16714 Commits (c1c1580bf8110c08e2f82feba26e9eccd4f11e6e)

 

All Branches   

Search

Author	SHA1	Message	Date
Daniel Nephin	c1c1580bf8	ca: only return the leaf cert from Sign in vault provider ... The interface is documented as 'Sign will only return the leaf', and the other providers only return the leaf. It seems like this was added during the initial implementation, so is likely just something we missed. It doesn't break anything , but it does cause confusing cert chains in the API response which could break something in the future.	3 years ago
Daniel Nephin	85ecbaf109	Merge pull request #12110 from hashicorp/dnephin/blocking-queries-not-found ... rpc: make blocking queries for non-existent items more efficient	3 years ago
Ashwin Venkatesh	6e6cd928a2	Parse datacenter from request (#12370) ... * Parse datacenter from request - Parse the value of the datacenter from the create/delete requests for AuthMethods and BindingRules so that they can be created in and deleted from the datacenters specified in the request.	3 years ago
mrspanishviking	3defe2e3ae	Merge pull request #12382 from hashicorp/consul-int-prog-changes ... docs: uploaded two images and added new text to Consul Int. Program page	3 years ago
Adam Rowan	588f2c596b	Update website/content/docs/integrate/partnerships.mdx ... Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Adam Rowan	aa7c03a776	Update website/content/docs/integrate/partnerships.mdx ... Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Adam Rowan	dc2e3fe777	docs: uploaded two images and added new text to Consul Int. Program page	3 years ago
John Cowen	9b22300c59	ui: Start using mermaid state diagrams in our docs (#12350)	3 years ago
Florian Apolloner	f01f00fc84	Support for connect native services in topology view. (#12098)	3 years ago
Evan Culver	c17aa3720f	Fix build script (#12367)	3 years ago
Chris S. Kim	154b781bc8	Move IndexEntryName helpers to common files (#12365)	3 years ago
Thomas Eckert	6051c68620	Separate Annotations/Labels and Add `service-ignore` to Docs (#12323) ... * Separate Annotations and Labels and add service-ignore label * changes to structure and call out for pod * add description and TOC * Update annotations-and-labels.mdx Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
Daniel Nephin	8110ecc93b	Merge pull request #12359 from hashicorp/dnephin/fix-debug-size ... debug: limit the size of the trace	3 years ago
Daniel Nephin	8a6e75ac81	rpc: add errNotFound to all Get queries ... Any query that returns a list of items is not part of this commit.	3 years ago
Daniel Nephin	4b33bdf396	Make blockingQuery efficient with 'not found' results. ... By using the query results as state. Blocking queries are efficient when the query matches some results, because the ModifyIndex of those results, returned as queryMeta.Mindex, will never change unless the items themselves change. Blocking queries for non-existent items are not efficient because the queryMeta.Index can (and often does) change when other entities are written. This commit reduces the churn of these queries by using a different comparison for "has changed". Instead of using the modified index, we use the existence of the results. If the previous result was "not found" and the new result is still "not found", we know we can ignore the modified index and continue to block. This is done by setting the minQueryIndex to the returned queryMeta.Index, which prevents the query from returning before a state change is observed.	3 years ago
Daniel Nephin	897b953f66	Add a test for blocking query on non-existent entry ... This test shows how blocking queries are not efficient when the query returns no results. The test fails with 100+ calls instead of the expected 2. This test is still a bit flaky because it depends on the timing of the writes. It can sometimes return 3 calls. A future commit should fix this and make blocking queries even more optimal for not-found results.	3 years ago
Daniel Nephin	53ae4b3e2c	debug: update CLI docs ... To clarify how trace is captured. Also remove the minimum seconds check, because that is already done in prepare()	3 years ago
