19402 Commits (8ce8dbf3611e5178622e7f7fb5722fa0e5962e7e)

 

All Branches   

Search

Author	SHA1	Message	Date
freddygv	0d4b11c01b	Update upgrade docs for 1.13.2. ... In 1.13.2 we added a new flag called use_auto_cert to address issues previously documented in the upgrade guide. Originally there was no way to disable TLS for gRPC when auto-encrypt was in use, because TLS was enabled for gRPC due to the presence of auto-encrypt certs. As of 1.13.2, using auto-encrypt certs as the signal to enable TLS for gRPC is opt-in only. Meaning that if anyone who had upgraded to 1.13 relied on that side-effect, they now need to explicitly configure it.	2 years ago
wenincode	c450183b4c	Use local-storage service to manage localStorage ... Use local-storage service, prototyped here https://github.com/LevelbossMike/local-storage-service, to manage local storage usage in an octane way. Does not write to local storage in tests by default and is easy to stub out.	2 years ago
Dhia Ayachi	5eb2bad8fd	bump relevant modules versions (#14972)	2 years ago
Michael Klein	47053c185d	Improve testability `env`-service	2 years ago
Iryna Shustava	5cd0ccfc75	Support auth method with snapshot agent [ENT] (#15020) ... Port of hashicorp/consul-enterprise#3303	2 years ago
R.B. Boyer	fe2d41ddad	cache: prevent goroutine leak in agent cache (#14908) ... There is a bug in the error handling code for the Agent cache subsystem discovered: 1. NotifyCallback calls notifyBlockingQuery which calls getWithIndex in a loop (which backs off on-error up to 1 minute) 2. getWithIndex calls fetch if there’s no valid entry in the cache 3. fetch starts a goroutine which calls Fetch on the cache-type, waits for a while (again with backoff up to 1 minute for errors) and then calls fetch to trigger a refresh The end result being that every 1 minute notifyBlockingQuery spawns an ancestry of goroutines that essentially lives forever. This PR ensures that the goroutine started by `fetch` cancels any prior goroutine spawned by the same line for the same key. In isolated testing where a cache type was tweaked to indefinitely error, this patch prevented goroutine counts from skyrocketing.	2 years ago
R.B. Boyer	02a858efa0	ca: fix a masked bug in leaf cert generation that would not be notified of root cert rotation after the first one (#15005) ... In practice this was masked by #14956 and was only uncovered fixing the other bug. go test ./agent -run TestAgentConnectCALeafCert_goodNotLocal would fail when only #14956 was fixed.	2 years ago
David Yu	efe25cfe46	docs: formatting on backend application and delete peering CRDs (#15007) ... * docs: formatting on backend application and delete peering CRDs Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
Dan Upton	641347fe14	proto: deep-copy PeeringTrustBundle using proto.Clone (#15004) ... Fixes a `go vet` warning caused by the pragma.DoNotCopy on the protobuf message type. Originally I'd hoped we wouldn't need any reflection in the proxycfg hot path, but it seems proto.Clone is the only supported way to copy a message.	2 years ago
Chris S. Kim	3d2dffff16	Merge pull request #13388 from deblasis/feature/health-checks_windows_service ... Feature: Health checks windows service	2 years ago
Dan Upton	f8b4b41205	proxycfg: fix goroutine leak when service is re-registered (#14988) ... Fixes a bug where we'd leak a goroutine in state.run when the given context was canceled while there was a pending update.	2 years ago
Kyle Havlovitz	3a60885259	Merge pull request #14800 from hashicorp/mgw-tcp-keepalives ... Add TCP keepalive settings to proxy config for mesh gateways	2 years ago
Kyle Havlovitz	aaf892a383	Extend tcp keepalive settings to work for terminating gateways as well	2 years ago
Kyle Havlovitz	2c569f6b9c	Update docs and add tcp_keepalive_probes setting	2 years ago
Kyle Havlovitz	2242d1ec4a	Add TCP keepalive settings to proxy config for mesh gateways	2 years ago
David Yu	1a883891a7	docs: improvements on language from cluster peering steps (#14993) ... * docs: improvements on language from cluster peering steps Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
wenincode	63c4d670d9	Set postfix for agentless-notice storage key based on partition and dc	2 years ago
wenincode	6c2ca0ba3f	Save agentless node notice dismissal per dc	2 years ago
Derek Menteer	2a33d0ff96	Fix issue with incorrect method signature on test.	2 years ago
