12045 Commits (76abc184ae6a85af5821a399e7e639358ea2a369)

 

All Branches   

Search

Author	SHA1	Message	Date
Kevin Pruett	2abe9b2f50	Update Algolia CI script	4 years ago
Daniel Nephin	5247ef4c70	Remove ACLsEnabled from delegate interface ... In all cases (oss/ent, client/server) this method was returning a value from config. Since the value is consistent, it doesn't need to be part of the delegate interface.	4 years ago
Daniel Nephin	a7f69b615a	Merge pull request #8215 from hashicorp/dnephin/support-not-modified-response-server ... agent/consul: Add support for NotModified to two endpoints	4 years ago
Pierre Souchay	20d1ea7d2d	Upgrade go-connlimit to v0.3.0 / return http 429 on too many connections (#8221) ... Fixes #7527 I want to highlight this and explain what I think the implications are and make sure we are aware: * `HTTPConnStateFunc` closes the connection when it is beyond the limit. `Close` does not block. * `HTTPConnStateFuncWithDefault429Handler(10 * time.Millisecond)` blocks until the following is done (worst case): 1) `conn.SetDeadline(10*time.Millisecond)` so that 2) `conn.Write(429error)` is guaranteed to timeout after 10ms, so that the http 429 can be written and 3) `conn.Close` can happen The implication of this change is that accepting any new connection is worst case delayed by 10ms. But only after a client reached the limit already.	4 years ago
Daniel Nephin	a5e45defb1	agent/http: un-embed the HTTPServer ... The embedded HTTPServer struct is not used by the large HTTPServer struct. It is used by tests and the agent. This change is a small first step in the process of removing that field. The eventual goal is to reduce the scope of HTTPServer making it easier to test, and split into separate packages.	4 years ago
Daniel Nephin	5d36f98710	agent/consul: Add support for NotModified to two endpoints ... A query made with AllowNotModifiedResponse and a MinIndex, where the result has the same Index as MinIndex, will return an empty response with QueryMeta.NotModified set to true. Co-authored-by: Pierre Souchay <pierresouchay@users.noreply.github.com>	4 years ago
Jono Sosulska	0cd4178a4c	Fix typos on commandline flags, updated config opts (#8227) ... * Fix typos on commandline flags, updated config opts - Added anchors to https://github.com/hashicorp/consul/pull/8223 - Fix Typos Updated to include config file options as well as CLI.	4 years ago
Jeff Escalante	9f5624a1a6	remove unneeded mdx provider option	4 years ago
Jeff Escalante	7f5a1223f6	drop out unused font	4 years ago
Jeff Escalante	bcca066d80	generate readme	4 years ago
Jeff Escalante	b449d7ab5d	update dependencies, fapply upgrades, fix breaking changes	4 years ago
Blake Covarrubias	08c92ba880	docs: Fix formatting issues on built-in proxy page (#8005) ... Fix markdown formatting and display issues on built-in proxy page.	4 years ago
Rémi Lapeyre	421b9e8ef1	Fix typo in configuration documentation (#7997)	4 years ago
Matt Keeler	db387eccd6	Update CHANGELOG.md	4 years ago
Matt Keeler	f8e8f48125	Merge pull request #8211 from hashicorp/bugfix/auto-encrypt-various	4 years ago
Hans Hasselberg	1b69a24f36	Update CHANGELOG.md	4 years ago
kaitlincarter-hc	b353b5f920	update landing page links to learn to specific guides (#8214)	4 years ago
Kenia	7a1284e11b	ui: Redesign - Node service instances tab (#8204) ... * Upgrade consul-api-dobule to version 3.1.3 * Create ConsulInstaceChecks component with test * Redesign: Service Instaces tab in for a Node * Update Node tests to work with the ConsulServiceInstancesList * Style fix to the copy button in the composite-row details * Delete helper and move logic to ConsulInstanceChecks component * Delete unused component consul-node-service-list	4 years ago
Matt Keeler	3f04c4a51b	Update CHANGELOG.md	4 years ago
Matt Keeler	e0f9e4a2d9	Merge pull request #8218 from yurkeen/fix-dns-rcode	4 years ago
André	d06d9ef29e	Update lock.mdx (#8217) ... Remove duplicated `-timeout` value.	4 years ago
Hans Hasselberg	95c027a3ea	Update gopsutil (#8208) ... https://github.com/shirou/gopsutil/pull/895 is merged and fixes our problem. Time to update. Since there is no new version just yet, updating to the sha.	4 years ago
John Cowen	07b49f8887	ui: Ensure routing tab is shown when connect enabled (#8209) ... In https://github.com/hashicorp/consul/pull/8065 we attempted to reduce the amount of times that the UI requests the discovery chain endpoint when connect is disabled on a datacenter. Currently we can only tell if connect is disabled on a datacenter by detecting a 500 error from a connect related endpoint. In the above PR we mistakenly returned from a catch instead of rethrowing the error, which meant that when a none 500 error was caught the discovery chain data would be removed. Whilst at first glance this doens't seem like a big problem due to the endpoint erroring, but we also receive a 0 error when we abort endpoints during blocking queries. This means that in certain cases we can remove cached data for the discovery chain and then delay reloading it via a blocking query. This PR replaces the return with a throw, which means that everything is dealt with correctly via the blocking query error detection/logic.	4 years ago
