3075 Commits (68b13f4c70371017269be09bcb49a8b5ee691fee)

Author	SHA1	Message	Date
Michael Montgomery	ba3fe0c875	Remove unneeded test	4 years ago
Matt Keeler	85e5da53d5	Special case the error returned when we have a Raft leader but are not tracking it in the ServerLookup (#9487) ... This can happen when one other node in the cluster such as a client is unable to communicate with the leader server and sees it as failed. When that happens its failing status eventually gets propagated to the other servers in the cluster and eventually this can result in RPCs returning “No cluster leader” error. That error is misleading and unhelpful for determing the root cause of the issue as its not raft stability but rather and client -> server networking issue. Therefore this commit will add a new error that will be returned in that case to differentiate between the two cases.	4 years ago
hashicorp-ci	a5bb8fc52e	auto-updated agent/uiserver/bindata_assetfs.go from commit 8c9d5ecc2	4 years ago
R.B. Boyer	d5d62d9e08	server: deletions of intentions by name using the intention API is now idempotent (#9278) ... Restoring a behavior inadvertently changed while fixing #9254	4 years ago
hashicorp-ci	e66f02541e	auto-updated agent/uiserver/bindata_assetfs.go from commit 8c0473a62	4 years ago
Michael Montgomery	e4f603dfae	Merge branch 'master' into 6074-allow-config-MaxHeaderBytes	4 years ago
Michael Montgomery	817903b925	Fixed failing tests ... Removed use of `NewTestAgent`, per review comment Removed CLI flag, per review comment Updated website documentation Added changelog entry	4 years ago
Daniel Nephin	71b82a7e5b	Maybe fix another data race in a test	4 years ago
Daniel Nephin	bae9125fc1	Fix one race caused by t.Parallel	4 years ago
hashicorp-ci	cacbff9a50	auto-updated agent/uiserver/bindata_assetfs.go from commit 99f102705	4 years ago
hashicorp-ci	9ca4e431f6	auto-updated agent/uiserver/bindata_assetfs.go from commit 25d6a1277	4 years ago
hashicorp-ci	9fc99f4ae0	auto-updated agent/uiserver/bindata_assetfs.go from commit c7d917777	4 years ago
hashicorp-ci	a05be282ad	auto-updated agent/uiserver/bindata_assetfs.go from commit 2e3a66efb	4 years ago
hashicorp-ci	1ecece3ee8	auto-updated agent/uiserver/bindata_assetfs.go from commit 635cf4dc9	4 years ago
hashicorp-ci	8e35646ba1	auto-updated agent/uiserver/bindata_assetfs.go from commit 66cc91c69	4 years ago
hashicorp-ci	744d467540	auto-updated agent/uiserver/bindata_assetfs.go from commit 0ca54c608	4 years ago
hashicorp-ci	c086f5eecb	auto-updated agent/uiserver/bindata_assetfs.go from commit 4404b4f44	4 years ago
hashicorp-ci	eb8c46c5bb	auto-updated agent/uiserver/bindata_assetfs.go from commit a919b60f5	4 years ago
hashicorp-ci	3fa218a4d2	auto-updated agent/uiserver/bindata_assetfs.go from commit e921b3cf9	4 years ago
hashicorp-ci	2cf057db55	auto-updated agent/uiserver/bindata_assetfs.go from commit 5e150d7f0	4 years ago
John Cowen	a9913b5b22	api: Ensure the internal/ui/service endpoint responds with an array (#9397) ... In some circumstances this endpoint will have no results in it (dues to ACLs, Namespaces or filtering). This ensures that the response is at least an empty array (`[]`) rather than `null`	4 years ago
hashicorp-ci	7830eb85f6	auto-updated agent/uiserver/bindata_assetfs.go from commit 9f0787197	4 years ago
hashicorp-ci	57899ba5ef	auto-updated agent/uiserver/bindata_assetfs.go from commit f111d6b3e	4 years ago
hashicorp-ci	35678670cd	auto-updated agent/uiserver/bindata_assetfs.go from commit 14d043e5f	4 years ago
hashicorp-ci	0c3db76c92	auto-updated agent/uiserver/bindata_assetfs.go from commit 4e419b9b3	4 years ago
Daniel Nephin	c15d5b0ed1	http: Check HTTPUseCache in a single place ... HTTPUseCache is only used is a gate for allowing QueryOptions.UseCache to be enabled. By moving it to the place where the query options are set, this behaviour is more obvious. Also remove parseInternal which was an alias for parse.	4 years ago
Daniel Nephin	cb3dbc92f9	Merge pull request #9340 from hashicorp/dnephin/skip-slow-tests-with-short ... testing: skip slow tests with -short	4 years ago
hashicorp-ci	2608e92763	auto-updated agent/uiserver/bindata_assetfs.go from commit 514270a41	4 years ago
hashicorp-ci	db175eaf38	auto-updated agent/uiserver/bindata_assetfs.go from commit 0f7c909f1	4 years ago
hashicorp-ci	7deddd82c8	auto-updated agent/uiserver/bindata_assetfs.go from commit 21e5a8f0f	4 years ago
R.B. Boyer	d921690bfe	acl: global tokens created by auth methods now correctly replicate to secondary datacenters (#9351) ... Previously the tokens would fail to insert into the secondary's state store because the AuthMethod field of the ACLToken did not point to a known auth method from the primary.	4 years ago
hashicorp-ci	673158416d	auto-updated agent/uiserver/bindata_assetfs.go from commit 9d8131907	4 years ago
hashicorp-ci	4dbc1b7b59	auto-updated agent/uiserver/bindata_assetfs.go from commit a78566e2d	4 years ago
hashicorp-ci	bb8e53bbf7	auto-updated agent/uiserver/bindata_assetfs.go from commit d6cb2b0d7	4 years ago
Kenia	27f6899ec8	Create consul version metric with version label (#9350) ... * create consul version metric with version label * agent/agent.go: add pre-release Version as well as label Co-Authored-By: Radha13 <kumari.radha3@gmail.com> * verion and pre-release version labels. * hyphen/- breaks prometheus * Add Prometheus gauge defintion for version metric * Add new metric to telemetry docs Co-authored-by: Radha Kumari <kumari.radha3@gmail.com> Co-authored-by: Aestek <thib.gilles@gmail.com> Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	4 years ago
hashicorp-ci	bad0ada7cb	auto-updated agent/uiserver/bindata_assetfs.go from commit 27c74f714	4 years ago
hashicorp-ci	4387740f01	auto-updated agent/uiserver/bindata_assetfs.go from commit 613be01f4	4 years ago
hashicorp-ci	67f7511ea8	auto-updated agent/uiserver/bindata_assetfs.go from commit db5283ee2	4 years ago
hashicorp-ci	9a212f13b7	auto-updated agent/uiserver/bindata_assetfs.go from commit 3be03029f	4 years ago
Daniel Nephin	b9e60c0775	testing: skip slow tests with -short ... Add a skip condition to all tests slower than 100ms. This change was made using `gotestsum tool slowest` with data from the last 3 CI runs of master. See https://github.com/gotestyourself/gotestsum#finding-and-skipping-slow-tests With this change: ``` $ time go test -count=1 -short ./agent ok github.com/hashicorp/consul/agent 0.743s real 0m4.791s $ time go test -count=1 -short ./agent/consul ok github.com/hashicorp/consul/agent/consul 4.229s real 0m8.769s ```	4 years ago
hashicorp-ci	0d35351e2d	auto-updated agent/uiserver/bindata_assetfs.go from commit 4dfa7622d	4 years ago
hashicorp-ci	76d5d98b5e	auto-updated agent/uiserver/bindata_assetfs.go from commit adbd6c0c8	4 years ago
Kyle Havlovitz	88d669c0e0	connect: Fix a case where the active root would get unset even when there wasn't a new one	4 years ago
hashicorp-ci	de2b3a11dd	auto-updated agent/uiserver/bindata_assetfs.go from commit e23b5b003	4 years ago
hashicorp-ci	b08fb88a94	auto-updated agent/uiserver/bindata_assetfs.go from commit 9ac7bc180	4 years ago
hashicorp-ci	e49bf629f8	auto-updated agent/uiserver/bindata_assetfs.go from commit a5b9ada9a	4 years ago
hashicorp-ci	2eedfd57e7	auto-updated agent/uiserver/bindata_assetfs.go from commit cf38309f6	4 years ago
Kyle Havlovitz	c4eff420be	Merge pull request #9009 from hashicorp/update-secondary-ca ... connect: Fix an issue with updating CA config in a secondary datacenter	4 years ago
Kyle Havlovitz	781cae5809	Use a buffered channel for CA intermediate renew func	4 years ago
