consul

Tree: 646c9f5896

Author	SHA1	Message	Date
Matt Keeler	8c43f199fd	Update namespace docs for some new CLI commands (#7435 ) Co-Authored-By: Hans Hasselberg <me@hans.io>	5 years ago
Charlie Jones	5d734a85d6	docs: fix typo in consul-template tutorial (#7454 )	5 years ago
Matt Keeler	e62e862df9	Update intention precedence table in the docs (#7421 ) * Update intention precedence table in the docs Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	5 years ago
Hans Hasselberg	6a49a42e98	connect: support for envoy 1.13.1 and 1.12.3 (#7380 ) * setup new envoy versions for CI * bump version on the website too.	5 years ago
R.B. Boyer	6adad71125	wan federation via mesh gateways (#6884 ) This is like a Möbius strip of code due to the fact that low-level components (serf/memberlist) are connected to high-level components (the catalog and mesh-gateways) in a twisty maze of references which make it hard to dive into. With that in mind here's a high level summary of what you'll find in the patch: There are several distinct chunks of code that are affected: * new flags and config options for the server * retry join WAN is slightly different * retry join code is shared to discover primary mesh gateways from secondary datacenters * because retry join logic runs in the agent and the results of that operation for primary mesh gateways are needed in the server there are some methods like `RefreshPrimaryGatewayFallbackAddresses` that must occur at multiple layers of abstraction just to pass the data down to the right layer. * new cache type `FederationStateListMeshGatewaysName` for use in `proxycfg/xds` layers * the function signature for RPC dialing picked up a new required field (the node name of the destination) * several new RPCs for manipulating a FederationState object: `FederationState:{Apply,Get,List,ListMeshGateways}` * 3 read-only internal APIs for debugging use to invoke those RPCs from curl * raft and fsm changes to persist these FederationStates * replication for FederationStates as they are canonically stored in the Primary and replicated to the Secondaries. * a special derivative of anti-entropy that runs in secondaries to snapshot their local mesh gateway `CheckServiceNodes` and sync them into their upstream FederationState in the primary (this works in conjunction with the replication to distribute addresses for all mesh gateways in all DCs to all other DCs) * a "gateway locator" convenience object to make use of this data to choose the addresses of gateways to use for any given RPC or gossip operation to a remote DC. This gets data from the "retry join" logic in the agent and also directly calls into the FSM. * RPC (`:8300`) on the server sniffs the first byte of a new connection to determine if it's actually doing native TLS. If so it checks the ALPN header for protocol determination (just like how the existing system uses the type-byte marker). * 2 new kinds of protocols are exclusively decoded via this native TLS mechanism: one for ferrying "packet" operations (udp-like) from the gossip layer and one for "stream" operations (tcp-like). The packet operations re-use sockets (using length-prefixing) to cut down on TLS re-negotiation overhead. * the server instances specially wrap the `memberlist.NetTransport` when running with gateway federation enabled (in a `wanfed.Transport`). The general gist is that if it tries to dial a node in the SAME datacenter (deduced by looking at the suffix of the node name) there is no change. If dialing a DIFFERENT datacenter it is wrapped up in a TLS+ALPN blob and sent through some mesh gateways to eventually end up in a server's :8300 port. * a new flag when launching a mesh gateway via `consul connect envoy` to indicate that the servers are to be exposed. This sets a special service meta when registering the gateway into the catalog. * `proxycfg/xds` notice this metadata blob to activate additional watches for the FederationState objects as well as the location of all of the consul servers in that datacenter. * `xds:` if the extra metadata is in place additional clusters are defined in a DC to bulk sink all traffic to another DC's gateways. For the current datacenter we listen on a wildcard name (`server.<dc>.consul`) that load balances all servers as well as one mini-cluster per node (`<node>.server.<dc>.consul`) * the `consul tls cert create` command got a new flag (`-node`) to help create an additional SAN in certs that can be used with this flavor of federation.	5 years ago
