consul

Tree: 8ed49ea4d0

Author	SHA1	Message	Date
Chris S. Kim	8ed49ea4d0	Update envoy metrics label extraction for peered clusters and listeners (#13818 ) Now that peered upstreams can generate envoy resources (#13758), we need a way to disambiguate local from peered resources in our metrics. The key difference is that datacenter and partition will be replaced with peer, since in the context of peered resources partition is ambiguous (could refer to the partition in a remote cluster or one that exists locally). The partition and datacenter of the proxy will always be that of the source service. Regexes were updated to make emitting datacenter and partition labels mutually exclusive with peer labels. Listener filter names were updated to better match the existing regex. Cluster names assigned to peered upstreams were updated to be synthesized from local peer name (it previously used the externally provided primary SNI, which contained the peer name from the other side of the peering). Integration tests were updated to assert for the new peer labels.	2 years ago
Michael Klein	f7f26220ba	ui: add peers to node search (#13875 ) * Make nodes searchable by peer * fix only surface peer filter on service search when feature is on	2 years ago
DanStough	dfd50d68ed	chore: ignore vscode files	2 years ago
DanStough	2da8949d78	feat: convert destination address to slice	2 years ago
Luke Kysow	cf4af7c765	Re-document peering disabled (#13879 ) Change wording because it does have effect on clients because it disables peering in the UI served from that client.	2 years ago
Freddy	f03cca7576	[OSS] Add ACL enforcement to peering endpoints (#13878 )	2 years ago
Matt Keeler	58e4d8235b	Enable/Disable Peering Support in the UI (#13816 ) We enabled/disable based on the config flag.	2 years ago
freddygv	b544ce6485	Add ACL enforcement to peering endpoints	2 years ago
alex	279d458e6e	peering: use ShouldDial to validate peer role (#13823 ) Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
Luke Kysow	a1e6d69454	peering: add config to enable/disable peering (#13867 ) * peering: add config to enable/disable peering Add config: ``` peering { enabled = true } ``` Defaults to true. When disabled: 1. All peering RPC endpoints will return an error 2. Leader won't start its peering establishment goroutines 3. Leader won't start its peering deletion goroutines	2 years ago
Kyle Havlovitz	0786517b56	Merge pull request #13847 from hashicorp/gateway-goroutine-leak Fix goroutine leaks in proxycfg when using ingress gateway	2 years ago
Freddy	f99df57840	[OSS] Add new peering ACL rule (#13848 ) This commit adds a new ACL rule named "peering" to authorize actions taken against peering-related endpoints. The "peering" rule has several key properties: - It is scoped to a partition, and MUST be defined in the default namespace. - Its access level must be "read', "write", or "deny". - Granting an access level will apply to all peerings. This ACL rule cannot be used to selective grant access to some peerings but not others. - If the peering rule is not specified, we fall back to the "operator" rule and then the default ACL rule.	2 years ago
NicoletaPopoviciu	a3cdcf0c86	docs: Updates k8s annotation docs (#13809 ) * Updates k8s annotation docs Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: David Yu <dyu@hashicorp.com>	2 years ago
alex	927cee692b	peering: emit exported services count metric (#13811 ) Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
Matt Keeler	77917b6b5d	Rename some protobuf package names to be fqdn like (#13861 ) These are used in various bits of the wire format (for gRPC) and internally with Go’s registry so we want to namespace things properly.	2 years ago
Kyle Havlovitz	6e1dd05a19	Add changelog note	2 years ago
A.J. Sanon	90ae5ffd16	Add ECS audit logging docs (#13729 )	2 years ago
Michael Klein	bcbc36ecec	Improve peered service empty downstreams message (#13854 )	2 years ago
Daniel Upton	a8df87f574	proxycfg-glue: server-local implementation of `ExportedPeeredServices` This is the OSS portion of enterprise PR 2377. Adds a server-local implementation of the proxycfg.ExportedPeeredServices interface that sources data from a blocking query against the server's state store.	2 years ago
Eric Haberkorn	501089292e	Add Cluster Peering Failover Support to Prepared Queries (#13835 ) Add peering failover support to prepared queries	2 years ago
Nitya Dhanushkodi	f47319b7c6	update generate token endpoint to take external addresses (#13844 ) Update generate token endpoint (rpc, http, and api module) If ServerExternalAddresses are set, it will override any addresses gotten from the "consul" service, and be used in the token instead, and dialed by the dialer. This allows for setting up a load balancer for example, in front of the consul servers.	2 years ago
alex	58d66a002e	Merge pull request #13845 from hashicorp/acpana/peering-rename-oss [SYNC] Rename peering internal to ~	2 years ago
