consul

Commit Graph

Author	SHA1	Message	Date
hc-github-team-consul-core	b63fec348a	Backport of [NET-5146] security: Update Go version to 1.20.7 and `x/net` to 0.13.0 into release/1.14.x (#18361 ) backport of commit `905e371607` Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>	1 year ago
hc-github-team-consul-core	f33d7d7208	Backport of NET-4240 - Snapshots are failing on Windows into release/1.14.x (#18354 ) * backport of commit `7f0a3db505` * backport of commit `ea350bff0d` * cherry-pick * go mod tidy * go mod tidy --------- Co-authored-by: absolutelightning <ashesh.vidyut@hashicorp.com> Co-authored-by: Ashesh Vidyut <134911583+absolutelightning@users.noreply.github.com>	1 year ago
hc-github-team-consul-core	3f8cb583c7	Backport of [NET-4865] Bump golang.org/x/net to 0.12.0 into release/1.14.x (#18187 ) Backport of [NET-4865] Bump golang.org/x/net to 0.12.0 into release/1.16.x (#18189) Bump golang.org/x/net to 0.12.0 While not necessary to directly address CVE-2023-29406 (which should be handled by using a patched version of Go when building), an accompanying change to HTTP/2 error handling does impact agent code. See https://go-review.googlesource.com/c/net/+/506995 for the HTTP/2 change. Bump this dependency across our submodules as well for the sake of potential indirect consumers of `x/net/http`. Manual backport of `84cbf09185`.	1 year ago
hc-github-team-consul-core	24902b0987	deps: coredns v1.10.1 (#17932 ) Co-authored-by: Dan Bond <danbond@protonmail.com>	1 year ago
hc-github-team-consul-core	b9f105c904	deps: aws-sdk-go v1.44.289 (#17878 ) Signed-off-by: Dan Bond <danbond@protonmail.com> Co-authored-by: Dan Bond <danbond@protonmail.com>	1 year ago
cskh	fb448bf723	[Release/1.14.x] net 3914 gha consul container test no splitting (#17474 ) Signed-off-by: cskh <hui.kang@hashicorp.com>	2 years ago
Hans Hasselberg	74fe2be631	manual backport of #17296 to release/1.14.x (#17342 ) * update hcp-sdk-go * add version, datacenter and acl info * fewer changes * go mod tidy and lint * less code * remove duplicated dep * fmt * go mod tidy	2 years ago
Hans Hasselberg	e26ac3f388	Update HCP bootstrapping to support existing clusters 1.14.x version (#17303 ) * Persist HCP management token from server config We want to move away from injecting an initial management token into Consul clusters linked to HCP. The reasoning is that by using a separate class of token we can have more flexibility in terms of allowing HCP's token to co-exist with the user's management token. Down the line we can also more easily adjust the permissions attached to HCP's token to limit it's scope. With these changes, the cloud management token is like the initial management token in that iit has the same global management policy and if it is created it effectively bootstraps the ACL system. * Update SDK and mock HCP server The HCP management token will now be sent in a special field rather than as Consul's "initial management" token configuration. This commit also updates the mock HCP server to more accurately reflect the behavior of the CCM backend. * Refactor HCP bootstrapping logic and add tests We want to allow users to link Consul clusters that already exist to HCP. Existing clusters need care when bootstrapped by HCP, since we do not want to do things like change ACL/TLS settings for a running cluster. Additional changes: * Deconstruct MaybeBootstrap so that it can be tested. The HCP Go SDK requires HTTPS to fetch a token from the Auth URL, even if the backend server is mocked. By pulling the hcp.Client creation out we can modify its TLS configuration in tests while keeping the secure behavior in production code. * Add light validation for data received/loaded. * Sanitize initial_management token from received config, since HCP will only ever use the CloudConfig.MangementToken. * Add changelog entry * pin logr * pin stdr --------- Co-authored-by: freddygv <freddy@hashicorp.com> Co-authored-by: John Murret <john.murret@hashicorp.com>	2 years ago
malizz	842139f5b5	backport pr 15979 into 1.14.x (#17287 ) * backport pr 15979 into 1.14.x * update protobuf package and update protos	2 years ago
Poonam Jadhav	431acaa2a9	fix: integration tests (#17177 ) * fix: pass image name as an argument to compaitibility test * fix: use correct docker image in upgrade test * refactor: clean up	2 years ago
John Murret	00d3bb45fb	ci:backport of success job being skipped (#17135 )	2 years ago