hashicorp-ci	4279a2d7d4	auto-updated agent/uiserver/bindata_assetfs.go from commit afe0f2614	4 years ago
hashicorp-ci	70666c22bb	auto-updated agent/uiserver/bindata_assetfs.go from commit b5abbf122	4 years ago
hashicorp-ci	9b16766ffe	auto-updated agent/uiserver/bindata_assetfs.go from commit d1ebe8c14	4 years ago
hashicorp-ci	2a78aefc5a	auto-updated agent/uiserver/bindata_assetfs.go from commit f46ef3e3f	4 years ago
hashicorp-ci	cb4c3b83b9	auto-updated agent/uiserver/bindata_assetfs.go from commit a59a2f860	4 years ago
hashicorp-ci	5f5ac36375	auto-updated agent/uiserver/bindata_assetfs.go from commit 9cf30e74e	4 years ago
Daniel Nephin	9f0f2bd589	Merge pull request #9284 from hashicorp/dnephin/agent-service-register ... local: mark service as InSync when added to local agent state	4 years ago
Daniel Nephin	33b81067f8	local: mark service and checks as InSync when added ... If the existing service and checks are the same as the new registration.	4 years ago
Hans Hasselberg	44674bcdf8	fix serf_wan documentation (#9289) ... WAN config is different than LAN config, source of truth is f72d2042a8/config.go (L315-L326) and now the docs are correct.	4 years ago
hashicorp-ci	a1644351bc	auto-updated agent/uiserver/bindata_assetfs.go from commit 408174f3b	4 years ago
Daniel Nephin	08b8a9276d	Merge pull request #9247 from pierresouchay/streaming_predictible_order_for_health ... [Streaming] Predictable order for results of /health/service/:serviceName to mimic memdb	4 years ago
Pierre Souchay	76d95fd388	Applied suggestions from @dnephin ... * Renamed `cachedHealResultSorter` into `sortCheckServiceNodes` * Use `<` instead of `strings.Compare` * Single line comparison in unit test	4 years ago
R.B. Boyer	d2d1b05a4e	server: fix panic when deleting a non existent intention (#9254) ... * server: fix panic when deleting a non existent intention * add changelog * Always return an error when deleting non-existent ixn Co-authored-by: freddygv <gh@freddygv.xyz>	4 years ago
hashicorp-ci	9ccf12289a	auto-updated agent/uiserver/bindata_assetfs.go from commit 6f8b5acbe	4 years ago
hashicorp-ci	3f9d15959c	auto-updated agent/uiserver/bindata_assetfs.go from commit 9c3c7bcf3	4 years ago
Hans Hasselberg	57701695c3	add missing descriptions for metrics	4 years ago
Kit Patella	fcec25de40	add entries for missing fsm operations and mark duplicated metrics prefixes as deprecated	4 years ago
Daniel Nephin	a1e4b69527	config: remove unused const	4 years ago
Kyle Havlovitz	13c31ccfce	Clean up the logic in persistNewRootAndConfig	4 years ago
Daniel Nephin	78f767e78c	config: move testing shims to BuilderOpts ... And remove the devMode field from builder. This change helps make the Builder state more explicit by moving inputs to the BuilderOps struct, leaving only fields that can change during Builder.Build on the Builder struct.	4 years ago
Daniel Nephin	0a44906fe3	config: Use LiteralSource for some defaults ... Using the LiteralSource makes it much easier to find default values, because an IDE reports the location of a default. With an HCL string they are harder to discover. Also removes unnecessary mapstructure.Decodes of constant values.	4 years ago
Kit Patella	c6b29a8bba	Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs ... Telemetry/fix missing and stale docs	4 years ago
Pierre Souchay	45151090c1	[Streaming] Predictable order for results of /health/service/:serviceName to mimic memdb ... This ensures the result is consitent with/witout streaming Will partially fix #9239	4 years ago
Michael Montgomery	585c84e9ff	Merge branch 'master' into 6074-allow-config-MaxHeaderBytes	4 years ago
Kyle Havlovitz	0bfda4481f	Add CA server delegate interface for testing	4 years ago
Kit Patella	5c09dc322e	add telemetry and definition help entries for missing catalog and acl metrics	4 years ago
R.B. Boyer	7c7a3e5165	command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint (#9229) ... Fixes #9215	4 years ago
Kit Patella	9e54e897d7	remove stale entries and rename/define acl.resolveToken	4 years ago
hashicorp-ci	8368f65006	auto-updated agent/uiserver/bindata_assetfs.go from commit d913af2bb	4 years ago
Freddy	fd5928fa4e	Require operator:write to get Connect CA config (#9240) ... A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh. -- This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.	4 years ago
hashicorp-ci	effe235562	auto-updated agent/uiserver/bindata_assetfs.go from commit 687ce1f9c	4 years ago
Daniel Nephin	671b8cf494	Merge pull request #9224 from hashicorp/dnephin/fix-multiple-http-listeners ... agent: fix bug with multiple listeners	4 years ago
Daniel Nephin	79963be559	Use freeport ... To prevent other tests which already use freeport from flaking when port 0 steals their reserved port.	4 years ago
hashicorp-ci	b8659f77c4	auto-updated agent/uiserver/bindata_assetfs.go from commit 591a96d5b	4 years ago
hashicorp-ci	cd003a14a5	auto-updated agent/uiserver/bindata_assetfs.go from commit 1edef424a	4 years ago
Daniel Nephin	738bf9efdc	agent: fix bug with multiple listeners ... Previously the listener was being passed to a closure in a loop without capturing the loop variable. The result is only the last listener is used, so the http/https servers only listen on one address. This problem is fixed by capturing the variable by passing it into a function.	4 years ago
hashicorp-ci	b2605d90d2	auto-updated agent/uiserver/bindata_assetfs.go from commit 664f1d9aa	4 years ago
Kyle Havlovitz	9be7c6401c	connect: update some function comments in CA manager	4 years ago
Daniel Nephin	3885835e8c	acl: remove a test-only method	4 years ago
Daniel Nephin	0ee86935f0	Remove two unused delegate methods	4 years ago
Daniel Nephin	839429eb40	Merge pull request #9160 from hashicorp/dnephin/go-test-race-in-to-out-list ... ci: change go-test-race package list to exclude list	4 years ago
Matt Keeler	66fd23d67f	Refactor to call non-voting servers read replicas (#9191) ... Co-authored-by: Kit Patella <kit@jepsen.io>	4 years ago
Kit Patella	d15b6fddd3	Merge pull request #9198 from hashicorp/mkcp/telemetry/add-all-metric-definitions ... Add metric definitions for all metrics known at Consul start	4 years ago
hashicorp-ci	56dbabf67b	auto-updated agent/uiserver/bindata_assetfs.go from commit fe728855e	4 years ago
Freddy	fe728855ed	Add DC and NS support for Envoy metrics (#9207) ... This PR updates the tags that we generate for Envoy stats. Several of these come with breaking changes, since we can't keep two stats prefixes for a filter.	4 years ago
Kit Patella	8e554ee74b	Merge branch 'mkcp/telemetry/add-all-metric-definitions' of ssh://github.com/hashicorp/consul into mkcp/telemetry/add-all-metric-definitions	4 years ago
Kit Patella	ad4cebc1d8	fix some tests that were broken from the TelemetryConfig change	4 years ago
Kit Patella	fc30f07cc7	linting: sort and group import	4 years ago
Kit Patella	2fe021f03c	update runtime_test to handle PrometheusOpts expiry field change	4 years ago
Matt Keeler	748d56b8ab	Prevent panic if autopilot health is requested prior to leader establishment finishing. (#9204)	4 years ago
Kit Patella	b81edac7bb	use the MetricsPrefix to set the service name and provide as slice literal to avoid bugs from append modifying its first arg	4 years ago
Kit Patella	5e0e4098c9	push prometheus sink definiitons into prometheus.PrometheusOpts	4 years ago
Daniel Nephin	b7367467f6	Merge pull request #9114 from hashicorp/dnephin/filtering-in-stream ... stream: improve naming of Payload methods	4 years ago
Kit Patella	15af5ead0b	trim help strings to save a few bytes	4 years ago
