consul

Tree: 90ae5ffd16

Author	SHA1	Message	Date
A.J. Sanon	90ae5ffd16	Add ECS audit logging docs (#13729 )	2 years ago
Michael Klein	bcbc36ecec	Improve peered service empty downstreams message (#13854 )	2 years ago
Daniel Upton	a8df87f574	proxycfg-glue: server-local implementation of `ExportedPeeredServices` This is the OSS portion of enterprise PR 2377. Adds a server-local implementation of the proxycfg.ExportedPeeredServices interface that sources data from a blocking query against the server's state store.	2 years ago
Eric Haberkorn	501089292e	Add Cluster Peering Failover Support to Prepared Queries (#13835 ) Add peering failover support to prepared queries	2 years ago
Nitya Dhanushkodi	f47319b7c6	update generate token endpoint to take external addresses (#13844 ) Update generate token endpoint (rpc, http, and api module) If ServerExternalAddresses are set, it will override any addresses gotten from the "consul" service, and be used in the token instead, and dialed by the dialer. This allows for setting up a load balancer for example, in front of the consul servers.	2 years ago
alex	58d66a002e	Merge pull request #13845 from hashicorp/acpana/peering-rename-oss [SYNC] Rename peering internal to ~	2 years ago
acpana	12b773ab02	Rename peering internal to ~ sync ENT to 5679392c81 Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
Luke Kysow	0c87be0845	peering: Add heartbeating to peering streams (#13806 ) * Add heartbeating to peering streams	2 years ago
Chris Thain	af40b9b144	Add Consul Lambda integration tests (#13770 )	2 years ago
John Cowen	c9898fb38e	ui: Change initiate > establish for peering the modal tab (#13839 )	2 years ago
John Cowen	e2908679c6	ui: Allow searching for peerings by ID (#13837 )	2 years ago
John Cowen	b960cb671f	ui: Remove peering detail page (#13836 ) * ui: Remove links to the peering detail page * 404 everything	2 years ago
Michael Klein	2f81c7b292	ui: peered services only show instance- and tags-tabs (#13840 ) * Only show instances- and tags-tab peered services * Adapt show-with-slashes test to peering changes Tests always have the peering feature turned on and the default service we load from the mock-api will be peered. This is why the topology view of the service.show page will not be accessible in the updated test it will show the instances instead. This change does not change what the test is actually testing so just putting changing to the now different url is fine.	2 years ago
Michael Klein	b1a39fc12f	ui: Surface peer info in nodes.show view (#13832 )	2 years ago
Michael Klein	07f30687d5	ui: Update peerings empty state copy (#13834 )	2 years ago
Daniel Upton	3655802fdc	proxycfg-glue: server-local implementation of `PeeredUpstreams` This is the OSS portion of enterprise PR 2352. It adds a server-local implementation of the proxycfg.PeeredUpstreams interface based on a blocking query against the server's state store. It also fixes an omission in the Virtual IP freeing logic where we were never updating the max index (and therefore blocking queries against VirtualIPsForAllImportedServices would not return on service deletion).	2 years ago
Krastin Krastev	8d4baafd84	Merge pull request #12592 from krastin/krastin/docs/sidecarservice-typo docs: clean-up sidecar service expanded definition	2 years ago
Krastin Krastev	25b6148aa8	Merge branch 'main' into krastin/docs/sidecarservice-typo	2 years ago
Jared Kirschner	e0d9f07c28	Merge pull request #13682 from hashicorp/docs/deemphasize-token-query-param docs: suggest using token header, not query param	2 years ago
Luke Kysow	c411e6b326	Add send mutex to protect against concurrent sends (#13805 )	2 years ago
Jared Kirschner	443f4bc2a2	docs: suggest using token header, not query param	2 years ago
Jared Kirschner	281892ab7c	Merge pull request #13405 from hashicorp/jkirschner-hashicorp-patch-3 docs: correct Vault CA multiple namespace support	2 years ago
Luke Kysow	741c906b0d	Add heartbeat proto to peer stream (#13804 )	2 years ago
Michael Klein	cab88bcd1e	ui: no partition and peer in bucket-list at the same time (#13812 ) * don't show partition / peer at the same time in bucket-list * use bucket-list in intentions table * add bucket-list tests * Simplify bucket list - match old behavior Refactor the bucket-list component to be easier to grok and match how the old template based approach worked. I.e. do not surface partition or namespace when it matches the passed nspace or partition property. * Update docs for bucket-list * fix linting	2 years ago
John Cowen	6be4a0629a	ui: Add Peer Form (#13794 )	2 years ago
John Cowen	854b5a93e7	ui: Peer token use form (#13792 )	2 years ago
Evan Culver	4116537b83	connect: Add support for Envoy 1.23, remove 1.19 (#13807 )	2 years ago
Paul Glass	77afe0e76e	Extract AWS auth implementation out of Consul (#13760 )	2 years ago
Chris S. Kim	495936300e	Make envoy resources for inferred peered upstreams (#13758 ) Peered upstreams has a separate loop in xds from discovery chain upstreams. This PR adds similar but slightly modified code to add filters for peered upstream listeners, clusters, and endpoints in the case of transparent proxy.	2 years ago