John Murret	64f269b2c9	ci: remove test-integrations CircleCI workflow in 1.14 (#16928 ) (#17050 ) * ci: remove test-integrations CircleCI workflow (#16928) * remove all CircleCI files * remove references to CircleCI * remove more references to CircleCI * pin golangci-lint to v1.51.1 instead of v1.51 * right-sizing TOTAL_runners	2 years ago
Andrew Stucki	f38cefb2a0	Manual Backport of Fix resolution of service resolvers with subsets for external upstreams into release/1.14.x (#16560 ) * Fix resolution of service resolvers with subsets for external upstreams * Add tests * Add changelog entry * Update view filter logic	2 years ago
Andrew Stucki	89cee200ec	Manual Backport of Fix issue where terminating gateway service resolvers weren't properly cleaned up into release/1.14.x (#16558 ) * Fix issue where terminating gateway service resolvers weren't properly cleaned up * Add integration test for cleaning up resolvers * Add changelog entry * Use state test and drop integration test	2 years ago
hc-github-team-consul-core	ff2c9275e9	backport of commit `a0598b81a3` (#16362 ) Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>	2 years ago
hc-github-team-consul-core	0a29abcdec	backport of commit `8c0b70c161` (#16337 ) Co-authored-by: cskh <hui.kang@hashicorp.com>	2 years ago
Dan Stough	0448e51cf5	Manual Backport of [OSS] security: update go to 1.20.1 into release/1.14.x (#16321 ) * security: update go to 1.20.1 (#16263) * changelog	2 years ago
hc-github-team-consul-core	83bf3e4b43	Backport of [OSS] security: update x/net module into release/1.14.x (#15744 ) * backport of commit `32688b1ef5` * backport of commit `9c832651d9` * go mod tidy compatibility tests * changelog Co-authored-by: DanStough <dan.stough@hashicorp.com> Co-authored-by: Dhia Ayachi <dhia@hashicorp.com>	2 years ago
hc-github-team-consul-core	fd82c3fc46	Backport of Flakiness test: case-cfg-splitter-peering-ingress-gateways into release/1.14.x (#15725 ) * backport of commit `1ac56cc5ac` * backport of commit `6d78f4b20e` * backport of commit `07054a70e4` * backport of commit `0c99f0df59` Co-authored-by: cskh <hui.kang@hashicorp.com>	2 years ago
Dan Stough	647f916d54	chore: updates from 1.14.2 release (#15634 )	2 years ago
Derek Menteer	6632e19f78	Backport 1.14.1 changes (#15513 ) Add post-release changes for 1.14.1 updates.	2 years ago
hc-github-team-consul-core	f814f3b2ec	backport of commit `4900006f5e` (#15385 ) This pull request was automerged via backport-assistant	2 years ago
Derek Menteer	50cbc7f6c4	Derekm/release updates (#15383 ) * Update changelog with 1.14 notes. * gomod version bumps for 1.14 release. * Post-release gomod changes. * Version bump.	2 years ago
hc-github-team-consul-core	329d111dcb	backport of commit `87038bb672` (#15364 ) Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>	2 years ago
hc-github-team-consul-core	3a8f6dddad	Backport of Avoid blocking child type updates on parent ack into release/1.14.x (#15321 ) This pull request was automerged via backport-assistant	2 years ago
Chris S. Kim	fb7b645b29	Update hcp-scada-provider to fix diamond dependency problem with go-msgpack (#15185 ) (#15277 )	2 years ago
hc-github-team-consul-core	e372bf3935	Backport of fix: persist peering CA updates to dialing clusters into release/1.14.x (#15265 ) This pull request was automerged via backport-assistant	2 years ago
hc-github-team-consul-core	9614be0345	Backport of integ test: reduce flakiness due to compound output from retry into release/1.14.x (#15238 ) This pull request was automerged via backport-assistant	2 years ago
hc-github-team-consul-core	6def795f56	backport of commit `b4a7cf11f8` (#15226 ) This pull request was automerged via backport-assistant	2 years ago
hc-github-team-consul-core	046246403b	Backport of Regenerate certificates. into release/1.14.x (#15219 ) This pull request was automerged via backport-assistant	2 years ago
hc-github-team-consul-core	7439701133	Backport of Fix peered service protocols using proxy-defaults. into release/1.14.x (#15200 ) This pull request was automerged via backport-assistant	2 years ago
hc-github-team-consul-core	35fb3cb433	Backport of Update go version to 1.19 into release/1.14.x (#15139 ) This pull request was automerged via backport-assistant	2 years ago
cskh	fa970a85ad	integration test: specify image name for testing dev container (#15069 ) * integration test: specify image name for testing dev container * Add todo	2 years ago
cskh	6a9739ad7e	chore: fix the module path to align with the code structure (#15053 )	2 years ago