Daniel Nephin	09d61e643f	Merge pull request #12343 from hashicorp/dnephin/blocking-query-docs ... rpc: improve docs for blockingQuery	3 years ago
Daniel Nephin	3301f94004	rpc: improve docs for blockingQuery ... Follow the Go convention of accepting a small interface that documents the methods used by the function. Clarify the rules for implementing a query function passed to blockingQuery.	3 years ago
Daniel Nephin	cc2c005fad	debug: limit the size of the trace ... We've noticed that a trace that is captured over the full duration is too large to open on most machines. A trace.out captured over just the interval period (30s by default) should be a more than enough time to capture trace data.	3 years ago
Evan Culver	fc71215734	ci: fix stalebot config (#12346)	3 years ago
Jeff-Apple	23a9db7adc	Merge pull request #12352 from hashicorp/Jeff-Apple-patch-1 ... Fix broken link on Downloads page on wedsite	3 years ago
Jeff-Apple	f42a90f980	Fix broken link on Downloads page on wedsite ... The link to the Kubernetes Quickstart guide had a typo (space character) in the URL.	3 years ago
Chris S. Kim	e7d1ac0ce8	ci: Fix merge conflicts cleanly (#12249)	3 years ago
R.B. Boyer	115946da99	server: conditionally avoid writing a config entry to raft if it was already the same (#12321) ... This will both save on unnecessary raft operations as well as unnecessarily incrementing the raft modify index of config entries subject to no-op updates.	3 years ago
R.B. Boyer	80dfcb1bcd	raft: update to v1.3.5 (#12325) ... This includes closing some leadership transfer gaps and adding snapshot restore progress logging.	3 years ago
Evan Culver	9e156a21cf	Add release notes from 1.11.3, 1.10.8 and 1.9.15 (#12333) ... > Did we want to update the individual branches as well ? Yes, I have PRs for those: #12335, #12336, and #12337.	3 years ago
Matt Siegel	3a2bc2f533	Merge pull request #12332 from hashicorp/consul-1_11_3-version-update ... Update version.js for Consul 1.11.3	3 years ago
Matt Siegel	64a0ea5d02	Update version.js	3 years ago
FFMMM	78264a8030	Vendor in rpc mono repo for net/rpc fork, go-msgpack, msgpackrpc. (#12311) ... This commit syncs ENT changes to the OSS repo. Original commit details in ENT: ``` commit 569d25f7f4578981c3801e6e067295668210f748 Author: FFMMM <FFMMM@users.noreply.github.com> Date: Thu Feb 10 10:23:33 2022 -0800 Vendor fork net rpc (#1538) * replace net/rpc w consul-net-rpc/net/rpc Signed-off-by: FFMMM <FFMMM@users.noreply.github.com> * replace msgpackrpc and go-msgpack with fork from mono repo Signed-off-by: FFMMM <FFMMM@users.noreply.github.com> * gofmt all files touched Signed-off-by: FFMMM <FFMMM@users.noreply.github.com> ``` Signed-off-by: FFMMM <FFMMM@users.noreply.github.com>	3 years ago
R.B. Boyer	52009ae86a	missed this test adjustment (#12331)	3 years ago
R.B. Boyer	fa4577d1a9	local: fixes a data race in anti-entropy sync (#12324) ... The race detector noticed this initially in `TestAgentConfigWatcherSidecarProxy` but it is not restricted to just tests. The two main changes here were: - ensure that before we mutate the internal `agent/local` representation of a Service (for tags or VIPs) we clone those fields - ensure that there's no function argument joint ownership between the caller of a function and the local state when calling `AddService`, `AddCheck`, and related using `copystructure` for now.	3 years ago
Dao Thanh Tung	add15e12f7	URL-encode/decode resource names for HTTP API part 5 (#12297)	3 years ago
Mark Anderson	1a16f7ee70	Refactor to make ACL errors more structured. (#12308) ... * First phase of refactoring PermissionDeniedError Add extended type PermissionDeniedByACLError that captures information about the accessor, particular permission type and the object and name of the thing being checked. It may be worth folding the test and error return into a single helper function, that can happen at a later date. Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
Daniel Nephin	09035da9fb	Merge pull request #12322 from hashicorp/dnephin/update-check-docs ... Add 7th check registration flow to developer docs	3 years ago
Daniel Nephin	1db8ff1d03	Add 7th check registration flow to docs ... Credit to Freddy for finding this a while ago.	3 years ago
