14800 Commits (7ad1fdc4408a3c29b482a48750e14bb8b08e51dc)

 

All Branches   

Search

Author	SHA1	Message	Date
Blake Covarrubias	b5b5c21654	Merge pull request #10462 from hashicorp/docs/add-ns-agent-services-9710 ... docs: Add namespace parameters to /agent/service* endpoints	3 years ago
Blake Covarrubias	ad92927e86	Merge pull request #10462 from hashicorp/docs/add-ns-agent-services-9710 ... docs: Add namespace parameters to /agent/service* endpoints	3 years ago
Blake Covarrubias	c792f3738a	docs: Update responses for /v1/session/ endpoints post 1.7 ... Update output for /v1/session/ endpoints to match output post Consul 1.7.0. Documents new `NodeChecks` and `ServiceChecks` parameters which were added in that release. Resolves #7341, resolves #10095	3 years ago
Blake Covarrubias	5376692add	docs: Update responses for /v1/session/ endpoints post 1.7 ... Update output for /v1/session/ endpoints to match output post Consul 1.7.0. Documents new `NodeChecks` and `ServiceChecks` parameters which were added in that release. Resolves #7341, resolves #10095	3 years ago
Freddy	c9349e353b	Avoid panic on concurrent writes to cached service config map (#10647) ... If multiple instances of a service are co-located on the same node then their proxies will all share a cache entry for their resolved service configuration. This is because the cache key contains the name of the watched service but does not take into account the ID of the watching proxies. This means that there will be multiple agent service manager watches that can wake up on the same cache update. These watchers then concurrently modify the value in the cache when merging the resolved config into the local proxy definitions. To avoid this concurrent map write we will only delete the key from opaque config in the local proxy definition after the merge, rather than from the cached value before the merge.	3 years ago
Blake Covarrubias	2e044acd90	website: Fix circular redirect with TLS on existing cluster ... Fix an issue where /docs/k8s/operations/tls-on-existing-cluster would never load when navigating directly to the URL because of a circular redirect.	3 years ago
Blake Covarrubias	c3509bb094	website: Fix circular redirect with TLS on existing cluster ... Fix an issue where /docs/k8s/operations/tls-on-existing-cluster would never load when navigating directly to the URL because of a circular redirect.	3 years ago
Blake Covarrubias	c469c701fe	docs: Add intentions to ACL System docs (#10323) ... Adds mention of `intentions` rules to ACL System and ACL Rules pages. Resolves #9790	3 years ago
Blake Covarrubias	d93550e21a	docs: Add intentions to ACL System docs (#10323) ... Adds mention of `intentions` rules to ACL System and ACL Rules pages. Resolves #9790	3 years ago
Blake Covarrubias	c8393cb25f	docs: Fix spelling errors across website	3 years ago
Blake Covarrubias	0ab7dd7cc1	docs: Fix spelling errors across website	3 years ago
Daniel Nephin	91962e7495	Merge pull request #10009 from hashicorp/dnephin/trim-dns-response-with-edns ... dns: properly trim response when EDNS is used	3 years ago
Mike Morris	31a9e36dd9	Merge remote-tracking branch 'origin/stable-website' into release/1.10.1	3 years ago
hc-github-team-consul-core	c800094210	Putting source back into Dev Mode	3 years ago
hc-github-team-consul-core	db839f18ba	Release v1.10.1	3 years ago
hc-github-team-consul-core	40ac83c9d3	update bindata_assetfs.go	3 years ago
Dhia Ayachi	fc38e8fba9	add changelogs for 1.10.1	3 years ago
Freddy	e3e31375c8	Merge pull request #10622 from hashicorp/vuln/validate-sans-1.10	3 years ago
freddygv	803df59268	Fixup prepared query ns defaulting	3 years ago
freddygv	066e950b7d	Add changelog entry	3 years ago
Daniel Nephin	d808d7897a	Merge pull request #10617 from hashicorp/dnephin/config-add-missing-docs ... docs: add config options that were missing	3 years ago
Daniel Nephin	0b6330928a	Merge pull request #10617 from hashicorp/dnephin/config-add-missing-docs ... docs: add config options that were missing	3 years ago
