github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
11,483 Commits
1,705 Branches
457 Tags
690 MiB
Commit Graph

11483 Commits (8e9fca9be665bbe2438727738d4e4b620961ad14)

Author SHA1 Message Date
Matt Keeler bec3fb7c18
Some boilerplate to allow for ACL Bootstrap disabling configurability 2020-04-28 09:42:46 -04:00
Matt Keeler 8c545b5206
Update mapstructure to v1.2.3 
This release contains a fix to prevent duplicate keys in the Metadata after decoding where the output value contains pointer fields.
 2020-04-28 09:33:16 -04:00
Mike Wickett 2a250f39a5 website: add alert banner 2020-04-28 08:56:21 -04:00
Freddy 137a2c32c6
TLS Origination for Terminating Gateways (#7671) 2020-04-27 16:25:37 -06:00
Freddy c1dc2f12f7
Terminating Gateways Proxy Configuration (#7631) 2020-04-27 14:41:33 -06:00
R.B. Boyer 16edcbe682 update changelog 2020-04-27 14:30:27 -05:00
R.B. Boyer 051fc0ee07 update changelog 2020-04-27 13:17:03 -05:00
freddygv 4710410cb5 Remove fallthrough 2020-04-27 12:00:14 -06:00
freddygv d1e6d668c2 Add authz filter when creating filterchain 2020-04-27 11:08:41 -06:00
freddygv 034d7d83d4 Fix snapshot IsEmpty 2020-04-27 11:08:41 -06:00
freddygv 3afe816a94 Clean up dead code, issue addressed by passing ws to serviceGatewayNodes 2020-04-27 11:08:41 -06:00
Freddy 3b1b24c2ce Update agent/proxycfg/state_test.go 2020-04-27 11:08:41 -06:00
freddygv eddd5bd73b PR comments 2020-04-27 11:08:41 -06:00
freddygv 77bb2f1002 Fix internal endpoint test 2020-04-27 11:08:41 -06:00
freddygv d82e7e8c2a Fix listener error handling 2020-04-27 11:08:41 -06:00
freddygv 6abc71f915 Skip filter chain creation if no client cert 2020-04-27 11:08:41 -06:00
freddygv 915db10903 Avoid deleting mappings for services linked to other gateways on dereg 2020-04-27 11:08:41 -06:00
freddygv cd28d4125d Re-fix bug in CheckConnectServiceNodes 2020-04-27 11:08:41 -06:00
freddygv 09a8e5f36d Use golden files for gateway certs and fix listener test flakiness 2020-04-27 11:08:41 -06:00
freddygv 840d27a9d5 Un-nest switch in gateway update handler 2020-04-27 11:08:40 -06:00
freddygv 2a85e44519 Add envoy integration tests 2020-04-27 11:08:40 -06:00
freddygv c0e1751878 Allow terminating-gateway to setup listener before servicegroups are known 2020-04-27 11:08:40 -06:00
freddygv 913b13f31f Add subset support 2020-04-27 11:08:40 -06:00
freddygv 9f233dece2 Fix ConnectQueryBlocking test 2020-04-27 11:08:40 -06:00
freddygv 86342e4bca Fix bug in CheckConnectServiceNodes 
Previously, if a blocking query called CheckConnectServiceNodes
before the gateway-services memdb table had any entries,
a nil watchCh would be returned when calling serviceTerminatingGatewayNodes.
This means that the blocking query would not fire if a gateway config entry
was added after the watch started.

In cases where the blocking query started on proxy registration,
the proxy could potentially never become aware of an upstream endpoint
if that upstream was going to be represented by a gateway.
 2020-04-27 11:08:40 -06:00
freddygv 219c78e586 Add xds cluster/listener/endpoint management 2020-04-27 11:08:40 -06:00
freddygv 24207226ca Add proxycfg state management for terminating-gateways 2020-04-27 11:07:06 -06:00
freddygv c9385129ae Require service:read to read terminating-gateway config 2020-04-27 11:07:06 -06:00
Matt Keeler a1648c61ae
A couple testing helper updates (#7694) 2020-04-27 12:17:38 -04:00
R.B. Boyer 58a597693b update changelog 2020-04-24 17:36:06 -05:00
R.B. Boyer b989967791
cli: ensure that 'snapshot save' is fsync safe and also only writes to the requested file on success (#7698) 2020-04-24 17:34:47 -05:00
R.B. Boyer c0a32c802a update changelog 2020-04-24 17:19:59 -05:00
R.B. Boyer 5f1518c37c
cli: fix usage of gzip.Reader to better detect corrupt snapshots during save/restore (#7697) 2020-04-24 17:18:56 -05:00
Kit Patella df14a7c694
Merge pull request #7699 from pierresouchay/fix_comment_misplaced 
Fixed comment on wrong line
 2020-04-24 10:09:58 -07:00
Chris Piraino 217a03550b
Merge pull request #7677 from hashicorp/ingress/http-routing 
Ingress gateways support discovery chain features and routing via mesh gateways