Kit Patella	3966ecb02f	merge master	4 years ago
hashicorp-ci	a54d1069b3	auto-updated agent/uiserver/bindata_assetfs.go from commit 959974e96	4 years ago
Kit Patella	5da2f1efa8	finish adding static server metrics	4 years ago
Kyle Havlovitz	16e95f1d7b	Reorganize some CA manager code for correctness/readability	4 years ago
Kyle Havlovitz	6fba82a4fa	connect: Add CAManager for synchronizing CA operations	4 years ago
Kyle Havlovitz	af34b26221	connect: Add logic for updating secondary DC intermediate on config set	4 years ago
R.B. Boyer	9eb262252a	server: intentions CRUD requires connect to be enabled (#9194) ... Fixes #9123	4 years ago
Kit Patella	06d59c03b9	add the service name in the agent rather than in the definitions themselves	4 years ago
R.B. Boyer	c7233ba871	server: remove config entry CAS in legacy intention API bridge code (#9151) ... Change so line-item intention edits via the API are handled via the state store instead of via CAS operations. Fixes #9143	4 years ago
R.B. Boyer	c52bc632df	server: skip deleted and deleting namespaces when migrating intentions to config entries (#9186)	4 years ago
Mike Morris	7af643ac37	ci: update to Go 1.15.4 and alpine:3.12 (#9036) ... * ci: stop building darwin/386 binaries Go 1.15 drops support for 32-bit binaries on Darwin https://golang.org/doc/go1.15#darwin * tls: ConnectionState::NegotiatedProtocolIsMutual is deprecated in Go 1.15, this value is always true * correct error messages that changed slightly * Completely regenerate some TLS test data Co-authored-by: R.B. Boyer <rb@hashicorp.com>	4 years ago
hashicorp-ci	fe6b888269	auto-updated agent/uiserver/bindata_assetfs.go from commit 1059a51a3	4 years ago
hashicorp-ci	40cef22c17	auto-updated agent/uiserver/bindata_assetfs.go from commit 78b704be8	4 years ago
R.B. Boyer	c003871c54	server: break up Intention.Apply monolithic method (#9007) ... The Intention.Apply RPC is quite large, so this PR attempts to break it down into smaller functions and dissolves the pre-config-entry approach to the breakdown as it only confused things.	4 years ago
Kit Patella	24a2471029	first pass on agent-configured prometheusDefs and adding defs for every consul metric	4 years ago
Daniel Nephin	a397ec85eb	Merge pull request #9162 from hashicorp/dnephin/fix-grpc-metrics ... grpc: fix metrics	4 years ago
hashicorp-ci	1cedf812e1	auto-updated agent/uiserver/bindata_assetfs.go from commit 6b2970402	4 years ago
R.B. Boyer	61eac21f1a	agent: return the default ACL policy to callers as a header (#9101) ... Header is: X-Consul-Default-ACL-Policy=<allow|deny> This is of particular utility when fetching matching intentions, as the fallthrough for a request that doesn't match any intentions is to enforce using the default acl policy.	4 years ago
hashicorp-ci	4016918434	auto-updated agent/uiserver/bindata_assetfs.go from commit 7243f1f4f	4 years ago
Daniel Nephin	b27457dac8	ci: go-test-race switch to exclude list ... Most packages should pass the race detector. An exclude list ensures that new packages are automatically tested with -race. Also fix a couple small test races to allow more packages to be tested. Returning readyCh requires a lock because it can be set to nil, and setting it to nil will race without the lock. Move the TestServer.Listening calls around so that they properly guard setting TestServer.l. Otherwise it races. Remove t.Parallel in a small package. The entire package tests run in a few seconds, so t.Parallel does very little. In auto-config, wait for the AutoConfig.run goroutine to stop before calling readPersistedAutoConfig. Without this change there was a data race on reading ac.config.	4 years ago
Daniel Nephin	1a137c29d6	grpc: fix grpc metrics ... defaultMetrics was being set at package import time, which meant that it received an instance of the original default. But lib/telemetry.InitTelemetry sets a new global when it is called. This resulted in the metrics being sent nowhere. This commit changes defaultMetrics to be a function, so it will return the global instance when called. Since it is called after InitTelemetry it will return the correct metrics instance.	4 years ago
Matt Keeler	7ef9b04f90	Add a CLI command for retrieving the autopilot configuration. (#9142)	4 years ago
hashicorp-ci	848571a73a	auto-updated agent/uiserver/bindata_assetfs.go from commit 6423a2c10	4 years ago
Matt Keeler	71da0209bf	Add a paramter in state store methods to indicate whether a resource insertion is from a snapshot restoration (#9156) ... The Catalog, Config Entry, KV and Session resources potentially re-validate the input as its coming in. We need to prevent snapshot restoration failures due to missing namespaces or namespaces that are being deleted in enterprise.	4 years ago
hashicorp-ci	37b1ab7f49	auto-updated agent/uiserver/bindata_assetfs.go from commit e1d977138	4 years ago
Daniel Nephin	3760e3d12d	Merge pull request #9149 from joel0/wrap-errors ... Use error wrapping to preserve error type info	4 years ago
Daniel Nephin	45a9dd59b5	Merge pull request #8976 from joel0/wrap-eof ... Wrap rpc error object	4 years ago
Joel May	f600285eb4	Use error wrapping to preserve error type info	4 years ago
hashicorp-ci	77451d944e	auto-updated agent/uiserver/bindata_assetfs.go from commit e18d8e299	4 years ago
hashicorp-ci	8f834c2d21	auto-updated agent/uiserver/bindata_assetfs.go from commit fb6202929	4 years ago
hashicorp-ci	031ab3f44f	auto-updated agent/uiserver/bindata_assetfs.go from commit c8e40ee0d	4 years ago
Matt Keeler	a3a653342b	Fix a bunch of linter warnings	4 years ago
Matt Keeler	c048e86bb2	Switch to using the external autopilot module	4 years ago
hashicorp-ci	7a2c6dfd62	auto-updated agent/uiserver/bindata_assetfs.go from commit 5c0ec13fb	4 years ago
hashicorp-ci	908574058e	auto-updated agent/uiserver/bindata_assetfs.go from commit d9672bca8	4 years ago
Mike Morris	75019baadd	chore: upgrade to gopsutil/v3 (#9118) ... * deps: update golang.org/x/sys * deps: update imports to gopsutil/v3 * chore: make update-vendor	4 years ago
Daniel Nephin	fb70c8bac2	stream: document that Payload must be immutable ... If they are sent to EventPublisher.Publish. Also document that PayloadEvents is expected to come from a subscription and that it is not immutable.	4 years ago
R.B. Boyer	8baf158ea8	Revert "Add namespace support for metrics (OSS) (#9117)" (#9124) ... This reverts commit 06b3b017d3.	4 years ago
hashicorp-ci	cf537ac2f5	auto-updated agent/uiserver/bindata_assetfs.go from commit 3a68686cc	4 years ago
hashicorp-ci	24bc8451d5	auto-updated agent/uiserver/bindata_assetfs.go from commit 848f72f66	4 years ago
Freddy	06b3b017d3	Add namespace support for metrics (OSS) (#9117)	4 years ago
Daniel Nephin	43af0ba7a3	stream: rename FilterByKey	4 years ago
Daniel Nephin	868cfe1eac	stream: Add HasReadPermission to Payload ... Required now that filter is a method on PayloadEvents instead of Event	4 years ago
Daniel Nephin	36202f7938	stream: move event filtering to PayloadEvents ... Removes the weirdness around PayloadEvents.FilterByKey	4 years ago
Daniel Nephin	79b5ca1ce6	stream: Remove unused method	4 years ago
R.B. Boyer	8e616a93c1	agent: sanitize ui metrics proxy header values on agent/self endpoint (#9104)	4 years ago
Daniel Nephin	a33c50ef0d	Merge pull request #9073 from hashicorp/dnephin/backport-streaming-namespaces ... streaming: backport namespace changes	4 years ago
Daniel Nephin	c82f6ef2d8	Merge pull request #9061 from hashicorp/dnephin/event-fields ... stream: support filtering by namespace	4 years ago