R.B. Boyer	c3fa46c3f6	test: possibly fix flaky TestEnvoy/case-ingress-gateway-multiple-services test (#15034 ) The integration test TestEnvoy/case-ingress-gateway-multiple-services is flaky and this possibly reduces the flakiness by explicitly waiting for services to show up in the catalog as healthy before waiting for them to show up in envoy as healthy which gives it just a bit more time to sync.	2 years ago
freddygv	472a8e82dc	Add integ test for peering through gateways	2 years ago
boruszak	38b1a515f1	Mergimg	2 years ago
freddygv	3034df6a5c	Require Connect and TLS to generate peering tokens By requiring Connect and a gRPC TLS listener we can automatically configure TLS for all peering control-plane traffic.	2 years ago
Eric Haberkorn	1633cf20ea	Make the mesh gateway changes to allow `local` mode for cluster peering data plane traffic (#14817 ) Make the mesh gateway changes to allow `local` mode for cluster peering data plane traffic	2 years ago
Alex Oskotsky	13da2c5fad	Add the ability to retry on reset connection to service-routers (#12890 )	2 years ago
John Murret	79a541fd7d	Upgrade serf to v0.10.1 and memberlist to v0.5.0 to get memberlist size metrics and broadcast queue depth metric (#14873 ) * updating to serf v0.10.1 and memberlist v0.5.0 to get memberlist size metrics and memberlist broadcast queue depth metric * update changelog * update changelog * correcting changelog * adding "QueueCheckInterval" for memberlist to test * updating integration test containers to grab latest api	2 years ago
Derek Menteer	678adb3154	Add peering integration tests (#14836 ) Add peering integration tests.	2 years ago
Eric Haberkorn	1b565444be	Rename `PeerName` to `Peer` on prepared queries and exported services (#14854 )	2 years ago
Luke Kysow	960c42854b	Remove terminal colouring from test output so it is (#14810 ) more readable in CI. ``` Running primary verification step for case-ingress-gateway-multiple-services... �[34;1mverify.bats �[0m�[1G ingress proxy admin is up on :20000�[K�[75G 1/12�[2G�[1G ✓ ingress proxy admin is up on :20000�[K �[0m�[1G s1 proxy admin is up on :19000�[K�[75G 2/12�[2G�[1G ✓ s1 proxy admin is up on :19000�[K �[0m�[1G s2 proxy admin is up on :19001�[K�[75G 3/12�[2G�[1G ✓ s2 proxy admin is up on :19001�[K �[0m�[1G s1 proxy listener should be up and have right cert�[K�[75G 4/12�[2G�[1G ✓ s1 proxy listener should be up and have right cert�[K �[0m�[1G s2 proxy listener should be up and have right cert�[K�[75G 5/12�[2G�[1G ✓ s2 proxy listener should be up and have right cert�[K �[0m�[1G ingress-gateway should have healthy endpoints for s1�[K�[75G 6/12�[2G�[31;1m�[1G ✗ ingress-gateway should have healthy endpoints for s1�[K �[0m�[31;22m (from function `assert_upstream_has_endpoints_in_status' in file /workdir/primary/bats/helpers.bash, line 385, ``` versus ``` Running primary verification step for case-ingress-gateway-multiple-services... 1..12 ok 1 ingress proxy admin is up on :20000 ok 2 s1 proxy admin is up on :19000 ok 3 s2 proxy admin is up on :19001 ok 4 s1 proxy listener should be up and have right cert ok 5 s2 proxy listener should be up and have right cert not ok 6 ingress-gateway should have healthy endpoints for s1 not ok 7 s1 proxy should have been configured with max_connections in services ok 8 ingress-gateway should have healthy endpoints for s2 ```	2 years ago
cskh	622804ad5b	fix flaky integration test (#14843 )	2 years ago
cskh	69f40df548	feat(ingress gateway: support configuring limits in ingress-gateway c… (#14749 ) * feat(ingress gateway: support configuring limits in ingress-gateway config entry - a new Defaults field with max_connections, max_pending_connections, max_requests is added to ingress gateway config entry - new field max_connections, max_pending_connections, max_requests in individual services to overwrite the value in Default - added unit test and integration test - updated doc Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Dan Stough <dan.stough@hashicorp.com>	2 years ago
DanStough	7704daaad5	release updates for 1.13.2, 1.12.5, and 1.11.9	2 years ago
Evan Culver	31ef39112a	Add more content to integration test docs (#14613 )	2 years ago
Evan Culver	d0416f593c	connect: Bump latest Envoy to 1.23.1 in test matrix (#14573 )	2 years ago
Luke Kysow	15043de647	Document integration tests (#14391 )	2 years ago

1 2 3 4 5 ...

253 Commits (b63fec348a42aa7d256ac5e9724361a46c5211bd)