715 Commits (9bb2a805334a52fbbba7023e6c13d6bb6c25a2bb)

Author	SHA1	Message	Date
Matt Keeler	a02a6be6b9	Implement CLI token cloning & special ID handling (#4827) ... * Implement CLI token cloning & special ID handling * Update a couple CLI commands to take some alternative options. * Document the CLI. * Update the policy list and set-agent-token synopsis	6 years ago
Matt Keeler	18b29c45c4	New ACLs (#4791) ... This PR is almost a complete rewrite of the ACL system within Consul. It brings the features more in line with other HashiCorp products. Obviously there is quite a bit left to do here but most of it is related docs, testing and finishing the last few commands in the CLI. I will update the PR description and check off the todos as I finish them over the next few days/week. Description At a high level this PR is mainly to split ACL tokens from Policies and to split the concepts of Authorization from Identities. A lot of this PR is mostly just to support CRUD operations on ACLTokens and ACLPolicies. These in and of themselves are not particularly interesting. The bigger conceptual changes are in how tokens get resolved, how backwards compatibility is handled and the separation of policy from identity which could lead the way to allowing for alternative identity providers. On the surface and with a new cluster the ACL system will look very similar to that of Nomads. Both have tokens and policies. Both have local tokens. The ACL management APIs for both are very similar. I even ripped off Nomad's ACL bootstrap resetting procedure. There are a few key differences though. Nomad requires token and policy replication where Consul only requires policy replication with token replication being opt-in. In Consul local tokens only work with token replication being enabled though. All policies in Nomad are globally applicable. In Consul all policies are stored and replicated globally but can be scoped to a subset of the datacenters. This allows for more granular access management. Unlike Nomad, Consul has legacy baggage in the form of the original ACL system. The ramifications of this are: A server running the new system must still support other clients using the legacy system. A client running the new system must be able to use the legacy RPCs when the servers in its datacenter are running the legacy system. The primary ACL DC's servers running in legacy mode needs to be a gate that keeps everything else in the entire multi-DC cluster running in legacy mode. So not only does this PR implement the new ACL system but has a legacy mode built in for when the cluster isn't ready for new ACLs. Also detecting that new ACLs can be used is automatic and requires no configuration on the part of administrators. This process is detailed more in the "Transitioning from Legacy to New ACL Mode" section below.	6 years ago
Jack Pearkes	8c684db488	New command: consul debug (#4754) ... * agent/debug: add package for debugging, host info * api: add v1/agent/host endpoint * agent: add v1/agent/host endpoint * command/debug: implementation of static capture * command/debug: tests and only configured targets * agent/debug: add basic test for host metrics * command/debug: add methods for dynamic data capture * api: add debug/pprof endpoints * command/debug: add pprof * command/debug: timing, wg, logs to disk * vendor: add gopsutil/disk * command/debug: add a usage section * website: add docs for consul debug * agent/host: require operator:read * api/host: improve docs and no retry timing * command/debug: fail on extra arguments * command/debug: fixup file permissions to 0644 * command/debug: remove server flags * command/debug: improve clarity of usage section * api/debug: add Trace for profiling, fix profile * command/debug: capture profile and trace at the same time * command/debug: add index document * command/debug: use "clusters" in place of members * command/debug: remove address in output * command/debug: improve comment on metrics sleep * command/debug: clarify usage * agent: always register pprof handlers and protect This will allow us to avoid a restart of a target agent for profiling by always registering the pprof handlers. Given this is a potentially sensitive path, it is protected with an operator:read ACL and enable debug being set to true on the target agent. enable_debug still requires a restart. If ACLs are disabled, enable_debug is sufficient. * command/debug: use trace.out instead of .prof More in line with golang docs. * agent: fix comment wording * agent: wrap table driven tests in t.run()	6 years ago
Rebecca Zanzig	34e5516834	Support multiple tags for health and catalog http api endpoints (#4717) ... * Support multiple tags for health and catalog api endpoints Fixes #1781. Adds a `ServiceTags` field to the ServiceSpecificRequest to support multiple tags, updates the filter logic in the catalog store, and propagates these change through to the health and catalog endpoints. Note: Leaves `ServiceTag` in the struct, since it is being used as part of the DNS lookup, which in turn uses the health check. * Update the api package to support multiple tags Includes additional tests. * Update new tests to use the `require` library * Update HealthConnect check after a bad merge	6 years ago
Pierre Souchay	251156eb68	Added SOA configuration for DNS settings. (#4714) ... This will allow to fine TUNE SOA settings sent by Consul in DNS responses, for instance to be able to control negative ttl. Will fix: https://github.com/hashicorp/consul/issues/4713 # Example Override all settings: * min_ttl: 0 => 60s * retry: 600 (10m) => 300s (5 minutes), * expire: 86400 (24h) => 43200 (12h) * refresh: 3600 (1h) => 1800 (30 minutes) ``` consul agent -dev -hcl 'dns_config={soa={min_ttl=60,retry=300,expire=43200,refresh=1800}}' ``` Result: ``` dig +multiline @localhost -p 8600 service.consul ; <<>> DiG 9.12.1 <<>> +multiline @localhost -p 8600 service.consul ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36557 ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;service.consul. IN A ;; AUTHORITY SECTION: consul. 0 IN SOA ns.consul. hostmaster.consul. ( 1537959133 ; serial 1800 ; refresh (30 minutes) 300 ; retry (5 minutes) 43200 ; expire (12 hours) 60 ; minimum (1 minute) ) ;; Query time: 4 msec ;; SERVER: 127.0.0.1#8600(127.0.0.1) ;; WHEN: Wed Sep 26 12:52:13 CEST 2018 ;; MSG SIZE rcvd: 93 ```	6 years ago
R.B. Boyer	c310451b2b	cli: avoid passing envoy bootstrap configuration as arguments (#4747) ... Play a trick with CLOEXEC to pass the envoy bootstrap configuration as an open file descriptor to the exec'd envoy process. The file only briefly touches disk before being unlinked. We convince envoy to read from this open file descriptor by using the /dev/fd/$FDNUMBER mechanism to read the open file descriptor as a file. Because the filename no longer has an extension envoy's sniffing logic falls back on JSON instead of YAML, so the bootstrap configuration must be generated as JSON instead.	6 years ago
Paul Banks	161482d2cd	Fix up tests broken by master merge; add proxy tests to services command (and fix it!); actually run the proxycfg.Manager	6 years ago
Paul Banks	dca1303d05	Connect Envoy Command (#4735) ... * Plumb xDS server and proxyxfg into the agent startup * Add `consul connect envoy` command to allow running Envoy as a connect sidecar. * Add test for help tabs; typos and style fixups from review	6 years ago
Paul Banks	e812f5516a	Add -sidecar-for and new /agent/service/:service_id endpoint (#4691) ... - A new endpoint `/v1/agent/service/:service_id` which is a generic way to look up the service for a single instance. The primary value here is that it: - **supports hash-based blocking** and so; - **replaces `/agent/connect/proxy/:proxy_id`** as the mechanism the built-in proxy uses to read its config. - It's not proxy specific and so works for any service. - It has a temporary shim to call through to the existing endpoint to preserve current managed proxy config defaulting behaviour until that is removed entirely (tested). - The built-in proxy now uses the new endpoint exclusively for it's config - The built-in proxy now has a `-sidecar-for` flag that allows the service ID of the _target_ service to be specified, on the condition that there is exactly one "sidecar" proxy (that is one that has `Proxy.DestinationServiceID` set) for the service registered. - Several fixes for edge cases for SidecarService - A fix for `Alias` checks - when running locally they didn't update their state until some external thing updated the target. If the target service has no checks registered as below, then the alias never made it past critical.	6 years ago
