from an RPC in the agent cache and the streaming/event components will cause any request loops to cease under the assumption that they will never work again if the token was destroyed. This prevents log spam (#14144, #9738). Unfortunately due to things like: - authz requests going to stale servers that may not have witnessed the token creation yet - authz requests in a secondary datacenter happening before the tokens get replicated to that datacenter - authz requests from a primary TO a secondary datacenter happening before the tokens get replicated to that datacenter The caller will get an "acl not found" *before* the token exists, rather than just after. The machinery added above in the linked PRs will kick in and prevent the request loop from looping around again once the tokens actually exist. For `consul-dataplane` usages, where xDS is served by the Consul servers rather than the clients ultimately this is not a problem because in that scenario the `agent/proxycfg` machinery is on-demand and launched by a new xDS stream needing data for a specific service in the catalog. If the watching goroutines are terminated it ripples down and terminates the xDS stream, which CDP will eventually re-establish and restart everything. For Consul client usages, the `agent/proxycfg` machinery is ahead-of-time launched at service registration time (called "local" in some of the proxycfg machinery) so when the xDS stream comes in the data is already ready to go. If the watching goroutines terminate it should terminate the xDS stream, but there's no mechanism to re-spawn the watching goroutines. If the xDS stream reconnects it will see no `ConfigSnapshot` and will not get one again until the client agent is restarted, or the service is re-registered with something changed in it. This PR fixes a few things in the machinery: - there was an inadvertent deadlock in fetching snapshot from the proxycfg machinery by xDS, such that when the watching goroutine terminated the snapshots would never be fetched. This caused some of the xDS machinery to get indefinitely paused and not finish the teardown properly. - Every 30s we now attempt to re-insert all locally registered services into the proxycfg machinery. - When services are re-inserted into the proxycfg machinery we special case "dead" ones such that we unilaterally replace them rather that doing that conditionally.	2 years ago
John Eikenberry	8910002e8f	update connect/ca's vault AuthMethod conf section (#16346) ... Updated Params field to re-frame as supporting arguments specific to the supported vault-agent auth-auth methods with links to each methods "#configuration" section. Included a call out limits on parameters supported.	2 years ago
John Eikenberry	56ffee6d42	add provider ca support for approle auth-method ... Adds support for the approle auth-method. Only handles using the approle role/secret to auth and it doesn't support the agent's extra management configuration options (wrap and delete after read) as they are not required as part of the auth (ie. they are vault agent things).	2 years ago
trujillo-adam	43bd3512f0	fixed broken links associated with cluster peering updates (#16523) ... * fixed broken links associated with cluster peering updates * additional links to fix * typos * fixed redirect file	2 years ago
Andrew Stucki	cc0765b87d	Fix resolution of service resolvers with subsets for external upstreams (#16499) ... * Fix resolution of service resolvers with subsets for external upstreams * Add tests * Add changelog entry * Update view filter logic	2 years ago
Matt Keeler	84156afe87	Remove private prefix from proto-gen-rpc-glue e2e test (#16433)	2 years ago
Michael Wilkerson	c517f07eca	modified unsupported envoy version error (#16518) ... - When an envoy version is out of a supported range, we now return the envoy version being used as `major.minor.x` to indicate that it is the minor version at most that is incompatible - When an envoy version is in the list of unsupported envoy versions we return back the envoy version in the error message as `major.minor.patch` as now the exact version matters.	2 years ago
Eric Haberkorn	5f81662066	Add support for failover policies (#16505)	2 years ago
Andrew Stucki	5deffbd95b	Fix issue where terminating gateway service resolvers weren't properly cleaned up (#16498) ... * Fix issue where terminating gateway service resolvers weren't properly cleaned up * Add integration test for cleaning up resolvers * Add changelog entry * Use state test and drop integration test	2 years ago
Andrew Stucki	4b661d1e0c	Add ServiceResolver RequestTimeout for route timeouts to make TerminatingGateway upstream timeouts configurable (#16495) ... * Leverage ServiceResolver ConnectTimeout for route timeouts to make TerminatingGateway upstream timeouts configurable * Regenerate golden files * Add RequestTimeout field * Add changelog entry	2 years ago
Anita Akaeze	358c35ef70	Merge pull request #4584 from hashicorp/refactor_cluster_config (#16517) ... NET-2841: PART 1 - refactor NewPeeringCluster to support custom config	2 years ago
Anita Akaeze	2b6d35fa8f	Merge pull request #4538 from hashicorp/NET-2396 (#16516) ... NET-2396: refactor test to reduce duplication	2 years ago
John Eikenberry	e8eec1fa80	add provider ca auth support for kubernetes ... Adds support for Kubernetes jwt/token file based auth. Only needs to read the file and save the contents as the jwt/token.	2 years ago
Michael Hofer	bbbdc5f4e5	docs(architecture): remove merge conflict leftovers (#16507)	2 years ago
John Eikenberry	4211069080	add provider ca support for jwt file base auth ... Adds support for a jwt token in a file. Simply reads the file and sends the read in jwt along to the vault login. It also supports a legacy mode with the jwt string being passed directly. In which case the path is made optional.	2 years ago
Chris S. Kim	321439f5a7	Speed up test by registering services concurrently (#16509)	2 years ago
Chris S. Kim	b177dc4e2b	Suppress AlreadyRegisteredError to fix test retries (#16501) ... * Suppress AlreadyRegisteredError to fix test retries * Remove duplicate sink	2 years ago
David Yu	21c30958cc	docs: Update release notes with Envoy compat issue (#16494) ... * Update v1_15_x.mdx --------- Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>	2 years ago
Nick Irvine	367a64f059	NET-2292: port ingress-gateway test case "http" from BATS addendum (#16490)	2 years ago
Ronald	4f8594b28f	Improve ux to help users avoid overwriting fields of ACL tokens, roles and policies (#16288) ... * Deprecate merge-policies and add options add-policy-name/add-policy-id to improve CLI token update command * deprecate merge-roles fields * Fix potential flakey tests and update ux to remove 'completely' + typo fixes	2 years ago
trujillo-adam	5ac1bdd3db	update services nav titles (#16484)	2 years ago
cskh	3970115753	fix (cli): return error msg if acl policy not found (#16485) ... * fix: return error msg if acl policy not found * changelog * add test	2 years ago
David Yu	66de1def3b	docs: Consul 1.15.0 and Consul K8s 1.0 release notes (#16481) ... * add new release notes --------- Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>	2 years ago
trujillo-adam	1f422f3df3	Changed titles for services pages to sentence style cap (#16477) ... * Changed titles for services pages to sentence style cap * missed a meta title	2 years ago