83bf3e4b43
Backport of [OSS] security: update x/net module into release/1.14.x ( #15744 )
...
* backport of commit 32688b1ef59c832651d9
2022-12-08 17:20:42 -05:00
192a63c6bc
backport of commit 122173b980 ( #15735 )
...
Co-authored-by: Paul Glass <pglass@hashicorp.com>
2022-12-08 11:33:33 -05:00
1b2b6e496f
backport of commit 122173b980 ( #15732 )
...
Co-authored-by: Paul Glass <pglass@hashicorp.com>
2022-12-08 16:33:16 +00:00
ea781bee8c
backport of commit cbd29f529f ( #15730 )
...
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
2022-12-08 11:28:56 -05:00
fd82c3fc46
Backport of Flakiness test: case-cfg-splitter-peering-ingress-gateways into release/1.14.x ( #15725 )
...
* backport of commit 1ac56cc5ac6d78f4b20e07054a70e40c99f0df59
2022-12-08 01:30:10 +00:00
2dd2cdfddb
backport of commit cbd29f529f ( #15722 )
...
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
2022-12-07 23:04:12 +00:00
334a436fb7
Backport of update go version to 1.19.4 into release/1.14.x ( #15716 )
...
* backport of commit 56aa64f46e9d83b8ec46
2022-12-07 20:22:26 +00:00
17d6705c5a
Backport of Fix local mesh gateway with peering discovery chains. into release/1.14.x ( #15715 )
...
* backport of commit 8aff79edfe3ed9331e48
2022-12-07 13:20:57 -06:00
40c10de3e2
Backport of docs: Small docs updates, peering and K8s CNI into release/1.14.x ( #15714 )
...
* backport of commit 4bd78869a14c0d7d495c89c6f20db6369c084f9c1d2ecf57785726c3e46c9f08daf2ec
2022-12-07 18:09:25 +00:00
8cff9cd8b5
Backport of docs: K8s CNI namespace into release/1.14.x ( #15699 )
...
* backport of commit 99ddbd5ff7ac25c72230
2022-12-06 21:52:31 +00:00
afcffc2385
connect: use -dev-no-store-token for test vaults to reduce source of flakes ( #15691 ) ( #15694 )
...
It turns out that by default the dev mode vault server will attempt to interact with the
filesystem to store the provided root token. If multiple vault instances are running
they'll all awkwardly share the filesystem and if timing results in one server stopping
while another one is starting then the starting one will error with:
Error initializing Dev mode: rename /home/circleci/.vault-token.tmp /home/circleci/.vault-token: no such file or directory
This change uses `-dev-no-store-token` to bypass that source of flakes. Also the
stdout/stderr from the vault process is included if the test fails.
The introduction of more `t.Parallel` use in https://github.com/hashicorp/consul/pull/15669
increased the likelihood of this failure, but any of the tests with multiple vaults in use
(or running multiple package tests in parallel that all use vault) were eventually going
to flake on this.
Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>
2022-12-06 13:28:49 -06:00
8d4bcfb06f
connect: ensure all vault connect CA tests use limited privilege tokens ( #15689 )
...
All of the current integration tests where Vault is the Connect CA now use non-root tokens for the test. This helps us detect privilege changes in the vault model so we can keep our guides up to date.
One larger change was that the RenewIntermediate function got refactored slightly so it could be used from a test, rather than the large duplicated function we were testing in a test which seemed error prone.
Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>
2022-12-06 12:30:45 -06:00
9e25552415
Backport of Detect Vault 1.11+ import in secondary datacenters and update default issuer into release/1.14.x ( #15683 )
...
* backport of commit 97fcd595d4fc847e4edf0207f1d54c38f182481751f8e56fe04c7c84292d5a2a1e5f13e3b26c40b50bf754af30
2022-12-05 21:56:47 +00:00
e9cebc1c4d
backport of commit 0fd1b2b0b6 ( #15680 )
...
Co-authored-by: Curt Bushko <cbushko@gmail.com>
2022-12-05 21:21:05 +00:00
2ea33fa689
Backport of docs: Update Consul K8s CRDs into release/1.14.x ( #15677 )
...
* backport of commit a09f1d0e7a615493e11a
2022-12-05 16:06:47 -05:00
4927154c53
Backport of docs: Agentless performance clarifications into release/1.14.x ( #15674 )
...
Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
2022-12-05 12:44:47 -08:00
8e2c52ac36
Backport of docs: Agentless performance clarifications into release/1.14.x ( #15673 )
...
* backport of commit 89699d7d62cd587e923a
2022-12-05 20:44:05 +00:00
4f5c7d8317
docs: clarify Vault CA provider permissions needed ( #15478 ) ( #15664 )
...
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2022-12-05 09:20:36 -05:00
bd8bf9e0ec
backport of commit 64683d291c ( #15667 )
...
Co-authored-by: Evan Culver <eculver@users.noreply.github.com>
2022-12-03 18:28:44 +00:00
fd69f08edf
Backport of docs: fix agent catalog-services caching method into release/1.14.x ( #15656 )
...
* backport of commit fe777fc95a523495dd53
2022-12-02 11:03:16 -08:00
647f916d54
chore: updates from 1.14.2 release ( #15634 )
2022-11-30 22:17:00 -05:00
a9be8ce04d
backport of commit 7505c10d6d ( #15637 )
...
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-30 15:51:09 -08:00
20dd26e35f
Backport of docs: fix typos helm install into release/1.14.x ( #15630 )
...