Paul Banks	1e7eace066	Add SidecarService Syntax sugar to Service Definition (#4686) ... * Added new Config for SidecarService in ServiceDefinitions. * WIP: all the code needed for SidecarService is written... none of it is tested other than config :). Need API updates too. * Test coverage for the new sidecarServiceFromNodeService method. * Test API registratrion with SidecarService * Recursive Key Translation 🤦 * Add tests for nested sidecar defintion arrays to ensure they are translated correctly * Use dedicated internal state rather than Service Meta for tracking sidecars for deregistration. Add tests for deregistration. * API struct for agent register. No other endpoint should be affected yet. * Additional test cases to cover updates to API registrations	6 years ago
Paul Banks	b83bbf248c	Add Proxy Upstreams to Service Definition (#4639) ... * Refactor Service Definition ProxyDestination. This includes: - Refactoring all internal structs used - Updated tests for both deprecated and new input for: - Agent Services endpoint response - Agent Service endpoint response - Agent Register endpoint - Unmanaged deprecated field - Unmanaged new fields - Managed deprecated upstreams - Managed new - Catalog Register - Unmanaged deprecated field - Unmanaged new fields - Managed deprecated upstreams - Managed new - Catalog Services endpoint response - Catalog Node endpoint response - Catalog Service endpoint response - Updated API tests for all of the above too (both deprecated and new forms of register) TODO: - config package changes for on-disk service definitions - proxy config endpoint - built-in proxy support for new fields * Agent proxy config endpoint updated with upstreams * Config file changes for upstreams. * Add upstream opaque config and update all tests to ensure it works everywhere. * Built in proxy working with new Upstreams config * Command fixes and deprecations * Fix key translation, upstream type defaults and a spate of other subtele bugs found with ned to end test scripts... TODO: tests still failing on one case that needs a fix. I think it's key translation for upstreams nested in Managed proxy struct. * Fix translated keys in API registration. ≈ * Fixes from docs - omit some empty undocumented fields in API - Bring back ServiceProxyDestination in Catalog responses to not break backwards compat - this was removed assuming it was only used internally. * Documentation updates for Upstreams in service definition * Fixes for tests broken by many refactors. * Enable travis on f-connect branch in this branch too. * Add consistent Deprecation comments to ProxyDestination uses * Update version number on deprecation notices, and correct upstream datacenter field with explanation in docs	6 years ago
Paul Banks	88388d760d	Support Agent Caching for Service Discovery Results (#4541) ... * Add cache types for catalog/services and health/services and basic test that caching works * Support non-blocking cache types with Cache-Control semantics. * Update API docs to include caching info for every endpoint. * Comment updates per PR feedback. * Add note on caching to the 10,000 foot view on the architecture page to make the new data path more clear. * Document prepared query staleness quirk and force all background requests to AllowStale so we can spread service discovery load across servers.	6 years ago
Freddy	524192c919	Improve resilience of api pkg tests (#4676) ... * Add function to wait for serfHealth in api tests * Disable connect when creating semaphore test clients * Wait for serfHealth when creating sessions in their tests * Add helper functions to create lock/semaphore sessions without checks * Log passing tests to prevent timeout in Travis due to lack of output	6 years ago
Pierre Souchay	22500f242e	Fix unstable tests in agent, api, and command/watch	6 years ago
Pierre Souchay	eddcf228ea	Implementation of Weights Data structures (#4468) ... * Implementation of Weights Data structures Adding this datastructure will allow us to resolve the issues #1088 and #4198 This new structure defaults to values: ``` { Passing: 1, Warning: 0 } ``` Which means, use weight of 0 for a Service in Warning State while use Weight 1 for a Healthy Service. Thus it remains compatible with previous Consul versions. * Implemented weights for DNS SRV Records * DNS properly support agents with weight support while server does not (backwards compatibility) * Use Warning value of Weights of 1 by default When using DNS interface with only_passing = false, all nodes with non-Critical healthcheck used to have a weight value of 1. While having weight.Warning = 0 as default value, this is probably a bad idea as it breaks ascending compatibility. Thus, we put a default value of 1 to be consistent with existing behaviour. * Added documentation for new weight field in service description * Better documentation about weights as suggested by @banks * Return weight = 1 for unknown Check states as suggested by @banks * Fixed typo (of -> or) in error message as requested by @mkeeler * Fixed unstable unit test TestRetryJoin * Fixed unstable tests * Fixed wrong Fatalf format in `testrpc/wait.go` * Added notes regarding DNS SRV lookup limitations regarding number of instances * Documentation fixes and clarification regarding SRV records with weights as requested by @banks * Rephrase docs	6 years ago
Freddy	4c5758d891	Remove operator_area note from godoc overview (#4603)	6 years ago
Siva Prasad	771e0bafd2	Addresses the flakiness of CatalogNodes (#4530)	6 years ago
Pierre Souchay	cec5d72396	BUGFIX: Unit test relying on WaitForLeader() did not work due to wrong test (#4472) ... - Improve resilience of testrpc.WaitForLeader() - Add additionall retry to CI - Increase "go test" timeout to 8m - Add wait for cluster leader to several tests in the agent package - Add retry to some tests in the api and command packages	6 years ago
Geoffrey Grosenbach	827fbac3ab	Copy-and-paste Go client example (#4448) ... * Copy-and-paste Go client example Includes Go source that runs without modification, as well as simple instructions for compiling, running, and viewing the output in the Consul UI. * Remove unnecessary flags from development server example This is a bare minimum Go example needed to store keys and values in Consul. The `-ui` and `-server` flags aren't needed when running with `-dev`.	6 years ago
Kyle Havlovitz	ed87949385	Merge pull request #4400 from hashicorp/leaf-cert-ttl ... Add configurable leaf cert TTL to Connect CA	6 years ago
Paul Banks	8cbeb29e73	Fixes #4421: General solution to stop blocking queries with index 0 (#4437) ... * Fix theoretical cache collision bug if/when we use more cache types with same result type * Generalized fix for blocking query handling when state store methods return zero index * Refactor test retry to only affect CI * Undo make file merge * Add hint to error message returned to end-user requests if Connect is not enabled when they try to request cert * Explicit error for Roots endpoint if connect is disabled * Fix tests that were asserting old behaviour	6 years ago
Kyle Havlovitz	d6ca015a42	connect/ca: add configurable leaf cert TTL	6 years ago
Matt Keeler	7572ca0f37	Merge pull request #4374 from hashicorp/feature/proxy-env-vars ... Setup managed proxy environment with API client env vars	6 years ago
Matt Keeler	7dfd2ab316	Add some tests for GenerateEnv	6 years ago
Matt Keeler	c54b43bef3	PR Updates ... Proxy now doesn’t need to know anything about the api as we pass env vars to it instead of the api config.	6 years ago
Matt Keeler	3b6eef8ec6	Pass around an API Config object and convert to env vars for the managed proxy	6 years ago
Hamish	9043966efd	Fix lock and semaphore timeouts	6 years ago