R.B. Boyer	104ee65e17	xds: ensure single L7 deny intention with default deny policy does not result in allow action (CVE-2021-36213) (#10619)	3 years ago
John Cowen	e92b9e8e82	ui: [BUGFIX] Ensure we use the ns query param name when requesting permissions (#10608) ... Previously when namespaces were enabled, we weren't requesting permission for the actively selected namespace, and instead always checking the permissions for the default namespace. This commit ensures we request permissions for the actively selected namespace.	3 years ago
John Cowen	15f6b10e4a	ui: [BUGFIX] Ensure in-folder KVs are created in the correct folder (#10569) ... When clicking to create a KV within folder name, would would be viewing a form that was a form for creating a KV in the root, which when the user clicked to save, saved the KV in the root. For the moment at least I've removed the code that strips double slashes, and whilst this isn't ideal, it looks like we've picked up one of those bugs that turns into a 'feature', and completely reworking KV to not rely on the double slashes is not really an option right now.	3 years ago
freddygv	0bf181ae55	Update golden files	3 years ago
freddygv	8e4ca495d5	Validate SANs for passthrough clusters and failovers	3 years ago
freddygv	faac20cd40	Update golden files to account for SAN validation	3 years ago
freddygv	bdacb71d22	Validate Subject Alternative Name for upstreams ... These changes ensure that the identity of services dialed is cryptographically verified. For all upstreams we validate against SPIFFE IDs in the format used by Consul's service mesh: spiffe://<trust-domain>/ns/<namespace>/dc/<datacenter>/svc/<service>	3 years ago
John Cowen	70f29c2312	ui: [BUGFIX] Fix KV Code Editor syntax loading (#10605) ... This commit adds a bit of string wrangling to avoid the keys in our javascript source file also being transformed. Additionally, whilst looking at this we decided that Maps are a better dictionary than javascript objects, so we moved to use those here also (but this doesn't affect the issue)	3 years ago
John Cowen	6a0d4358e6	ui: Show the correct 'ACLs Disabled' page when ACLs are disabled (#10604) ... Adds 'can access ACLs' which means one of two things 1. When ACLs are disabled I can access the 'please enable ACLs' page 2. When ACLs are enabled, its the same as canRead	3 years ago
Melissa Kam	7d0a1effd6	Merge pull request #10614 from hashicorp/nia/docs-0.2.1 ... nia/docs 0.2.1	3 years ago
Melissa Kam	29a677ee89	Merge pull request #10614 from hashicorp/nia/docs-0.2.1 ... nia/docs 0.2.1	3 years ago
David Yu	0324727dce	docs: Add link to learn guide on migrating ACL tokens (#10609) ... * docs: Add link to learn guide on migrating ACL tokens	3 years ago
David Yu	140fc5d449	docs: Add link to learn guide on migrating ACL tokens (#10609) ... * docs: Add link to learn guide on migrating ACL tokens	3 years ago
Iryna Shustava	ae767d9cfc	cli/sdk: Allow applying redirect-traffic rules in a provided Linux namespace (#10564)	3 years ago
Daniel Nephin	ca788e089e	Merge pull request #10579 from hashicorp/dnephin/improve-config-docs-tls ... docs: Improve TLS user documentation	3 years ago
Daniel Nephin	caeddc6aab	Merge pull request #10579 from hashicorp/dnephin/improve-config-docs-tls ... docs: Improve TLS user documentation	3 years ago
Noel Quiles	9a35e47dda	Bump hashi-stack-menu (#10599)	3 years ago
Noel Quiles	83276ded13	Bump hashi-stack-menu (#10599)	3 years ago
Curt Marker	1c86eae663	Fixed a typo that broke the example static-server deployment (#10582) ... The service account was typo'd and needs to be fixed	3 years ago
Curt Marker	f2481fbfc1	Fixed a typo that broke the example static-server deployment (#10582) ... The service account was typo'd and needs to be fixed	3 years ago
mrspanishviking	9bae67dff5	Merge pull request #10586 from hashicorp/docs-consult-license ... docs: changing license faq title to align with Nomad and Vault faq pages	3 years ago
