852 Commits (917a9e63d5066219d5162d9ebe53b3db66985fa8)

Author	SHA1	Message	Date
Mitchell Hashimoto	917a9e63d5	agent: check cache hit count to verify CA root caching, background update	7 years ago
Mitchell Hashimoto	6902d721d6	agent: initialize the cache and cache the CA roots	7 years ago
Mitchell Hashimoto	c329b4cb34	agent/cache: partition by DC/ACL token	7 years ago
Mitchell Hashimoto	e3c1162881	agent/cache: Reorganize some files, RequestInfo struct, prepare for partitioning	7 years ago
Mitchell Hashimoto	b0db5657c4	agent/cache: ConnectCA roots caching type	7 years ago
Mitchell Hashimoto	975be337a9	agent/cache: blank cache key means to always fetch	7 years ago
Mitchell Hashimoto	1cfb0f1922	agent/cache: initial kind-of working cache	7 years ago
Kyle Havlovitz	33418afd3c	Add cross-signing mechanism to root rotation	7 years ago
Kyle Havlovitz	d83fbfc766	Add the root rotation mechanism to the CA config endpoint	7 years ago
Kyle Havlovitz	f9d92d795e	Have the built in CA store its state in raft	7 years ago
Kyle Havlovitz	30c1973e8b	Fix the testing endpoint's root set op	7 years ago
Kyle Havlovitz	75f62e3117	Update the CA config endpoint to enable GETs	7 years ago
Kyle Havlovitz	ab737ef0f8	Hook the CA RPC endpoint into the provider interface	7 years ago
Kyle Havlovitz	1f6501895f	Add CA bootstrapping on establishing leadership	7 years ago
Kyle Havlovitz	682f105c7c	Add the bootstrap config for the CA	7 years ago
Kyle Havlovitz	9fc33d2a62	Add the CA provider interface and built-in provider	7 years ago
Kyle Havlovitz	1787f88618	Add CA config set to fsm operations	7 years ago
Kyle Havlovitz	6b3416e480	Add the Connect CA config to the state store	7 years ago
Paul Banks	36dbd878c9	Adds `api` client code and tests for new Proxy Config endpoint, registering with proxy and seeing proxy config in /agent/services list.	7 years ago
Paul Banks	730da74369	Fix various test failures and vet warnings. ... Intention de-duplication in previously merged PR actualy failed some tests that were not caught be me or CI. I ran the test files for state changes but they happened not to trigger this case so I made sure they did first and then fixed. That fixed some upstream intention endpoint tests that I'd not run as part of testing the previous fix.	7 years ago
Paul Banks	1e72ad66f5	Refactor localBlockingQuery to use memdb.WatchSet. Much simpler and correct as a bonus!	7 years ago
Paul Banks	8d09381b96	Super ugly hack to get TeamCity build to work for this PR without adding a vendor that is being added elsewhere and will conflict...	7 years ago
Paul Banks	d73f079d0f	Add X-Consul-ContentHash header; implement removing all proxies; add load/unload test.	7 years ago
Paul Banks	2a69663448	Agent Connect Proxy config endpoint with hash-based blocking	7 years ago
Paul Banks	3e3f0e1f31	HTTP agent registration allows proxy to be defined.	7 years ago
Paul Banks	e6071051cf	Added connect proxy config and local agent state setup on boot.	7 years ago
Paul Banks	88541bba17	Add tests all the way up through the endpoints to ensure duplicate src/destination is supported and so ultimately deny/allow nesting works. ... Also adds a sanity check test for `api.Agent().ConnectAuthorize()` and a fix for a trivial bug in it.	7 years ago
Paul Banks	ed9f07c361	Allow duplicate source or destination, but enforce uniqueness across all four.	7 years ago
Paul Banks	10db79c8ae	Rework connect/proxy and command/connect/proxy. End to end demo working again	7 years ago
Paul Banks	26e65f6bfd	connect.Service based implementation after review feedback.	7 years ago
Mitchell Hashimoto	95da20ffd7	agent: rename authorize param ClientID to ClientCertURI	7 years ago
Mitchell Hashimoto	6e57233913	agent: add TODO for verification	7 years ago
Mitchell Hashimoto	5a47a53c70	acl: IntentionDefault => IntentionDefaultAllow	7 years ago
Mitchell Hashimoto	ac72a0c5fd	agent: ACL checks for authorize, default behavior	7 years ago
Mitchell Hashimoto	6dc2db94ea	agent/structs: String format for Intention, used for logging	7 years ago
Mitchell Hashimoto	fb7bccc690	agent: bolster commenting for clearer understandability	7 years ago
Mitchell Hashimoto	9a987d6452	agent: default deny on connect authorize endpoint	7 years ago
Mitchell Hashimoto	86a8ce45b9	agent: /v1/agent/connect/authorize is functional, with tests	7 years ago
Mitchell Hashimoto	3ef0b93159	agent/connect: Authorize for CertURI	7 years ago
Mitchell Hashimoto	70d1d5bf06	agent: get rid of method checks since they're done in the http layer	7 years ago
Paul Banks	9309422fd9	Add Connect agent, catalog and health endpoints to api Client	7 years ago
Mitchell Hashimoto	845f7cd8ad	agent/consul/state: ensure exactly one active CA exists when setting	7 years ago
Mitchell Hashimoto	ffe4cdfc15	agent/connect: support any values in the URL	7 years ago
Mitchell Hashimoto	75bf0e1638	agent/connect: support SpiffeIDSigning	7 years ago
Mitchell Hashimoto	17ca8ad083	agent/connect: rename SpiffeID to CertURI	7 years ago
Mitchell Hashimoto	0cbcb07d61	agent/connect: use proper keyusage fields for CA and leaf	7 years ago
Mitchell Hashimoto	73442ada5a	agent/connect: address PR feedback for the CA.go file	7 years ago
Mitchell Hashimoto	d28ee70a56	agent: implement an always-200 authorize endpoint	7 years ago
Mitchell Hashimoto	a54d1af421	agent/consul: encode issued cert serial number as hex encoded	7 years ago
Mitchell Hashimoto	4210003c86	agent/structs: hide some fields from JSON	7 years ago