9696 Commits (b2c12550d777084b908ecf978b4fd51e8348a672)

 

All Branches   

Search

Author	SHA1	Message	Date
Alvin Huang	9c08893ae4	Merge pull request #5453 from hashicorp/circleci2.0-config ... refactor circleci config to 2.0	6 years ago
Alvin Huang	329d8b7cfb	refactor circleci config to 2.0	6 years ago
Rebecca Zanzig	8d98032ed9	Merge pull request #5445 from hashicorp/docs/helm-annotations ... Add docs for new Helm `annotations` options	6 years ago
kaitlincarter-hc	4699423a18	[Docs] ACL Bootstrap Guide (#5399) ... * Adding updates for consul reload of token config. * Update website/source/docs/guides/acl.html.md	6 years ago
kaitlincarter-hc	f4c7b84500	[doc] New Ports Documentation (#5442) ... * Adding a ports table. * Updating layout based on feedback.	6 years ago
Rebecca Zanzig	3ac9e57efe	Add docs for new Helm `annotations` options	6 years ago
Rebecca Zanzig	25c9f0e4aa	Merge pull request #5444 from hashicorp/docs/helm-priorityClassName ... Add docs about new Helm `priorityClassName` options	6 years ago
Rebecca Zanzig	6c7245ce84	Add docs about new Helm `priorityClassName` options	6 years ago
Rebecca Zanzig	7d62c8fbec	Merge pull request #5443 from hashicorp/docs/acl-to-sync ... Move aclSyncToken docs under `syncCatalog`	6 years ago
Rebecca Zanzig	3dbd73ee23	Move aclSyncToken docs under `syncCatalog` ... Additionally updates the anchors to follow the established convention.	6 years ago
Judith Malnick	80194732c5	[docs] fix link to prepared query rules (#5435) ... * [docs] fix link to prepared query rules * Update website/source/api/query.html.md Co-Authored-By: judithpatudith <judith@hashicorp.com>	6 years ago
Rebecca Zanzig	f1864b128e	Merge pull request #5431 from hashicorp/docs/helm-extraConfig ... [docs] Add examples for the `extraConfig` options in the Helm chart	6 years ago
Rebecca Zanzig	c07b7cc154	Add examples for the `extraConfig` options in the Helm chart	6 years ago
Alvin Huang	77727d23ae	Merge pull request #5436 from hashicorp/fix-typo ... fix typos	6 years ago
Alvin Huang	8cb8108b1b	fix typos	6 years ago
R.B. Boyer	f4a3b9d518	fix typos reported by golangci-lint:misspell (#5434)	6 years ago
kaitlincarter-hc	9b1bc8d96d	[Docs] Production Guide for ACLs (#5385) ... * New guide for ACLs * Fixing some formatting issues. * Update website/source/docs/guides/production-acls.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> * Update website/source/docs/guides/production-acls.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> * Update website/source/docs/guides/production-acls.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> * Resolving PR comments. * Closing the rest of the PR comments * Updates for persistence. * Updating commands. * Update website/source/docs/guides/production-acls.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> * Update website/source/docs/guides/production-acls.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	6 years ago
Chip Vaughn	f658748a79	Merge pull request #5420 from hashicorp/f-catalog-changes ... Catalog API Doc Changes	6 years ago
Chip Vaughn	ea38ad18f1	Update to registering services via Catalog API	6 years ago
Chip Vaughn	ad25767416	Update to registering services via Catalog API	6 years ago
Hans Hasselberg	eb0895c5fb	tlsutil: don't use `server_name` config for RPC connections (#5394) ... * server name only for outgoing https for checks	6 years ago
R.B. Boyer	2ffbea41c8	improve flaky LANReap tests by expliciting configuring the tombstone timeout ... In TestServer_LANReap autopilot is running, so the alternate flow through the serf reaping function is possible. In that situation the ReconnectTimeout is not relevant so for parity also override the TombstoneTimeout value as well. For additional parity update the TestServer_WANReap and TestClient_LANReap versions of this test in the same way even though autopilot is irrelevant here .	6 years ago
R.B. Boyer	5bea49ecb0	tests: avoid leaking child processes from agent/proxyprocess package	6 years ago
R.B. Boyer	a99f7aaa25	website: fix broken links	6 years ago
Hans Hasselberg	feaece034b	website: fix gemfile.lock (#5429)	6 years ago
Matt Keeler	a4e2fe67eb	Putting source back into Dev Mode	6 years ago
Matt Keeler	9e7d0ff2d4	Merge branch 'master' of https://github.com/hashicorp/consul	6 years ago
novotnyr	aa6a392489	[docs] Add IntelliJ Consul to the list of community tools (#5379)	6 years ago
Matt Keeler	567e41ff6b	Release v1.4.3	6 years ago
Matt Keeler	67f4633134	Update Changelog	6 years ago
Matt Keeler	90040f8bff	Fixes for CVE-2019-8336 ... Fix error in detecting raft replication errors. Detect redacted token secrets and prevent attempting to insert. Add a Redacted field to the TokenBatchRead and TokenRead RPC endpoints This will indicate whether token secrets have been redacted. Ensure any token with a redacted secret in secondary datacenters is removed. Test that redacted tokens cannot be replicated.	6 years ago