alex	de5a991d8c	peering: refactor reconcile, cleanup (#13795 ) Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
Ranjandas	eb4f479e7e	Update Single DC Multi K8S doc (#13278 ) * Updated note with details of various K8S CNI options Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	2 years ago
Luke Kysow	bb943bc77c	makefile: give better error for tool installed by wrong package (#13797 ) I had protoc-gen-go installed through `google.golang.org/protobuf` instead of `github.com/golang/protobuf` and `make proto` was failing silently. This change will ensure you get an error: ``` protoc-gen-go is already installed by module "google.golang.org/protobuf" but should be installed by module "github.com/golang/protobuf". Delete it and re-run to re-install. ```	2 years ago
Michael Klein	dc84ea9f85	ui: chore - fix CI test-suite (#13799 ) * fix linting issue * Update datacenter selector page-object to not include separator. * change non-valid li to div for singe dc name	2 years ago
Jared Kirschner	067272b53f	Merge pull request #13787 from hashicorp/fix-acl-read-token-self-expanded-panic Fix panic on acl token read with -self and -expanded	2 years ago
Luke Kysow	e8d965e56f	peerstream: set keepalive enforcement to 15s (#13796 ) The client is set to send keepalive pings every 30s. The server keepalive enforcement must be set to a number less than that, otherwise it will disconnect clients for sending pings too often. MinTime governs the minimum amount of time between pings.	2 years ago
Jared Kirschner	927033e672	Fix panic on acl token read with -self and -expanded	2 years ago
alex	7c0daeade8	fix leader annotation (#13786 ) Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
alex	a9ae2ff4fa	peering: track exported services (#13784 ) Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>	2 years ago
John Cowen	d6dcef18c8	ui: Add peer token generation form (#13755 ) * ui: Add peer token generation form	2 years ago
John Cowen	56446d540a	ui: Adds Peer initiation form (#13754 )	2 years ago
John Cowen	24417d94ed	ui: Add a modal.opened property for inspecting whether the modal is open (#13723 ) * ui: Add a modal.opened property for inspecting whether the modal is open * merge isOpen setting into the exiting event handler * Revert to multiple listeners, plus comment to explain * Wrap close in an afterRender	2 years ago
Michael Klein	cdf40a6ae6	ui: wan federation message dc-dropdown (#13753 ) * Only display dc dropdown when more than one dc is available * Add wan federation message to dc dropdown * Add test for conditionally displaying dc dropdown * Move single datacenter indicator into datacenter selector * Add `DATACENTERS` seperator dc dropdown * "fix" unnecessary margin-top in dc dropdown	2 years ago
Krastin Krastev	49ac06a51e	docs: clean-up expanded service def	2 years ago
R.B. Boyer	cd513aeead	peerstream: require a resource subscription to receive updates of that type (#13767 ) This mimics xDS's discovery protocol where you must request a resource explicitly for the exporting side to send those events to you. As part of this I aligned the overall ResourceURL with the TypeURL that gets embedded into the encoded protobuf Any construct. The CheckServiceNodes is now wrapped in a better named "ExportedService" struct now.	2 years ago
R.B. Boyer	c737301093	peerstream: fix test assertions (#13780 )	2 years ago
Luke Kysow	46381b1a7f	Add docs for peerStreamServer vs peeringServer. (#13781 )	2 years ago
Luke Kysow	ca3d7c964c	peerstream: dialer should reconnect when stream closes (#13745 ) * peerstream: dialer should reconnect when stream closes If the stream is closed unexpectedly (i.e. when we haven't received a terminated message), the dialer should attempt to re-establish the stream. Previously, the `HandleStream` would return `nil` when the stream was closed. The caller then assumed the stream was terminated on purpose and so didn't reconnect when instead it was stopped unexpectedly and the dialer should have attempted to reconnect.	2 years ago
R.B. Boyer	0678bf91a7	test: fix flaky test TestAPI_CatalogNodes (#13779 )	2 years ago
R.B. Boyer	bb4d4040fb	server: ensure peer replication can successfully use TLS over external gRPC (#13733 ) Ensure that the peer stream replication rpc can successfully be used with TLS activated. Also: - If key material is configured for the gRPC port but HTTPS is not enabled now TLS will still be activated for the gRPC port. - peerstream replication stream opened by the establishing-side will now ignore grpc.WithBlock so that TLS errors will bubble up instead of being awkwardly delayed or suppressed	2 years ago
alex	adb5ffa1a6	peering: track imported services (#13718 )	2 years ago

1 2 3 4 5 ...

17860 Commits (90ae5ffd1615539ab2c89df9eaf0c8451b92ed9d) All Branches Search

17860 Commits (90ae5ffd1615539ab2c89df9eaf0c8451b92ed9d)

All Branches