06880bd51f
update docs for exp v2 licensing changes ( #15563 )
2022-12-01 11:30:29 -06:00
10349bd84b
clean up go.mod ( #15638 )
2022-12-01 16:24:35 +00:00
36f05bc8fb
integ-test: test consul upgrade from the snapshot of a running cluster ( #15595 )
...
* integ-test: test consul upgrade from the snapshot of a running cluster
* use Target version as default
Co-authored-by: Dan Stough <dan.stough@hashicorp.com>
2022-12-01 10:39:09 -05:00
227fd14287
chore: updates from 1.14.2 release ( #15633 )
...
* chore: updates from 1.14.2 release
2022-11-30 22:15:58 -05:00
7a1ce08861
CHANGELOG: add alpn config for ingress and connect proxy ( #15613 )
2022-11-30 15:47:52 -08:00
62e5c65e59
docs: fix typos helm install ( #15625 )
...
* fix typos helm install and small compat matrix change related to host ports not required any longer
2022-11-30 12:36:40 -08:00
ae9a1e681e
added changelog for enterprise only change ( #15621 )
2022-11-30 11:39:20 -08:00
b8347ae8c6
ui: Add ServerExternalAddresses to peer token create form ( #15555 )
...
* ui: Add ServerExternalAddresses field to token generation
* Add test for ServerExternalAddresses on peer token create
* Add changelog entry
* Update translations
* Format hbs files
* Update translations
2022-11-30 11:42:36 -07:00
11a277f372
peering: better represent non-passing states during peer check flattening ( #15615 )
...
During peer stream replication we flatten checks from the source cluster and build one thin overall check to hide the irrelevant details from the consuming cluster. This flattening logic did correctly flip to non-passing if there were any non-passing checks, but WHICH status it got during that was random (warn/error).
Also it didn't represent "maintenance" operations. There is an api package call AggregatedStatus which more correctly flattened check statuses.
This PR replicated the more complete logic into the peer stream package.
2022-11-30 11:29:21 -06:00
941f6da202
Remove log line about server mgmt token init ( #15610 )
...
* Remove log line about server mgmt token init
Currently the server management token is only being bootstrapped in the
primary datacenter. That means that servers on the secondary datacenter
will never have this token available, and would log this line any time a
token is resolved.
Bootstrapping the token in secondary datacenters will be done in a
follow-up.
* Add changelog entry
2022-11-29 17:56:03 -05:00
7e78fb7818
Add support for configuring Envoys route idle_timeout ( #14340 )
...
* Add idleTimeout
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Dhia Ayachi <dhia@hashicorp.com>
2022-11-29 17:43:15 -05:00
31d58014fd
docs: Update acl-tokens.mdx ( #15607 )
2022-11-29 16:20:39 -05:00
b168b5c353
Fix AWS IAM trusted identity entity_tags.<key> ( #14727 )
...
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2022-11-29 12:34:28 -08:00
1b0e20a681
docs: typo on cluster peering k8s ( #15602 )
2022-11-29 11:49:54 -08:00
54a3714543
docs: Clean up k8s cluster peering instructions ( #15592 )
2022-11-29 10:58:13 -08:00
95dc0c7b30
Add peering `.service` and `.node` DNS lookups. ( #15596 )
...
Add peering `.service` and `.node` DNS lookups.
2022-11-29 12:23:18 -06:00
7561303855
docs: clarify envoy proxy configuration ( #15562 )
...
- Specify using the service config entry to configure
service's envoy proxy
- add missing fields in proxy.config
2022-11-28 20:33:54 -05:00
25c4ed6ea0
docs: Fix language to describe clients previously ran on each node ( #15580 )
2022-11-28 14:50:48 -08:00
97c9432843
fix(peering): increase the gRPC limit to 8MB ( #15503 )
...
* fix(peering): increase the gRPC limit to 50MB
* changelog
* update gRPC limit to 8MB
2022-11-28 17:48:43 -05:00
73e2b96f9f
Load Balancer addition ( #15583 )
2022-11-28 16:48:01 -06:00
62205d60cc
docs: Update Consul K8s Release Notes to mention updates to Cluster Peering ( #15573 )
2022-11-28 13:26:56 -08:00
c9ec9fa320
Fix Vault managed intermediate PKI bug ( #15525 )
2022-11-28 16:17:58 -05:00
b856a17cbf
docs: Dataplane performance impact ( #15566 )
...
