21307 Commits (83230ffe454351b9ba04792c89abfad5a1970a17)

 

All Branches   

Search

Author	SHA1	Message	Date
wangxinyi7	b1bd6ab91a	revert grpc to http (#20716) ... * Revert "refactor the resource client (#20343)" This reverts commit 3c5cb04b0f. * Revert "clean up http client (#20342)" This reverts commit 2b89025eab. * remove deprecated peer * fix the typo * remove forwarding test as it tests grpc, should add it back	9 months ago
David Yu	e72152465f	docs: format API GW tab docs (#20707) ... * Update install-k8s.mdx * Update install-k8s.mdx	9 months ago
R.B. Boyer	235747d473	deployer: add a bunch of test coverage and fix a few panics (#20694) ... This adds a bunch of coverage of the topology.Compile method. It is not complete, but it is a start. - A few panics and miscellany were fixed. - The testing/deployer tests are now also run in CI.	9 months ago
Ruben Nic	317eaa9a87	Fix malformed MDX in install-k8s (#20702) ... Fix malformed MDX	9 months ago
David Yu	b45314f8e9	docs: GKE Autopilot section (#20697) ... * Update install.mdx * Update install-k8s.mdx * Update website/content/docs/k8s/installation/install.mdx Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	9 months ago
Valeriia Ruban	dd833d9a36	feat: add alert to link to hcp modal to ask a user refresh a page; up… (#20682) ... feat: add alert to link to hcp modal to ask a user refresh a page; updated document link	9 months ago
John Murret	26eed12f04	NET-7813 - DNS : SERVFAIL when resolving PTR records (#20679) ... * NET-7813 - DNS : SERVFAIL when resolving PTR records * Update agent/dns.go Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com> * PR feedback --------- Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>	9 months ago
Michael Zalimeni	858691b6ae	[NET-6741] make: Add target for updating dependencies across all modules (#19785) ... make: Add target for updating dependencies across all modules To enable more consistent and error-proof dependency management, add a Make target that will set a dependency version across all submodules that require it. Also runs `go mod tidy`. This first ensures the dependency addition is reverted if the module in question does not require it; it also ensures that any additional cleanup needed in `go.mod`/`go.sum` is applied.	9 months ago
Semir Patel	8ba919f913	v2tenancy: make CE specific version of `resource.Registration` (#20681)	9 months ago
Semir Patel	943426bc79	v2tenancy: add optional LicenseFeature to type Registration struct (#20673)	9 months ago
Chris S. Kim	53afd8f4c5	[CE] Test tenancies for exported-services config manager (#20678) ... Sync controller tests from ENT	9 months ago
natemollica-dev	3f3477cdd3	Consul Kubernetes Datadog Integration Docs Update (#20661)	9 months ago
John Maguire	2ed67ba9ae	[NET-7375] Add Skeleton for APIGW ProxyStateTemplateBuilder (#20628) ... * WIP * got empty state working and cleaned up additional code * Moved api gateway mapper to it's own file, removed mesh port usage for api gateway, allow gateway to reconcile without routes * Update internal/mesh/internal/controllers/gatewayproxy/controller.go Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com> * Feedback from PR Review: - rename referencedTCPRoutes variable to be more descriptive - fetchers are in alphabetical order - move log statements to be more indicative of internal state --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	10 months ago
Chris S. Kim	f5c2b408f7	Add enterprise docs for deny action (#20654)	10 months ago
Semir Patel	2baf5e78a4	docs: developer docs for resource finalizers (#20631)	10 months ago
Valeriia Ruban	8425cd0f90	chor: change cluster name param to have datacenter.name as default value (#20644) ... * chor: change cluster name param to have datacenter.name as default value	10 months ago
Dan Stough	14efb28086	fix(v2dns): add node ttl to workloads, comment cleanup, and changelog (#20643) ... * fix(v2dns): add node ttl to workloads, plus comment cleanup * docs(v2dns): changelog	10 months ago
Derek Menteer	9f7626d501	Ensure all topics are refreshed on FSM restore and add supervisor loop to v1 controller subscriptions (#20642) ... Ensure all topics are refreshed on FSM restore and add supervisor loop to v1 controller subscriptions This PR fixes two issues: 1. Not all streams were force closed whenever a snapshot restore happened. This means that anything consuming data from the stream (controllers, queries, etc) were unaware that the data they have is potentially stale / invalid. This first part ensures that all topics are purged. 2. The v1 controllers did not properly handle stream errors (which are likely to appear much more often due to 1 above) and so it introduces a supervisor thread to restart the watches when these errors occur.	10 months ago
Dan Stough	137c9c0973	[CE] Misc cleanup for V2 DNS (#20640) ... * chore: gitignore zed editor * chore(v2dns): remove ent/ce split from router * fix(v2dns): v2 workloads now have tenancy in output * feat(v2dns): support 'cluster' label * chore(v2dns): less chatty debug logs	10 months ago
