8305 Commits (79e882fce9c71090fb294b11e30a9d1bd5862f2a)

 

All Branches   

Search

Author	SHA1	Message	Date
RJ Spiker	79e882fce9	website - timeline component font-size adjustment	7 years ago
RJ Spiker	8c99c3258e	website - hero bg image update	7 years ago
RJ Spiker	64218ec7af	initial commit for website upgrade	7 years ago
Jack Pearkes	315cc04536	website: fix a TODO in a page description	7 years ago
Jack Pearkes	36e1dd6ffd	website: note windows support	7 years ago
Matt Keeler	98e98fa815	Remove build tags from vendored vault file to allow for this to merge properly into enterprise	7 years ago
Matt Keeler	677d6dac80	Remove x509 name constraints ... These were only added as SPIFFE intends to use the in the future but currently does not mandate their usage due to patch support in common TLS implementations and some ambiguity over how to use them with URI SAN certificates. We included them because until now everything seem fine with it, however we've found the latest version of `openssl` (1.1.0h) fails to validate our certificats if its enabled. LibreSSL as installed on OS X by default doesn’t have these issues. For now it's most compatible not to have them and later we can find ways to add constraints with wider compatibility testing.	7 years ago
Matt Keeler	163fe11101	Make sure we omit the Kind value in JSON if empty	7 years ago
Matt Keeler	01f82717b4	Vendor the vault api	7 years ago
Kyle Havlovitz	0b5d7277f9	website: fix example config in vault CA docs	7 years ago
Jack Pearkes	e4f5753e06	bump to beta4	7 years ago
Mitchell Hashimoto	4acbe3fdf0	website: add vs. Envoy page	7 years ago
Mitchell Hashimoto	e6e984a813	website: address Armon's feedback	7 years ago
Mitchell Hashimoto	834137fe55	website: remove redundant "as well"	7 years ago
Mitchell Hashimoto	7ad6f7b758	website: address pearkes feedback	7 years ago
Mitchell Hashimoto	ec1322a95d	website: address feedback	7 years ago
Mitchell Hashimoto	68826b2b76	website: istio vs. and nomad platform guide	7 years ago
Jack Pearkes	105c4763dc	update UI to latest	7 years ago
Kyle Havlovitz	3baa67cdef	connect/ca: pull the cluster ID from config during a rotation	7 years ago
Kyle Havlovitz	8c2c9705d9	connect/ca: use weak type decoding in the Vault config parsing	7 years ago
Kyle Havlovitz	b4ef7bb64d	connect/ca: leave blank root key/cert out of the default config (unnecessary)	7 years ago
Kyle Havlovitz	8e028b7dc6	website: add Vault CA provider doc sections	7 years ago
Kyle Havlovitz	050da22473	connect/ca: undo the interface changes and use sign-self-issued in Vault	7 years ago
Kyle Havlovitz	914d9e5e20	connect/ca: add leaf verify check to cross-signing tests	7 years ago
Kyle Havlovitz	bc997688e3	connect/ca: update Consul provider to use new cross-sign CSR method	7 years ago
Kyle Havlovitz	8a70ea64a6	connect/ca: update Vault provider to add cross-signing methods	7 years ago
Kyle Havlovitz	6a2fc00997	connect/ca: add URI SAN support to the Vault provider	7 years ago
Kyle Havlovitz	226a59215d	connect/ca: fix vault provider URI SANs and test	7 years ago
Kyle Havlovitz	1a8ac686b2	connect/ca: add the Vault CA provider	7 years ago
Paul Banks	51fc48e8a6	Sign certificates valid from 1 minute earlier to avoid failures caused by clock drift	7 years ago
Paul Banks	e33bfe249e	Note leadership issues in comments	7 years ago
Paul Banks	b5f24a21cb	Fix test broken by final telemetry PR change!	7 years ago
Paul Banks	e514570dfa	Actually return Intermediate certificates bundled with a leaf!	7 years ago
John Cowen	9f8b87cdda	Check for NOT connect-proxy	7 years ago
John Cowen	cc3d578271	Filter Source and Destination menus by Kind	7 years ago
Matt Keeler	e22b9c8e15	Output the service Kind in the /v1/internal/ui/services endpoint	7 years ago
Paul Banks	3a6024e1b0	Fix merge error	7 years ago
Paul Banks	17789d4fe3	register TCP check for managed proxies	7 years ago
Paul Banks	280f14d64c	Make proxy only listen after initial certs are fetched	7 years ago
John Cowen	d61a09ea28	Fix linting typo, caused the selection of future services to break	7 years ago
Paul Banks	b562b9f66a	Add proxy telemetry to docs	7 years ago
Paul Banks	420ae3df69	Limit proxy telemetry config to only be visible with authenticated with a proxy token	7 years ago
Paul Banks	597e55e8e2	Misc test fixes	7 years ago
Paul Banks	c6ef6a61c9	Refactor to use embedded struct.	7 years ago
Paul Banks	2f8c1d2059	Remove go-diff vendor as assert.JSONEq output is way better for our case	7 years ago
Paul Banks	9f559da913	Revert telemetry config changes ready for cleaner approach	7 years ago
Paul Banks	32f362bad9	StartupTelemetry => InitTelemetry	7 years ago
Paul Banks	38405bd4a9	Allow user override of proxy telemetry config	7 years ago
Paul Banks	96c416012e	Misc rebase and test fixes	7 years ago
Paul Banks	dc260f42fa	Basic proxy active conns and bandwidth telemetry	7 years ago