hashicorp-ci	977297390c	auto-updated agent/uiserver/bindata_assetfs.go from commit 6ff094976	4 years ago
hashicorp-ci	9d15348565	auto-updated agent/uiserver/bindata_assetfs.go from commit 1ef18c4b6	4 years ago
R.B. Boyer	6ba776b4f3	agent: protect the ui metrics proxy endpoint behind ACLs (#9099) ... This ensures the metrics proxy endpoint is ACL protected behind a wildcard `service:read` and `node:read` set of rules. For Consul Enterprise these will need to span all namespaces: ``` service_prefix "" { policy = "read" } node_prefix "" { policy = "read" } namespace_prefix "" { service_prefix "" { policy = "read" } node_prefix "" { policy = "read" } } ``` This PR contains just the backend changes. The frontend changes to actually pass the consul token header to the proxy through the JS plugin will come in another PR.	4 years ago
hashicorp-ci	a2315bc839	auto-updated agent/uiserver/bindata_assetfs.go from commit 0f6c0a5c1	4 years ago
hashicorp-ci	1a5d4cfe43	auto-updated agent/uiserver/bindata_assetfs.go from commit d5d4155e1	4 years ago
hashicorp-ci	738ff1801f	auto-updated agent/uiserver/bindata_assetfs.go from commit 56c2ff56e	4 years ago
hashicorp-ci	c28f489a9a	auto-updated agent/uiserver/bindata_assetfs.go from commit bf32a1799	4 years ago
hashicorp-ci	907c4ad789	auto-updated agent/uiserver/bindata_assetfs.go from commit 314eeda95	4 years ago
R.B. Boyer	a66c4591d7	agent: introduce path allow list for requests going through the metrics proxy (#9059) ... Added a new option `ui_config.metrics_proxy.path_allowlist`. This defaults to `["/api/v1/query", "/api/v1/query_range"]` when the metrics provider is set to `prometheus`. Requests that do not use one of the allow-listed paths (via exact match) get a 403 Forbidden response instead.	4 years ago
Daniel Nephin	b532e092dc	structs: add a namespace test for CheckServiceNode.CanRead	4 years ago
Daniel Nephin	9b2fae9bac	cache-type: use namespace in tests ... to verify that the namespace is passed through correctly to the server.	4 years ago
Daniel Nephin	b95b14e168	state: test EventPayloadCheckServiceNode.FilterByKey ... Also fix a bug in that function when only one of key or namespace were the empty string.	4 years ago
Daniel Nephin	56d6079da3	stream: Add tests for filterByKey with namespace ... And fix a bug where a request with a Namespace but no Key would not be properly filtered	4 years ago
Daniel Nephin	2c00045161	stream: Move FilterByKey events to a table ... In preparation for adding new tests.	4 years ago
Daniel Nephin	43c5803a25	state: use enterprise meta for creating events	4 years ago
Daniel Nephin	0ad2406d7c	stream: include the namespace in the snap cache key ... Otherwise the wrong snapshot could be returned when the same key is used in different namespaces	4 years ago
Daniel Nephin	c42fe5ae43	subscribe: set the request namespace	4 years ago
hashicorp-ci	b3bf1229ac	auto-updated agent/uiserver/bindata_assetfs.go from commit cf2cfbaf2	4 years ago
R.B. Boyer	fa4b0854fb	state: ensure we unblock intentions queries upon the upgrade to config entries (#9062) ... 1. do a state store query to list intentions as the agent would do over in `agent/proxycfg` backing `agent/xds` 2. upgrade the database and do a fresh `service-intentions` config entry write 3. the blocking query inside of the agent cache in (1) doesn't notice (2)	4 years ago
R.B. Boyer	b24b4169e1	restore prior signature of test helper so enterprise compiles	4 years ago
hashicorp-ci	01dbf43fb1	auto-updated agent/uiserver/bindata_assetfs.go from commit 1d6961248	4 years ago
Michael Montgomery	5b6ac035ff	Resolves #6074. Adds new option to configure HTTP Server's MaxHeaderBytes with option `-http-max-header-bytes` ... Adds tests for behavior	4 years ago
Daniel Nephin	a5dd2001cf	stream: remove Event.Key ... Makes Payload a type with FilterByKey so that Payloads can implement filtering by key. With this approach we don't need to expose a Namespace field on Event, and we don't need to invest micro formats or require a bunch of code to be aware of exactly how the key field is encoded.	4 years ago
Daniel Nephin	1c094da40d	state: use go-cmp for comparison ... The output of the previous assertions made it impossible to debug the tests without code changes. With go-cmp comparing the entire slice we can see the full diffs making it easier to debug failures.	4 years ago
Daniel Nephin	68342a0cb5	proto: remove Event.Key field ... The field is never used, and the value is available from the payload.	4 years ago
Daniel Nephin	9a1e845be8	proto: remove Event.Namespace field ... All events are part of a single Topic, so we don't need this field.	4 years ago
Daniel Nephin	3dfb7c224b	stream: Use a no-op event publisher if streaming is disabled	4 years ago
Daniel Nephin	23eee604c9	store: use a ReadDB for snapshots ... to remove the cyclic dependency between the snapshot handlers and the state.Store	4 years ago
Daniel Nephin	7b9ee25956	Merge pull request #9026 from hashicorp/dnephin/streaming-without-cache-query-param ... streaming: rename config and remove requirement for cache=1	4 years ago
Daniel Nephin	477d665309	Merge pull request #8618 from hashicorp/dnephin/remove-txn-readtxn ... state: Use ReadTxn everywhere	4 years ago
Kyle Havlovitz	9f893307de	Merge pull request #9053 from hashicorp/vault-token-lookupself ... connect: Use the lookup-self endpoint for Vault token	4 years ago
Daniel Nephin	f0ac093fef	agent/grpc: add connection count metrics ... Gauge metrics are great for understanding the current state, but can somtimes hide problems if there are many disconnect/reconnects. This commit adds counter metrics for connections and streams to make it easier to see the count of newly created connections and streams.	4 years ago
Daniel Nephin	5319ba02b0	agent/grpc: rename metrics ... These new names should make it easier to add counter metics with similar prefixes	4 years ago
Daniel Nephin	c82d6aa4ff	Merge pull request #8961 from hashicorp/dnephin/grpc-resolve-node-id ... agent/grpc: fix some test flakes and handle duplicate server IDs in the pool	4 years ago
Daniel Nephin	74ac34e358	Merge pull request #8998 from hashicorp/dnephin/lib-ttlcache ... lib/ttlcache: extract a new package from agent/cache	4 years ago
Daniel Nephin	0f81915495	Merge pull request #8987 from hashicorp/dnephin/stream-filter ... streaming: apply filter to a single item	4 years ago
Daniel Nephin	8bcd5040c7	agent/grpc: Add an integration test for ClientPool with TLS ... Also deregister the resolver.Builder in tests.	4 years ago
Daniel Nephin	8a785a351c	agent/grpc: pass metrics to constructor ... Instead of referencing a package var. This does not fix the flaky test, but it seems more correct.	4 years ago
Daniel Nephin	d19657404f	agent/grpc: fix a flaky test by performing more retries ... Instead of using retry.Run, which appears to have problems in some cases where it does not emit an error message, use a for loop. Increase the number of attempts and remove any sleep, since this operation is not that expensive to do in a tight loop	4 years ago
Daniel Nephin	df405ac978	agent/grpc: remove misleading warnings from test output ... Handle shutdown properly in tests so that the tests don't warn about using a closed connection.	4 years ago
Daniel Nephin	e101aa8a74	agent/grpc: fix a flake in TestHandler_EmitsStats	4 years ago
Daniel Nephin	19da9c3a9b	agent/grpc: use a separate channel for closing the Accept ... Closing l.conns can lead to a race and a 'panic: send on closed chan' when a connection is in the middle of being handled when the server is shutting down. Found using '-race -count=800'	4 years ago
