6a7d3c4315
Backport of Update mog version to be compatible with go 1.22 into release/1.15.x ( #21225 )
...
Manual backport of #20692 to release/1.15.x
2024-05-28 15:52:34 +00:00
faeabb217d
chore: disable CRT for inactive release (1.15) ( #21210 )
...
chore: disable CRT for inactive release
2024-05-23 13:18:11 -04:00
16aafd2342
Add helm docs update from 1.1.12 consul k8s release ( #21203 )
...
Generate helm docs from 1.1.12 of consul-k8s release
2024-05-22 14:41:34 -04:00
ad3f06a4db
changelog and version ( #21103 )
...
* update changelog
2024-05-15 17:08:01 +00:00
d1b67dc1e9
Backport of [NET-9141] ci: skip LICENSE copy for Ent linux packages into release/1.15.x ( #21062 )
...
backport of commit aef0e1ce82
2024-05-07 15:02:17 -04:00
c4a82b8497
Backport of security: fine-tune release scanner and bump coredns into release/1.15.x ( #21039 )
...
* security: fine-tune release scanner and bump coredns
---------
Co-authored-by: dduzgun-security <deniz.duzgun@hashicorp.com>
2024-05-04 00:05:53 +00:00
61cee7fa9c
Backport of add license file into release/1.15.x ( #21046 )
...
backport of commit 4a211d0f1d
2024-05-03 16:54:17 -07:00
6124e7ea08
security: bump envoy version and k8s.io/apimachinery ( #21030 )
...
* security: bump envoy version and k8s.io/apimachinery
* add changelog
2024-05-02 13:36:21 -04:00
f36ca2675e
Backport of docs: Enterprise upgrade instruction into release/1.15.x ( #21012 )
...
* backport of commit 6700968dc5efffeae316
2024-04-24 17:58:00 +03:00
a75d93e537
docs: manual backport of KV tutorial becomes usage doc ( #20994 ) ( #21007 )
...
docs: KV tutorial becomes usage doc (#20994 )
* Add KV store usage page
* nav typo
2024-04-22 10:54:59 -07:00
f70ca15cfc
Backport of test: force IPv4 on Docker 26+ to fix Envoy int tests into release/1.15.x ( #20987 )
...
backport of commit a27d118408
2024-04-17 16:14:06 -04:00
74c9dcfeb0
Backport of ci: fix Envoy int test versions into release/1.15.x ( #20965 )
...
ci: fix Envoy int test versions
Follow-up to #20956
Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
2024-04-08 22:01:19 +00:00
864491ba3b
Backport of security: ignore test and internal tool modules into release/1.15.x ( #20969 )
...
backport of commit fdf3f9b275
2024-04-08 21:47:58 +00:00
f055b05ca2
Backport of security: bump go, x/net and envoy versions into release/1.15.x ( #20962 )
...
Backport of security: bump go, x/net and envoy versions into release/1.15.x
* Bump go version
* Bump x/net
* Bump envoy version
* Add changelog
---------
Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
2024-04-08 21:34:21 +00:00
722ddb2cdb
correct dates ( #20931 )
2024-03-28 12:01:59 -07:00
8aeac55079
update changelog and version ( #20929 )
2024-03-28 11:41:55 -07:00
7d44797870
Update Dockerfile: alpine 3.19 for 1.15.x ( #20924 )
...
Update Dockerfile
2024-03-28 11:17:19 -04:00
a2abd49ffc
Update Dockerfile: backport to 1.15.x ( #20918 )
...
* Update Dockerfile
* Update Dockerfile
* Create 20897.txt
2024-03-27 18:39:57 -07:00
4fc9491999
Backport of security: triage false positive for go-jose/v3 into release/1.15.x ( #20902 )
...
backport of commit c8d6b2528c
2024-03-26 21:43:41 +00:00
2a8c9d0dc6
Backport of [NET-8368] security: bump Go version to 1.21.8 into release/1.15.x ( #20900 )
...
