15382 Commits (be11385944a2d44a1158706e6d33d4483e5deae7)

 

All Branches   

Search

Author	SHA1	Message	Date
Melissa Kam	be11385944	nia/docs: Remove deprecated tag option from service config	3 years ago
Kim Ngo	d83fcd580c	CTS: add TLS config for TFE connection (#11166) ... Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Chris S. Kim	1c9b58a8af	agent: Reject partitions in legacy intention endpoints (#11181)	3 years ago
Chris S. Kim	53a35181e5	Support partitions in parseIntentionStringComponent (#11202)	3 years ago
Dhia Ayachi	a5b09493ab	fix token list by auth method (#11196) ... * add tests to OIDC authmethod and fix entMeta when retrieving auth-methods * fix oss compilation error	3 years ago
John Cowen	8b002d086a	ui: Address some Admin Partition FIXMEs (#11057) ... This commit addresses some left over admin partition FIXMEs 1. Adds Partition correctly to Service Instances 2. Converts non-important 'we can do this later' FIXMEs to TODOs 3. Removes some FIXMEs that I've double checked and addressed. Most of the remaining FIXMEs I'm waiting on responses to questions from the consul core folks for. I'll address those in a separate PR.	3 years ago
trujillo-adam	887a23deb1	Merge pull request #11185 from hashicorp/docs-improve-agent-overview ... providing additional information about the Consul agent	3 years ago
trujillo-adam	f5108e4683	applied feedback, moved the Lifecycle info to the front	3 years ago
Kenia	5e7ef183ea	ui: Use of header default ACL policy (#11192) ... * Use of header default ACL policy * Update test for dc serializer	3 years ago
John Cowen	35a92e856b	ui: Make it hard to not URLEncode DataSource srcs/URIs (#11117) ... Our DataSource came in very iteratively, when we first started using it we specifically tried not to use it for things that would require portions of the @src="" attribute to be URL encoded (so things like service names couldn't be used, but dc etc would be fine). We then gradually added an easy way to url encode the @src="" attributes with a uri helper and began to use the DataSource component more and more. This meant that some DataSource usage continued to be used without our uri helper. Recently we hit #10901 which was a direct result of us not encoding @src values/URIs (I didn't realise this was one of the places that required URL encoding) and not going back over things to finish things off once we had implemented our uri helper, resulting in ~half of the codebase using it and ~half of it not. Now that almost all of the UI uses our DataSource component, this PR makes it even harder to not use the uri helper, by wrapping the string that it requires in a private URI class/object, that is then expected/asserted within the DataSource component/service. This means that as a result of this PR you cannot pass a plain string to the DataSource component without seeing an error in your JS console, which in turn means you have to use the uri helper, and it's very very hard to not URL encode any dynamic/user provided values, which otherwise could lead to bugs/errors similar to the one mentioned above. The error that you see when you don't use the uri helper is currently a 'soft' dev time only error, but like our other functionality that produces a soft error when you mistakenly pass an undefined value to a uri, at some point soon we will make these hard failing "do not do this" errors. Both of these 'soft error' DX features have been used this to great effect to implement our Admin Partition feature and these kind of things will minimize the amount of these types of bugs moving forwards in a preventative rather than curative manner. Hopefully these are the some of the kinds of things that get added to our codebase that prevent a multitude of problems and therefore are often never noticed/appreciated. Additionally here we moved the remaining non-uri using DataSources to use uri (that were now super easy to find), and also fixed up a place where I noticed (due to the soft errors) where we were sometimes passing undefined values to a uri call. The work here also led me to find another couple of non-important 'bugs' that I've PRed already separately, one of which is yet to be merged (#11105), hence the currently failing tests here. I'll rebase that once that PR is in and the tests here should then pass 🤞 Lastly, I didn't go the whole hog here to make DataSink also be this strict with its uri usage, there is a tiny bit more work on DataSink as a result of recently work, so I may (or may not) make DataSink equally as strict as part of that work in a separate PR.	3 years ago
