11398 Commits (9b363e9f237b12e79bdee6eb9fdfe91169449244)

 

All Branches   

Search

Author	SHA1	Message	Date
Jono Sosulska	9b363e9f23	Fix spelling of deregister (#7804)	5 years ago
Denislav Denov	f04966d69c	Merge pull request #7815 from hashicorp/denislavdenov-patch-1 ... Update license.mdx	5 years ago
Denislav Denov	6cb782708f	Update website/pages/docs/commands/license.mdx ... Co-authored-by: danielehc <40759828+danielehc@users.noreply.github.com>	5 years ago
Denislav Denov	2b39b21f0f	Update license.mdx ... Hello team, I noticed that the reset part of the consul license command was missing in the documentation so I added it and created this PR.	5 years ago
R.B. Boyer	82379779a2	cli: oss refactors to support making the auth method CLI aware of namespace rules in enterprise (#7812)	5 years ago
Chris Piraino	f55e20a2f7	Allow ingress gateways to send empty clusters, routes, and listeners (#7795) ... This is useful when updating an config entry with no services, and the expected behavior is that envoy closes all listeners and clusters. We also allow empty routes because ingress gateways name route configurations based on the port of the listener, so it is important we remove any stale routes. Then, if a new listener with an old port is added, we will not have to deal with stale routes hanging around routing to the wrong place. Endpoints are associated with clusters, and thus by deleting the clusters we don't have to care about sending empty endpoint responses.	5 years ago
Jeff Escalante	f0df674e07	add alert banner to website	5 years ago
Chris Piraino	5105bf3d67	Require individual services in ingress entry to match protocols (#7774) ... We require any non-wildcard services to match the protocol defined in the listener on write, so that we can maintain a consistent experience through ingress gateways. This also helps guard against accidental misconfiguration by a user. - Update tests that require an updated protocol for ingress gateways	5 years ago
Freddy	b069887b2a	Remove timeout and call to Fatal from goroutine (#7797)	5 years ago
R.B. Boyer	59b03b18d0	update changelog	5 years ago
R.B. Boyer	56ea112908	test: make auth method cli crud test work in both oss and ent (#7800)	5 years ago
R.B. Boyer	db870ba92b	test: make auth method cli crud test helper ignore the default namespace (#7799)	5 years ago
Chris Piraino	01e89f03ea	Merge pull request #7678 from hashicorp/ingress/host-header-routing ... Allow ingress gateways to route traffic based on Host header	5 years ago
Chris Piraino	905279f5d1	A proxy-default config entry only exists in the default namespace	5 years ago
Chris Piraino	d498a0afc9	Correctly set a namespace label in the required domain for xds routes ... If an upstream is not in the default namespace, we expect DNS requests to be served over "<service-name>.ingress.<namespace>.*"	5 years ago
Chris Piraino	114a18e890	Remove outdated comment	5 years ago
Chris Piraino	d8517bd6fd	Better document wildcard specifier interactions	5 years ago
Chris Piraino	45e635286a	Re-add comment on connect-proxy virtual hosts	5 years ago
Kyle Havlovitz	f9672f9bf1	Make sure IngressHosts isn't parsed during JSON decode	5 years ago
Chris Piraino	c44f877758	Comment why it is ok to expect upstreams slice to not be empty	5 years ago
Chris Piraino	881760f701	xds: Use only the port number as the configured route name ... This removes duplication of protocol from the stats_prefix	5 years ago
Kyle Havlovitz	89e6b16815	Filter wildcard gateway services to match listener protocol ... This now requires some type of protocol setting in ingress gateway tests to ensure the services are not filtered out. - small refactor to add a max(x, y) function - Use internal configEntryTxn function and add MaxUint64 to lib	5 years ago