* backport of commit d65cacc7a660ab1568ca
2024-03-26 14:03:14 -07:00
43ecc20b08
Fix UI lint error ( #20893 )
2024-03-25 11:15:36 -07:00
59558b7022
Backport of Fix typo in ingress-gateway docs into release/1.15.x ( #20836 )
...
backport of commit c1e25c56db
2024-03-12 21:13:46 +00:00
d0afffa83d
Backport of [NET-8367] security: upgrade google.golang.org/protobuf to 1.33.0 into release/1.15.x ( #20803 )
...
* backport of commit a407616755455f67fa57
2024-03-07 00:00:44 +00:00
4a88465eba
Manual backport of [NET-6741] make: Add target for updating dependencies across all modules into release/1.15.x ( #20687 )
...
* backport of commit 6f0e24cda777f44fa878
2024-02-27 10:48:54 -06:00
5c0fcf75e2
Backport of Use correct enterprise meta on wildcard service update into release/1.15.x ( #20726 )
...
* backport of commit 94a0aa2ea7f0e1badd6f183dd2fb12
2024-02-26 12:36:38 -06:00
b251def757
Update helm docs for consul-k8s 1.1.10 release ( #20666 )
2024-02-16 12:25:24 -05:00
053e4dceba
update changelog 1.15.x ( #20634 )
...
update changelog 1.15.x
2024-02-13 17:21:04 -08:00
056068ec26
Backport of docs: document behaviour of tls.https.verify_outgoing into release/1.15.x ( #20612 )
...
backport of commit ded3c9fa12
2024-02-13 09:39:05 -08:00
50679d48fd
[NET-7948] Bump Envoy version on 1.15.x (LTS) to address multiple CVEs ( #20590 )
...
security: Bump Envoy versions to address CVEs
2024-02-12 17:09:32 -05:00
59b4c7ff4b
Backport of use go 1.21.7 into release/1.15.x ( #20557 )
...
* backport of commit 6c31fd76298620e73549
2024-02-11 18:00:18 -06:00
7e39aa3760
Backport of Decouple xds capacity controller and raft-autopilot into release/1.15.x ( #20548 )
...
* backport of commit 1668a314c6d33eda97be
2024-02-09 08:02:19 -06:00
ce4d60998c
Backport of Fix audit-log encoding issue (CC-7337) into release/1.15.x ( #20497 )
...
* no-op commit due to failed cherry-picking
* Fix audit-log encoding issue (CC-7337) (#20345 )
* add changes
* added changelog
* change update
* CE chnages
* Removed gzip size fix
* fix changelog
* Update .changelog/20345.txt
Co-authored-by: Hans Hasselberg <hans@hashicorp.com>
* Adding comments
---------
Co-authored-by: Abhishek Sahu <abhishek.sahu@hashicorp.com>
Co-authored-by: Hans Hasselberg <hans@hashicorp.com>
Co-authored-by: srahul3 <rahulsharma@hashicorp.com>
---------
Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: Ashesh Vidyut <134911583+absolutelightning@users.noreply.github.com>
Co-authored-by: Abhishek Sahu <abhishek.sahu@hashicorp.com>
Co-authored-by: Hans Hasselberg <hans@hashicorp.com>
Co-authored-by: srahul3 <rahulsharma@hashicorp.com>
2024-02-06 11:51:29 +00:00
e4d96754b2
Backport of Fix issue with persisting proxy-defaults into release/1.15.x ( #20486 )
...
Fix issue with persisting proxy-defaults
This resolves an issue introduced in hashicorp/consul#19829
where the proxy-defaults configuration entry with an HTTP protocol
cannot be updated after it has been persisted once and a router
exists. This occurs because the protocol field is not properly
pre-computed before being passed into validation functions.
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2024-02-05 16:28:06 -06:00
bde099e029
ci: sync point release branches in addition to .x ( #20290 )
...
This replicates the pattern used in `main` and `release/1.17.x`.
2024-02-05 13:42:28 -05:00
b34851b0bf
Backport of Resolve Consul DNS in OpenShift into release/1.15.x ( #20444 )
...
* backport of commit 3885ff70f797501c91855330e755971ff82ed228
2024-02-01 14:20:12 -08:00
0bfb55cad3
Backport of docs: Fix example service registration for built-in proxy into release/1.15.x ( #20348 )
...
backport of commit d5005719c0
2024-01-31 14:40:33 -08:00
9bde1300d6
Disable CICD Envoy check ( #20388 )
...