Yury Evtikhov	10361dd210	DNS: add IsErrQueryNotFound function for easier error evaluation	4 years ago
Yury Evtikhov	8d18422f19	DNS: fix agent returning SERVFAIL where NXDOMAIN should be returned	4 years ago
Yury Evtikhov	3b4ddaaab5	DNS: add test to verify NXDOMAIN is returned when a non-existent domain is queried over RPC	4 years ago
Matt Keeler	6e7acfa618	Add an AutoEncrypt “integration” test ... Also fix a bug where Consul could segfault if TLS was enabled but no client certificate was provided. How no one has reported this as a problem I am not sure.	4 years ago
Matt Keeler	2ddcba00c6	Overwrite agent leaf cert trust domain on the servers	4 years ago
Matt Keeler	19040f1166	Store the Connect CA rate limiter on the server ... This fixes a bug where auto_encrypt was operating without utilizing a common rate limiter.	4 years ago
Matt Keeler	a5a9560bbd	Initialize the agent leaf cert cache result with a state to prevent unnecessary second certificate signing	4 years ago
Matt Keeler	39b567a55a	Fix auto_encrypt IP/DNS SANs ... The initial auto encrypt CSR wasn’t containing the user supplied IP and DNS SANs. This fixes that. Also We were configuring a default :: IP SAN. This should be ::1 instead and was fixed.	4 years ago
Davor Kapsa	b287ebc1fb	clean cli.Run error message (#8191)	4 years ago
Fatih Sarhan	f6eaf74de2	docs: Fix typo on openstack cloud-auto-join	4 years ago
Chris Piraino	ea683ebb6c	cli: Output message on success when writing/deleting entries (#7806) ... This provides a user with a better experience, knowing that the command worked appropriately. The output of the write/delete CLI commands are not going to be used in a bash script, in fact previously a success provided no ouput, so we do not have to worry about spurious text being injected into bash pipelines.	4 years ago
Kevin Pruett	8335a15b34	Merge pull request #8202 from hashicorp/pruett.algolia-index-ci ... Add Algolia indexing to CI	4 years ago
Kevin Pruett	41254a1b74	Add Algolia indexing to CI	4 years ago
John Cowen	73e8face3c	ui: Don't hide TTL check output (#8187) ... We'd assumed that TTL check outputs shouldn't be shown as it seemed like they never had outputs, but they can be submitted with notes, which are then converted into the output. This unhides the output for TTLs and treats them exactly the same as other healthchecks.	4 years ago
Seth Hoenig	95f46eb3ed	api/agent: enable setting SuccessBeforePassing and FailuresBeforeCritical in API (#7949) ... Fixes #7764 Until now these two fields could only be set through on-disk agent configuration. This change adds the fields to the agent API struct definition so that they can be set using the agent HTTP API.	4 years ago
Matt Keeler	85fd8c552f	Merge pull request #8193 from hashicorp/feature/auto-config/suppress-config-warnings	4 years ago
R.B. Boyer	75de960011	update changelog	4 years ago
R.B. Boyer	462f0f37ed	connect: various changes to make namespaces for intentions work more like for other subsystems (#8194) ... Highlights: - add new endpoint to query for intentions by exact match - using this endpoint from the CLI instead of the dump+filter approach - enforcing that OSS can only read/write intentions with a SourceNS or DestinationNS field of "default". - preexisting OSS intentions with now-invalid namespace fields will delete those intentions on initial election or for wildcard namespaces an attempt will be made to downgrade them to "default" unless one exists. - also allow the '-namespace' CLI arg on all of the intention subcommands - update lots of docs	4 years ago
Matt Keeler	be576c9737	Use the DNS and IP SANs from the auto config stanza when set	4 years ago
Matt Keeler	e8b39dd255	Overhaul the auto-config translation ... This fixes some issues around spurious warnings about using enterprise configuration in OSS.	4 years ago
Freddy	10d6e9c458	Split up unused key validation for oss/ent (#8189) ... Split up unused key validation in config entry decode for oss/ent. This is needed so that we can return an informative error in OSS if namespaces are provided.	4 years ago
Daniel Nephin	a891ee8428	Merge pull request #8176 from hashicorp/dnephin/add-linter-unparam-1 ... lint: add unparam linter and fix some of the issues	4 years ago
Freddy	70cf674d72	Merge pull request #8186 from hashicorp/docs-cleanup	4 years ago
Freddy	e10058bc3f	Update website/pages/docs/acl/auth-methods/jwt.mdx ... Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	4 years ago
Kenia	5dd923ee8b	ui: Support ingress gateways upstreams with multiple addresses (#8185) ... * Upgrade consul-api-double to version 3.1.2 * Display multiple addresses for ingress gateway upstreams	4 years ago
Matt Keeler	7041f69892	Merge pull request #8184 from hashicorp/bugfix/goroutine-leaks	4 years ago
freddygv	166da8f710	Remove remaining beta tags	4 years ago