Chris Piraino	f40833d094	Allow Hosts field to be set on an ingress config entry ... - Validate that this cannot be set on a 'tcp' listener nor on a wildcard service. - Add Hosts field to api and test in consul config write CLI - xds: Configure envoy with user-provided hosts from ingress gateways	5 years ago
Chris Piraino	b73a13fc9e	Remove service_subset field from ingress config entry ... We decided that this was not a useful MVP feature, and just added unnecessary complexity	5 years ago
Kyle Havlovitz	711d1389aa	Support multiple listeners referencing the same service in gateway definitions	5 years ago
Kyle Havlovitz	247f9eaf13	Allow ingress gateways to route traffic based on Host header ... This commit adds the necessary changes to allow an ingress gateway to route traffic from a single defined port to multiple different upstream services in the Consul mesh. To do this, we now require all HTTP requests coming into the ingress gateway to specify a Host header that matches "<service-name>.*" in order to correctly route traffic to the correct service. - Differentiate multiple listener's route names by port - Adds a case in xds for allowing default discovery chains to create a route configuration when on an ingress gateway. This allows default services to easily use host header routing - ingress-gateways have a single route config for each listener that utilizes domain matching to route to different services.	5 years ago
R.B. Boyer	a854e4d9c5	acl: oss plumbing to support auth method namespace rules in enterprise (#7794) ... This includes website docs updates.	5 years ago
Preetha	760368bf1b	Merge pull request #7792 from hashicorp/changelog-fixup ... Remove duplicated entries in CHANGELOG.md	5 years ago
Preetha	1d5f2fe9b0	Remove duplicated entries in CHANGELOG.md ... Remove some duplicated entries in the unreleased section of the changelog that were released in 1.7.3	5 years ago
Hans Hasselberg	1d5f12e823	Update CHANGELOG.md	5 years ago
Luke Kysow	c33a241438	Merge pull request #7724 from hashicorp/helm-repo ... Update k8s instructions for new helm repo	5 years ago
R.B. Boyer	3242d0816d	test: make the kube auth method test helper use freeport (#7788)	5 years ago
Hans Hasselberg	aa121bc8d2	segments: oss changes for enterprise network area changes (#7786) ... OSS code changes for network segments	5 years ago
Hans Hasselberg	096a2f2f02	network_segments: stop advertising segment tags	5 years ago
Hans Hasselberg	995a24b8e4	agent: refactor to use a single addrFn	5 years ago
Hans Hasselberg	6994c0d47f	agent: rename local/global to src/dst	5 years ago
Chris Piraino	7361e11bc5	Update CHANGELOG.md	5 years ago
Chris Piraino	69b44fb942	Construct a default destination if one does not exist for service-router (#7783)	5 years ago
Matt Keeler	9eafa36fa9	Update CHANGELOG.md	5 years ago
Matt Keeler	50c2297aaa	Update CHANGELOG.md	5 years ago
Mike Morris	291e6af33a	vendor: revert golang.org/x/sys bump to avoid FreeBSD regression (#7780)	5 years ago
Iryna Shustava	543568fd9a	docs: add Helm docs for external servers and bootstrapToken (#7725)	5 years ago
R.B. Boyer	04671ed1b5	update changelog	5 years ago
R.B. Boyer	22eb016153	acl: add MaxTokenTTL field to auth methods (#7779) ... When set to a non zero value it will limit the ExpirationTime of all tokens created via the auth method.	5 years ago
s-christoff	08b335d8d6	Update CHANGELOG.md	5 years ago
s-christoff	f9956c1c46	cli: Add -config flag to "acl authmethod update/create" (#7776)	5 years ago
R.B. Boyer	68499f0204	update changelog	5 years ago
R.B. Boyer	ca52ba7068	acl: add DisplayName field to auth methods (#7769) ... Also add a few missing acl fields in the api.	5 years ago
Hans Hasselberg	b5eab19183	vendor: fix case issue (#7777)	5 years ago
Hans Hasselberg	c4093c87cc	agent: don't let left nodes hold onto their node-id (#7747)	5 years ago