Commit Graph

8232 Commits (8023bb9b0323187b19afa5e8b718437c85d2fe19)
 

Author SHA1 Message Date
Mitchell Hashimoto ecb05cc957
Add Makefile hack for tests to run
7 years ago
Mitchell Hashimoto cc2c98f961
agent/cache: lots of comment/doc updates
7 years ago
Mitchell Hashimoto 6c01e402e0
agent: augment /v1/connect/authorize to cache intentions
7 years ago
Mitchell Hashimoto 0f3f3d13ca
agent/cache-types: support intention match queries
7 years ago
Mitchell Hashimoto e1c1b8812a
agent/cache: return the error as part of Get
7 years ago
Mitchell Hashimoto 00e7ab3cd5
agent/cache: integrate go-metrics so the cache is debuggable
7 years ago
Mitchell Hashimoto 9f3dbf7b2a
agent/structs: DCSpecificRequest sets all the proper fields for
7 years ago
Mitchell Hashimoto be873d2558
agent/cache-types/ca-leaf: proper result for timeout, race on setting CA
7 years ago
Mitchell Hashimoto fcb15e15ae
agent/cache: support timeouts for cache reads and empty fetch results
7 years ago
Mitchell Hashimoto e81942df7a
agent/cache-types: rename to separate root and leaf cache types
7 years ago
Mitchell Hashimoto 8e7c517db1
agent/cache-types: got basic CA leaf caching work, major problems still
7 years ago
Mitchell Hashimoto 917a9e63d5
agent: check cache hit count to verify CA root caching, background update
7 years ago
Mitchell Hashimoto 6902d721d6
agent: initialize the cache and cache the CA roots
7 years ago
Mitchell Hashimoto c329b4cb34
agent/cache: partition by DC/ACL token
7 years ago
Mitchell Hashimoto e3c1162881
agent/cache: Reorganize some files, RequestInfo struct, prepare for partitioning
7 years ago
Mitchell Hashimoto b0db5657c4
agent/cache: ConnectCA roots caching type
7 years ago
Mitchell Hashimoto 975be337a9
agent/cache: blank cache key means to always fetch
7 years ago
Mitchell Hashimoto 1cfb0f1922
agent/cache: initial kind-of working cache
7 years ago
Kyle Havlovitz 33418afd3c
Add cross-signing mechanism to root rotation
7 years ago
Kyle Havlovitz d83fbfc766
Add the root rotation mechanism to the CA config endpoint
7 years ago
Kyle Havlovitz f9d92d795e
Have the built in CA store its state in raft
7 years ago
Kyle Havlovitz 30c1973e8b
Fix the testing endpoint's root set op
7 years ago
Kyle Havlovitz 75f62e3117
Update the CA config endpoint to enable GETs
7 years ago
Kyle Havlovitz ab737ef0f8
Hook the CA RPC endpoint into the provider interface
7 years ago
Kyle Havlovitz 1f6501895f
Add CA bootstrapping on establishing leadership
7 years ago
Kyle Havlovitz 682f105c7c
Add the bootstrap config for the CA
7 years ago
Kyle Havlovitz 9fc33d2a62
Add the CA provider interface and built-in provider
7 years ago
Kyle Havlovitz 1787f88618
Add CA config set to fsm operations
7 years ago
Kyle Havlovitz 6b3416e480
Add the Connect CA config to the state store
7 years ago
Paul Banks 36dbd878c9
Adds `api` client code and tests for new Proxy Config endpoint, registering with proxy and seeing proxy config in /agent/services list.
7 years ago
Paul Banks 662e57d91b
Make test output more useful now we uses testify with multi-line error messages
7 years ago
Paul Banks 730da74369
Fix various test failures and vet warnings.
7 years ago
Paul Banks 1e72ad66f5
Refactor localBlockingQuery to use memdb.WatchSet. Much simpler and correct as a bonus!
7 years ago
Paul Banks 8d09381b96
Super ugly hack to get TeamCity build to work for this PR without adding a vendor that is being added elsewhere and will conflict...
7 years ago
Paul Banks d73f079d0f
Add X-Consul-ContentHash header; implement removing all proxies; add load/unload test.
7 years ago
Paul Banks 2a69663448
Agent Connect Proxy config endpoint with hash-based blocking
7 years ago
Paul Banks 3e3f0e1f31
HTTP agent registration allows proxy to be defined.
7 years ago
Paul Banks e6071051cf
Added connect proxy config and local agent state setup on boot.
7 years ago
Paul Banks 88541bba17
Add tests all the way up through the endpoints to ensure duplicate src/destination is supported and so ultimately deny/allow nesting works.
7 years ago
Paul Banks ed9f07c361
Allow duplicate source or destination, but enforce uniqueness across all four.
7 years ago
Paul Banks 10db79c8ae
Rework connect/proxy and command/connect/proxy. End to end demo working again
7 years ago
Paul Banks aa19be4651
Remove old connect client and proxy implementation
7 years ago
Paul Banks 26e65f6bfd
connect.Service based implementation after review feedback.
7 years ago
Paul Banks 69d5efdbbd
Original proxy and connect.Client implementation. Working end to end.
7 years ago
Mitchell Hashimoto 95da20ffd7
agent: rename authorize param ClientID to ClientCertURI
7 years ago
Mitchell Hashimoto 97f5414d94
api: rename Authorize field to ClientCertURI
7 years ago
Mitchell Hashimoto 9638466b88
api: fix up some comments and rename IssuedCert to LeafCert
7 years ago
Mitchell Hashimoto 4689d8373a
api: IntentionMatch
7 years ago
Mitchell Hashimoto 663a12d96b
api: starting intention endpoints, reorganize files slightly
7 years ago
Mitchell Hashimoto 263e2c7cf7
api: endpoints for working with CA roots, agent authorize, etc.
7 years ago