Freddy	602aa742d8	Update namespace docs for config entries (#7420 )	5 years ago
Dane Harrigan	382d33bb7e	Update envoy.html.md.erb (#7394 ) Minor typo	5 years ago
Noel Quiles	ba9849bdf8	website:update middleman-hashicorp to 0.3.44 (#7382 )	5 years ago
Hans Hasselberg	c46e2ae59b	docs: add docs for kv_max_value_size (#7405 ) Apart from the added docs, the error messages are similar now and are pointing to the corresponding options. Fixes #6708.	5 years ago
Kim Ngo	a8f4123d37	agent/txn_endpoint: configure max txn request length (#7388 ) configure max transaction size separately from kv limit	5 years ago
Freddy	ee24f4dcc1	1.7 upgrade note (#7397 ) The Session API in Consul 1.7.0 and 1.7.1 is incompatible with prior versions of Consul. This PR adds a note to our version-specific upgrade guide to guard against users upgrading before the fix in 1.7.2 is released.	5 years ago
John Cowen	4befec8f0c	docs: Add that `response_headers` also affects the UI (#7376 )	5 years ago
Alvin Huang	a24e431c0e	update envoy doc notes (#7389 )	5 years ago
steven jacobs	ca6e866232	docs:add documentation for Linode cloud auto-join (#6719 ) The go-discover library supports Linode. This adds support for discovering other Consul agents running on Linode. Consul has supported this since [`66b8c20`][1] was merged, so this commit just updates the documentation to match current features. [1]: `66b8c20990`	5 years ago
Blake Covarrubias	ab20785210	Update Consul version on website to 1.7.1	5 years ago
Luke Kysow	01e30289d2	Docs for Consul namespaces in kube	5 years ago
Hans Hasselberg	e05ac57e8f	tls: support tls 1.3 (#7325 )	5 years ago
kaitlincarter-hc	707e06e3fe	docs: adding new guide for namespaces and service discovery (#6788 )	5 years ago
kaitlincarter-hc	e8bbd00c38	docs: setup secure namespaces (#6789 ) * Adding new guide for namespaces and ACLs * Update website/source/docs/guides/secure-namespaces.html.md Co-Authored-By: Blake Covarrubias <bcovarrubias@hashicorp.com> Co-authored-by: Hans Hasselberg <me@hans.io> Co-authored-by: Blake Covarrubias <blake.covarrubias@gmail.com>	5 years ago
Mishin Nickolay	b519cc73b5	docs: add note bout change case in config files to specific version upgrade notes (#6870 ) (#6878 )	5 years ago
Tom Downes	0cf11ec744	docs: add documentation for enabling reverse DNS lookup with systemd-resolved (#6731 ) * Remove trailing whitespace in DNS forwarding guide. * Add example for enabling reverse lookup of IP addrseses to .consul domain on systemd-resolved platforms	5 years ago
Mr.gao	bc664159ea	docs: update libraries-and-sdks.html.md (#6745 ) python-consul maintainer gone, this is my version you want to add to the recommended	5 years ago
Aleksey Stepanenko	95db3971da	docs: update connection for the openstack provider (#6776 ) The option `username` does not work. Need to use user_name with underscore > Authentication failed: Exactly one of Username and UserID must be provided for password authentication The option `user_name` works, however, it's need to use `region`, `domain_name` in additional.	5 years ago
jsosulska	42fbbd5d15	Added links to Anti-entropy guide + catalog	5 years ago
Hans Hasselberg	4fb41ba9c0	website: put a note on the website re vault with 1.7.0 and 1.6.3 (#7295 )	5 years ago
Christoph Puhl	c8466fad8c	Adjust formula for quorum size (#7286 ) Current formula for quorum size does not match numbers in table below.	5 years ago
Hans Hasselberg	cb0f94487c	config: increase http_max_conns_per_client default to 200 (#7289 )	5 years ago
