2973 Commits (bf96d536d9c7c00705b04d1824f29f0d128f3f31)

Author	SHA1	Message	Date
freddygv	bf96d536d9	Upstreams loop is only for prepared queries and they are not CentrallyConfigured	4 years ago
freddygv	8a062e1546	Handle prepared queries in Upstreams loop and escape hatches in disco chain loop	4 years ago
freddygv	ce964f8ea5	Update xds for transparent proxy	4 years ago
freddygv	a54d6a9010	Update proxycfg for transparent proxy	4 years ago
freddygv	37f684664d	Do not include consul as upstream or downstream	4 years ago
freddygv	3f2489c31d	Refactor makePublicListener ... By accepting a name the function can be used for other inbound listeners, like the one for TransparentProxy.	4 years ago
freddygv	7892964a0c	Add cache-type for Internal.IntentionUpstreams	4 years ago
freddygv	942334b208	Prefix match type vars to match use	4 years ago
freddygv	4cb9fdc27f	Pass txn into service list queries	4 years ago
freddygv	86ff9065c1	Pass txn into intention match queries	4 years ago
freddygv	31e757de2a	Replace CertURI.Authorize() calls. ... AuthorizeIntentionTarget is a generalized version of the old function, and can be evaluated against sources or destinations.	4 years ago
freddygv	f5ed751c91	Fixup typo, comments, and regression	4 years ago
freddygv	08759e46ed	Add RPC endpoint for intention upstreams	4 years ago
freddygv	08737fa606	Add state store function for intention upstreams	4 years ago
freddygv	3722ce2fff	Refactor IntentionDecision ... This enables it to be called for many upstreams or downstreams of a service while only querying intentions once. Additionally, decisions are now optionally denied due to L7 permissions being present. This enables the function to be used to filter for potential upstreams/downstreams of a service.	4 years ago
freddygv	d80e4b27b1	Update content hash due to new field	4 years ago
freddygv	682f357185	Fixup more tests	4 years ago
freddygv	756ab4c546	Fixup protobufs and tests	4 years ago
freddygv	df1f3995f8	Update service manager to store centrally configured upstreams	4 years ago
freddygv	6fd30d0384	Add TransparentProxy opt to proxy definition	4 years ago
freddygv	306ef7d252	Restore old escape hatch alias	4 years ago
freddygv	e3dc2a49df	Turn Limits and PassiveHealthChecks into pointers	4 years ago
freddygv	acec711a6a	Update server-side config resolution and client-side merging	4 years ago
freddygv	1710ec87d2	finish moving UpstreamConfig and related fields to structs pkg	4 years ago
freddygv	87cde19b4c	Create new types for service-defaults upstream cfg	4 years ago
hashicorp-ci	35daee45bc	auto-updated agent/uiserver/bindata_assetfs.go from commit 308e5a480	4 years ago
R.B. Boyer	398b766532	xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658) ... - Also add support for envoy 1.17.0	4 years ago
Daniel Nephin	6b95e8dfe2	Merge pull request #9188 from hashicorp/dnephin/more-streaming-tests ... Add more streaming tests	4 years ago
Daniel Nephin	566efad2e7	Merge pull request #9759 from hashicorp/dnephin/streaming-default-rpc-enabled ... streaming: default rpc.enable_streaming to true	4 years ago
Daniel Nephin	5c8a6311b6	Merge pull request #9703 from pierresouchay/streaming_tags_and_case_insensitive ... Streaming filter tags + case insensitive lookups for Service Names	4 years ago
Daniel Nephin	55add28725	catalog_events: set the right key for connect snapshots ... Add a test for catalog_event snapshot on connect topic	4 years ago
Daniel Nephin	432dd2d204	consul: Add integration tests of streaming. ... Restored from streaming-rpc-final branch. Co-authored-by: Paul Banks <banks@banksco.de>	4 years ago
Daniel Nephin	b7f8e3bad2	state: Add a test for ServiceHealthSnapshot	4 years ago
Daniel Nephin	1d2d15b1e1	agent: add a test for streaming in the service health endpoint ... Co-authored-by: Paul Banks <banks@banksco.de>	4 years ago
Daniel Nephin	3aec942b17	streaming: default rpc.enable_streaming to true ... So that all servers will start the grpc server used by streaming	4 years ago
hashicorp-ci	b76dfa1441	auto-updated agent/uiserver/bindata_assetfs.go from commit 779f7f7b6	4 years ago
John Cowen	5892e75452	ui: Remove any trailing fullstop/period DNS characters from Gateways UI API (#9752) ... Previous to this commit, the API response would include Gateway Addresses in the form `domain.name.:8080`, which due to the addition of the port is probably not the expected response. This commit rightTrims any `.` characters from the end of the domain before formatting the address to include the port resulting in `domain.name:8080`	4 years ago
R.B. Boyer	be89557fb4	test: omit envoy golden test files that differ from the latest version (#9807) ... Since we currently do no version switching this removes 75% of the PR noise. To generate all *.golden files were removed and then I ran: go test ./agent/xds -update	4 years ago
hashicorp-ci	f0872a4ac1	auto-updated agent/uiserver/bindata_assetfs.go from commit f9b0e50ca	4 years ago
hashicorp-ci	1413e9ddca	auto-updated agent/uiserver/bindata_assetfs.go from commit 8b12d0d09	4 years ago
R.B. Boyer	3b6ffc447b	xds: remove deprecated usages of xDS (#9602) ... Note that this does NOT upgrade to xDS v3. That will come in a future PR. Additionally: - Ignored staticcheck warnings about how github.com/golang/protobuf is deprecated. - Shuffled some agent/xds imports in advance of a later xDS v3 upgrade. - Remove support for envoy 1.13.x but don't add in 1.17.x yet. We have to wait until the xDS v3 support is added in a follow-up PR. Fixes #8425	4 years ago
R.B. Boyer	a0d26430cc	connect: if the token given to the vault provider returns no data avoid a panic (#9806) ... Improves #9800	4 years ago
hashicorp-ci	02fe20ec25	auto-updated agent/uiserver/bindata_assetfs.go from commit 2c2e9d1ce	4 years ago
Daniel Nephin	b1d3c8002b	Merge pull request #9683 from hashicorp/dnephin/fix-zombie-service-dereg ... local: use agent token to deregister services	4 years ago
Daniel Nephin	8a5163b184	local: default to the agent token instead of the user token ... When de-registering in anti-entropy sync, when there is no service or check token. The agent token will fall back to the default (aka user) token if no agent token is set, so the existing behaviour still works, but it will prefer the agent token over the user token if both are set. ref: https://www.consul.io/docs/agent/options#acl_tokens The agent token seems more approrpiate in this case, since this is an "internal operation", not something initiated by the user.	4 years ago
Daniel Nephin	1f9247677b	Merge pull request #9763 from hashicorp/dnephin/cache-warn-on-error-in-notify ... cache: log a warning when Cache.Notify handles an error	4 years ago
R.B. Boyer	39effd620c	xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9765) ... Fixes #9311 This only fails if the kernel has ipv6 hard-disabled. It is not sufficient to merely not provide an ipv6 address for a network interface.	4 years ago
hashicorp-ci	21713f1b73	auto-updated agent/uiserver/bindata_assetfs.go from commit 8263879e6	4 years ago
hashicorp-ci	087247967c	auto-updated agent/uiserver/bindata_assetfs.go from commit 7be21a902	4 years ago
hashicorp-ci	c309d2b6cb	auto-updated agent/uiserver/bindata_assetfs.go from commit 1507dd8ab	4 years ago