20947 Commits (7d366bb8d4b5b09a0b60149fdcb72014b1777f0b)

 

All Branches   

Search

Author	SHA1	Message	Date
Michael Zalimeni	7d366bb8d4	tmp: test review suggestions	12 months ago
Michael Zalimeni	081de1a170	fixup: review feedback for release scans	12 months ago
Michael Zalimeni	e9555319d6	fixup: review feedback for new scans	12 months ago
Michael Zalimeni	527a7ce45d	security: run security scans on main and release branches	12 months ago
Michael Zalimeni	bbfb381534	security: re-enable security scan release block ... This was previously disabled due to an unresolved false-positive CVE. Re-enabling both secrets and OSV + Go Modules scanning, which per our current scan results should not be a blocker to future releases.	12 months ago
aahel	ae998a698a	added computed failover policy resource (#19975)	12 months ago
wangxinyi7	cae23821dc	update changelog (#19966)	12 months ago
Derek Menteer	bbdbf3e4f8	Fix bug with prepared queries using sameness-groups. (#19970) ... This commit fixes an issue where the partition was not properly set on the peering query failover target created from sameness-groups. Before this change, it was always empty, meaning that the data would be queried with respect to the default partition always. This resulted in a situation where a PQ that was attempting to use a sameness-group for failover would select peers from the default partition, rather than the partition of the sameness-group itself.	12 months ago
Michael Zalimeni	79e02f8a89	ci: upload test results to DataDog on test failure (#19956) ... Due to the unintuitive behavior of GHA w.r.t. implicit status check `success()`, test results were only being uploaded on success (failures presumably came from retried tests that passed).	12 months ago
Nathan Coleman	02d4520235	Fix typo in service-defaults documentation (#19957)	12 months ago
John Murret	83cbe15b44	cli: Deprecate the `-admin-access-log-path` flag from `consul connect envoy` command in favor of: `-admin-access-log-config`. (#19943) ... * cli: Deprecate the `-admin-access-log-path` flag from `consul connect envoy` command in favor of: `-admin-access-log-config`. * fix changelog * add in documentation change.	12 months ago
John Murret	a995505976	NET-6317 - update usage of deprecated fields: http2_protocol_options and access_log_path (#19940) ... * updating usage of http2_protocol_options and access_log_path * add changelog * update template for AdminAccessLogConfig * remove mucking with AdminAccessLogConfig	12 months ago
natemollica-dev	afc6fe8308	Update telemetry.mdx RPC Metrics (#19593) ... * Update telemetry.mdx RPC Metrics Update Server Workload telemetry section to demonstrate explicitly enabling metric emission as they're [default disabled](f5bf256425/agent/config/builder.go (L2763C1-L2763C1)). * Update telemetry.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Update telemetry.mdx Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> --------- Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	12 months ago
Tauhid Anjum	0250e230a3	NET-6785: updating peering docs to include stream status and remote data (#19929) ... Updating peering docs to include stream status and remote data	12 months ago
aahel	a6496898de	added tenancy to TestBuildL4TrafficPermissions (#19932)	12 months ago
cskh	33a90edfab	Upgrade test(LTS): use network area to federate cluster (#19934) ... - Join areas - wait for members alive and validate cross area service discovery	12 months ago
Ashesh Vidyut	3443db7885	NET 6762 (#19931) ... NET-6762	12 months ago
Matt Keeler	123bc95e1a	Add Common Controller Caching Infrastructure (#19767) ... * Add Common Controller Caching Infrastructure	12 months ago
Jeff Boruszak	c870c00e70	docs: service rate limiting examples (#19925) ... * Include examples on usage page. * Description/example alignment	12 months ago
Semir Patel	69e3f93ee8	resource: add partition resource to proto-public to keep ENT and CE in sync (#19920)	12 months ago
John Murret	a5d5fd348b	fix actions to no longer use envoy 1.24.x to match supported versions. (#19918)	12 months ago
Valeriia Ruban	d7e0fca28b	fix: token list in Role details page is updated with tokens linked to… (#19912)	12 months ago
Tyler Wendlandt	e8164c7c04	NET-6900: stop reconciling services when peering is enabled (#19907) ... stop reconciling services when peering is enabled	12 months ago
Dhia Ayachi	f2b26ac194	Hash based config entry replication (#19795) ... * add a hash to config entries when normalizing * add GetHash and implement comparing hashes * only update if the Hash is different * only update if the Hash is different and not 0 * fix proto to include the Hash * fix proto gen * buf format * add SetHash and fix tests * fix config load tests * fix state test and config test * recalculate hash when restoring config entries * fix snapshot restore test * add changelog * fix missing normalize, fix proto indexes and add normalize test	12 months ago
Ganesh S	90010587f0	Move enterprise multicluster types to Register function (#19913) ... * Move enterprise types to Register function * Fix function name * Address comments	12 months ago
Ganesh S	173fe11c2b	Refactor exported services controller tests (#19906)	12 months ago
Tauhid Anjum	1484c6db47	NET-6771 - Adding sameness group protobuff in consul CE (#19883) ... Adding sameness group protobuff in consul CE	12 months ago
Ashesh Vidyut	c5cce63777	NET 6761 (#19837) ... NET-6761 explicit destinations tests updated	12 months ago
Valeriia Ruban	a6d6164ba0	fix: remove test to unblock CI (#19908)	12 months ago
Ronald	e13fbc743e	Remove warning for consul 1.17 deprecation (#19897)	12 months ago
Jeff Boruszak	659868ee73	docs: Updates to required ports (#19755) ... * improvements * Anchor link fixes * Apply suggestions from code review Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Explicit list of six ports * Apply suggestions from code review --------- Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	12 months ago
Derek Menteer	ccb2bf6170	Add documentation for proxy-config-map and xds_fetch_timeout_ms. (#19893) ... Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	12 months ago