Mitchell Hashimoto	1c3e9af316	agent: 400 error on invalid UUID format, api handles errors properly	7 years ago
Kyle Havlovitz	162daca4d7	revert go changes to hide rotation config	7 years ago
Kyle Havlovitz	c20bbf8760	connect/ca: hide the RotationPeriod config field since it isn't used yet	7 years ago
Kyle Havlovitz	bc997688e3	connect/ca: update Consul provider to use new cross-sign CSR method	7 years ago
Paul Banks	b5f24a21cb	Fix test broken by final telemetry PR change!	7 years ago
Paul Banks	597e55e8e2	Misc test fixes	7 years ago
Paul Banks	96c416012e	Misc rebase and test fixes	7 years ago
Paul Banks	43b48bc06b	Get agent cache tests passing without global hit count (which is racy). ... Few other fixes in here just to get a clean run locally - they are all also fixed in other PRs but shouldn't conflict. This should be robust to timing between goroutines now.	7 years ago
Paul Banks	05a8097c5d	Fix misc test failures (some from other PRs)	7 years ago
Kyle Havlovitz	82a4b3c13f	connect: fix two CA tests that were broken in a previous PR (#60)	7 years ago
Paul Banks	0824d1df5f	Misc comment cleanups	7 years ago
Mitchell Hashimoto	71216631d7	api: update intention struct for precedence	7 years ago
Mitchell Hashimoto	77a8003475	api: change Connect to a query option	7 years ago
Mitchell Hashimoto	b55f0641e6	api: support ExecuteConnect	7 years ago
Mitchell Hashimoto	297e4f272e	api: support native connect	7 years ago
Paul Banks	df2cb30b01	Make tests pass and clean proxy persistence. No detached child changes yet. ... This is a good state for persistence stuff to re-start the detached child work that got mixed up last time.	7 years ago
Paul Banks	cdc7cfaa36	Abandon daemonize for simpler solution (preserving history): ... Reverts: - bdb274852ae469c89092d6050697c0ff97178465 - 2c689179c4f61c11f0016214c0fc127a0b813bfe - d62e25c4a7ab753914b6baccd66f88ffd10949a3 - c727ffbcc98e3e0bf41e1a7bdd40169bd2d22191 - 31b4d18933fd0acbe157e28d03ad59c2abf9a1fb - 85c3f8df3eabc00f490cd392213c3b928a85aa44	7 years ago
Paul Banks	ba0fb58a72	Make daemoinze an option on test binary without hacks. Misc fixes for racey or broken tests. Still failing on several though.	7 years ago
Kyle Havlovitz	74f225fcd2	Add client api support for CA config endpoints	7 years ago
Mitchell Hashimoto	3a6a750972	api: IntentionUpdate API	7 years ago
Mitchell Hashimoto	f27711a319	api: IntentionDelete + tests	7 years ago
Mitchell Hashimoto	272211e171	command/intention/get: the get command without tests	7 years ago
Mitchell Hashimoto	988d7d984a	command/intention/finder: package for finding based on src/dst	7 years ago
Mitchell Hashimoto	961e9c1eaf	command/intention/create	7 years ago
Mitchell Hashimoto	a5ecdc5798	api: IntentionCheck	7 years ago
Paul Banks	7c7c858a9a	More test cleanup	7 years ago
Paul Banks	4aeab3897c	Fixed many tests after rebase. Some still failing and seem unrelated to any connect changes.	7 years ago
Mitchell Hashimoto	aaa2431350	agent: change connect command paths to be slices, not strings ... This matches other executable configuration and allows us to cleanly separate executable from arguments without trying to emulate shell parsing.	7 years ago
Paul Banks	e0e12e165b	TLS watching integrated into Service with some basic tests. ... There are also a lot of small bug fixes found when testing lots of things end-to-end for the first time and some cleanup now it's integrated with real CA code.	7 years ago
Paul Banks	cd88b2a351	Basic `watch` support for connect proxy config and certificate endpoints. ... - Includes some bug fixes for previous `api` work and `agent` that weren't tested - Needed somewhat pervasive changes to support hash based blocking - some TODOs left in our watch toolchain that will explicitly fail on hash-based watches. - Integration into `connect` is partially done here but still WIP	7 years ago
Paul Banks	36dbd878c9	Adds `api` client code and tests for new Proxy Config endpoint, registering with proxy and seeing proxy config in /agent/services list.	7 years ago
Paul Banks	88541bba17	Add tests all the way up through the endpoints to ensure duplicate src/destination is supported and so ultimately deny/allow nesting works. ... Also adds a sanity check test for `api.Agent().ConnectAuthorize()` and a fix for a trivial bug in it.	7 years ago
Mitchell Hashimoto	97f5414d94	api: rename Authorize field to ClientCertURI	7 years ago
Mitchell Hashimoto	9638466b88	api: fix up some comments and rename IssuedCert to LeafCert	7 years ago
Mitchell Hashimoto	4689d8373a	api: IntentionMatch	7 years ago
Mitchell Hashimoto	663a12d96b	api: starting intention endpoints, reorganize files slightly	7 years ago
Mitchell Hashimoto	263e2c7cf7	api: endpoints for working with CA roots, agent authorize, etc.	7 years ago
Paul Banks	125555e1aa	require -> assert until rebase	7 years ago
Paul Banks	9309422fd9	Add Connect agent, catalog and health endpoints to api Client	7 years ago
Kyle Havlovitz	b73323aa42	Remove the script field from checks in favor of args	7 years ago
Pierre Souchay	c152cb7bdf	Added Missing Service Meta synchronization and field	7 years ago
Paul Banks	0d8993e338	Allow ignoring checks by ID when defining a PreparedQuery. Fixes #3727.	7 years ago
Preetha Appan	c7581d68c6	Renames agent API layer for service metadata to "meta" for consistency	7 years ago
Preetha	daa61c5803	Merge pull request #3881 from pierresouchay/service_metadata ... Feature Request: Support key-value attributes for services	7 years ago
Josh Soref	94835a2715	Spelling (#3958) ... * spelling: another * spelling: autopilot * spelling: beginning * spelling: circonus * spelling: default * spelling: definition * spelling: distance * spelling: encountered * spelling: enterprise * spelling: expands * spelling: exits * spelling: formatting * spelling: health * spelling: hierarchy * spelling: imposed * spelling: independence * spelling: inspect * spelling: last * spelling: latest * spelling: client * spelling: message * spelling: minimum * spelling: notify * spelling: nonexistent * spelling: operator * spelling: payload * spelling: preceded * spelling: prepared * spelling: programmatically * spelling: required * spelling: reconcile * spelling: responses * spelling: request * spelling: response * spelling: results * spelling: retrieve * spelling: service * spelling: significantly * spelling: specifies * spelling: supported * spelling: synchronization * spelling: synchronous * spelling: themselves * spelling: unexpected * spelling: validations * spelling: value	7 years ago
Anubhav Mishra	0813175340	fix typo	7 years ago
Pierre Souchay	b259b1609c	Merge remote-tracking branch 'origin/master' into service_metadata	7 years ago
Kyle Havlovitz	c3e94970a0	Add gRPC fields to client api and agent check endpoint docs	7 years ago
Pierre Souchay	80dde5465b	Added support for Service Metadata	7 years ago
Veselkov Konstantin	7de57ba4de	remove golint warnings	7 years ago
James Hartig	ac225b2e7d	Added CheckID and Name to AgentServiceCheck struct	7 years ago
James Phillips	53a881becc	Tightens up the API test verification.	7 years ago
James Phillips	ca3f9024ac	Works around mapstructure behavior to enable sessions with no checks. ... Fixes #3732	7 years ago
James Phillips	3177c2b450	Opens up the timing on the metrics test so it's less flaky.	7 years ago
James Phillips	93f68555d0	Adds enable_agent_tls_for_checks configuration option which allows (#3661) ... HTTP health checks for services requiring 2-way TLS to be checked using the agent's credentials.	7 years ago
James Phillips	4a2cafe525	Adds HTTP/2 support to Consul's HTTPS server. (#3657) ... * Refactors the HTTP listen path to create servers in the same spot. * Adds HTTP/2 support to Consul's HTTPS server. * Vendors Go HTTP/2 library and associated deps.	7 years ago
James Phillips	172d5c0c40	Fetches metrics in the retry loop so there's some hope. ... Fixes #3656	7 years ago
Kyle Havlovitz	c9c083d843	Update AgentCheck struct in api	7 years ago
Kyle Havlovitz	d3dd2b1402	Move check definition to a sub-struct	7 years ago
Kyle Havlovitz	dbab3cd5f6	Merge branch 'master' into esm-changes	7 years ago
Kyle Havlovitz	021b2849c5	Remove redundant lines from coordinate test	7 years ago
Kyle Havlovitz	b0536a96cc	Fill out the tests around coordinate/node functionality	7 years ago