Daniel Nephin	d8299670cc	agent/grpc/resolver: namespace the server ID with the DC name ... So that if two datacenters end up with overlapping serverIDs we don't send requests to the wrong server	4 years ago
Kyle Havlovitz	f700a5707b	connect: Use the lookup-self endpoint for Vault token	4 years ago
hashicorp-ci	bea3d0fd96	auto-updated agent/uiserver/bindata_assetfs.go from commit f4208b5fb	4 years ago
hashicorp-ci	7a1538f747	auto-updated agent/uiserver/bindata_assetfs.go from commit 30da884d5	4 years ago
hashicorp-ci	b6113eba09	auto-updated agent/uiserver/bindata_assetfs.go from commit ed6a2c150	4 years ago
hashicorp-ci	6c39fcecf3	auto-updated agent/uiserver/bindata_assetfs.go from commit 827e53694	4 years ago
hashicorp-ci	5460744a95	auto-updated agent/uiserver/bindata_assetfs.go from commit 52d7283cd	4 years ago
Paul Banks	52d7283cd6	UI metrics provider dc (#9001) ... * Plumb Datacenter and Namespace to metrics provider in preparation for them being usable. * Move metrics loader/status to a new component and show reason for being disabled. * Remove stray console.log * Rebuild AssetFS to resolve conflicts * Yarn upgrade * mend	4 years ago
hashicorp-ci	f585db82cf	auto-updated agent/uiserver/bindata_assetfs.go from commit c4f027fa0	4 years ago
Daniel Nephin	bd44952c2e	streaming: disable streaming when requesting connect events ... Until the correct events are created for terminating gateways.	4 years ago
Daniel Nephin	c398a6b272	state: disable streaming connect topic	4 years ago
hashicorp-ci	9772c12426	auto-updated agent/uiserver/bindata_assetfs.go from commit 948917c6b	4 years ago
Daniel Nephin	853667e7d8	health: change the name of UseStreamingBackend config ... Remove it from the cache section, and update the docs.	4 years ago
Daniel Nephin	a62dcc9bfe	health: use streaming, even when cache=1 is not set	4 years ago
R.B. Boyer	58387fef0a	server: config entry replication now correctly uses namespaces in comparisons (#9024) ... Previously config entries sharing a kind & name but in different namespaces could occasionally cause "stuck states" in replication because the namespace fields were ignored during the differential comparison phase. Example: Two config entries written to the primary: kind=A,name=web,namespace=bar kind=A,name=web,namespace=foo Under the covers these both get saved to memdb, so they are sorted by all 3 components (kind,name,namespace) during natural iteration. This means that before the replication code does it's own incomplete sort, the underlying data IS sorted by namespace ascending (bar comes before foo). After one pass of replication the primary and secondary datacenters have the same set of config entries present. If "kind=A,name=web,namespace=bar" were to be deleted, then things get weird. Before replication the two sides look like: primary: [ kind=A,name=web,namespace=foo ] secondary: [ kind=A,name=web,namespace=bar kind=A,name=web,namespace=foo ] The differential comparison phase walks these two lists in sorted order and first compares "kind=A,name=web,namespace=foo" vs "kind=A,name=web,namespace=bar" and falsely determines they are the SAME and are thus cause an update of "kind=A,name=web,namespace=foo". Then it compares "<nothing>" with "kind=A,name=web,namespace=foo" and falsely determines that the latter should be DELETED. During reconciliation the deletes are processed before updates, and so for a brief moment in the secondary "kind=A,name=web,namespace=foo" is erroneously deleted and then immediately restored. Unfortunately after this replication phase the final state is identical to the initial state, so when it loops around again (rate limited) it repeats the same set of operations indefinitely.	4 years ago
Daniel Nephin	0f1fb24d19	state: convert the remaining functions to ReadTxn ... Required also converting some of the transaction functions to WriteTxn because TxnRO() called the same helper as TxnRW. This change allows us to return a memdb.Txn for read-only txn instead of wrapping them with state.txn.	4 years ago
Daniel Nephin	8bd1a2cd16	Merge pull request #8975 from hashicorp/dnephin/stream-close-on-unsub ... stream: close the subscription on Unsubscribe	4 years ago
Freddy	9c04cbc40f	Add HasExact to topology endpoint (#9010)	4 years ago
hashicorp-ci	46071cbb03	auto-updated agent/uiserver/bindata_assetfs.go from commit eedee07e7	4 years ago
hashicorp-ci	e236a58dba	auto-updated agent/uiserver/bindata_assetfs.go from commit 7559f64d0	4 years ago
hashicorp-ci	74b8c024e8	auto-updated agent/uiserver/bindata_assetfs.go from commit 2a8a80638	4 years ago
hashicorp-ci	a751688bc9	auto-updated agent/uiserver/bindata_assetfs.go from commit 45554e4e9	4 years ago
R.B. Boyer	a2c50d3303	connect: add support for envoy 1.16.0, drop support for 1.12.x, and bump point releases as well (#8944) ... Supported versions will be: "1.16.0", "1.15.2", "1.14.5", "1.13.6"	4 years ago
Daniel Nephin	3c52f3854b	Merge pull request #8973 from hashicorp/dnephin/resolver-balance ... agent/router: refactor calculation of delay between rebalances.	4 years ago
Daniel Nephin	fb57d9b26a	stream: close the subscription on Unsubscribe	4 years ago
Daniel Nephin	3a55c30a05	Merge pull request #8924 from ShimmerGlass/fix-sidecar-deregister-after-restart ... Fix: service LocallyRegisteredAsSidecar property is not persisted	4 years ago
Daniel Nephin	d4ae586ccb	Merge pull request #9004 from hashicorp/dnephin/dns-small-cleanup-1 ... dns: remove goto INVALID and a naked return	4 years ago
Daniel Nephin	733ce9ad4a	Merge pull request #8970 from hashicorp/dnephin/resolver-balance-test ... agent/router: improve the test for refreshServerRebalanceTimer	4 years ago
Daniel Nephin	8b601fdcac	Merge pull request #8771 from amenzhinsky/fix-grpc-use-tls-mapping ... Fix GRPCUseTLS flag HTTP API mapping	4 years ago
Daniel Nephin	9b1944dae0	dns: remove goto INVALID and a naked return ... This commit is one small step toward modernizing and making the DNSServer readable.	4 years ago
Daniel Nephin	0d4fa882b3	lib/ttlcache: unexport key and additional godoc	4 years ago
Daniel Nephin	c17baadbf8	lib/ttlcache: add a constant for NotIndexed	4 years ago
Daniel Nephin	6c09ab3dd8	cache: fix a bug with Prepopulate ... Prepopulate was setting entry.Expiry.HeapIndex to 0. Previously this would result in a call to heap.Fix(0) which wasn't correct, but was also not really a problem because at worse it would re-notify. With the recent change to extract cachettl it was changed to call Update(idx), which would have updated the wrong entry. A previous commit removed the setting of entry.Expiry so that the HeapIndex would be reported as -1, and this commit adds a test and handles the -1 heap index.	4 years ago
Daniel Nephin	bbb816aa8a	lib/ttlcache: extract package from agent/cache	4 years ago
Daniel Nephin	c4122edd22	cache: export ExpiryHeap ... and hide internal methods on an unexported type, so that when it is extrated those methods are not exported.	4 years ago
Daniel Nephin	343d133183	cache: Refactor heap.notify to make it more explicit. ... And remove duplicate notifications. Instead of performing the check in the heap implementation, check the index in the higher level interface (Add,Remove,Update) and notify if one of the relevant indexes is 0.	4 years ago
Daniel Nephin	499f2822cf	cache: Move more of the expiryLoop into the Heap	4 years ago
Daniel Nephin	2cdc90e01b	cache: extract cache eviction heap ... Start creating an interface that doesn't require using heap and hides more of the entry internals.	4 years ago
