7951 Commits (730da74369f991185ba1aa60fb30a625946ee271)
 

Author SHA1 Message Date
Paul Banks 730da74369
Fix various test failures and vet warnings. 7 years ago
Paul Banks 1e72ad66f5
Refactor localBlockingQuery to use memdb.WatchSet. Much simpler and correct as a bonus! 7 years ago
Paul Banks 8d09381b96
Super ugly hack to get TeamCity build to work for this PR without adding a vendor that is being added elsewhere and will conflict... 7 years ago
Paul Banks d73f079d0f
Add X-Consul-ContentHash header; implement removing all proxies; add load/unload test. 7 years ago
Paul Banks 2a69663448
Agent Connect Proxy config endpoint with hash-based blocking 7 years ago
Paul Banks 3e3f0e1f31
HTTP agent registration allows proxy to be defined. 7 years ago
Paul Banks e6071051cf
Added connect proxy config and local agent state setup on boot. 7 years ago
Paul Banks 88541bba17
Add tests all the way up through the endpoints to ensure duplicate src/destination is supported and so ultimately deny/allow nesting works. 7 years ago
Paul Banks ed9f07c361
Allow duplicate source or destination, but enforce uniqueness across all four. 7 years ago
Paul Banks 10db79c8ae
Rework connect/proxy and command/connect/proxy. End to end demo working again 7 years ago
Paul Banks aa19be4651
Remove old connect client and proxy implementation 7 years ago
Paul Banks 26e65f6bfd
connect.Service based implementation after review feedback. 7 years ago
Paul Banks 69d5efdbbd
Original proxy and connect.Client implementation. Working end to end. 7 years ago
Mitchell Hashimoto 95da20ffd7
agent: rename authorize param ClientID to ClientCertURI 7 years ago
Mitchell Hashimoto 97f5414d94
api: rename Authorize field to ClientCertURI 7 years ago
Mitchell Hashimoto 9638466b88
api: fix up some comments and rename IssuedCert to LeafCert 7 years ago
Mitchell Hashimoto 4689d8373a
api: IntentionMatch 7 years ago
Mitchell Hashimoto 663a12d96b
api: starting intention endpoints, reorganize files slightly 7 years ago
Mitchell Hashimoto 263e2c7cf7
api: endpoints for working with CA roots, agent authorize, etc. 7 years ago
Mitchell Hashimoto 6e57233913
agent: add TODO for verification 7 years ago
Mitchell Hashimoto 5a47a53c70
acl: IntentionDefault => IntentionDefaultAllow 7 years ago
Mitchell Hashimoto ac72a0c5fd
agent: ACL checks for authorize, default behavior 7 years ago
Mitchell Hashimoto 6dc2db94ea
agent/structs: String format for Intention, used for logging 7 years ago
Mitchell Hashimoto fb7bccc690
agent: bolster commenting for clearer understandability 7 years ago
Mitchell Hashimoto 9a987d6452
agent: default deny on connect authorize endpoint 7 years ago
Mitchell Hashimoto 86a8ce45b9
agent: /v1/agent/connect/authorize is functional, with tests 7 years ago
Mitchell Hashimoto 3ef0b93159
agent/connect: Authorize for CertURI 7 years ago
Mitchell Hashimoto 70d1d5bf06
agent: get rid of method checks since they're done in the http layer 7 years ago
Paul Banks 125555e1aa
require -> assert until rebase 7 years ago
Paul Banks 9309422fd9
Add Connect agent, catalog and health endpoints to api Client 7 years ago
Mitchell Hashimoto 845f7cd8ad
agent/consul/state: ensure exactly one active CA exists when setting 7 years ago
Mitchell Hashimoto ffe4cdfc15
agent/connect: support any values in the URL 7 years ago
Mitchell Hashimoto 75bf0e1638
agent/connect: support SpiffeIDSigning 7 years ago
Mitchell Hashimoto 17ca8ad083
agent/connect: rename SpiffeID to CertURI 7 years ago
Mitchell Hashimoto 0cbcb07d61
agent/connect: use proper keyusage fields for CA and leaf 7 years ago
Mitchell Hashimoto 73442ada5a
agent/connect: address PR feedback for the CA.go file 7 years ago
Mitchell Hashimoto d28ee70a56
agent: implement an always-200 authorize endpoint 7 years ago
Mitchell Hashimoto a54d1af421
agent/consul: encode issued cert serial number as hex encoded 7 years ago
Mitchell Hashimoto 4210003c86
agent/structs: hide some fields from JSON 7 years ago
Mitchell Hashimoto 63d674d07d
agent: /v1/connect/ca/configuration PUT for setting configuration 7 years ago
Mitchell Hashimoto 1c3dbc83ff
agent/consul/fsm,state: snapshot/restore for CA roots 7 years ago
Mitchell Hashimoto 90f423fd02
agent/consul/fsm,state: tests for CA root related changes 7 years ago
Mitchell Hashimoto 1c72639d60
agent/consul: set more fields on the issued cert 7 years ago
Mitchell Hashimoto c2588262b7
agent: /v1/connect/ca/leaf/:service_id 7 years ago
Mitchell Hashimoto 571d9aa785
agent: CA root HTTP endpoints 7 years ago
Mitchell Hashimoto e40afd6a73
agent/consul: CAS operations for setting the CA root 7 years ago
Mitchell Hashimoto 578db06600
agent/consul: tests for CA endpoints 7 years ago
Mitchell Hashimoto 891cd22ad9
agent/consul: key the public key of the CSR, verify in test 7 years ago
Mitchell Hashimoto d768d5e9a7
agent/consul: test for ConnectCA.Sign 7 years ago
Mitchell Hashimoto f4ec28bfe3
agent/consul: basic sign endpoint not tested yet 7 years ago