Kyle Havlovitz	a1d14019dd	Add tests around coordinate update endpoint	7 years ago
Kyle Havlovitz	2392545adc	Merge branch 'coordinate-node-endpoint' of github.com:hashicorp/consul into esm-changes	7 years ago
Kyle Havlovitz	5589eadcf5	Added Coordinate.Node rpc endpoint and client api method	7 years ago
Kyle Havlovitz	ce4e8c46fa	Add deregister critical service field and refactor duration parsing	7 years ago
James Phillips	21f38bff6f	Adds retry to API metrics test (flaky test).	7 years ago
Kyle Havlovitz	291455f475	Added coordinate update http endpoint	7 years ago
Kyle Havlovitz	d56936e27a	Added remaining HTTP health check fields to structs	7 years ago
Kyle Havlovitz	a7c42a6c2a	Expose SkipNodeUpdate field and some health check info in the http api	7 years ago
Ryan Slade	dcb392df46	Simplify string(buf.Bytes()) to buf.String() (#3590)	7 years ago
James Phillips	53f67c3993	Fixes API client for ScriptArgs and updates documentation. (#3589) ... * Updates the API client to support the current `ScriptArgs` parameter for checks. * Updates docs for checks to explain the `ScriptArgs` parameter issue. * Adds mappings for "args" and "script-args" to give th API parity with config. * Adds checks on return codes. * Removes debug logging that shows empty when args are used.	7 years ago
Ryan Slade	85e4aea9d1	Replace time.Now().Sub(x) with time.Since(x)	7 years ago
James Phillips	575d70aaa7	Cleans up some drift between the OSS and Enterprise trees.	7 years ago
James Bardin	fea32fb7d7	retry locks on network errors (#3553) ... * retry locks on network errors When communicating with a local agent and watching a lock, a dropped connection between the agent and server will show up as a server error and immediately be retried. However if the client is connected to a remote server, a dropped connection immediately aborts the lock. * Updates comment about it being unsafe for writes.	7 years ago
Artiom Diomin	2e229617ce	Fix example code formatting in godoc	7 years ago
Frank Schröder	ce887a0c45	Provide stable config for agent/self (#3532) ... * config: provide stable config for /v1/agent/self (#3530) This patch adds a stable subset of the previous Config struct to the agent/self response. The actual runtime configuration is moved into DebugConfig and will be documented to change. Fixes #3530 * config: fix tests * doc: update api documentation for /v1/agent/self	7 years ago
Frank Schröder	21118cafeb	Recursive sanitize (#3505) ... * vendor: add github.com/sergi/go-diff/diffmatchpatch for diff'ing test output * config: refactor Sanitize to recursively clean runtime config and format complex fields * Removes an extra int cast. * Adds a top-level check test case for sanitization.	7 years ago
Preetha Appan	3c4a108769	Move Raft protocol version for list peers end point to server side, fix unit tests. This fixes #3449	7 years ago
Preetha Appan	00840929ea	Fix import order	7 years ago
preetapan	73951d8319	Merge pull request #3494 from hashicorp/enforce_json_extension ... Enforce json or hcl extension to Consul config files, updated unit tests	7 years ago
James Phillips	45646ac3f4	Bumps default Raft protocol to version 3. (#3477) ... * Changes default Raft protocol to 3. * Changes numPeers() to report only voters. This should have been there before, but it's more obvious that this is incorrect now that we default the Raft protocol to 3, which puts new servers in a read-only state while Autopilot waits for them to become healthy. * Fixes TestLeader_RollRaftServer. * Fixes TestOperator_RaftRemovePeerByAddress. * Fixes TestServer_*. Relaxed the check for a given number of voter peers and instead do a thorough check that all servers see each other in their Raft configurations. * Fixes TestACL_*. These now just check for Raft replication to be set up, and don't care about the number of voter peers. * Fixes TestOperator_Raft_ListPeers. * Fixes TestAutopilot_CleanupDeadServerPeriodic. * Fixes TestCatalog_ListNodes_ConsistentRead_Fail. * Fixes TestLeader_ChangeServerID and adjusts the conn pool to throw away sockets when it sees io.EOF. * Changes version to 1.0.0 in the options doc. * Makes metrics test more deterministic with autopilot metrics possible.	7 years ago
Preetha Appan	a4331a480c	Fix one more unit test that created a config file	7 years ago
Frank Schröder	12216583a1	New config parser, HCL support, multiple bind addrs (#3480) ... * new config parser for agent This patch implements a new config parser for the consul agent which makes the following changes to the previous implementation: * add HCL support * all configuration fragments in tests and for default config are expressed as HCL fragments * HCL fragments can be provided on the command line so that they can eventually replace the command line flags. * HCL/JSON fragments are parsed into a temporary Config structure which can be merged using reflection (all values are pointers). The existing merge logic of overwrite for values and append for slices has been preserved. * A single builder process generates a typed runtime configuration for the agent. The new implementation is more strict and fails in the builder process if no valid runtime configuration can be generated. Therefore, additional validations in other parts of the code should be removed. The builder also pre-computes all required network addresses so that no address/port magic should be required where the configuration is used and should therefore be removed. * Upgrade github.com/hashicorp/hcl to support int64 * improve error messages * fix directory permission test * Fix rtt test * Fix ForceLeave test * Skip performance test for now until we know what to do * Update github.com/hashicorp/memberlist to update log prefix * Make memberlist use the default logger * improve config error handling * do not fail on non-existing data-dir * experiment with non-uniform timeouts to get a handle on stalled leader elections * Run tests for packages separately to eliminate the spurious port conflicts * refactor private address detection and unify approach for ipv4 and ipv6. Fixes #2825 * do not allow unix sockets for DNS * improve bind and advertise addr error handling * go through builder using test coverage * minimal update to the docs * more coverage tests fixed * more tests * fix makefile * cleanup * fix port conflicts with external port server 'porter' * stop test server on error * do not run api test that change global ENV concurrently with the other tests * Run remaining api tests concurrently * no need for retry with the port number service * monkey patch race condition in go-sockaddr until we understand why that fails * monkey patch hcl decoder race condidtion until we understand why that fails * monkey patch spurious errors in strings.EqualFold from here * add test for hcl decoder race condition. Run with go test -parallel 128 * Increase timeout again * cleanup * don't log port allocations by default * use base command arg parsing to format help output properly * handle -dc deprecation case in Build * switch autopilot.max_trailing_logs to int * remove duplicate test case * remove unused methods * remove comments about flag/config value inconsistencies * switch got and want around since the error message was misleading. * Removes a stray debug log. * Removes a stray newline in imports. * Fixes TestACL_Version8. * Runs go fmt. * Adds a default case for unknown address types. * Reoders and reformats some imports. * Adds some comments and fixes typos. * Reorders imports. * add unix socket support for dns later * drop all deprecated flags and arguments * fix wrong field name * remove stray node-id file * drop unnecessary patch section in test * drop duplicate test * add test for LeaveOnTerm and SkipLeaveOnInt in client mode * drop "bla" and add clarifying comment for the test * split up tests to support enterprise/non-enterprise tests * drop raft multiplier and derive values during build phase * sanitize runtime config reflectively and add test * detect invalid config fields * fix tests with invalid config fields * use different values for wan sanitiziation test * drop recursor in favor of recursors * allow dns_config.udp_answer_limit to be zero * make sure tests run on machines with multiple ips * Fix failing tests in a few more places by providing a bind address in the test * Gets rid of skipped TestAgent_CheckPerformanceSettings and adds case for builder. * Add porter to server_test.go to make tests there less flaky * go fmt	7 years ago