Daniel Nephin	3c8929c7e1	streaming: apply filter to a single item ... Instead of the whole map. This should save a lot of time performing reflecting on a large map. The filter does not change, so there is no reason to re-apply it to older entries.	4 years ago
hashicorp-ci	6b68e1c997	auto-updated agent/uiserver/bindata_assetfs.go from commit 2773daedc	4 years ago
hashicorp-ci	13c06ba8bc	auto-updated agent/uiserver/bindata_assetfs.go from commit b24c2227d	4 years ago
hashicorp-ci	6513faf14c	auto-updated agent/uiserver/bindata_assetfs.go from commit 02dcd422f	4 years ago
hashicorp-ci	8ff996145a	auto-updated agent/uiserver/bindata_assetfs.go from commit bf8bb7415	4 years ago
Joel May	8c6d6648cd	Wrap rpc error object	4 years ago
Daniel Nephin	0003720f78	agent/router: refactor calculation of delay between rebalances. ... This change attempts to make the delay logic more obvious by: * remove indirection, inline a bunch of function calls * move all the code and constants next to each other * replace the two constant values with a single value * reword the comments.	4 years ago
Daniel Nephin	119c446cf2	agent/router: Add bounds test cases	4 years ago
Daniel Nephin	12e174900b	router: organize the test by number of servers ... And adddd some additional cases to show where the minimum value stops being used	4 years ago
Daniel Nephin	8697cc2b45	router: make refreshServerRebalanceTimer test a lot more strict	4 years ago
hashicorp-ci	40c16f6ee4	auto-updated agent/uiserver/bindata_assetfs.go from commit d08e13e5b	4 years ago
hashicorp-ci	55c89133ba	auto-updated agent/uiserver/bindata_assetfs.go from commit 5fd79ba40	4 years ago
Mathilde Gilles	1c8369b3c3	Fix: service LocallyRegisteredAsSidecar property is not persisted ... When a service is deregistered, we check whever matching services were registered as sidecar along with it and deregister them as well. To determine if a service is indeed a sidecar we check the structs.ServiceNode.LocallyRegisteredAsSidecar property. However, to avoid interal API leakage, it is excluded from JSON serialization, meaning it is not persisted to disk either. When the agent is restarted, this property lost and sidecars are no longer deregistered along with their parent service. To fix this, we now specifically save this property in the persisted service file.	4 years ago
hashicorp-ci	5ede07e0e7	auto-updated agent/uiserver/bindata_assetfs.go from commit 7afcd7755	4 years ago
Mike Morris	9455805ceb	chore: regenerate bindata_assetfs	4 years ago
Mike Morris	f3f6e57ed6	Merge branch 'master' into release/1.9.0-beta1	4 years ago
hashicorp-ci	700c163ed3	update bindata_assetfs.go	4 years ago
hashicorp-ci	564ab4146e	auto-updated agent/uiserver/bindata_assetfs.go from commit 868cd47a6	4 years ago
Pierre Souchay	9b7ed75552	Consul Service meta wrongly computes and exposes non_voter meta (#8731) ... * Consul Service meta wrongly computes and exposes non_voter meta In Serf Tags, entreprise members being non-voters use the tag `nonvoter=1`, not `non_voter = false`, so non-voters in members were wrongly displayed as voter. Demonstration: ``` consul members -detailed|grep voter consul20-hk5 10.200.100.110:8301 alive acls=1,build=1.8.4+ent,dc=hk5,expect=3,ft_fs=1,ft_ns=1,id=xxxxxxxx-5629-08f2-3a79-10a1ab3849d5,nonvoter=1,port=8300,raft_vsn=3,role=consul,segment=<all>,use_tls=1,vsn=2,vsn_max=3,vsn_min=2,wan_join_port=8302 ``` * Added changelog * Added changelog entry	4 years ago
hashicorp-ci	b73dea7942	auto-updated agent/uiserver/bindata_assetfs.go from commit 851705e93	4 years ago
hashicorp-ci	4f00a02737	auto-updated agent/uiserver/bindata_assetfs.go from commit 27048a061	4 years ago
Paul Banks	27048a0612	Add metrics rendering to the new topology view. (#8858) ... * Remove unused StatsCard component * Create Card and Stats contextual components with styling * Send endpoint, item, and protocol to Stats as props * WIP basic plumbing for metrics in Ember * WIP metrics data source now works for different protocols and produces reasonable mock responses * WIP sparkline component * Mostly working metrics and graphs in topology * Fix date in tooltip to actually be correct * Clean up console.log * Add loading frame and create a style sheet for Stats * Various polish fixes: - Loading state for graph - Added fake latency cookie value to test loading - If metrics provider has no series/stats for the service show something that doesn't look broken - Graph hover works right to the edge now - Stats boxes now wrap so they are either shown or not as will fit not cut off - Graph resizes when browser window size changes - Some tweaks to number formats and stat metrics to make them more compact/useful * Thread Protocol through topology model correctly * Rebuild assetfs * Fix failing tests and remove stats-card now it's changed and become different * Fix merge conflict * Update api doublt * more merge fixes * Add data-permission and id attr to Card * Run JS linter * Move things around so the tests run with everything available * Get tests passing: 1. Remove fakeLatency setTimeout (will be replaced with CONSUL_LATENCY in mocks) 2. Make sure any event handlers are removed * Make sure the Consul/scripts are available before the app * Make sure interval gets set if there is no cookie value * Upgrade mocks so we can use CONSUL_LATENCY * Fix handling of no series values from Prometheus * Update assetfs and fix a comment * Rebase and rebuild assetfs; fix tcp metric series units to be bits not bytes * Rebuild assetfs * Hide stats when provider is not configured Co-authored-by: kenia <keniavalladarez@gmail.com> Co-authored-by: John Cowen <jcowen@hashicorp.com>	4 years ago
s-christoff	9bb348c6c7	Enhance the output of consul snapshot inspect (#8787)	4 years ago
Kyle Havlovitz	ff12fc9f38	Stop intermediate renew routine on leader stop	4 years ago
Kyle Havlovitz	e5ab1b45bc	Merge pull request #8784 from hashicorp/renew-intermediate-primary ... connect: Enable renewing the intermediate cert in the primary DC	4 years ago
hashicorp-ci	45c194f21b	auto-updated agent/uiserver/bindata_assetfs.go from commit 766b28b8e	4 years ago
Daniel Nephin	ea77eccb14	Merge pull request #8825 from hashicorp/streaming/add-config ... streaming: add config and docs	4 years ago
Daniel Nephin	e7d505dc33	config: add field for enabling streaming in the client ... agent: register the new streaming cache-type	4 years ago
Daniel Nephin	0d653b184b	Merge pull request #8893 from hashicorp/dnephin/add-steps-to-subscribe-tests ... subscribe: add steps to long test cases, and add new cases for converting Events	4 years ago
Daniel Nephin	8e8ba6301d	Merge pull request #8896 from hashicorp/dnephin/go-test-race-more-pkgs ... ci: go test -race more packages	4 years ago
Chris Piraino	30540e406b	Emit service usage metrics with correct labeling strategy (#8856) ... Previously, we would emit service usage metrics both with and without a namespace label attached. This is problematic in the case when you want to aggregate metrics together, i.e. "sum(consul.state.services)". This would cause services to be counted twice in that aggregate, once via the metric emitted with a namespace label, and once in the metric emited without any namespace label.	4 years ago
Kyle Havlovitz	876500e0dc	Fix intermediate refresh test comments	4 years ago
Matt Keeler	0d8bf9c62c	Remove oss/ent divergence of runtime_test.go (#8903)	4 years ago
Matt Keeler	8f890bc027	Add capability for the v1/connect/ca/roots endpoint to return a PEM encoded certificate chain (#8774) ... Co-authored-by: R.B. Boyer <rb@hashicorp.com>	4 years ago