Freddy	24d0c8801a	Merge pull request #14981 from hashicorp/peering/dial-through-gateways	2 years ago
Tyler Wendlandt	0c8563f060	Merge pull request #14986 from hashicorp/ui/feature/filter-node-healthchecks-agentless ... UI: filter node healthchecks on agentless service instances	2 years ago
Dan Upton	328e3ff563	proxycfg: rate-limit delivery of config snapshots (#14960) ... Adds a user-configurable rate limiter to proxycfg snapshot delivery, with a default limit of 250 updates per second. This addresses a problem observed in our load testing of Consul Dataplane where updating a "global" resource such as a wildcard intention or the proxy-defaults config entry could starve the Raft or Memberlist goroutines of CPU time, causing general cluster instability.	2 years ago
Derek Menteer	29ebcf5ff0	Add tests for peering state snapshots / restores.	2 years ago
Derek Menteer	e3ff9912d0	Add test for ExportedServicesForAllPeersByName	2 years ago
Alessandro De Blasis	5f99f578a9	Update website/content/api-docs/agent/check.mdx	2 years ago
Dan Upton	e6b55d1d81	perf: remove expensive reflection from xDS hot path (#14934) ... Replaces the reflection-based implementation of proxycfg's ConfigSnapshot.Clone with code generated by deep-copy. While load testing server-based xDS (for consul-dataplane) we discovered this method is extremely expensive. The ConfigSnapshot struct, directly or indirectly, contains a copy of many of the structs in the agent/structs package, which creates a large graph for copystructure.Copy to traverse at runtime, on every proxy reconfiguration.	2 years ago
Michael Klein	03734a1bac	Merge pull request #14977 from hashicorp/ui/fix/scrollbar-bento-box ... ui: Bento-Box show scrollbars only when necessary	2 years ago
wenincode	c85d70e80d	Address linting errors	2 years ago
wenincode	363db8c849	Add changelog entry	2 years ago
wenincode	9355d0d4f6	Add tests for filtering node health checks	2 years ago
freddygv	c77123a2aa	Use split var in tests	2 years ago
freddygv	bf51021c07	Use split wildcard partition name ... This way OSS avoids passing a non-empty label, which will be rejected in OSS consul.	2 years ago
Freddy	ee4cdc4985	Merge pull request #14935 from hashicorp/fix/alias-leak	2 years ago
freddygv	da68ed70c1	Add changelog entry	2 years ago
freddygv	f48d7fbe04	Add changelog entry	2 years ago
freddygv	573aa408a1	Lint	2 years ago
wenincode	4530e2e547	Format healthchecks template	2 years ago
wenincode	0eb250d3a0	Filter healthchecks for synthetic-nodes	2 years ago
David Yu	2c5f6a4678	1.14 dataplane docs beta: Bump to beta3 (#14979) ... Bump to beta	2 years ago
Derek Menteer	0f424e3cdf	Reset wait on ensureServerAddrSubscription	2 years ago
freddygv	96fdd3728a	Fix CA init error code	2 years ago
freddygv	472a8e82dc	Add integ test for peering through gateways	2 years ago
freddygv	2c99a21596	Update leader routine to maybe use gateways	2 years ago
freddygv	e69bc727ec	Update peering establishment to maybe use gateways ... When peering through mesh gateways we expect outbound dials to peer servers to flow through the local mesh gateway addresses. Now when establishing a peering we get a list of dial addresses as a ring buffer that includes local mesh gateway addresses if the local DC is configured to peer through mesh gateways. The ring buffer includes the mesh gateway addresses first, but also includes the remote server addresses as a fallback. This fallback is present because it's possible that direct egress from the servers may be allowed. If not allowed then the leader will cycle back to a mesh gateway address through the ring. When attempting to dial the remote servers we retry up to a fixed timeout. If using mesh gateways we also have an initial wait in order to allow for the mesh gateways to configure themselves. Note that if we encounter a permission denied error we do not retry since that error indicates that the secret in the peering token is invalid.	2 years ago
malizz	b0b0cbb8ee	increase protobuf size limit for cluster peering (#14976)	2 years ago
Jasmine W	e04c56a3a1	Merge pull request #14975 from hashicorp/ui/bugfix/peering-misspelling ... UI: Copy changes for peering detail page	2 years ago
Derek Menteer	4e140c98bc	Address PR comments.	2 years ago
Derek Menteer	1e394da400	Disallow peering to the same cluster.	2 years ago
wenincode	12a24a6d8c	Update peers show tests to look for serverAddresses tab	2 years ago
Jasmine W	09513e7ef2	Update index.js	2 years ago