Chip Vaughn	ae8f273a92	Update to registering services via Catalog API	6 years ago
Chip Vaughn	9e91906664	Update to registering services via Catalog API	6 years ago
Matt Keeler	59cca0b975	Update CHANGELOG.md	6 years ago
Hans Hasselberg	d35824b1fa	default to tls 1.2 as promised. (#5340)	6 years ago
Matt Keeler	7a418f70cf	Update CHANGELOG.md	6 years ago
Aestek	2aac4d5168	Register and deregisters services and their checks atomically in the local state (#5012) ... Prevent race between register and deregister requests by saving them together in the local state on registration. Also adds more cleaning in case of failure when registering services / checks.	6 years ago
Matt Keeler	219e9f8297	Update CHANGELOG.md	6 years ago
Matt Keeler	6e6910ea11	Dont modify memdb owned token data for get/list requests of tokens (#5412) ... Previously we were fixing up the token links directly on the *ACLToken returned by memdb. This invalidated some assumptions that a snapshot is immutable as well as potentially being able to cause a crash. The fix here is to give the policy link fixing function copy on write semantics. When no fixes are necessary we can return the memdb object directly, otherwise we copy it and create a new list of links. Eventually we might find a better way to keep those policy links in sync but for now this fixes the issue.	6 years ago
Aestek	02f991843f	Fix race condition in DNS when using cache (#5398) ... * Fix race condition in DNS when using cache The healty node filtering was modifying the result from the cache, which caused a crash when multiple queries were made to the same service simultaneously. We now copy the node slice before filtering to ensure we do not modify the data stored in the cache. * Fix wording in dns cache config doc s/dns_max_age/cache_max_age/	6 years ago
Matt Keeler	767b8c22ea	Update CHANGELOG.md	6 years ago
Matt Keeler	200c0fb3e9	Call RemoveServer for reap events (#5317) ... This ensures that servers are removed from RPC routing when they are reaped.	6 years ago
R.B. Boyer	409c901f8e	test: fix concurrent map access when setting up test vault	6 years ago
R.B. Boyer	6955186239	fix ignored errors in state store internals as reported by errcheck	6 years ago
R.B. Boyer	c7067645dd	fix a few leap-year related clock math inaccuracies and failing tests	6 years ago
Hans Hasselberg	e64c5c5899	typo (#5407)	6 years ago
Matt Keeler	4833c5dee5	Update CHANGELOG.md	6 years ago
Matt Keeler	118adbb123	ACL Token Persistence and Reloading (#5328) ... This PR adds two features which will be useful for operators when ACLs are in use. 1. Tokens set in configuration files are now reloadable. 2. If `acl.enable_token_persistence` is set to `true` in the configuration, tokens set via the `v1/agent/token` endpoint are now persisted to disk and loaded when the agent starts (or during configuration reload) Note that token persistence is opt-in so our users who do not want tokens on the local disk will see no change. Some other secondary changes: * Refactored a bunch of places where the replication token is retrieved from the token store. This token isn't just for replicating ACLs and now it is named accordingly. * Allowed better paths in the `v1/agent/token/` API. Instead of paths like: `v1/agent/token/acl_replication_token` the path can now be just `v1/agent/token/replication`. The old paths remain to be valid. * Added a couple new API functions to set tokens via the new paths. Deprecated the old ones and pointed to the new names. The names are also generally better and don't imply that what you are setting is for ACLs but rather are setting ACL tokens. There is a minor semantic difference there especially for the replication token as again, its no longer used only for ACL token/policy replication. The new functions will detect 404s and fallback to using the older token paths when talking to pre-1.4.3 agents. * Docs updated to reflect the API additions and to show using the new endpoints. * Updated the ACL CLI set-agent-tokens command to use the non-deprecated APIs.	6 years ago
Kyle Havlovitz	f07e928afc	Merge pull request #5325 from hashicorp/consul-ca-panic ... connect/ca: fix a potential panic in the Consul provider	6 years ago
Hans Hasselberg	80e7d63fc2	Centralise tls configuration part 2 (#5374) ... This PR is based on #5366 and continues to centralise the tls configuration in order to be reloadable eventually! This PR is another refactoring. No tests are changed, beyond calling other functions or cosmetic stuff. I added a bunch of tests, even though they might be redundant.	6 years ago