* New image + performance considerations
* Image related updates
* Update website/content/docs/connect/dataplane/index.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-28 14:33:22 -06:00
95204f4f93
chore(ci): update backport-assistant to use gh automerge ( #14839 )
2022-11-28 13:21:04 -05:00
f9dc083b6d
[OSS] chore(ci): add auto-approve workflow for consul bot ( #15533 )
2022-11-28 12:29:46 -05:00
1a68dfc668
docs: add peering control plane diagrams ( #15498 )
2022-11-26 09:37:56 -05:00
cc819ad83b
[OSS] Add boilerplate for proto files implementing BlockableQuery ( #15554 )
2022-11-25 15:46:56 -05:00
d4ca1b5316
update docs with mesh and proxydefaults config ( #15526 )
2022-11-24 10:02:47 -08:00
27c53f6c82
Use backport-compatible assertion ( #15546 )
...
* Use backport-compatible assertion
* Add workaround for broken apt-get
2022-11-24 11:44:20 -05:00
386da5439a
Use rpcHoldTimeout to calculate blocking timeout ( #15541 )
...
Adds buffer to clients so that servers have time to respond to blocking queries.
2022-11-24 10:13:02 -05:00
6b477ceff8
Snapshot agent docs updates ( #15504 )
2022-11-22 06:13:13 -08:00
b030a3ee99
Add changelog for snapshot agent updates ( #15516 )
2022-11-22 06:11:46 -08:00
5ea70d7d83
fix typo in cluster peering docs ( #15519 )
2022-11-21 13:51:40 -08:00
d3dede5f8b
docs: add retry_max agent config option ( #15487 )
2022-11-21 16:16:56 -05:00
8079686bf0
Add 1.14.1 release updates. ( #15514 )
...
Add post-release changes for 1.14.1 updates.
2022-11-21 13:35:30 -06:00
ef235c7c36
ServerExternalAddresses parameter clarification ( #15506 )
2022-11-21 11:51:09 -06:00
44097c1154
docs: revert peering API changes ( #15505 )
2022-11-21 12:45:51 -05:00
2703545331
Add -grpc-ca-file and -grpc-ca-path CLI info on upgrade notes. ( #15500 )
...
* Add -grpc-ca-file and -grpc-ca-path CLI info on upgrade notes.
2022-11-21 09:41:29 -06:00
3e7e8ae9c5
Support RFC 2782 for prepared query DNS lookups ( #14465 )
...
Format:
_<query id or name>._tcp.query[.<datacenter>].<domain>
2022-11-20 17:21:24 -05:00
f0837a2cd0
docs: remove unnecessary ent label ( #15081 )
2022-11-19 08:53:52 -05:00
124e717d2d
docs: clarify TLS cipher suite config ( #15203 )
2022-11-19 08:53:27 -05:00
1153779677
docs: formatting release notes ( #15484 )
2022-11-18 19:50:09 -08:00
fd801d7225
docs: Core 1.14 and K8s 1.0 release notes ( #15416 )
...
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
2022-11-18 18:40:54 -08:00
f80f9a60b2
docs: clarify -retry-max ( #15477 )
2022-11-18 18:51:28 -05:00
f6ebc48c4e
docs(peering): peering GA ACL updates ( #15366 )
...
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
2022-11-18 17:39:41 -05:00
9a8c47d589
Add Consul 1.14.0 known issue. ( #15469 )
...
Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>
2022-11-18 14:59:57 -07:00
6fa8fa4fca
Fix issue with connect Envoy choosing incorrect TLS settings. ( #15466 )
...
This commit fixes a situation where the API TLS configuration
incorrectly influences the GRPC port TLS configuration for XDS.
2022-11-18 14:36:20 -06:00
c14f664399
docs: include upgrade path to 1.14 ( #15463 )
2022-11-18 09:56:41 -08:00
2be8b3326c
docs: remaining agentless docs updates ( #15455 )
...
* Update servers-outside-kubernetes.mdx
* Update single-dc-multi-k8s.mdx
* update Vault data integration for snapshot agent
* update k8s health checks page
* remove all instances of controller.enabled in helm values examples
* API Gateway update
* Apply suggestions from code review
Co-authored-by: Riddhi Shah <riddhi@hashicorp.com>
* Apply suggestions from code review
* Apply suggestions from code review
* Cleaner diagram
* added change around clients to workloads
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
Co-authored-by: Riddhi Shah <riddhi@hashicorp.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-11-18 11:33:02 -06:00
f52f3c5afc
Fix SDK to support older versions of Consul. ( #15423 )
...
This change was necessary, because the configuration was always
generated with a gRPC TLS port, which did not exist in Consul 1.13,
and would result in the server failing to launch with an error.
This code checks the version of Consul and conditionally adds the
gRPC TLS port, only if the version number is greater than 1.14.
2022-11-18 10:32:01 -06:00
skpratt