James Phillips	00605c0214	Shows the segment name in the keyring API and command output.	7 years ago
James Phillips	1a117ba0a8	Makes the all segments query explict, and the default for `consul members`.	7 years ago
Kyle Havlovitz	20296d4a89	Change segment list endpoint in docs/client api	7 years ago
Kyle Havlovitz	62102a537e	Organize segments for a cleaner split between enterprise and OSS	7 years ago
Kyle Havlovitz	21513b0393	Update coord display in ui to account for segments	7 years ago
Kyle Havlovitz	2ada0439d4	Add rpc_listener option to segment config	7 years ago
James Phillips	b1a15e0c3d	Adds open source side of network segments (feature is Enterprise-only).	7 years ago
Illirgway	e0cc1ce679	Fix bug with unused (replaced with "") CONSUL_HTTP_AUTH in some places ... example: https://github.com/hashicorp/consul/blob/master/watch/plan.go#L26 conf := consulapi.DefaultConfig() conf.Address = address conf.Datacenter = p.Datacenter conf.Token = p.Token # <-- replace Token from DefaultConfig/CONSUL_HTTP_AUTH with "" client, err := consulapi.NewClient(conf) how to reproduce bug: 0. consul -> localhost:8500 with more than 0 service checks 1. deny all for anonymous token 2. create appropriate acl <token> for watch checks (agent:read + node:read,service:read) 3. bash: CONSUL_HTTP_AUTH=<token> consul watch -http-addr=localhost:8500 -type=checks # --> return [] consul watch -http-addr=localhost:8500 -type=checks -token=<token> # -> return { .... right json result .... }	7 years ago
James Phillips	6ccf724c0c	Adds a guard to make sure that empty log lines don't close consul monitor. ... Fixes #3253.	7 years ago
Kyle Havlovitz	5b998cacb1	Update api structs for metrics endpoint	7 years ago
Kyle Havlovitz	d5634fe2a8	Add support for labels/filters from go-metrics	7 years ago
James Phillips	4bee2e49f5	Adds secure introduction for the ACL replication token. (#3357) ... Adds secure introduction for the ACL replication token, as well as a separate enable config for ACL replication.	7 years ago
James Phillips	c0a5ad7903	Adds a new /v1/acl/bootstrap API (#3349)	7 years ago
James Phillips	496b0bcf07	Adds support for agent-side ACL token management via API instead of config files. (#3324) ... * Adds token store and removes all runtime use of config for ACL tokens. * Adds a new API for changing agent tokens on the fly.	7 years ago
Kyle Havlovitz	19eae3d14b	Add UpgradeVersionTag to autopilot config	7 years ago
James Phillips	1791d99a10	Adds new config to make script checks opt-in, updates documentation. (#3284)	7 years ago
James Phillips	8d0a048408	Expands and rework context support in the API client. (#3273)	7 years ago
James Bardin	deb43fea6b	accept recv-only channels for cancellations (#3271) ... Cancellation channels are often derived from a Context, which returns a directional `<-chan struct{}` from Done(). In order to use this with parts of of the consul API, one is required to create a new channel and dispatch a separate goroutine to watch for context cancellation and close the new channel. Changing the signature for the methods that take cancellation channels will allow easier integration with existing uses of Context. Since the cancellation pattern only reads from these channels, there should be no backwards incompatibility with existing codebases, and most of the methods already accept only the correct type.	7 years ago
Frank Schroeder	9c54f30c94	api: fix TestAPI_CatalogNodes test	7 years ago
Frank Schroeder	0e931a713c	agent: fix failing test from localState decoupling ... Would be nice to know what changed though.	7 years ago
Frank Schroeder	7bbfef7000	api: refactor: unify naming of API tests	7 years ago
Frank Schroeder	8edeabce9a	api: refactor: prefix all API tests with API_	7 years ago
Preetha Appan	9eaf56bfe3	Fix socket file handle leaks from old blocking queries upon consul reload. This fixes issue #3018	8 years ago
Frank Schröder	825f72f5ef	agent: support custom header and method for http checks (#3106) ... This patch adds support for custom headers and method for HTTP checks. Fixes #2474 Fixes #2657 Fixes #3106	8 years ago
James Phillips	3baa703d02	Merge pull request #3077 from jwasinger/issue-2850 ... Prevent Session.Destroy from leaving open TCP connections	8 years ago
Jared Wasinger	d2ef61d079	Prevent Session.Destroy from leaving open TCP connections	8 years ago
Kyle Havlovitz	4e44db87e3	Don't overwrite Transport's TLS config if it's been set	8 years ago
Kyle Havlovitz	04f1ff78f8	Remove superfluous default HttpClient check in NewClient	8 years ago
Frank Schroeder	96c677fdba	test: make test less flaky	8 years ago
Frank Schroeder	65b5c51ec7	test: add helper for ioutil.TempDir/TempFile ... This creates a simplified helper for temporary directories and files. All path names are prefixed with the name of the current test. All files and directories are stored either in /tmp/consul-test or /tmp if the former could not be created. Using the system temp dir breaks some tests on macOS where the unix socket path becomes too long.	8 years ago
Frank Schroeder	3522a41bad	test: include test name in temp file/dir ... This helps identifying hanging tests by looking at the process list.	8 years ago
James Phillips	c1d196152f	Fixes vet errors.	8 years ago
James Phillips	ddfa57765c	retry: Removes the description parameter.	8 years ago
Frank Schroeder	21a82a0a16	test: Refactor WaitForResult tests with retry ... Refactor tests that use testutil.WaitForResult to use retry. Since this requires refactoring the test functions in general this patch also shows the use of the github.com/pascaldekloe/goe/verify library which provides a good mechanism for comparing nested data structures. Instead of just converting the tests from testutil.WaitForResult to retry the tests that performing a nested comparison of data structures are converted to the verify library at the same time.	8 years ago
Kyle Havlovitz	cd56a5ebdd	Add separate option for verifying incoming HTTPS traffic (#2974) ... * Add separate option for verifying incoming HTTPS traffic	8 years ago
Frank Schroeder	9685bdcd0b	api: Add ServiceTags to Health state endpoint (#153) ... This patch adds the ServiceTags to the /v1/health/state/<state> endpoint. Fixes #153	8 years ago
James Phillips	05b1cabba9	Merge pull request #2947 from bogdanov1609/added_ACLReplication ... API: Add ACLReplication	8 years ago
James Phillips	36725cef11	Tweaks ACL replication struct name.	8 years ago
James Phillips	138abeb5f7	Tweaks ACL replication status struct name.	8 years ago
Frank Schroeder	3e00e36f41	golint: Untangle if blocks with return in else	8 years ago
Ivan Bogdanov	1ebd6402fd	API: Add ACLReplication	8 years ago
Frank Schröder	6dd2804d09	Issue #2905: Add check-not-exists to TXN endpoint ... This patch adds support for asserting that a given key does not exist in the KV store. Fixes #2905	8 years ago
Kyle Havlovitz	c6d0b4cf90	Make the API client's httpClient more pluggable (#2926)	8 years ago
Frank Schröder	c40621ae10	Add datacenter to catalog node API (#2917) ... This patch stores the datacenter of a node in memdb and exposes it via the API in all places where a Node structure is returned. * /catalog/nodes * /catalog/node/:node * /catalog/service/:service * /health/service/:service * /query/:uuid/execute	8 years ago
Kyle Havlovitz	ae6bf56ee1	Add tls client options to api/cli	8 years ago
Brian Shumate	f499584c38	API: Add struct fields, fixes #2882 ... - Add CreateIndex and ModifyIndex to AgentService - Add CreateIndex and ModifyIndex to Node	8 years ago
James Phillips	08f81ebddb	Moves operator sub-functions into their own files.	8 years ago
Kyle Havlovitz	da9c825592	Add CLI/API endpoints for removing peer by ID	8 years ago
Seth Vargo	0170a28ec9	Use new APIs	8 years ago
Kyle Havlovitz	390f41d8d5	Add advanced autopilot features	8 years ago
James Phillips	3f3889022e	Tweaks the agent leave test to patch an occasional local failure.	8 years ago
James Phillips	7d011d7d77	Adds missing area API.	8 years ago
