10739 Commits (86692f958f99e7a548b442d8fdc5ed2dd587fd3e)

 

All Branches   

Search

Author	SHA1	Message	Date
Paul Banks	86692f958f	Add contributing dir with Config file checklist (#7017) ... * Add contributing dir with Config file checklist and modify contribution guides * Apply suggestions from code review Co-Authored-By: Chris Piraino <cpiraino@hashicorp.com> Co-authored-by: Chris Piraino <piraino.chris@gmail.com>	5 years ago
Matt Keeler	8bd34e126f	Intentions ACL enforcement updates (#7028) ... * Renamed structs.IntentionWildcard to structs.WildcardSpecifier * Refactor ACL Config Get rid of remnants of enterprise only renaming. Add a WildcardName field for specifying what string should be used to indicate a wildcard. * Add wildcard support in the ACL package For read operations they can call anyAllowed to determine if any read access to the given resource would be granted. For write operations they can call allAllowed to ensure that write access is granted to everything. * Make v1/agent/connect/authorize namespace aware * Update intention ACL enforcement This also changes how intention:read is granted. Before the Intention.List RPC would allow viewing an intention if the token had intention:read on the destination. However Intention.Match allowed viewing if access was allowed for either the source or dest side. Now Intention.List and Intention.Get fall in line with Intention.Matches previous behavior. Due to this being done a few different places ACL enforcement for a singular intention is now done with the CanRead and CanWrite methods on the intention itself. * Refactor Intention.Apply to make things easier to follow.	5 years ago
Pierre Souchay	3bf2e640c7	rpc: log method when a server/server RPC call fails (#4548) ... Sometimes, we have lots of errors in cross calls between DCs (several hundreds / sec) Enrich the log in order to help diagnose the root cause of issue.	5 years ago
Matt Keeler	27f49eede9	Move where the service-resolver watch is done so that it happen… (#7025) ... Before we were issuing 1 watch for every service in the services listing which would have caused the agent to process many more identical events simultaneously.	5 years ago
Hans Hasselberg	ab2f2484ad	connect: use inline_string instead for envoy ca(#7024)	5 years ago
R.B. Boyer	10f04a8c4a	connect: derive connect certificate serial numbers from a memdb index instead of the provider table max index (#7011)	5 years ago
R.B. Boyer	50c879923c	connect: ensure that updates to the secondary root CA configuration use the correct signing key ID values for comparison (#7012) ... Fixes #6886	5 years ago
danielehc	6ae75f6063	added disclaimer about network segments due to Serf limitations (#7004) ... * added disclaimer about network segments due to Serf limitations using work made at https://github.com/hashicorp/consul/pull/6558 by @thepomeranian * Lowercasing functionality name * Update website/source/docs/enterprise/network-segments/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Co-authored-by: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	5 years ago
danielehc	a207f1a147	Update docs to point to new learn guide (#7003) ... * Changed the link to point to new guide * Removed querystring from link	5 years ago
DevOps Rob	0785bcc8df	Azure MSI for cloud auto-join (#7000) ... * Azure MSI documentation Adding in note about support for Azure MSI authentication method for Cloud auto-join * fixing text formatting fixing text formatting * missing word missing word - variable * Update website/source/docs/agent/cloud-auto-join.html.md Language change to be specific about where the security risk mitigation is concerned Co-Authored-By: Jack Pearkes <jackpearkes@gmail.com> Co-authored-by: Jack Pearkes <jackpearkes@gmail.com>	5 years ago
kaitlincarter-hc	15f070231a	updating the ent docs to mention GCP (#7001)	5 years ago
tehmoon	43ab78fe5a	docs: Fix extraVolumes mount paths in helm.html.md (#7008)	5 years ago
Rémi Lapeyre	ec591a5b77	docs: fix typo in ACL legacy documentation (#7006)	5 years ago
kaitlincarter-hc	6e2ae79552	[docs] Managing ACL Policies (#6573) ... * New Acl policy guide * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> Co-authored-by: Paul Banks <banks@banksco.de>	5 years ago