acpana	12b773ab02	Rename peering internal to ~ sync ENT to 5679392c81 Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
Luke Kysow	0c87be0845	peering: Add heartbeating to peering streams (#13806 ) * Add heartbeating to peering streams	2 years ago
Chris Thain	af40b9b144	Add Consul Lambda integration tests (#13770 )	2 years ago
John Cowen	c9898fb38e	ui: Change initiate > establish for peering the modal tab (#13839 )	2 years ago
John Cowen	e2908679c6	ui: Allow searching for peerings by ID (#13837 )	2 years ago
John Cowen	b960cb671f	ui: Remove peering detail page (#13836 ) * ui: Remove links to the peering detail page * 404 everything	2 years ago
Michael Klein	2f81c7b292	ui: peered services only show instance- and tags-tabs (#13840 ) * Only show instances- and tags-tab peered services * Adapt show-with-slashes test to peering changes Tests always have the peering feature turned on and the default service we load from the mock-api will be peered. This is why the topology view of the service.show page will not be accessible in the updated test it will show the instances instead. This change does not change what the test is actually testing so just putting changing to the now different url is fine.	2 years ago
Michael Klein	b1a39fc12f	ui: Surface peer info in nodes.show view (#13832 )	2 years ago
Michael Klein	07f30687d5	ui: Update peerings empty state copy (#13834 )	2 years ago
Daniel Upton	3655802fdc	proxycfg-glue: server-local implementation of `PeeredUpstreams` This is the OSS portion of enterprise PR 2352. It adds a server-local implementation of the proxycfg.PeeredUpstreams interface based on a blocking query against the server's state store. It also fixes an omission in the Virtual IP freeing logic where we were never updating the max index (and therefore blocking queries against VirtualIPsForAllImportedServices would not return on service deletion).	2 years ago
Krastin Krastev	8d4baafd84	Merge pull request #12592 from krastin/krastin/docs/sidecarservice-typo docs: clean-up sidecar service expanded definition	2 years ago
Krastin Krastev	25b6148aa8	Merge branch 'main' into krastin/docs/sidecarservice-typo	2 years ago
Jared Kirschner	e0d9f07c28	Merge pull request #13682 from hashicorp/docs/deemphasize-token-query-param docs: suggest using token header, not query param	2 years ago
Luke Kysow	c411e6b326	Add send mutex to protect against concurrent sends (#13805 )	2 years ago
Jared Kirschner	443f4bc2a2	docs: suggest using token header, not query param	2 years ago
Jared Kirschner	281892ab7c	Merge pull request #13405 from hashicorp/jkirschner-hashicorp-patch-3 docs: correct Vault CA multiple namespace support	2 years ago
Kyle Havlovitz	0be7d923dc	Cancel upstream watches when the discovery chain has been removed	2 years ago
Kyle Havlovitz	31318d7049	Fix duplicate Notify calls for discovery chains in ingress gateways	2 years ago
Luke Kysow	741c906b0d	Add heartbeat proto to peer stream (#13804 )	2 years ago
Michael Klein	cab88bcd1e	ui: no partition and peer in bucket-list at the same time (#13812 ) * don't show partition / peer at the same time in bucket-list * use bucket-list in intentions table * add bucket-list tests * Simplify bucket list - match old behavior Refactor the bucket-list component to be easier to grok and match how the old template based approach worked. I.e. do not surface partition or namespace when it matches the passed nspace or partition property. * Update docs for bucket-list * fix linting	2 years ago
John Cowen	6be4a0629a	ui: Add Peer Form (#13794 )	2 years ago
John Cowen	854b5a93e7	ui: Peer token use form (#13792 )	2 years ago
Evan Culver	4116537b83	connect: Add support for Envoy 1.23, remove 1.19 (#13807 )	2 years ago
Paul Glass	77afe0e76e	Extract AWS auth implementation out of Consul (#13760 )	2 years ago
Chris S. Kim	495936300e	Make envoy resources for inferred peered upstreams (#13758 ) Peered upstreams has a separate loop in xds from discovery chain upstreams. This PR adds similar but slightly modified code to add filters for peered upstream listeners, clusters, and endpoints in the case of transparent proxy.	2 years ago
alex	de5a991d8c	peering: refactor reconcile, cleanup (#13795 ) Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
Ranjandas	eb4f479e7e	Update Single DC Multi K8S doc (#13278 ) * Updated note with details of various K8S CNI options Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
Luke Kysow	bb943bc77c	makefile: give better error for tool installed by wrong package (#13797 ) I had protoc-gen-go installed through `google.golang.org/protobuf` instead of `github.com/golang/protobuf` and `make proto` was failing silently. This change will ensure you get an error: ``` protoc-gen-go is already installed by module "google.golang.org/protobuf" but should be installed by module "github.com/golang/protobuf". Delete it and re-run to re-install. ```	2 years ago

1 2 3 4 5 ...

17878 Commits (8ed49ea4d045c0e0803b3eb9c309afbbe379b9e4) All Branches Search

17878 Commits (8ed49ea4d045c0e0803b3eb9c309afbbe379b9e4)

All Branches