James Phillips	e91377fa26	Cleans up based on review feedback.	8 years ago
James Phillips	3a0739cdfc	Tweaks the join response to be more useful.	8 years ago
James Phillips	79e192fd07	Adds public API for the network area endpoints.	8 years ago
James Phillips	472f1bd63e	Adds router into RPC paths with work in progress on coordinates.	8 years ago
Kyle Havlovitz	5353221666	Reorganized cluster health check loop and logic	8 years ago
Kyle Havlovitz	51b11cd344	Fix an issue with changing server IDs and add a few UX enhancements around autopilot features	8 years ago
Kyle Havlovitz	9b4497de09	Cleaned up and reorganized some autopilot-related code	8 years ago
Kyle Havlovitz	2eefe3ca5b	Add autopilot server health tracking ... This adds two goroutines to perform autopilot tasks on the leader - one to monitor the health of servers and another to periodically clean up dead servers with a limit on removal count. Also adds a new http endpoint, `/v1/operator/autopilot/health`, for querying this information through an operator RPC endpoint.	8 years ago
Kyle Havlovitz	92c8b9c3a0	Rename DeadServerCleanup and make wording adjustments	8 years ago
Kyle Havlovitz	c1f776c78b	Added operator autopilot subcommands	8 years ago
Kyle Havlovitz	c2e7f45002	Add CAS capability to autopilot config endpoint	8 years ago
Kyle Havlovitz	1c24c5d8d6	Add docs and api client methods for autopilot config	8 years ago
Jeff Mitchell	44733caf5c	Update unix dial functions to use DialContext with new go-cleanhttp	8 years ago
Kyle Havlovitz	c9abafab92	Update docs and give better error for unknown client scheme	8 years ago
Kyle Havlovitz	a7a6ee9f4c	Allow prefixing -http-addr with http/https schemes	8 years ago
Kyle Havlovitz	bad037fb58	Cleanup and formatting adjustments	8 years ago
Kyle Havlovitz	abdf1fbab3	Convert keyring command to use base.Command	8 years ago
James Phillips	585958746a	Lets the leave unit test proceed even after an EOF.	8 years ago
Kyle Havlovitz	a55968f009	Merge branch 'master' into f-prepared-query-nodemeta	8 years ago
Kyle Havlovitz	3f3d7f9891	Add tests for node meta in prepared queries and update docs	8 years ago
James Phillips	6ca0173907	Adds catalog support for node IDs.	8 years ago
James Phillips	bd605e330c	Adds basic support for node IDs.	8 years ago
Kyle Havlovitz	5acd69b4fc	Add node metadata filtering to remaining health/catalog endpoints	8 years ago
Kyle Havlovitz	023b6533e0	Fix formatting	8 years ago
Kyle Havlovitz	87c0283bb1	Update client api and docs for node metadata	8 years ago
James Phillips	0ed6b1bb18	Bans anonymous queries that aren't tied to a session. ... This gets us coverage of PQ creation under the existing service policy or the soon-to-be-added session policy.	8 years ago
James Phillips	0282dd908a	Merge pull request #2531 from alicebob/txntypes ... fix KVOp types	8 years ago
Kyle Havlovitz	bd69c6d871	Add reload/leave http endpoints (#2516)	8 years ago
Seth Vargo	f7958983e4	Return the correct type	8 years ago
Seth Vargo	7520ce2d49	Merge pull request #2544 from hashicorp/sethvargo/best_status ... Add an API method for determining the best status	8 years ago
James Phillips	d079e62d57	Merge pull request #2530 from coffeehc/master ... adapt to server's checker field TLSSkipVerify type	8 years ago
Seth Vargo	190249424b	Do not log	8 years ago
Seth Vargo	4179aacf11	Add an API method for determining the best status ... Given a list of HealthChecks, this determines the "best" status for the collective group. This is useful for nodes and services, which may have multiple checks associated with them.	8 years ago
Kyle Havlovitz	8079c49c0a	Add QueryOptions to api package's monitor	8 years ago
Kyle Havlovitz	124f907063	Add monitor http endpoint	8 years ago
Harmen	92b2369f82	fix KVOp types	8 years ago
James Phillips	a5baa091c8	Runs `go fmt`.	8 years ago
Kyle Havlovitz	dcdadd012f	Fix keyring doc method wording	8 years ago
Kyle Havlovitz	6bd65c668b	Combine keyring endpoints into one	8 years ago
Kyle Havlovitz	dd3368c19e	Add keyring http endpoints	8 years ago
coffee	a5e08845c2	adapt to server's checker field TLSSkipVerify type	8 years ago
James Phillips	6ce295e0de	Merge pull request #2366 from aksentyev/master ... api client: CatalogService added fields CreateIndex, ModifyIndex	8 years ago
James Phillips	ad25acaf6a	Moves index fields to the bottom of the structure.	8 years ago
James Phillips	9a81d402b7	Adds notes field to API. ... Closes #2336.	8 years ago
James Phillips	c744792fc4	Merge pull request #2238 from hasyimibhar/master ... Remove duplicated environment variables	8 years ago
Kyle Havlovitz	8c3db1c5c6	Trim leading slash on key to avoid redirect (golang/go#4800) (#2476)	8 years ago
Kyle McCullough	73b281a27c	Add setting to skip ssl certificate verification for HTTP checks (#1984) ... * http check: add setting to skip ssl certificate verification * update http check documentation * fix typo in documentation * Add TLSSkipVerify to agent api	8 years ago
Mike Cowgill	cbf2874464	Delete prepared query using WriteOptions (#2417)	8 years ago
Kyle Havlovitz	dce6702268	More flaky unit test fixes (#2449) ... * More flaky unit test fixes * Raise some test timeouts that were too low	8 years ago
James Phillips	c01a3871c9	Adds support for snapshots and restores. (#2396) ... * Updates Raft library to get new snapshot/restore API. * Basic backup and restore working, but need some cleanup. * Breaks out a snapshot module and adds a SHA256 integrity check. * Adds snapshot ACL and fills in some missing comments. * Require a consistent read for snapshots. * Make sure snapshot works if ACLs aren't enabled. * Adds a bit of package documentation. * Returns an empty response from restore to avoid EOF errors. * Adds API client support for snapshots. * Makes internal file names match on-disk file snapshots. * Adds DC and token coverage for snapshot API test. * Adds missing documentation. * Adds a unit test for the snapshot client endpoint. * Moves the connection pool out of the client for easier testing. * Fixes an incidental issue in the prepared query unit test. I realized I had two servers in bootstrap mode so this wasn't a good setup. * Adds a half close to the TCP stream and fixes panic on error. * Adds client and endpoint tests for snapshots. * Moves the pool back into the snapshot RPC client. * Adds a TLS test and fixes half-closes for TLS connections. * Tweaks some comments. * Adds a low-level snapshot test. This is independent of Consul so we can pull this out into a library later if we want to. * Cleans up snapshot and archive and completes archive tests. * Sends a clear error for snapshot operations in dev mode. Snapshots require the Raft snapshots to be readable, which isn't supported in dev mode. Send a clear error instead of a deep-down Raft one. * Adds docs for the snapshot endpoint. * Adds a stale mode and index feedback for snapshot saves. This gives folks a way to extract data even if the cluster has no leader. * Changes the internal format of a snapshot from zip to tgz. * Pulls in Raft fix to cancel inflight before a restore. * Pulls in new Raft restore interface. * Adds metadata to snapshot saves and a verify function. * Adds basic save and restore snapshot CLI commands. * Gets rid of tarball extensions and adds restore message. * Fixes an incidental bad link in the KV docs. * Adds documentation for the snapshot CLI commands. * Scuttle any request body when a snapshot is saved. * Fixes archive unit test error message check. * Allows for nil output writers in snapshot RPC handlers. * Renames hash list Decode to DecodeAndVerify. * Closes the client connection for snapshot ops. * Lowers timeout for restore ops. * Updates Raft vendor to get new Restore signature and integrates with Consul. * Bounces the leader's internal state when we do a restore.	8 years ago
Kyle Havlovitz	f6c971f46c	Fix race condition in TestClient_WatchList and TestClient_WatchGet	8 years ago
James Phillips	554c898338	Merge pull request #2382 from zaunerc/master ... Add info about return values for function Get().	8 years ago
James Phillips	556ffc588b	Adds comment about SessionOpts.	8 years ago
James Phillips	25455c97c3	Merge pull request #2372 from HotelsDotCom/flexible-lock-sessions ... More flexible Session configuration when using api.Lock	8 years ago