John Cowen	a20bc5dbf1	docs: Call out the UI in README and include details for contributing to it (#11187)	3 years ago
trujillo-adam	0567e2d549	providing additional information about the Consul agent	3 years ago
FFMMM	8bb6d8571c	wrap few doRequest calls for error handling (#11158)	3 years ago
Daniel Nephin	19040586ce	Merge pull request #11136 from hashicorp/dnephin/acl-resolver-fix-default-authz ... acl: fix default Authorizer for down_policy extend-cache/async-cache	3 years ago
Daniel Nephin	a53fdd68c8	Merge pull request #11110 from hashicorp/dnephin/acl-legacy-remove-initialize ... acl: remove initializeLegacyACL and the rest of the legacy FSM commands	3 years ago
Daniel Nephin	8f754aba14	Merge pull request #10999 from hashicorp/dnephin/revert-config-xds-port ... Revert config xds_port	3 years ago
Daniel Nephin	cc310224aa	command/envoy: stop using the DebugConfig from Self endpoint ... The DebugConfig in the self endpoint can change at any time. It's not a stable API. This commit adds the XDSPort to a stable part of the XDS api, and changes the envoy command to read this new field. It includes support for the old API as well, in case a newer CLI is used with an older API, and adds a test for both cases.	3 years ago
Daniel Nephin	053174f0c9	Add changelog	3 years ago
Daniel Nephin	6e1ebd3df7	acl: remove the last of the legacy FSM ... Replace it with an implementation that returns an error, and rename some symbols to use a Deprecated suffix to make it clear. Also remove the ACLRequest struct, which is no longer referenced.	3 years ago
Daniel Nephin	ed928511ca	acl: remove bootstrap-init FSM operation	3 years ago
Daniel Nephin	dab5d1bdc8	acl: remove initializeLegacyACL from leader init	3 years ago
Daniel Nephin	05f0cc3993	acl: remove ACLDelete FSM command, and state store function ... These are no longer used now that ACL.Apply has been removed.	3 years ago
Daniel Nephin	966e50e00e	acl: remove legacy field to ACLBoostrap	3 years ago
Daniel Nephin	1502547e38	Revert "Merge pull request #10588 from hashicorp/dnephin/config-fix-ports-grpc" ... This reverts commit 74fb650b6b, reversing changes made to 58bd817336.	3 years ago
Daniel Nephin	0330966315	Merge pull request #11101 from hashicorp/dnephin/acl-legacy-remove-rpc-2 ... acl: remove legacy ACL.Apply RPC	3 years ago
Daniel Nephin	c321879d1e	Revert "Merge pull request #10618 from hashicorp/dnephin/docs-add-deprecation-version-grpc-port" ... This reverts commit 81bb5f33eb, reversing changes made to 20feb42d3a.	3 years ago
Daniel Nephin	ea4a8343cd	Merge pull request #11177 from hashicorp/dnephin/remove-entmeta-methods ... structs: remove EnterpriseMeta helper methods	3 years ago
Daniel Nephin	4c579a49ed	Merge pull request #10986 from hashicorp/dnephin/acl-legacy-remove-rpc ... acl: remove legacy ACL RPC - part 1	3 years ago
lornasong	cf01379db4	nia/docs 0.4.0-beta1 (#11170) ... * docs/nia: Add Consul KV condition * docs/nia: Clarify boolean Consul KV condition options Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * nia/docs: Remove TFE-only restriction Also updates Terraform Enterprise references to the more general Terraform Cloud term. * nia/docs: Update Terraform Cloud features * nia/docs: Callouts for v0.4.0-beta * docs/nia: Indicate version for removal of tag field Clarifying when this tag will be removed so there is no confusion when it is not present in the v0.4.0-beta release. Co-authored-by: Melissa Kam <mkam@hashicorp.com> Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Daniel Nephin	eb632c53a2	structs: rename the last helper method. ... This one gets used a bunch, but we can rename it to make the behaviour more obvious.	3 years ago