wangxinyi7	daebd7a717	update entry sequence (#20637) ... * update entry sequence	10 months ago
John Maguire	02e735f40f	[NET-7953] Added computed gateway routes protos and generated code (#20595) ... Added computed gateway routes protos and generated code	10 months ago
wangxinyi7	aca26f51d0	update releasing changelog (#20633) ... released 1.17.3 1.16.6 and 1.15.10	10 months ago
Valeriia Ruban	9d712ccfc7	chor: adds informative error message when acls disabled and read-only… (#20600) ... * adds informative error message when acls disabled and read-only selected * adds alert to the modal when there is no acls enabled	10 months ago
Chris S. Kim	248969c2a7	Update ComputedTrafficPermissions ACL hooks (#20622)	10 months ago
Melissa Kam	64cd172f30	[CC-7411] Fix environment variable precedence when linking to HCP (#20527) ... Fix so that link API values are used over env vars When a link is created via the API, those values should take precedence over the values set by environment variables. This change loads all the env vars initially as part of the config builder rather than on demand.	10 months ago
Chris S. Kim	0c2c7ca9c7	Add samenessgroup registration for enterprise (#20624)	10 months ago
Michael Zalimeni	2c1addfd64	[NET-7015] DNS v2 + Catalog v2 int test (#20607) ... test(v2dns): Add Catalog v2 integration test Add a basic integration test covering major functionality tested against Catalog v2 resources. This complements existing tests that ensure compatibility between v1 and v2 DNS when testing against Catalog v1 resources.	10 months ago
Chris S. Kim	ab3c6cf1e5	Add BoundReferences to ComputedTrafficPermissions (#20593)	10 months ago
Dan Stough	0f0b080514	[CE] feat(v2dns): add v2 style query metrics (#20608) ... feat(v2dns): add v2 style query metrics	10 months ago
Chris S. Kim	7575b53737	Refactor xTP tests (#20597)	10 months ago
Luke Kysow	191561e44f	docs: document behaviour of tls.https.verify_outgoing (#20555) ... * docs: document behaviour of tls.https.verify_outgoing At first it's not clear what verify_outgoing would do for the https listener as it seems like Consul agent's don't make https requests. Upon further investigation, it's clear that Consul agents do make https requests in the following scenarios: - to implement watches - to perform checks In the first scenario, this setting is used here: a1c8d4dd19/agent/config/runtime.go (L1725) In the second scenario, it's actually the internal_rpc setting that is used: a1c8d4dd19/tlsutil/config.go (L903) * Update website/content/docs/agent/config/config-files.mdx Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> --------- Co-authored-by: David Yu <dyu@hashicorp.com> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	10 months ago
Semir Patel	b716a9ef6b	resource: reconcile managed types every ~8hrs (#20606)	10 months ago
Tu Nguyen	35f1173689	Updated docs for Consul ECS 0.8.x, architecture, tproxy support (#20473) ... * Updated docs for Consul ECS 0.8.x, architecture, tproxy support * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com> * add apigw as feature, update images --------- Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com>	10 months ago
Michael Zalimeni	5862c52642	[NET-7948] Bump Envoy version to address multiple CVEs (#20589) ... security: Bump Envoy versions to address CVEs	10 months ago
R.B. Boyer	671c436415	mesh: use ComputedImplicitDestinations resource in the sidecar controller (#20553) ... Wire the ComputedImplicitDestinations resource into the sidecar controller, replacing the inline version already present. Also: - Rewrite the controller to use the controller cache - Rewrite it to no longer depend on ServiceEndpoints - Remove the fetcher and (local) cache abstraction	10 months ago
John Murret	7e8f2e5f08	NET-7644/NET-7634 - Implement query lookup for tagged addresses on nodes and services including WAN translation. (#20583) ... NET-7644 - Implement tagged addresses and wan translation	10 months ago
Dan Stough	5802080db1	feat(v2dns): enable peering queries (#20581)	10 months ago
John Maguire	ec76090be9	[NET-7450] Fix listenerToProtocol function for input (#20536) ... * make listenerProtocolToCatalogProtocol function more forgiving for different cased input * update tests	10 months ago
Nick Cellino	5fb6ab6a3a	Move HCP Manager lifecycle management out of Link controller (#20401) ... * Add function to get update channel for watching HCP Link * Add MonitorHCPLink function This function can be called in a goroutine to manage the lifecycle of the HCP manager. * Update HCP Manager config in link monitor before starting This updates HCPMonitorLink so it updates the HCP manager with an HCP client and management token when a Link is upserted. * Let MonitorHCPManager handle lifecycle instead of link controller * Remove cleanup from Link controller and move it to MonitorHCPLink Previously, the Link Controller was responsible for cleaning up the HCP-related files on the file system. This change makes it so MonitorHCPLink handles this cleanup. As a result, we are able to remove the