* backport of commit 88516e978afcff6d5592
2022-11-30 15:40:21 -05:00
8c3c8f0a66
backport of commit dc0d93d0dd ( #15624 )
...
Co-authored-by: Michael Wilkerson <mwilkerson@hashicorp.com>
2022-11-30 19:56:58 +00:00
13836d5ca8
Backport of ui: Add ServerExternalAddresses to peer token create form into release/1.14.x ( #15620 )
...
* backport of commit ea23bac1fba4d1535116f782c16ae5198eb09e7038c0e32c79b388266150
2022-11-30 18:59:52 +00:00
18dffc51dc
Backport of peering: better represent non-passing states during peer check flattening into release/1.14.x ( #15618 )
...
* backport of commit 4deb06690165c70e84ec4372a5221c
2022-11-30 18:14:26 +00:00
a445588093
Backport of docs: Update acl-tokens.mdx into release/1.14.x ( #15609 )
...
* backport of commit ae2b999c5982b076d0f7
2022-11-29 18:27:58 -05:00
e674f36110
backport of commit 9cc1010534 ( #15606 )
...
Co-authored-by: Conrad Kleinespel <conradk@conradk.com>
2022-11-29 18:27:39 -05:00
657616a744
Backport of Remove log line about server mgmt token init into release/1.14.x ( #15612 )
...
Co-authored-by: freddygv <freddy@hashicorp.com>
2022-11-29 16:21:42 -07:00
b1526699ef
backport of commit 6f18c57f5b ( #15529 )
...
Co-authored-by: Chris Thain <chris.m.thain@gmail.com>
2022-11-29 18:05:15 -05:00
7c0eec4c1f
Add support for configuring Envoys route idle_timeout ( #14340 ) ( #15611 )
...
* Add idleTimeout
Co-authored-by: James Oulman <oulman@users.noreply.github.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Dhia Ayachi <dhia@hashicorp.com>
2022-11-29 17:58:00 -05:00
c5dd81e2c1
Backport of docs: typo on cluster peering k8s into release/1.14.x ( #15604 )
...
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-29 11:51:16 -08:00
9a235cbc01
Backport of docs: Clean up k8s cluster peering instructions into release/1.14.x ( #15601 )
...
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-29 11:24:05 -08:00
e7f8505e1d
Backport of Add peering `.service` and `.node` DNS lookups. into release/1.14.x ( #15599 )
2022-11-29 13:18:48 -06:00
7d4d859dbe
backport of commit a0c46c1c9d ( #15594 )
...
Co-authored-by: cskh <hui.kang@hashicorp.com>
2022-11-29 11:10:59 -05:00
3a03f2697e
Backport of Fix Vault managed intermediate PKI bug into release/1.14.x ( #15579 )
2022-11-29 09:33:13 -05:00
72eccca10f
Backport of docs: Fix language to describe clients previously ran on each node into release/1.14.x ( #15591 )
...
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-28 17:02:25 -08:00
2811464d56
Backport of fix(peering): increase the gRPC limit to 8MB into release/1.14.x ( #15589 )
...
* backport of commit 84b287cc3c
2022-11-28 18:05:33 -05:00
d2b5ecd129
backport of commit ddaca679bb ( #15585 )
...
Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
2022-11-28 16:50:02 -06:00
4206944074
Backport of docs: Update Consul K8s Release Notes to mention updates to Cluster Peering into release/1.14.x ( #15582 )
...
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-28 13:29:27 -08:00
3d2f28512a
Backport of docs: Dataplane performance impact into release/1.14.x ( #15575 )
...
* no-op commit due to failed cherry-picking
* docs: Dataplane performance impact (#15566 )
* New image + performance considerations
* Image related updates
* Update website/content/docs/connect/dataplane/index.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-28 14:41:03 -06:00
dc08f05120
backport of commit 46340d1e9a ( #15572 )
...
Co-authored-by: DanStough <dan.stough@hashicorp.com>
2022-11-28 14:07:51 -05:00
223fe18925
Backport of [OSS] chore(ci): add auto-approve workflow for consul bot into release/1.14.x ( #15569 )
...
This pull request was automerged via backport-assistant
2022-11-28 12:30:22 -05:00
d8188b4785
backport of commit 84bc3c6889 ( #15561 )
...
This pull request was automerged via backport-assistant
2022-11-26 09:38:18 -05:00
7889d8e41d
Backport of [OSS] Add boilerplate for proto files implementing BlockableQuery into release/1.14.x ( #15558 )
...
This pull request was automerged via backport-assistant
2022-11-25 15:47:34 -05:00
47c5345fec
backport of commit 7dc27c7dfd ( #15553 )
...
This pull request was automerged via backport-assistant
2022-11-24 13:03:19 -05:00
8d90259b0f
backport of commit 7dc27c7dfd ( #15552 )
...
This pull request was automerged via backport-assistant
2022-11-24 13:03:13 -05:00
ab9e13c4e0
Backport of Use backport-compatible assertion into release/1.14.x ( #15549 )
...
This pull request was automerged via backport-assistant
2022-11-24 11:44:52 -05:00
8dcbee57e6
backport of commit b3f544a23b ( #15545 )
...
This pull request was automerged via backport-assistant
2022-11-24 10:13:31 -05:00
b7e84883d2
backport of commit 85c80ead68 ( #15527 )
...
This pull request was automerged via backport-assistant
2022-11-22 09:12:20 -05:00
hc-github-team-consul-core