Christoph Zauner	faf85f602b	Add info about return values for function Get().	8 years ago
Maxim Ivanov	2ed58a2747	More flexible Session configuration when using api.Lock	8 years ago
aksentyev	4f96fa0aea	CreateIndex, ModifyIndex added for CatalogService	8 years ago
Seth Vargo	40de5858d3	Fix typo	8 years ago
Seth Vargo	55f1b4ac44	Rename session name to session ID	8 years ago
Seth Vargo	12e46503f7	Update ModifyIndex comment	8 years ago
Seth Vargo	227019ec59	Add documentation to KVPair ... Based on discussions with @slackpad, some of the values in the KVPair are ReadOnly. This commit updates the docs to reflect that.	8 years ago
James Phillips	84e8fc5848	Removes Raft types from public API interface. ... This will cause a lot of breakage because we've currently vendored a branch of the Raft library.	8 years ago
James Phillips	3c9188c38b	Makes the Raft configuration API easier to consume.	8 years ago
James Phillips	0558b9c44b	Fixes a stale comment.	8 years ago
James Phillips	e5850d8a26	Adds new consul operator endpoint, CLI, and ACL and some basic Raft commands.	8 years ago
James Phillips	defa2a6180	Merge pull request #2226 from abhinavdahiya/rm-health-unknown ... Fixes #1775; Removes 'unknown' state	8 years ago
James Phillips	4c7a0ed3b0	Merge branch 'master' into f-deregister-critical	8 years ago
James Phillips	9f7a973ace	Adds an `X-Consul-Translate-Addresses` to signal translation is enabled.	8 years ago
James Phillips	1d5eb36689	Adds missing TaggedAddress structures to API client.	8 years ago
James Phillips	231f5a957f	Fixes a typo and adds an admonition about only being in Consul 0.7+.	8 years ago
James Phillips	4a3d7db24f	Adds ability to deregister a service based on critical check state longer than a timeout.	8 years ago
Hasyimi Bahrudin	105cea9bae	Add api environment variables as constants for consistency	8 years ago
Hasyimi Bahrudin	bb6bb19aad	Remove redundant hardcoded environment variables ... The following hardcoded environment variables are removed: * CONSUL_RPC_ADDR * CONSUL_HTTP_ADDR	8 years ago
Jeff Mitchell	f1a67836d8	Use header to send Consul token rather than query param.	8 years ago
Abhinav Dahiya	7c6c3b38bc	Fixes #1775; Removes 'unknown' state ... Signed-off-by: Abhinav Dahiya <abhinavdtu2012@gmail.com>	8 years ago
Ryan Uber	499537addf	api: add query templates	9 years ago
Ryan Uber	72b43eba26	api: add Near parameter to PQ's	9 years ago
James Phillips	778b975e7a	Adds a get-tree verb to KV transaction operations.	9 years ago
James Phillips	a37bf9de56	Adds a read-only optimized path for transactions.	9 years ago
James Phillips	04d99cd702	Makes get fail a transaction if the key doesn't exist.	9 years ago
James Phillips	4882a9fe43	De-nests the KV output structure (removes DirEnt member).	9 years ago
James Phillips	960b9d6fb6	Switches to "KV" instead of "KV" for the KV operations.	9 years ago
James Phillips	38d0f6676f	Refactors TxnRequest/TxnResponse into a form that will allow non-KV ops. ... This isn't needed/used yet, but it's a good hook to get in there so we can add more atomic operations in the future. The Go API hides this detail so that feels like a KV-specific API. The implications on the REST API are pretty minimal.	9 years ago
James Phillips	69f58ad04a	Moves txn code into a new endpoint, not specific to KV.	9 years ago
James Phillips	44ab1aa418	Adds type for API ops and an example transaction.	9 years ago
James Phillips	e491245062	Performs basic plumbing of KVS transactions through all the layers.	9 years ago
Sean Chittenden	4255a0826d	Correct a small typo	9 years ago
Sean Chittenden	f1873c21d7	consul/ uses structs.Health*, the api uses api.Health*	9 years ago
Sean Chittenden	e63d3a1275	Update Check API to use constants ... Use constants where appropriate to advocate their use. Also add a deprecation notice re: `updateTTL`.	9 years ago
James Phillips	3340d7ccd7	Merge pull request #1876 from hashicorp/f-tls-helper ... Adds TLS config helper to API client.	9 years ago
James Phillips	0eb6279c5e	Improves the comment for the Address field.	9 years ago
Diptanu Choudhury	4811a72d80	Added some constants in the api for check health statuses	9 years ago
James Phillips	1cfed981b3	Adds TLS config helper to API client.	9 years ago
James Phillips	abacccd6e5	Switches default for API client to pooled connections.	9 years ago
James Phillips	23247b3699	Adds support for new PUT API for checks.	9 years ago
James Phillips	afdeb2f1fc	Adds support for EnableTagOverride to the API client.	9 years ago
Seth Vargo	cae0ff354a	Use HTTPS + www. where appropriate	9 years ago
James Phillips	58fb27e70f	Factors server error checking into a new function.	9 years ago
James Phillips	c048c5aca6	Makes the API behave better with small wait values.	9 years ago
James Phillips	49342dc973	Makes the timeout behavior more intuitive. ... Previously, it would try once "up to" the timeout, but in practice it would just fall through. This modifies the behavior to block until the timeout has been reached.	9 years ago
James Phillips	ca08ba3aee	Adds the ability for semaphore monitors to ride out brief periods of 500 errors.	9 years ago
James Phillips	8caa9e4c7e	Adds "try" support to locks and semaphores.	9 years ago
James Phillips	ebff3fe0d0	Builds the insecure SSL transport off the clean default transport.	9 years ago
Jeff Mitchell	4604af6aa5	Revert "Adds client and transport pooling in the API so we don't leak connections."	9 years ago
James Phillips	f6546a0e46	Makes the insecure transport work like the default one.	9 years ago
James Phillips	d57e60a123	Adds client and transport pooling in the API so we don't leak connections.	9 years ago
James Phillips	380658f6f1	Adds a unit test for lock monitor retries.	9 years ago
James Phillips	c2a8fee76c	Adds custom retry time for lock monitors.	9 years ago
James Phillips	86e6230de6	Adds a retry capability to lock monitors in the API client.	9 years ago
James Phillips	87ccd1eb34	Updates API docs for version 0.6.0.	9 years ago
Craig Wickesser	7890a3dda8	Fix version support ... Updated the version that the library supports.	9 years ago
James Phillips	95c708f65e	Adds Docker checks support to client API. ... Also changed `DockerContainerId` to `DockerContainerID`, and updated the agent API docs to reflect their support for Docker checks.	9 years ago
James Phillips	1059a8b3a3	Removes a useless empty import and fixes some stale comments.	9 years ago
James Phillips	8fc6a6a986	Switches to helpers for prepared query API wrappers.	9 years ago
James Phillips	712a3dba2f	Adds API client support for prepared queries.	9 years ago
James Phillips	787f946f8d	Adds support for coordinates to client API.	9 years ago
Mikhail Dyakov	01aba571a1	Handle error in api README example	9 years ago
Jeff Mitchell	1e3840b044	Update cleanhttp repo location	9 years ago
Jeff Mitchell	9a5fd5424a	Use cleanhttp to get rid of DefaultTransport	9 years ago
James Phillips	2c36c4f969	Fixes a typo.	9 years ago
James Phillips	181c216f53	Fixes index management for KVS.	9 years ago
Jeff Mitchell	f49fc095ef	Don't use http.DefaultClient ... Two of the changes are in tests; the one of consequence is in the API. As explained in #1308 this can cause conflicts with downstream programs. Fixes #1308.	9 years ago
James Phillips	c74355fec0	Merge pull request #1041 from rboyer/api-fix-session-renew ... Fix Session.Renew to care about 404s properly	9 years ago
Dale Wijnand	5a28ebcaa3	Fix a bunch of typos.	9 years ago
R.B. Boyer	8b072467eb	Correct the Session.Renew{,Periodic} to handle session expiration better	9 years ago
Anthony Scalisi	10e028d599	remove various typos	9 years ago
Peter Fern	b023904298	Add TCP check type ... Adds the ability to simply check whether a TCP socket accepts connections to determine if it is healthy. This is a light-weight - though less comprehensive than scripting - method of checking network service health. The check parameter `tcp` should be set to the `address:port` combination for the service to be tested. Supports both IPv6 and IPv4, in the case of a hostname that resolves to both, connections will be attempted via both protocol versions, with the first successful connection returning a successful check result. Example check: ```json { "check": { "id": "ssh", "name": "SSH (TCP)", "tcp": "example.com:22", "interval": "10s" } } ```	9 years ago