kaitlincarter-hc	2e1a8acb45	[docs] New Replication Guide (#5823) ... * new replication guide * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * fixing list * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * fixing another list * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Matt Keeler <mkeeler@users.noreply.github.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * fixing formating * Updating based on feedback. * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Matt Keeler <mkeeler@users.noreply.github.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * updating introduction based on feedback * Update website/source/docs/guides/acl-replication.md * updating intro based on feedback * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * updating based on feedback * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Additional note about servers Co-authored-by: R.B. Boyer <public@richardboyer.net> Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com> Co-authored-by: Judith Malnick <judith@hashicorp.com>	5 years ago
kaitlincarter-hc	88a4950a78	New Connect guide for new users (#6749)	5 years ago
Matt Keeler	fa2003d7cb	Move Session.CheckIDs into OSS only code. (#6993)	5 years ago
Luke Kysow	62a111f7b6	Merge pull request #6978 from hashicorp/docs/helm-move-bootstrapacls-under-global ... Move bootstrapACLs under global key in Helm docs	5 years ago
Blake Covarrubias	b52ce19e8f	Move bootstrapACLs under global key in Helm docs ... The global.bootstrapACLs key in the Helm chart docs was inadvertently moved to a top-level key in commit 12e6ef8, which is incorrect. This commit reverts that error.	5 years ago
hashicorp-ci	e01f691351	Release v1.7.0-beta2	5 years ago
hashicorp-ci	5e45e3470b	update bindata_assetfs.go	5 years ago
Matt Keeler	c276e2a634	Revert "Remove docs refs to NS inference from ACL token" (#6976) ... This reverts commit 3a8426de9c. # Conflicts: # command/flags/http.go # website/source/api/acl/binding-rules.html.md # website/source/api/acl/policies.html.md # website/source/api/acl/roles.html.md # website/source/api/acl/tokens.html.md # website/source/api/kv.html.md # website/source/api/session.html.md # website/source/docs/commands/_http_api_namespace_options.html.md	5 years ago
John Cowen	9f406cc10f	Update CHANGELOG.md	5 years ago
John Cowen	95a71bba04	Merge pull request #6966 from hashicorp/ui-staging ... ui: UI Release Merge (ui-staging merge)	5 years ago
John Cowen	99fae9d65a	ui: Make sure that the namespace is passed when changing a token via [Use] (#6973) ... * Pass the namespace parameter through to the repo when using a token * Refresh the namespace menu when somebody [Use]s a token	5 years ago
John Cowen	18bafaec35	ui: Cope with the possibility of receiving no namespaces (#6975)	5 years ago
John Cowen	b2c0c08e08	Ensure ember-data ids are created correct taking into account the nspace (#6974)	5 years ago
R.B. Boyer	50c6291baf	update changelog	5 years ago
R.B. Boyer	abb1603a86	Restore a few more service-kind index updates so blocking in ServiceDump works in more cases (#6948) ... Restore a few more service-kind index updates so blocking in ServiceDump works in more cases Namely one omission was that check updates for dumped services were not unblocking. Also adds a ServiceDump state store test and also fix a watch bug with the normal dump. Follow-on from #6916	5 years ago
Blake Covarrubias	e94db0178c	Add 'kind = connect-proxy' to mesh_gateway.html	5 years ago
Hans Hasselberg	16d6f01be3	Update CHANGELOG.md	5 years ago
Hans Hasselberg	937a414fd0	log: handle discard all logfiles properly (#6945) ... * Handle discard all logfiles properly Fixes https://github.com/hashicorp/consul/issues/6892. The [docs](https://www.consul.io/docs/agent/options.html#_log_rotate_max_files) are stating: > -log-rotate-max-files - to specify the maximum number of older log > file archives to keep. Defaults to 0 (no files are ever deleted). Set to > -1 to disable rotation and discard all log files. But the `-1` case was not implemented and led to a panic when being used. Co-Authored-By: Freddy <freddygv@users.noreply.github.com>	5 years ago
Matt Keeler	064ae104f2	Update CHANGELOG.md	5 years ago
Matt Keeler	64bcd64654	Update CHANGELOG.md	5 years ago
Matt Keeler	7cfa7da997	Enterprise Sync - 2019.12.18 (#6968) ... Enterprise Sync - 2019.12.18	5 years ago
Matt Keeler	a78f7d7a34	OSS changes for implementing token based namespace inferencing ... remove debug log	5 years ago
Matt Keeler	be9ba707ba	Unflake the TestACLEndpoint_TokenList test ... In order to do this I added a waitForLeaderEstablishment helper which does the right thing to ensure that leader establishment has finished. fixup	5 years ago