PlacementEachServer placement strategy for the Link controller because it no longer needs to do this per-node cleanup. * Remove HCP Manager dependency from Link Controller The Link controller does not need to have HCP Manager as a dependency anymore, so this removes that dependency in order to simplify the design. * Add Linked prefix to Linked status variables This is in preparation for adding a new status type to the Link resource. * Add new "validated" status type to link resource The link resource controller will now set a "validated" status in addition to the "linked" status. This is needed so that other components (eg the HCP manager) know when the Link is ready to link with HCP. * Fix tests * Handle new 'EndOfSnapshot' WatchList event * Fix watch test * Remove unnecessary config from TestAgent_scadaProvider Since the Scada provider is now started on agent startup regardless of whether a cloud config is provided, this removes the cloud config override from the relevant test. This change is not exactly related to the changes from this PR, but rather is something small and sort of related that was noticed while working on this PR. * Simplify link watch test and remove sleep from link watch This updates the link watch test so that it uses more mocks and does not require setting up the infrastructure for the HCP Link controller. This also removes the time.Sleep delay in the link watcher loop in favor of an error counter. When we receive 10 consecutive errors, we shut down the link watcher loop. * Add better logging for link validation. Remove EndOfSnapshot test. * Refactor link monitor test into a table test * Add some clarifying comments to link monitor * Simplify link watch test * Test a bunch more errors cases in link monitor test * Use exponential backoff instead of errorCounter in LinkWatch * Move link watch and link monitor into a single goroutine called from server.go * Refactor HCP link watcher to use single go-routine. Previously, if the WatchClient errored, we would've never recovered because we never retry to create the stream. With this change, we have a single goroutine that runs for the life of the server agent and if the WatchClient stream ever errors, we retry the creation of the stream with an exponential backoff.	10 months ago
Tauhid Anjum	9d8f9a5470	NET-7783: Fix sameness group expansion to 0 sources error CE (#20584)	10 months ago
John Murret	c8e4cea69c	set up ent and CE specific DNS tests to be able to run v1 and v2 (#20571)	10 months ago
Dan Stough	01001f630e	feat(v2dns): catalog v2 service query support (#20564)	10 months ago
David Yu	e24b73a6dd	docs: Add legacy api gateway deprecation to Consul release notes (#20569) ... * Update v1_16_x.mdx * Update website/content/docs/release-notes/consul/v1_16_x.mdx Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> * Update v1_2_x.mdx --------- Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	10 months ago
R.B. Boyer	6742340878	mesh: add ComputedImplicitDestinations resource for future use (#20547) ... Creates a new controller to create ComputedImplicitDestinations resources by composing ComputedRoutes, Services, and ComputedTrafficPermissions to infer all ParentRef services that could possibly send some portion of traffic to a Service that has at least one accessible Workload Identity. A followup PR will rewire the sidecar controller to make use of this new resource. As this is a performance optimization, rather than a security feature the following aspects of traffic permissions have been ignored: - DENY rules - port rules (all ports are allowed) Also: - Add some v2 TestController machinery to help test complex dependency mappers.	10 months ago
Valeriia Ruban	8c05e57ac1	Cc 7147 link to hcp modal (#20474) ... * add link hcp modal component * integrate modal with SideNav and link to hcp banner --------- Co-authored-by: Chris Hut <tophernuts@gmail.com>	10 months ago
Matt Keeler	6c4b83c119	Allow reuse of cache indexes (#20562) ... Previously calling `index.New` would return an object with the index information such as the Indexer, whether it was required, and the name of the index as well as a radix tree to store indexed data. Now the main `Index` type doesn’t contain the radix tree for indexed data. Instead the `IndexedData` method can be used to combine the main `Index` with a radix tree in the `IndexedData` structure. The cache still only allows configuring the `Index` type and will invoke the `IndexedData` method on the provided indexes to get the structure that the cache can use for actual data management. All of this makes it now safe to reuse the `index.Index` types.	10 months ago
Valeriia Ruban	6708e88ec9	chor: remove temporary CONSUL_HCP_LINK_ENABLED env flag (#20552)	10 months ago
Dan Stough	24e15cc24e	feat(v2dns): prepared query ttls (#20563)	10 months ago
John Murret	7cac918811	NET-7637 / NET-7659/NET-7636/NET-7647/NET-7648/NET-7646/NET-7649/NET-7645 - Multiple DNS v2 fixes (#20556)	10 months ago
skpratt	738dc8c89d	use go 1.21.7 (#20545) ... * 1.21.7 * changelog	10 months ago