10104 Commits (79e36385ce65275570c50165285e065a84a38f3b)

 

All Branches   

Search

Author	SHA1	Message	Date
hashicorp-ci	79e36385ce	Merge Consul OSS branch 'master' at commit 3f3cd9a164	5 years ago
R.B. Boyer	d4e58e9773	test: for envoy integration tests bump the time to wait for the upstream to be healthy (#6109)	5 years ago
R.B. Boyer	20caa4f744	test: for envoy integration tests, wait until 's2' is healthy in consul before interrogating envoy (#6108) ... When the envoy healthy panic threshold was explicitly disabled as part of L7 traffic management it changed how envoy decided to load balance to endpoints in a cluster. This only matters when envoy is in "panic mode" aka "when you have a bunch of unhealthy endpoints". Panic mode sends traffic to unhealthy instances in certain circumstances. Note: Prior to explicitly disabling the healthy panic threshold, the default value is 50%. What was happening is that the test harness was bringing up consul the sidecars, and the service instances all at once and sometimes the proxies wouldn't have time to be checked by consul to be labeled as 'passing' in the catalog before a round of EDS happened. The xDS server in consul effectively queries /v1/health/connect/s2 and gets 1 result, but that one result has a 'critical' check so the xDS server sends back that endpoint labeled as UNHEALTHY. Envoy sees that 100% of the endpoints in the cluster are unhealthy and would enter panic mode and still send traffic to s2. This is why the test suites PRIOR to disabling the healthy panic threshold worked. They were _incorrectly_ passing. When the healthy panic threshol is disabled, envoy never enters panic mode in this situation and thus the cluster has zero healthy endpoints so load balancing goes nowhere and the tests fail. Why does this only affect the test suites for envoy 1.8.0? My guess is that https://github.com/envoyproxy/envoy/pull/4442 was merged into the 1.9.x series and somehow that plays a role. This PR modifies the bats scripts to explicitly wait until the upstream sidecar is healthy as measured by /v1/health/connect/s2?passing BEFORE trying to interrogate envoy which should make the tests less racy.	5 years ago
Jack Pearkes	da1f0af18e	Update CHANGELOG.md	5 years ago
Jack Pearkes	df6eab83d4	website: link to beta changelog	5 years ago
Jack Pearkes	ad9dcfcfe5	website: fix use-case dropdown size	5 years ago
Jack Pearkes	6cf9abcf2f	website: remove configuration use-case	5 years ago
Jack Pearkes	81aba02015	website: better mesh call to actions	5 years ago
Jack Pearkes	12dc9019af	website: better mesh links into new docs	5 years ago
R.B. Boyer	068a069512	config entry doc snippet for mesh gateways (#6095)	5 years ago
R.B. Boyer	edd0d4be5a	Initial L7 Documentation (#6056)	5 years ago
Judith Malnick	a0ee71baf9	[docs] Guide - Connecting Services Across Datacenters (#6052) ... * add connect gateway guide * Remove stray space Co-Authored-By: Freddy <freddygv@users.noreply.github.com> * Specify stanza and exact options Co-Authored-By: Freddy <freddygv@users.noreply.github.com> * incorporate comments from freddy * integrate feedback from matt * make snippets all json * incorporate more comments from matt * added links * incorporate comments from neena on google doc draft * make learn lnks relative * clarify that gateways are new * change socat to netcat * add more description about replication token permissions * Apply suggestions from code review Co-Authored-By: Matt Keeler <mkeeler@users.noreply.github.com> * add the prerequisite to enable centralized service config * finish adding docs links	5 years ago
Matt Keeler	d4a3c0e661	Initial Mesh Gateway Docs (#6090)	5 years ago
Freddy	3f3cd9a164	Update CHANGELOG.md	5 years ago
Paul Banks	3716bac3b7	Better gateway image	5 years ago
Jack Pearkes	e453e8aabb	Putting source back into Dev Mode	5 years ago
Jack Pearkes	9013bc5199	website: changes for 1.6.0 beta (#6083) ... * website: link to 1.6.0 beta in downloads page * website: reorganize intention replication/ca federation * website: remove announcement bar * Update website/source/docs/connect/connect-internals.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * website: update homepage and service mesh page Aligning messaging to current product. * website: fix link TODOs * Add Mesh Gateway to mesh page, update use case wording	5 years ago
hashicorp-ci	83b929accf	Release v1.6.0-beta1	5 years ago
hashicorp-ci	7e379bb7f7	update bindata_assetfs.go	5 years ago
Matt Keeler	52997acb02	Update CHANGELOG.md	5 years ago
Jack Pearkes	e6f1b78efb	Make cluster names SNI always (#6081) ... * Make cluster names SNI always * Update some tests * Ensure we check for prepared query types * Use sni for route cluster names * Proper mesh gateway mode defaulting when the discovery chain is used * Ignore service splits from PatchSliceOfMaps * Update some xds golden files for proper test output * Allow for grpc/http listeners/cluster configs with the disco chain * Update stats expectation	5 years ago
hashicorp-ci	d2adfc0bda	Merge Consul OSS branch 'master' at commit c2c154eaf4	5 years ago
Judith Malnick	c2c154eaf4	[docs] Link to TLS guide in Encryption doc (#6071) ... Fixes issue #6067	5 years ago
Jack Pearkes	b8f5f08efe	Update CHANGELOG.md	5 years ago