Robert Gogolok	2b8d0c4785	api: run ACL tests by default	10 years ago
James Phillips	de29cb4968	Fixes a broken unit test introduced by #834.	10 years ago
Armon Dadgar	c2f8f954e2	Merge pull request #1008 from highlyunavailable/master ... Check to see why a lock acquisition failed	10 years ago
Ryan Uber	20a2d19198	Merge pull request #834 from apoydence/master ... Returns an error for a key with a '/'	10 years ago
Tiru Srikantha	3d97ea0bae	Check to see why a lock acquisition failed	10 years ago
highlyunavailable	16de0a909b	Remove unused DefaultSemaphoreRetryTime ... Fixes #932 DefaultSemaphoreRetryTime is actually unused, unlike DefaultLockRetryTime.	10 years ago
Armon Dadgar	dc6795a55a	api: improve test reliability	10 years ago
Ryan Uber	72ee584df3	Fix tests after merge	10 years ago
Armon Dadgar	8d86290ebf	Fixing merge conflict	10 years ago
Armon Dadgar	db134f6190	Merge pull request #912 from rojojo23/renew-periodic ... modify RenewPeriodic to retry failed Renew until TTL elapses	10 years ago
Ryan Uber	565cac0340	api: run tests in parallel	10 years ago
Robert Johnson	379a69d7a4	modify RenewPeriodic to retry failed Renews until TTL elapses	10 years ago
Armon Dadgar	5921fcb29b	api: Fixing test compilation issue	10 years ago
Armon Dadgar	0450854f12	Merge pull request #861 from fraenkel/reclaim_lock ... Reclaim locks	10 years ago
Michael Fraenkel	0e25381494	Reclaim locks ... - When attempting to lock with the same session that already owns the lock, Lock() will re-acquire the lock.	10 years ago
Ryan Mills	275af975e8	Allow specifying a status field in the agent/service/register and agent/check/register endpoints. ... This status must be one of the valid check statuses: 'passing', 'warning', 'critical', 'unknown'. If the status field is not present or the empty string, the default of 'critical' is used.	10 years ago
Andrew Poydence	b5f6451e74	Returns an error for a key with a '/'	10 years ago
Ryan Uber	fa7414e276	testutil: Use HTTPAddr	10 years ago
Ryan Uber	78f9f53bf1	testutil: exposing the API address from the test server	10 years ago
Ryan Uber	37f6301856	testutil: initial pass at moving test server harness into testutil	10 years ago
Seth Vargo	b4f8c98fbb	Read select environment variables when generating the default configuration	10 years ago
Chris Grieger	f70ccdb4d2	Add 'ServiceAddress' field to 'CatalogService's truct	10 years ago
Ryan Uber	33390779eb	api: remove unneeded static config	10 years ago
Armon Dadgar	5f627fca1b	api: Refactoring into shared write logic	10 years ago
Armon Dadgar	c0c9fb58ce	api: Refactoring into shared query logic	10 years ago
Ryan Uber	5c2a764cbe	api: allow timeout field to be specified for checks	10 years ago
Nicholas Capo	8cbca78b29	api/agent: Support HTTP service checks in client api	10 years ago
Armon Dadgar	17d1c392e4	CHANGELOG update, gofmt	10 years ago
Armon Dadgar	e1a5d537d4	Merge pull request #625 from hashicorp/f-maintcmd ... New "maint" command	10 years ago
Dr. Stefan Schimanski	acd9efbc40	Add test case for service Address field	10 years ago
Dr. Stefan Schimanski	a85575dcaa	Add agent service Address field to the api ... The Address field was introduced in #570. This patch extends this to the api.	10 years ago
Ryan Uber	089c4396c4	api: support reason flag for maintenance mode	10 years ago
Ryan Uber	e088240c95	api: finish up maintenance tests	10 years ago
Ryan Uber	e47b64197e	api: add node/service maintenance mode functions	10 years ago
Ryan Uber	197a5a9a9a	api: support multiple checks during service/check registration	10 years ago
Armon Dadgar	d998bb3d67	Fixing merge conflict	10 years ago
Armon Dadgar	2e281dc51f	api: Fixing some comments	10 years ago
Armon Dadgar	7195de51a2	api: Refactor to share session renew code	10 years ago
Armon Dadgar	14691f7e29	api: Detect conflicting existing values for lock/semaphore	10 years ago
Armon Dadgar	4fef14163d	api: Make channels receive only	10 years ago
Ryan Uber	b30af9536d	Merge pull request #608 from imkira/fixBodyLeak ... fixed: body not closed for non HTTP 200 responses	10 years ago
Mário Freitas	f45105383c	fixed: requireOK should close Body on error	10 years ago
Mário Freitas	f30237a92e	Revert "fixed: body not closed for non HTTP 200 responses" ... This reverts commit dafa61ad10.	10 years ago
Ryan Uber	4b635738bf	api: simple test for unix socket connectivity	10 years ago
Ryan Uber	4c3ec248a5	agent: fixing up tests	10 years ago
Mário Freitas	dafa61ad10	fixed: body not closed for non HTTP 200 responses	10 years ago
Ryan Uber	4675cdf01c	agent: beginning refactor	10 years ago
Jeff Mitchell	9fcea08dbb	Ensure a socket is created for permissions adjustment tests and fix some ... items pointed out in the code review This code is copyright 2014 Akamai Technologies, Inc. <opensource@akamai.com>	10 years ago
Jeff Mitchell	70dd5a1e81	Unix socket-based HTTP API test functionality. As a consequence this ... also required making some hardcoded values into more generic functionality, which is generally a good thing. I verified that each test function that I modified still passed.: This code is copyright 2014 Akamai Technologies, Inc. <opensource@akamai.com>	10 years ago
Jeff Mitchell	11a3ce0bdd	RPC and HTTP interfaces fully generically-sockified so Unix is supported. ... Client works for RPC; will honor CONSUL_RPC_ADDR. HTTP works via consul/api; honors CONSUL_HTTP_ADDR. The format of a Unix socket in configuration data is: "unix://[/path/to/socket];[username or uid];[gid];[mode]" Obviously, the user must have appropriate permissions to create the socket file in the given path and assign the requested uid/gid. Also note that Go does not support gid lookups from group name, so gid must be numeric. See https://codereview.appspot.com/101310044 When connecting from the client, the format is just the first part of the above line: "unix://[/path/to/socket]" This code is copyright 2014 Akamai Technologies, Inc. <opensource@akamai.com>	10 years ago
Armon Dadgar	7ed1449b6c	api: Adding Destroy to cleanup a semaphore	10 years ago
Armon Dadgar	9608108e64	api: Adding Destroy to cleanup a lock	10 years ago
Armon Dadgar	94d7022a88	api: Add support for DeleteCAS	10 years ago
Armon Dadgar	f2e1594814	Merge pull request #600 from hashicorp/f-api-semaphore ... Adding Semaphore support to API	10 years ago
Armon Dadgar	ed6abe05fb	api: Changing default semaphore key	10 years ago
Armon Dadgar	4a038927ee	api: More reliable session check	10 years ago
Armon Dadgar	c19b0e2ab2	api: Enable debug output from Consul for tests	10 years ago
Ryan Uber	78328ec149	api: make node health test more reliable	10 years ago
Armon Dadgar	5107f5d1f9	api: More semaphore tests	10 years ago
Armon Dadgar	8ad16ca390	api: Adding semaphore tests and fixes	10 years ago
Armon Dadgar	b39374acae	api: First pass at semaphore	10 years ago
Armon Dadgar	c291acd96e	api: Minor cleanups in lock	10 years ago
Armon Dadgar	3cba4df127	Merge pull request #594 from hashicorp/f-api-lock ... api: Adding Lock helpers for leader election	10 years ago
Armon Dadgar	7225088c7d	api: Fixing typo	10 years ago
Armon Dadgar	e05ab983ab	api: Fixing typos	10 years ago
Armon Dadgar	854aef82b0	api: Adding Lock helpers for leader election	10 years ago
Ryan Uber	fab30406be	api: test for a known leader as well as index > 0	10 years ago
Ryan Uber	cb1b722813	api: improve reliability of catalog endpoint tests	10 years ago
Armon Dadgar	bb3829c2d9	api: Adding constants for session behaviors	10 years ago
Ryan Uber	60ebd63760	Import HTTP basic auth patch from armon/consul-api#16	10 years ago
Ryan Uber	6c4ff58d2a	api: improve test reliability	10 years ago
Ryan Uber	0c6c06cb0c	api: use WaitForResult() to improve health tests	10 years ago
Ryan Uber	f49189252e	api: run consul instance on testing ports	10 years ago
Ryan Uber	8455077e5d	api: add harnessing for tests ... This is necessary as consul-api's tests require a real consul instance to be running. We can't directly import an agent to fire up an instance, due to the way this would create an import cycle. These tests instead will start a consul instance using the binary in $PATH (if it exists).	10 years ago
Ryan Uber	5555e0eb9b	api: initial import from armon/consul-api	10 years ago