Signed-off-by: Kyle Havlovitz <kylehav@gmail.com>
 2020-04-24 10:18:55 -05:00
Chris Piraino ecc8a2d6f7 Allow ingress gateways to route through mesh gateways 
- Adds integration test for mesh gateways local + remote modes with ingress
- ingress golden files updated for mesh gateway endpoints
 2020-04-24 09:31:32 -05:00
Chris Piraino cb9df538d5 Add all the xds ingress tests 
This commit copies many of the connect-proxy xds testcases and reuses
for ingress gateways. This allows us to more easily see changes to the
envoy configuration when make updates to ingress gateways.
 2020-04-24 09:31:32 -05:00
Chris Piraino 0ca9b606e8 Pull out setupTestVariationConfigEntriesAndSnapshot in proxycfg 
This allows us to reuse the same variations for ingress gateway testing
 2020-04-24 09:31:32 -05:00
Kyle Havlovitz e7b1ee55de Add http routing support and integration test to ingress gateways 2020-04-24 09:31:32 -05:00
Hans Hasselberg 1194fe441f
auto_encrypt: add validations for auto_encrypt.{tls,allow_tls} (#7704) 
Fixes https://github.com/hashicorp/consul/issues/7407.
 2020-04-24 15:51:38 +02:00
Pierre Souchay 5e79efc80f Fixed comment on wrong line. 
While investigating and fixing an issue on our 1.5.1 branch,
I saw you also/already fixed the bug I found (tags not updated
for existing servers), but comment is misplaced.
 2020-04-24 01:15:15 +02:00
Freddy 3956cff60f
Fix check deletion in anti-entropy sync (#7690) 
* Incorporate entMeta into service equality check
 2020-04-23 10:16:50 -06:00
Daniel Nephin d6e22a77e3 Remove deadcode 
This UnmarshalJSON was never called. The decode function is passed a map[string]interface
so it has no way of knowing that this function exists.

Tested by adding a panic to this function and watching the tests pass.

I attempted to use this Unmarshal function by passing in the type, however the tests
showed that it does not work. The test was failing to parse the request.

If the performance of this endpoint is indeed critical we can solve the problem by adding
all the fields to the request struct and handling the normalziation without a custom Unmarshal.
 2020-04-22 16:48:28 -04:00
Daniel Nephin ff0d894101 agent: remove deadcode that called lib.TranslateKeys 
Move the last remaining function from agent/config.go to the one place
it was called.
 2020-04-22 13:41:43 -04:00
Daniel Nephin 59a606e938
Merge pull request #7680 from hashicorp/dnephin/upgrade-gotestsum 
ci: Upgrade gotestsum to v0.4.2
 2020-04-21 14:58:28 -04:00
Daniel Nephin 1dff855845 Upgrade gotestsum to latest 
0.4.2 should fix some bugs in test2json causing missing output.
 2020-04-21 14:05:46 -04:00
Alvin Huang 47832cc81d
netlify CLI outputs "Website Draft URL" now instead of "Live Draft URL" (#7676) 2020-04-20 15:57:34 -04:00
Chris Piraino 115d2d5db5
Expect default enterprise metadata in gateway tests (#7664) 
This makes it so that both OSS and enterprise tests pass correctly

In the api tests, explicitly set namespace to empty string so that tests
can be shared.
 2020-04-20 09:02:35 -05:00
Kit Patella d5cc91ecbb
Merge pull request #7665 from hashicorp/refactor/http/parseTokenWithDefault 
http: rename paresTokenResolveProxy to parseTokenWithDefault
 2020-04-17 13:42:03 -07:00
Kit Patella ccece5cd21 http: rename paresTokenResolveProxy to parseTokenWithDefault 2020-04-17 13:35:24 -07:00