Jack Pearkes	7d07a0b397	Update CHANGELOG.md	5 years ago
Michael Schurter	b5aab27c21	connect: allow overriding envoy listener bind_address (#6033) ... * connect: allow overriding envoy listener bind_address * Update agent/xds/config.go Co-Authored-By: Kyle Havlovitz <kylehav@gmail.com> * connect: allow overriding envoy listener bind_port * envoy: support unix sockets for grpc in bootstrap Add AgentSocket BootstrapTplArgs which if set overrides the AgentAddress and AgentPort to generate a bootstrap which points Envoy to a unix socket file instead of an ip:port. * Add a test for passing the consul addr as a unix socket * Fix config formatting for envoy bootstrap tests * Fix listeners test cases for bind addr/port * Update website/source/docs/connect/proxies/envoy.md	5 years ago
John Cowen	dcb9800442	ui: Gateway Addresses (#6075) ... - Removes 'type' icons (basically the proxy icon, not the text itself) - Add support for Mesh Gateways plus their addresses This adds a 'Mesh Gateway' type label to service and service instance pages, plus a new 'Addresses' tab if the service is a Mesh Gateway showing a table of addresses for the service - plus tests	5 years ago
Matt Keeler	3d562bee5c	Fix Internal.ServiceDump blocking (#6076) ... maxIndexWatchTxn was only watching the IndexEntry of the max index of all the entries. It needed to watch all of them regardless of which was the max. Also plumbed the query source through in the proxy config to help better track requests.	5 years ago
Matt Keeler	52c608df78	`make test-docker` (#6059) ... * Implement the test-docker make target Running tests within docker allows us to resource constrain them better to not take over our systems. Additionally it allows us to run the tests on linux instead of the host OS which often times is macOS. * Use GOMAXPROCS instead of -p * Add a comment about docker cpus	5 years ago
Matt Keeler	387a54cfaa	Don't use WatchedDatacenters in the xds code(#6068) ... * Don't use WatchedDatacenters in the xds code as that map gets nil'ed before the ConfigSnapshot is sent to the xds layer.	5 years ago
Matt Keeler	62ad0294d4	Don't use WatchedDatacenters in the xds code as thsoe get nil'ed out prior to sending to xds	5 years ago
Matt Keeler	d2b00bd591	xds message ordering (#6061) ... xds message ordering	5 years ago
hashicorp-ci	7a32c5a618	Merge Consul OSS branch 'master' at commit a58d8e91ac	5 years ago
R.B. Boyer	065550e1c5	ensure consul config write has snake case conversions for MeshGateway (#6062)	5 years ago
Matt Keeler	25f580bcaa	Fix a bunch of xds flaky tests ... The clusters/endpoints test were still relying on deterministic ordering of clusters/endpoints which cannot be relied upon due to golang purposefully not providing any guarantee about consistent interation ordering of maps. Also fixed a small bug in the connect proxy cluster generation that was causing the clusters slice to be double the size it needed to with the first half being all nil pointers.	5 years ago
Freddy	a58d8e91ac	Fix Envoy 1.10 support note (#6045)	5 years ago
Matt Keeler	3eb3ee5a15	Merge pull request #6053 from hashicorp/gateways_and_resolvers ... Integrate Mesh Gateways with ServiceResolverSubsets	5 years ago
R.B. Boyer	43770b9391	digest the proxy-defaults protocol into the graph (#6050)	5 years ago
Matt Keeler	a8e2e866e3	Update xds/proxycfg tests to use the same looking trust domain as a normal system ... This is to prevent confusion about what our SNI fields actually look like.	5 years ago
Matt Keeler	a7421c160f	Implement mesh gateway management of service subsets ... Fixup some error handling	5 years ago
Matt Keeler	3b6d5e382a	Implement caching for config entry lists ... Update agent/cache-types/config_entry.go Co-Authored-By: R.B. Boyer <public@richardboyer.net>	5 years ago
R.B. Boyer	4bdb690a25	activate most discovery chain features in xDS for envoy (#6024)	5 years ago
Matt Keeler	bdebe62fd0	Fix some tests that I broke when refactoring the ConfigSnapshot (#6051) ... * Fix some tests that I broke when refactoring the ConfigSnapshot * Make sure the MeshGateway config is added to all the right api structs * Fix some more tests	5 years ago
Pierre Souchay	fd9237a1ff	Bump timeout in TestManager_BasicLifecycle (#6030)	5 years ago
Matt Keeler	8d953f5840	Implement Mesh Gateways ... This includes both ingress and egress functionality.	5 years ago
Matt Keeler	da8db83ddf	Fix secondary dc connect CA roots watch issue ... The general problem was that a the CA config which contained the trust domain was happening outside of the blocking mechanism so if the client started the blocking query before the primary dcs roots had been set then a state trust domain was being pushed down. This was fixed here but in the future we should probably fixup the CA initialization code to not initialize the CA config twice when it doesn’t need to.	5 years ago
Matt Keeler	4bc1277315	Include a content hash of the intention for use during replication	5 years ago
Matt Keeler	747ae6bdf5	Implement intention replication and secondary CA initialization	5 years ago
Matt Keeler	3943e38133	Implement Kind based ServiceDump and caching of the ServiceDump RPC	5 years ago
Alvin Huang	ef8e5747eb	increase go test parallelism, resource_class and run tests on release branch (#2)	5 years ago