R.B. Boyer	49431c7532	ensure make dev target puts the newly constructed binary onto the PATH (#12318) ... This restores the prior behavior of make dev and ensures that tests using the sdk package (like the api package) will correctly locate the consul binary under test. Also ensure the constructed consul binary is present on the path for sdk-based tests.	3 years ago
John Cowen	0e730328bd	ui: Disclosure Component amends plus DisclosureMenu Component (#12304) ... * ui: Disclosure amends plus DisclosureMenu Co-authored-by: Jamie White <jamie@jgwhite.co.uk>	3 years ago
John Cowen	0ac32122f1	ui: Make sure saving intentions from topology includes the partition (#12317)	3 years ago
John Cowen	cf98691e85	ui: Stop ember-data overwriting SyncTimes (#12315)	3 years ago
John Cowen	c1b4e33dee	ui: Exclude Service Health from Node listing page (#12248) ... This commit excludes the health of any service instances from the Node Listing page. This means that if you are viewing the Node listing page you will only see failing nodes if there are any Node Checks failing, Service Instance Health checks are no longer taken into account. Co-authored-by: Jamie White <jamie@jgwhite.co.uk>	3 years ago
Freddy	9580f79f86	Merge pull request #12223 from hashicorp/proxycfg/passthrough-cleanup	3 years ago
freddygv	5d882badcb	Add changelog entry	3 years ago
freddygv	ceb52d649a	Account for upstream targets in another DC. ... Transparent proxies typically cannot dial upstreams in remote datacenters. However, if their upstream configures a redirect to a remote DC then the upstream targets will be in another datacenter. In that sort of case we should use the WAN address for the passthrough.	3 years ago
freddygv	cbea3d203c	Fix race of upstreams with same passthrough ip ... Due to timing, a transparent proxy could have two upstreams to dial directly with the same address. For example: - The orders service can dial upstreams shipping and payment directly. - An instance of shipping at address 10.0.0.1 is deregistered. - Payments is scaled up and scheduled to have address 10.0.0.1. - The orders service receives the event for the new payments instance before seeing the deregistration for the shipping instance. At this point two upstreams have the same passthrough address and Envoy will reject the listener configuration. To disambiguate this commit considers the Raft index when storing passthrough addresses. In the example above, 10.0.0.1 would only be associated with the newer payments service instance.	3 years ago
freddygv	659ebc05a9	Ensure passthrough addresses get cleaned up ... Transparent proxies can set up filter chains that allow direct connections to upstream service instances. Services that can be dialed directly are stored in the PassthroughUpstreams map of the proxycfg snapshot. Previously these addresses were not being cleaned up based on new service health data. The list of addresses associated with an upstream service would only ever grow. As services scale up and down, eventually they will have instances assigned to an IP that was previously assigned to a different service. When IP addresses are duplicated across filter chain match rules the listener config will be rejected by Envoy. This commit updates the proxycfg snapshot management so that passthrough addresses can get cleaned up when no longer associated with a given upstream. There is still the possibility of a race condition here where due to timing an address is shared between multiple passthrough upstreams. That concern is mitigated by #12195, but will be further addressed in a follow-up.	3 years ago
Freddy	378a7258e3	Prevent xDS tight loop on cfg errors (#12195)	3 years ago
Jared Kirschner	ce478330f2	Merge pull request #12285 from hashicorp/readme-logo-dark-mode ... Make README header look good in dark mode	3 years ago
Dhia Ayachi	4f0a71d7b4	fix race when starting a service while the agent `serviceManager` is … (#12302) ... * fix race when starting a service while the agent `serviceManager` is stopping * add changelog	3 years ago
Bryce Kalow	955ac1fc51	website: removes references to nextjs-scripts (#12299)	3 years ago