Hans Hasselberg	3a15fb9dde	docs: correct envoy versions (#7266 )	5 years ago
Judith Malnick	1814e56bd6	docs: add f5 guide text (#6493 )	5 years ago
Judith Malnick	c3ccfd37fc	docs: add splitting guide (#6597 ) * add splitting guide, originially adapted from nic's blog and drafted on learn	5 years ago
David Yu	c828495a24	1.7.0 Namespaces Learn Guides Attaching learn guides associated with Namespaces release	5 years ago
hashicorp-ci	95fb95bfe6	Release v1.7.0	5 years ago
Nuno Adrego	de62daf386	docs: changed the return value from null to empty JSON list, when a session does not exist (#7232 )	5 years ago
Nicole Forrester	1cd85ab243	website: bump middleman version (#7254 )	5 years ago
Blake Covarrubias	895a8a43b2	docs: document format for TTL values in Consul config (#6693 )	5 years ago
kaitlincarter-hc	be35f68ec5	docs: adding note to ACL rules page for intentions. (#6569 )	5 years ago
Blake Covarrubias	4ea2685a7c	Fix broken link to consul-aws guide on Learn	5 years ago
Hans Hasselberg	9cb7adb304	add envoy version 1.12.2 and 1.13.0 to the matrix (#7240 ) * add 1.12.2 * add envoy 1.13.0 * Introduce -envoy-version to get 1.10.0 passing. * update old version and fix consul-exec case * add envoy_version and fix check * Update Envoy CLI tests to account for the 1.13 compatibility changes. Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com>	5 years ago
Matt Keeler	0b1902f03f	Remove the 1.7.0 beta banner on downloads page (#7253 )	5 years ago
Kit Patella	55f19a9eb2	rpc: measure blocking queries (#7224 ) * agent: measure blocking queries * agent.rpc: update docs to mention we only record blocking queries * agent.rpc: make go fmt happy * agent.rpc: fix non-atomic read and decrement with bitwise xor of uint64 0 * agent.rpc: clarify review question * agent.rpc: today I learned that one must declare all variables before interacting with goto labels * Update agent/consul/server.go agent.rpc: more precise comment on `Server.queriesBlocking` Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/agent/telemetry.html.md agent.rpc: improve queries_blocking description Co-Authored-By: Paul Banks <banks@banksco.de> * agent.rpc: fix some bugs found in review * add a note about the updated counter behavior to telemetry.md * docs: add upgrade-specific note on consul.rpc.quer{y,ies_blocking} behavior Co-authored-by: Paul Banks <banks@banksco.de>	5 years ago
Akshay Ganeshen	8beb716414	feat: support sending body in HTTP checks (#6602 )	5 years ago
danielehc	20600403b2	Adding upgrade-legacy doc (#7212 ) Addresses #7071	5 years ago
Kyle Havlovitz	88ae18a2b2	Update config entry docs for namespaces	5 years ago
Blake Covarrubias	91245622db	docs: Indent secretName and secretKey under aclSyncToken These are sub-parameters under aclSyncToken. Fix indentation so that they are properly displayed under that top-level key.	5 years ago
Fredrik Hoem Grelland	d364a64f9a	docs: namespaces has erroneous HCL example (#7228 )	5 years ago
Freddy	cb77fc6d01	Add managed service provider token (#7218 ) Stubs for enterprise-only ACL token to be used by managed service providers.	5 years ago
Luke Kysow	2169a79a7d	Helm ref docs for consul-k8s namespaces support	5 years ago
Paschalis Tsilias	a335aa57c5	Expose Envoy's /stats for statsd agents (#7173 ) * Expose Envoy /stats for statsd agents; Add testcases * Remove merge conflict leftover * Add support for prefix instead of path; Fix docstring to mirror these changes * Add new config field to docs; Add testcases to check that /stats/prometheus is exposed as well * Parametrize matchType (prefix or path) and value * Update website/source/docs/connect/proxies/envoy.md Co-Authored-By: Paul Banks <banks@banksco.de> Co-authored-by: Paul Banks <banks@banksco.de>	5 years ago
Anudeep Reddy	b5b4226d4f	[docs] Enabling connect requires server restarts (#6904 )	5 years ago
Mohammad Gufran	47cc162ca3	docs: add Flightpath to the list of community tools (#7176 )	5 years ago

1 2 3 4 5 ...

2801 Commits (646c9f5896d91da2a4b229664a152a3cc4d72274)