Daniel Nephin	8d8c1f9d5e	structs: remove another helper ... We already have a helper funtion.	3 years ago
Daniel Nephin	6d72517682	structs: remove two methods that were only used once each. ... These methods only called a single function. Wrappers like this end up making code harder to read because it adds extra ways of doing things. We already have many helper functions for constructing these types, we don't need additional methods.	3 years ago
Daniel Nephin	8d1378cc1d	Merge pull request #10988 from hashicorp/dnephin/acl-legacy-remove-config ... acl: isolate deprecated config and warn when they are used	3 years ago
Daniel Nephin	6b33e3bfd7	Merge pull request #9456 from hashicorp/dnephin/config-deprecation ... config: Use DeprecatedConfig struct for deprecated config fields	3 years ago
Luke Kysow	dfc74f56f5	Add TOC to helm reference (#11144)	3 years ago
Luke Kysow	410d57879c	Fix broken link (#11171)	3 years ago
Chris S. Kim	5c37819d09	Cleanup unnecessary normalizing method (#11169)	3 years ago
Daniel Nephin	bf2a3f6e79	Merge pull request #11084 from krastin/krastin-autopilot-loggingtypo ... Fix a tiny typo in logging in autopilot.go	3 years ago
Jared Kirschner	d9e78cd3e8	Merge pull request #11167 from hashicorp/add-cross-dc-comm-model-visual ... Improve mesh gateway diagram	3 years ago
Jared Kirschner	98f53e913f	Improve mesh gateway diagram ... Diagram now shows all possible cross-DC communication models supported by mesh gateways for both the control and data planes.	3 years ago
Chris S. Kim	e3248c20c9	agent: Clean up unused built-in proxy config (#11165)	3 years ago
Bisakh	981ef464d6	acl: update GetPolicyByName method implementation (#11055)	3 years ago
Jared Kirschner	9ef6490533	Merge pull request #10702 from jkirschner-hashicorp/network-segments-docs-enhancements ... Network segments docs enhancements	3 years ago
Paul Banks	020e2692da	Merge pull request #10725 from hashicorp/banks-patch-3 ... Call out the incompatibility of wildcards and L7 permissions	3 years ago
David Yu	10b52a284b	docs: consul-k8s cli install, add `bin/` to source path (#11146) ... Add `bin/` to path from which you move `consul-k8s` to `/usr/local/bin/consul-k8s`	3 years ago
R.B. Boyer	56d0ba4743	changelog updates for 1.10.3, 1.9.10, and 1.8.16 (#11160)	3 years ago
Noel Quiles	47cef4ea4d	Update alert banner for HashiConf Global 2021 (#11154)	3 years ago
John Cowen	7a5f335b7c	ui: Adds Flight icons to our icon set (#11097) ... * ui: Adds Flight icons to our icon set This commit doesn't actually add anything to the UI, rather just makes the flight icons available for use.	3 years ago
John Cowen	5e34d89f7f	ui: Hide create buttons for policies/roles/namespaces with readonly access (#10914) ... This PR adds a check to policy, role and namespace list pages to make sure the user has can write those things before offering to create them via a button. (The create page/form would then be a read-only form)	3 years ago
John Cowen	bce724baf1	ui: Don't show the CRD menu for read-only intentions (#11149) ... * ui: Don't show the CRD menu for read-only intentions The UI bug here manifests itself only when a user/token is configured to have read-only access to intentions. Instead of only letting folks click to see a read only page of the intention, we would show an additional message saying that the intention was read-only due to it being 'Managed by [a kubernetes] CRD'. Whilst the intention was still read only, this extra message was still confusing for users. This PR fixes up the conditional logic and further moves the logic to use ember-can - looking at the history of the files in question, this bug snuck itself in partly due to it being 'permission-y type stuff' previous to using ember-can and when something being editable or not was nothing to do with ACLs. Then we moved to start using ember-can without completely realising what IsEditable previously meant. So overall the code here is a tiny bit clearer/cleaner by adding a proper can view CRD intention instead of overloading the idea of 'editability'.	3 years ago