R.B. Boyer	e113dc0fe2	upstream some differences from enterprise (#8902)	4 years ago
hashicorp-ci	19abd50412	auto-updated agent/uiserver/bindata_assetfs.go from commit b6f686fec	4 years ago
R.B. Boyer	b6f686fecb	uiserver: upstream refactors done elsewhere (#8891)	4 years ago
Kyle Havlovitz	01ce9f5b18	Update CI for leader renew CA test using Vault	4 years ago
Kyle Havlovitz	4fc0f6d9a4	Merge branch 'master' into renew-intermediate-primary	4 years ago
Kyle Havlovitz	e13f4af06b	connect: Check for expired root cert when cross-signing	4 years ago
Paul Banks	f11b759ddf	Actually proxy the query string too	4 years ago
Daniel Nephin	3ff6c5b3d3	cache-types: skip tests with races	4 years ago
Daniel Nephin	af8a617797	grpc: fix data rate in stats handler test	4 years ago
Freddy	13df5d5bf8	Add protocol to the topology endpoint response (#8868)	4 years ago
Daniel Nephin	c5d57c9f07	subscribe: add test cases for newEventFromStreamEvent	4 years ago
Kit Patella	adeabf2399	Merge pull request #8877 from hashicorp/mkcp/telemetry/consul.api.http ... Add flag for disabling 1.9 metrics backwards compatibility and warnings when set to default	4 years ago
R.B. Boyer	46a4ef7248	agent: allow the /v1/connect/intentions/match endpoint to use the agent cache (#8875) ... This is the recommended proxy integration API for listing intentions which should not require an active connection to the servers to resolve after the initial cache filling.	4 years ago
Daniel Nephin	f185124320	subscribe: Add steps to rpc/subscribe tests ... To make them easier to follow	4 years ago
hashicorp-ci	de99c78f14	auto-updated agent/uiserver/bindata_assetfs.go from commit 13dfde75a	4 years ago
Matt Keeler	38f5ddce2a	Add per-agent reconnect timeouts (#8781) ... This allows for client agent to be run in a more stateless manner where they may be abruptly terminated and not expected to come back. If advertising a per-agent reconnect timeout using the advertise_reconnect_timeout configuration when that agent leaves, other agents will wait only that amount of time for the agent to come back before reaping it. This has the advantageous side effect of causing servers to deregister the node/services/checks for that agent sooner than if the global reconnect_timeout was used.	4 years ago
Paul Banks	332477f24c	Add /v1/internal/ui/metrics-proxy API endpoint that proxies to a configured metrics provider backend.	4 years ago
Paul Banks	80910b46f3	Fix merge conflicts	4 years ago
Daniel Nephin	b93577c94f	config: add field for enabling streaming RPC endpoint	4 years ago
Daniel Nephin	b5b790d4c0	streaming: Use a shorter LastGetTTL for the cache	4 years ago
hashicorp-ci	fc6a7df5f6	auto-updated agent/uiserver/bindata_assetfs.go from commit b373456c7	4 years ago
Freddy	164ce57db2	Support ingress gateways in mesh viz endpoint (#8864) ... Co-authored-by: R.B. Boyer <rb@hashicorp.com>	4 years ago
hashicorp-ci	418fe6ba32	auto-updated agent/uiserver/bindata_assetfs.go from commit ef7b1f8a4	4 years ago
hashicorp-ci	12e735dbca	auto-updated agent/uiserver/bindata_assetfs.go from commit d849f025c	4 years ago
Daniel Nephin	fcaf362c9f	Merge pull request #8841 from hashicorp/streaming/materialize-view-fix-service-unique-id ... streaming: Use an ID that includes namespace to store services in the materialized view	4 years ago
Daniel Nephin	2513f42c68	Merge pull request #8809 from hashicorp/streaming/materialize-view ... Add StreamingHealthServices cache-type	4 years ago
Daniel Nephin	b103568e98	Merge pull request #8818 from hashicorp/streaming/add-subscribe-service-batch-events ... stream: handle batch events as a special case of Event	4 years ago
Daniel Nephin	da6400192b	Merge pull request #8768 from hashicorp/streaming/add-subscribe-service ... subscribe: add subscribe service for streaming change events	4 years ago
Freddy	da91e999f6	Return intention info in svc topology endpoint (#8853)	4 years ago
Kit Patella	7fe2f80b4b	add config flag to disable 1.9 metrics backwards compatibility. Add warnings on start and reload on default value	4 years ago
Daniel Nephin	21c21191f4	structs: add CheckServiceNode.CanRead ... And use it from the subscribe endpoint.	4 years ago
hashicorp-ci	8655b24639	auto-updated agent/uiserver/bindata_assetfs.go from commit 0d0de4309	4 years ago
hashicorp-ci	eb4bc23a03	auto-updated agent/uiserver/bindata_assetfs.go from commit a61b6c53d	4 years ago
hashicorp-ci	aa0f5ff839	auto-updated agent/uiserver/bindata_assetfs.go from commit 222555c4c	4 years ago
R.B. Boyer	1b413b0444	connect: support defining intentions using layer 7 criteria (#8839) ... Extend Consul’s intentions model to allow for request-based access control enforcement for HTTP-like protocols in addition to the existing connection-based enforcement for unspecified protocols (e.g. tcp).	4 years ago
Daniel Nephin	8b887af0d3	streaming: store services with a unique ID that includes namespace	4 years ago
R.B. Boyer	a2a8e9c783	connect: intentions are now managed as a new config entry kind "service-intentions" (#8834) ... - Upgrade the ConfigEntry.ListAll RPC to be kind-aware so that older copies of consul will not see new config entries it doesn't understand replicate down. - Add shim conversion code so that the old API/CLI method of interacting with intentions will continue to work so long as none of these are edited via config entry endpoints. Almost all of the read-only APIs will continue to function indefinitely. - Add new APIs that operate on individual intentions without IDs so that the UI doesn't need to implement CAS operations. - Add a new serf feature flag indicating support for intentions-as-config-entries. - The old line-item intentions way of interacting with the state store will transparently flip between the legacy memdb table and the config entry representations so that readers will never see a hiccup during migration where the results are incomplete. It uses a piece of system metadata to control the flip. - The primary datacenter will begin migrating intentions into config entries on startup once all servers in the datacenter are on a version of Consul with the intentions-as-config-entries feature flag. When it is complete the old state store representations will be cleared. We also record a piece of system metadata indicating this has occurred. We use this metadata to skip ALL of this code the next time the leader starts up. - The secondary datacenters continue to run the old intentions replicator until all servers in the secondary DC and primary DC support intentions-as-config-entries (via serf flag). Once this condition it met the old intentions replicator ceases. - The secondary datacenters replicate the new config entries as they are migrated in the primary. When they detect that the primary has zeroed it's old state store table it waits until all config entries up to that point are replicated and then zeroes its own copy of the old state store table. We also record a piece of system metadata indicating this has occurred. We use this metadata to skip ALL of this code the next time the leader starts up.	4 years ago
Daniel Nephin	5972bdc87c	streaming: improve godoc for cache-type ... And fix a bug where any error that implemented the temporary interface was considered a temporary error, even when the method would return false.	4 years ago
Daniel Nephin	d0b87cd5d0	submatview: remove notifyUpdateLocked from reset ... This call appears to only be necessary because reset() was called from NewMaterializer. This commit has the constructor set a default value for updateCh, and removes both the call to reset() from New(), and the call to notifyUpdateLocked() from reset(). This should ensure that we do not notify the Fetch() call before we have new values to report.	4 years ago