mrspanishviking	7a812c85fd	Merge pull request #10586 from hashicorp/docs-consult-license ... docs: changing license faq title to align with Nomad and Vault faq pages	3 years ago
Evan Culver	940419aef0	Add support for returning ACL secret IDs for accessors with acl:write (#10546)	3 years ago
Daniel Nephin	fe76dc7068	Merge pull request #10552 from hashicorp/dnephin/ca-remove-rotation-period ... ca: remove unused RotationPeriod field	3 years ago
Daniel Nephin	c2b6aad251	Merge pull request #10552 from hashicorp/dnephin/ca-remove-rotation-period ... ca: remove unused RotationPeriod field	3 years ago
David Yu	3fb24c9cd4	docs: Update docs to reflect limitation in TProxy when using single Consul DC deployment with multiple k8s clusters (#10549) ... * docs: Update to reflect single Consul DC deployment with multiple k8s clusters	3 years ago
David Yu	263bfe904c	docs: Update docs to reflect limitation in TProxy when using single Consul DC deployment with multiple k8s clusters (#10549) ... * docs: Update to reflect single Consul DC deployment with multiple k8s clusters	3 years ago
John Cowen	75c7491224	ui: Don't default to the default namespace, use the token default namespace instead (#10503) ... The default namespace, and the tokens default namespace (or its origin namespace) is slightly more complicated than other things we deal with in the UI, there's plenty of info/docs on this that I've added in this PR. Previously: When a namespace was not specified in the URL, we used to default to the default namespace. When you logged in using a token we automatically forward you the namespace URL that your token originates from, so you are then using the namespace for your token by default. You can of course then edit the URL to remove the namespace portion, or perhaps revisit the UI at the root path with you token already set. In these latter cases we would show you information from the default namespace. So if you had no namespace segment/portion in the URL, we would assume default, perform actions against the default namespace and highlight the default namespace in the namespace selector menu. If you wanted to perform actions in your tokens origin namespace you would have to manually select it from the namespace selector menu. This PR: Now, when you have no namespace segment/portion in the URL, we use the token's origin namespace instead (and if you don't have a token, we then use the default namespace like it was previously) Notes/thoughts: I originally thought we were showing an incorrectly selected namespace in the namespace selector, but it also matched up with what we were doing with the API, so it was in fact correct. The issue was more that we weren't selecting the origin namespace of the token for the user when a namespace segment was omitted from the URL. Seeing as we automatically forward you to the tokens origin namespace when you log in, and we were correctly showing the namespace we were acting on when you had no namespace segment in the URL (in the previous case default), I'm not entirely sure how much of an issue this actually was. This characteristic of namespace+token+namespace is a little weird and its easy to miss a subtlety or two so I tried to add some documentation in here for future me/someone else (including some in depth code comment around one of the API endpoints where this is very subtle and very hard to miss). I'm not the greatest at words, so would be great to get some edits there if it doesn't seem clear to folks. The fact that we used to save your previous datacenter and namespace into local storage for reasons also meant the interaction here was slightly more complicated than it needed to be, so whilst we were here we rejigged things slightly to satisfy said reasons still but not use local storage (we try and grab the info from higher up). A lot of the related code here is from before we had our Routlets which I think could probably make all of this a lot less complicated, but I didn't want to do a wholesale replacement in this PR, we can save that for a separate PR on its own at some point.	3 years ago