Ronald	195e3aab8c	[NET-6842] splitting go version on different lines (#19887)	12 months ago
Derek Menteer	dfab5ade50	Fix ClusterLoadAssignment timeouts dropping endpoints. (#19871) ... When a large number of upstreams are configured on a single envoy proxy, there was a chance that it would timeout when waiting for ClusterLoadAssignments. While this doesn't always immediately cause issues, consul-dataplane instances appear to consistently drop endpoints from their configurations after an xDS connection is re-established (the server dies, random disconnect, etc). This commit adds an `xds_fetch_timeout_ms` config to service registrations so that users can set the value higher for large instances that have many upstreams. The timeout can be disabled by setting a value of `0`. This configuration was introduced to reduce the risk of causing a breaking change for users if there is ever a scenario where endpoints would never be received. Rather than just always blocking indefinitely or for a significantly longer period of time, this config will affect only the service instance associated with it.	12 months ago
John Murret	5ec84dbfd8	security: update supported envoy version 1.28.0 in addition to 1.25.11, 1.26.6, 1.27.2, 1.28.0 to address CVE-2023-44487 (#19879) ... * update too support envoy 1.28.0 * add changelog * update docs	12 months ago
Michael Zalimeni	1d9234a87a	ci: sanitize commit message for Slack failure alerts (#19876) ... To ensure that shell code cannot be injected, capture the commit message in an env var, then format it as needed. Also fix several other issues with formatting and JSON escaping by wrapping the entire message in a `toJSON` expression.	12 months ago
Derek Menteer	0ac958f27b	Fix xDS missing endpoint race condition. (#19866) ... This fixes the following race condition: - Send update endpoints - Send update cluster - Recv ACK endpoints - Recv ACK cluster Prior to this fix, it would have resulted in the endpoints NOT existing in Envoy. This occurred because the cluster update implicitly clears the endpoints in Envoy, but we would never re-send the endpoint data to compensate for the loss, because we would incorrectly ACK the invalid old endpoint hash. Since the endpoint's hash did not actually change, they would not be resent. The fix for this is to effectively clear out the invalid pending ACKs for child resources whenever the parent changes. This ensures that we do not store the child's hash as accepted when the race occurs. An escape-hatch environment variable `XDS_PROTOCOL_LEGACY_CHILD_RESEND` was added so that users can revert back to the old legacy behavior in the event that this produces unknown side-effects. Visit the following thread for some extra context on why certainty around these race conditions is difficult: https://github.com/envoyproxy/envoy/issues/13009 This bug report and fix was mostly implemented by @ksmiley with some minor tweaks. Co-authored-by: Keith Smiley <ksmiley@salesforce.com>	12 months ago
cskh	0ca070b301	upgrade test(LTS): add segments to version 1.10 (#19861)	12 months ago
Matt Keeler	d4fda945bb	Fix a test flake where a retry timer was being reused causing tests after the first to exit early (#19864) ... Fix a test flake where a retry timer was being reused causing tests after the first to exit too early.	12 months ago
Thomas Eckert	8125a32a4e	Add CE version of Gateway Upstream Disambiguation (#19860) ... * Add CE version of gateway-upstream-disambiguation * Use NamespaceOrDefault and PartitionOrDefault * Add Changelog entry * Remove the unneeded reassignment * Use c.ID()	12 months ago
Dhia Ayachi	d93f7f730d	parse config protocol on write to optimize disco-chain compilation (#19829) ... * parse config protocol on write to optimize disco-chain compilation * add changelog	12 months ago
Matt Keeler	bfad6a4e07	Ensure that the default namespace always exists even prior to resource creation (#19852)	12 months ago
Poonam Jadhav	06b3038643	Net-6730/namespace intg test (#19798) ... test: add intg test for namespace lifecycle	12 months ago
Michael Zalimeni	645cbf9098	chore: update changelog for patch releases (#19855) ... * 1.16.3 * 1.15.7 * 1.14.11	12 months ago
Tauhid Anjum	ab68ddff91	NET-6784: Adding cli command to list exported services to a peer (#19821) ... * Adding cli command to list exported services to a peer * Changelog added * Addressing docs comments * Adding test case for no exported services scenario	12 months ago
Michael Zalimeni	3a78446114	ci: fix escaping for Slack failure notifications (#19838) ... Allow '()', '#', and other bash-interpretable special characters by properly quoting the commit message when shortening.	12 months ago
cskh	04d4412afd	NET-6643: upgrade test from 1.10 to 1.15 (lts) of a single cluster (#19847) ... * NET-6643: upgrade test from 1.10 to 1.15 (lts) of a single cluster * license header	12 months ago
Ronald	053367a3b2	[NET-6650] Bump go version to 1.20.12 (#19840)	12 months ago
Jared Kirschner	d3e658b0e7	improve client RPC metrics consistency (#19721) ... The client.rpc metric now excludes internal retries for consistency with client.rpc.exceeded and client.rpc.failed. All of these metrics now increment at most once per RPC method call, allowing for accurate calculation of failure / rate limit application occurrence. Additionally, if an RPC fails because no servers are present, client.rpc.failed is now incremented.	12 months ago
Matt Keeler	efe279f802	Retry lint fixes (#19151) ... * Add a make target to run lint-consul-retry on all the modules * Cleanup sdk/testutil/retry * Fix a bunch of retry.Run* usage to not use the outer testing.T * Fix some more recent retry lint issues and pin to v1.4.0 of lint-consul-retry * Fix codegen copywrite lint issues * Don’t perform cleanup after each retry attempt by default. * Use the common testutil.TestingTB interface in test-integ/tenancy * Fix retry tests * Update otel access logging extension test to perform requests within the retry block	12 months ago