Daniel Nephin	5eab1d8cef	submatview: remove method receiver from handlers	4 years ago
Daniel Nephin	3fa08beecf	submatview: add a test for handling of NewSnapshotToFollow ... Also add some godoc Rename some vars and functions Fix a data race in the new cache test for entry closing.	4 years ago
Daniel Nephin	534d8b45bb	submatview: refactor Materializer ... Refactor of Materializer.Run Use handlers to manage state in Materializer Rename Materializer receiver rename m.l to m.lock, and flip some conditionals to remove the negative. Improve godoc, rename Deps, move resetErr, and pass err into notifyUpdate Update for NewSnapshotToFollow events Refactor to move context cancel out of Materializer	4 years ago
Daniel Nephin	e849f6d7ac	submatview: Move the 'use materialize from result.State' logic ... No need to do all this other work if we have one already. This logic moved closer to this call site 3 times during the process of refactoring.	4 years ago
Daniel Nephin	edf30b2714	submatview: Move Materializer to submatview package	4 years ago
Daniel Nephin	ed45957ffb	submatview: Refactor MaterializeView ... Replace InitFilter with Reset. Removes the need to store a fatalErr and the cache-type, and removes the need to recreate the filter each time. Pass dependencies into MaterializedView. Remove context from MaterializedView. Rename state to view. Rename MaterialziedView to Materialzier. Rename to NewMaterializer Pass in retry.Waiter	4 years ago
Daniel Nephin	b576a2d3c7	cache-types: Update Streaming health cache-type ... To use latest protobuf types	4 years ago
Daniel Nephin	132b76acef	agent/cache: Add cache-type and materialized view for streaming health ... Extracted from d97412ce4c Co-authored-by: Paul Banks <banks@banksco.de>	4 years ago
Daniel Nephin	b27068b72a	stream: Return a single event from a subscription.Next ... Handle batch events as a single event	4 years ago
Daniel Nephin	f5d11562f2	subscribe: update to use NewSnapshotToFollow event	4 years ago
Daniel Nephin	e3290f5971	Move agent/subscribe -> agent/rpc/subscribe	4 years ago
Daniel Nephin	dbb8bd679f	subscirbe: extract streamID and logging from Subscribe ... By extracting all of the tracing logic the core logic of the Subscribe endpoint is much easier to read.	4 years ago
Daniel Nephin	9e4ebacb05	subscribe: add integration test for acl token updates	4 years ago
Daniel Nephin	39beed0af6	subscribe: add integration test for filtering events by acl	4 years ago
Daniel Nephin	083f4e8f57	subscribe: Add an integration test for forward to DC	4 years ago
Daniel Nephin	013ababda4	subscribe: add first integration test for Server	4 years ago
Daniel Nephin	d0256a0c07	subscribe: add a stateless subscribe service for the gRPC server ... With a Backend that provides access to the necessary dependencies.	4 years ago
Daniel Nephin	f4ea3066fb	subscribe: add commented out test cases ... Co-authored-by: Paul Banks <banks@banksco.de>	4 years ago
Daniel Nephin	106d781dc9	subscribe: add initial impl from streaming-rpc-final branch ... Co-authored-by: Paul Banks <banks@banksco.de>	4 years ago
Daniel Nephin	364f6589c8	Merge pull request #8799 from hashicorp/streaming/rename-framing-events ... stream: remove EndOfEmptySnapshot, add NewSnapshotToFollow	4 years ago
Daniel Nephin	a5c50c982d	Merge pull request #8806 from hashicorp/dnephin/service-health-interface ... rpcclient: Add health.Client and use it in http and dns	4 years ago
R.B. Boyer	4998a08c56	server: create new memdb table for storing system metadata (#8703) ... This adds a new very tiny memdb table and corresponding raft operation for updating a very small effective map[string]string collection of "system metadata". This can persistently record a fact about the Consul state machine itself. The first use of this feature will come in a later PR.	4 years ago
hashicorp-ci	356998d91e	auto-updated agent/uiserver/bindata_assetfs.go from commit a7038b48c	4 years ago
hashicorp-ci	bc5ca8b638	auto-updated agent/uiserver/bindata_assetfs.go from commit 5a39be47d	4 years ago
hashicorp-ci	36d219e2cc	auto-updated agent/uiserver/bindata_assetfs.go from commit 76d3909f3	4 years ago
hashicorp-ci	4c9630ffad	auto-updated agent/uiserver/bindata_assetfs.go from commit e4a0dcf10	4 years ago
Freddy	22062ba9da	Add default meta to test assertion (#8824)	4 years ago
Daniel Nephin	5a5fd4f0b1	Merge pull request #8802 from hashicorp/dnephin/extract-lib-retry ... lib/retry - extract a new package from lib/retry.go	4 years ago
hashicorp-ci	3e9bd96c0a	auto-updated agent/uiserver/bindata_assetfs.go from commit f26201a7a	4 years ago
freddygv	413a894a1a	Do not evaluate discovery chain for topology upstreams	4 years ago
freddygv	cf7b7fcdd6	Single DB txn for ServiceTopology and other PR comments	4 years ago
freddygv	7c26a71b4b	Add topology HTTP endpoint	4 years ago
freddygv	dbbf6b2e46	Add topology RPC endpoint	4 years ago
freddygv	98c81976f5	Add topology ACL filter	4 years ago
freddygv	f906b94351	Add func to combine up+downstream queries	4 years ago
freddygv	5c913ec312	factor in discovery chain when querying up/downstreams	4 years ago
freddygv	b012d8374e	support querying upstreams/downstreams from registrations	4 years ago
freddygv	a86cf88a4a	Add method for downstreams from disco chain	4 years ago
hashicorp-ci	896d143647	auto-updated agent/uiserver/bindata_assetfs.go from commit 3a89c7d23	4 years ago
hashicorp-ci	bf2b52f880	auto-updated agent/uiserver/bindata_assetfs.go from commit dfe57406d	4 years ago
hashicorp-ci	81baad4038	auto-updated agent/uiserver/bindata_assetfs.go from commit b871837ee	4 years ago
Daniel Nephin	529f252d5c	rpcclient: Add health.Client and use it in http and dns ... This new package provides a client agent implementation of an interface for fetching the health of services. This approach has a number of benefits: 1. It provides a much more explicit interface. Instead of everything dependency on `RPC()` and `Cache.Get()` for many unrelated things they can depend on a type that are named according to the behaviour it provides. 2. It gives us a single place to vary the behaviour and migrate to a new form of RPC (gRPC). The current implementation has two options (cache, or direct RPC), and in the future we will have more. It is also a great opporunity to start adding `context.Context` args to these operations, which in the future will allow us to cancel the operations. 3. As a concequence of the first, in the Server agent where we make these calls we can replace the current in-memory RPC calls with a thin adapter for the real method. This removes the `net/rpc` machinery from the call in places where it is not needed. This new package is quite small right now, but I think we can expect it to grow to a more reasonable size as other RPC calls are replaced. This change also happens to replace two very similar implementations with a single implementation.	4 years ago
Daniel Nephin	e54567223b	lib/retry: Refactor to reduce the interface surface ... Reduce Jitter to one function Rename NewRetryWaiter Fix a bug in calculateWait where maxWait was applied before jitter, which would make it possible to wait longer than maxWait.	4 years ago
Daniel Nephin	ca26dfb4a2	lib/retry: extract a new package from lib	4 years ago
Kit Patella	f5c51ae13b	remove consul.api.http from filtered metric prefixes	4 years ago
Kit Patella	52451cf846	Merge pull request #8271 from coignetp/http-metrics-label ... Use method and path as labels for http metrics	4 years ago