Disable Envoy version check.
The current version of this script does not work well with the LTS release having a much
longer list of supported Envoy versions than the other branches. Later on, we should
tweak this to have the expected behavior, but for now, it is being disabled so that the
CICD pipeline can complete successfully and publish images.
2024-01-29 13:00:02 -06:00
6406f8494b
Fix CICD script that checks envoy versions. ( #20385 )
2024-01-29 12:02:43 -06:00
2ca2b89ba3
Increase number of supported envoy versions in failing CICD script ( #20384 )
...
Fix CICD script that checks envoy versions.
LTS supports more than 4 envoy versions, so the script was failing.
2024-01-29 11:22:26 -06:00
f05c337770
Backport of Use mirrored image for CICD tests. into release/1.15.x ( #20381 )
...
Use mirrored image for CICD tests.
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2024-01-29 10:39:46 -06:00
e8479b8d25
Backport of Fix CICD docker image rate limits. into release/1.15.x ( #20363 )
...
Fix CICD docker image rate limits.
The docker image used in CICD was referencing `registry.k8s.io/pause:3.3`,
which appears to no longer function correctly. This commit swaps over to a
Hashicorp mirrored image that shouldn't have rate limits or disappearing
images.
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2024-01-26 20:57:16 +00:00
9de70f5e91
LTS - Add envoy support for 1.26, 1.27 and 1.28 ( #20323 )
...
* LTS - Add envoy support for 1.26, 1.27 and 1.28
2024-01-26 13:34:46 -05:00
a9dd548e10
Update version 1.15.10 dev ( #20340 )
...
* update version to 1.15.10-dev
* update changelog
2024-01-24 14:21:44 -05:00
f92d2723b0
Backport of security: fix syntax for release scan config into release/1.15.x ( #20285 )
...
backport of commit fd527e7efd
2024-01-19 12:18:23 -05:00
4290bb49ed
[NET-7339] security: update gopkg.in/yaml ( #20281 )
...
security: update gopkg.in/yaml
This addresses CVE-2022-28948 and CVE-2021-4235.
2024-01-19 16:31:31 +00:00
1f72a4e615
Backport of security: disable Vault secret scans due to false positives into release/1.15.x ( #20272 )
...
backport of commit 20ee337302
2024-01-19 14:51:54 +00:00
c0319b60ae
Backport of Fix to not create a watch to `Internal.ServiceDump` when mesh gateway is not used into release/1.15.x ( #20266 )
...
This add a fix to properly verify the gateway mode before creating a watch specific to mesh gateways. This watch have a high performance cost and when mesh gateways are not used is not used.
This also adds an optimization to only return the nodes when watching the Internal.ServiceDump RPC to avoid unnecessary disco chain compilation. As watches in proxy config only need the nodes.
* backport of commit b0ce20b5e23d4bde00cfb2c77246b9e7ab4d418dd00d9c5da4b2db3d5eb450fb45ac747b41a61c172fa0e0a62988849c90304ac54f10bc2a9dfc37f2
2024-01-19 08:18:53 -06:00
a7efdcadc3
Backport of check error in TestDNSCycleRecursorCheckAllFail before asserting response to stop panic in CI. into release/1.15.x ( #20233 )
...
check error in TestDNSCycleRecursorCheckAllFail before asserting response to stop panic in CI. (#20231 )
Co-authored-by: John Murret <john.murret@hashicorp.com>
2024-01-17 17:07:07 +00:00
ecc2f2a9f6
backport of docs: Remove ACLs section from k8s cluster peering page ( #20176 ) ( #20228 )
...
docs: Remove ACLs section from k8s cluster peering page (#20176 )
* Remove ACLs section
* Tech specs removal
2024-01-17 15:19:06 +00:00
fe9710a26f
Backport of ci: Use Consul Go version for Vault int tests into release/1.15.x ( #20221 )
...
backport of commit 9816a74b39
2024-01-17 09:18:00 -05:00
Michael Zalimeni