Kyle MacDonald	3628de6de5	website: embed yt videos on intro pages (#6871) ... - website: embed yt videos on intro pages - for /docs/connect - for /intro - css to handle iframe responding at smaller viewports - Update consul connect video with introductory description. Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> - Update consul connect intro with introductory description. Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	5 years ago
Matt Keeler	80d13d500b	Miscellaneous acl package cleanup ... • Renamed EnterpriseACLConfig to just Config • Removed chained_authorizer_oss.go as it was empty • Renamed acl.go to errors.go to more closely describe its contents	5 years ago
Matt Keeler	0b346616e9	Rename EnterpriseAuthorizerContext -> AuthorizerContext	5 years ago
John Cowen	36728b961f	ui: Various amends for 1.7beta (#6965) ... * Remove empty init * Actually make the disco chain endpoint send the nspace, note: The backend doesn't support this as yet. * Tweak the font size of flash-messages ever so slightly * Make sure the nspace menu is kept up to date when creating a new one * Move comment to the correct place * Only refresh the namespace menu if you specifically created a nspace * Change FIXMEs to TODOs as we are happy for these to wait until later	5 years ago
Matt Keeler	34e6e23d43	Change how namespaces are specified for the CLI (#6960)	5 years ago
Matt Keeler	3faee222f2	OSS changes to allow for parsing the enterprise DNS config prop… (#6959)	5 years ago
John Cowen	aa680d5f0c	ui: Discovery Chain (#6746) ... * Add data layer for discovery chain (model/adapter/serializer/repo) * Add routing plus template for routing tab * Add extra deps - consul-api-double upgrade plus ngraph for graphing * Add discovery-chain and related components and helpers: 1. discovery-chain to orchestrate/view controller 2. route-card, splitter-card, resolver card to represent the 3 different node types. 3. route-match helper for easy formatting of route rules 4. dom-position to figure out where things are in order to draw lines 5. svg-curve, simple wrapper around svg's <path d=""> attribute format. 6. data-structs service. This isn't super required but we are using other data-structures provided by other third party npm modules in other yet to be merged PRs. All of these types of things will live here for easy access/injection/changability 7. Some additions to our css-var 'polyfill' for a couple of extra needed rules * Related CSS for discovery chain 1. We add a %card base component here, eventually this will go into our base folder and %stats-card will also use it for a base component. 2. New icon for failovers * ui: Discovery Chain Continued (#6939) 1. Add in the things we use for the animations 2 Use IntersectionObserver so we know when the tab is visible, otherwise the dom-position helper won't work as the dom elements don't have any display. 3. Add some base work for animations and use them a little 4. Try to detect if a resolver is a redirect. Right now this works for datacenters and namespaces, but it can't work for services and subsets - we are awaiting backend support for doing this properly. 5. Add a fake 'this service has no routes' route that says 'Default' 6. redirect icon 7. Add CSS.escape polyfill for Edge	5 years ago
John Cowen	7044aa52c8	ui: Namespace Support (#6639) ... Adds namespace support to the UI: 1. Namespace CRUD/management 2. Show Namespace in relevant areas (intentions, upstreams) 3. Main navigation bar improvements 4. Logic/integration to interact with a new `internal/acl/authorize` endpoint	5 years ago
John Cowen	f06c3adca5	ui: %form-element-textarea > %form-area-textinput typo (#6952)	5 years ago
John Cowen	74e2b95535	ui: Fixes styling of 'duplicate intention' error message (#6936)	5 years ago
John Cowen	ab461f6603	ui: Remove `writable` usage from policy and use the request instead (#6934)	5 years ago
John Cowen	520eb41393	ui: Use base fonts throughout the app (#6881) ... We've had a set of %placeholders in our base styles for quite a while but not butten the bullet to use them. This begins to use them. We had to make a small amount of tweaks to base whilst doing this, but its as we'd prefer there to be as few font placeholders as possible. We might/should be able to reduce these further at somepoint, or potentially rename them. We currently have six header fonts (or 4 header fonts/2 strong body fonts) and 3 body fonts. We also noticed an empty CSS file and deleted that while we were here. We also noticed that the bottom border of structure tabs was a pixel larger than ours so we tweaked that here also.	5 years ago
John Cowen	7f2a1e8a54	ui: Remove some javascript files we no longer use (#6853)	5 years ago