21463 Commits (c3db6c90013eaa3f4a03d2d06ffea2eb9df3698f)

 

All Branches   

Search

Author	SHA1	Message	Date
Eric Haberkorn	d0243b618d	Change the multicluster group to v2 (#20430)	10 months ago
Melisa Griffin	7c00d396cf	[NET-6417] Add validation of MeshGateway name + listeners (#20425) ... * Add validation of MeshGateway name + listeners * Adds test for ValidateMeshGateway * Fixes data fetcher test for gatewayproxy --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	10 months ago
Chris S. Kim	b6f10bc58f	Skip filter chain created by permissive mtls (#20406)	10 months ago
wangxinyi7	3b44be530d	only forwarding the resource service traffic in client agent to server agent (#20347) ... * only forwarding the resource service traffic in client agent to server agent	10 months ago
Nick Ethier	383d92e9ab	hcp.v2.TelemetryState resource and controller implementation (#20257) ... * pbhcp: add TelemetryState resource * agent/hcp: add GetObservabilitySecrets to client * internal/hcp: add TelemetryState controller logic * hcp/telemetry-state: added config options for hcp sdk and debug key to skip deletion during reconcile * pbhcp: update proto documentation * hcp: address PR feedback, additional validations and code cleanup * internal/hcp: fix type sig change in test * update testdata/v2-resource-dependencies	10 months ago
Derek Menteer	3e8ec8d18e	Fix SAN matching on terminating gateways (#20417) ... Fixes issue: hashicorp/consul#20360 A regression was introduced in hashicorp/consul#19954 where the SAN validation matching was reduced from 4 potential types down to just the URI. Terminating gateways will need to match on many fields depending on user configuration, since they make egress calls outside of the cluster. Having more than one matcher behaves like an OR operation, where any match is sufficient to pass the certificate validation. To maintain backwards compatibility with the old untyped `match_subject_alt_names` Envoy behavior, we should match on all 4 enum types. https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/transport_sockets/tls/v3/common.proto#enum-extensions-transport-sockets-tls-v3-subjectaltnamematcher-santype	10 months ago
cskh	890332cacb	docs: Fix indention of wal object in agent config (#20399)	10 months ago
Nathan Coleman	74e4200d07	[NET-6429] Program ProxyStateTemplate to route cross-partition traffi… (#20410) ... [NET-6429] Program ProxyStateTemplate to route cross-partition traffic to the correct destination mesh gateway * Program mesh port to route wildcarded gateway SNI to the appropriate remote partition's mesh gateway * Update target + route ports in service endpoint refs when building PST * Use proper name of local datacenter when constructing SNI for gateway target * Use destination identities for TLS when routing L4 traffic through the mesh gateway * Use new constants, move comment to correct location * Use new constants for port names * Update test assertions * Undo debug logging change	10 months ago
John Murret	c82b78b088	NET-7165 - fix address and target setting (#20403)	10 months ago
Ronald	8799c36410	[NET-6231] Handle Partition traffic permissions when reconciling traffic permissions (#20408) ... [NET-6231] Partition traffic permissions Co-authored-by: Chris S. Kim <ckim@hashicorp.com>	10 months ago
NicoletaPopoviciu	b7b9bb0e83	Update Vault/Nomad versions. (#20322) ... Update Vault/Nomad versions to ensure we're testing all the latest versions. Update Vault/Nomad versions to ensure we're testing all the latest versions .	10 months ago
Chris S. Kim	7cc88a1577	Handle NamespaceTrafficPermissions when reconciling TrafficPermissions (#20407)	10 months ago
Nathan Coleman	21b3c18d5d	Use a full EndpointRef on ComputedRoutes targets instead of just the ID (#20400) ... * Use a full EndpointRef on ComputedRoutes targets instead of just the ID Today, the `ComputedRoutes` targets have the appropriate ID set for their `ServiceEndpoints` reference; however, the `MeshPort` and `RoutePort` are assumed to be that of the target when adding the endpoints reference in the sidecar's `ProxyStateTemplate`. This is problematic when the target lives behind a `MeshGateway` and the `Mesh/RoutePort` used in the sidecar's `ProxyStateTemplate` should be that of the `MeshGateway` instead of the target. Instead of assuming the `MeshPort` and `RoutePort` when building the `ProxyStateTemplate` for the sidecar, let's just add the full `EndpointRef` -- including the ID and the ports -- when hydrating the computed destinations. * Make sure the UID from the existing ServiceEndpoints makes it onto ComputedRoutes * Update test assertions * Undo confusing whitespace change * Remove one-line function wrapper * Use plural name for endpoints ref * Add constants for gateway name, kind and port names	10 months ago
Ronald	783f33db3b	[NET-7074] Exported Services typo fix (#20402)	10 months ago
wangxinyi7	3c5cb04b0f	refactor the resource client (#20343) ... * renaming files	10 months ago
wangxinyi7	2b89025eab	clean up http client (#20342) ... clean up http client	10 months ago
Ganesh S	4ca6573384	Add status for exported services controller (#20376)	10 months ago
Sooraj Sreekumar	eb6a59dd11	NET-6653 Enabling container logs when initConsulServers fails and ret… (#20396) ... NET-6653 Enabling container logs when initConsulServers fails and return an error (container logs during launch() failure) On branch NET-6653 modified: testing/deployer/sprawl/boot.go	10 months ago
Melissa Kam	b0e87dbe13	[CC-7049] Stop the HCP manager when link is deleted (#20351) ... * Add Stop method to telemetry provider Stop the main loop of the provider and set the config to disabled. * Add interface for telemetry provider Added for easier testing. Also renamed Run to Start, which better fits with Stop. * Add Stop method to HCP manager * Add manager interface, rename implementation Add interface for easier testing, rename existing Manager to HCPManager. * Stop HCP manager in link Finalizer * Attempt to cleanup if resource has been deleted The link should be cleaned up by the finalizer, but there's an edge case in a multi-server setup where the link is fully deleted on one server before the other server reconciles. This will cover the case where the reconcile happens after the resource is deleted. * Add a delete mananagement token function Passes a function to the HCP manager that deletes the management token that was initially created by the manager. * Delete token as part of stopping the manager * Lock around disabling config, remove descriptions	10 months ago
Tyler Wendlandt	b9ebaeca1c	ui: Copy the mock endpoint over to prefixed-api mocks (#20395) ... Copy the mock endpoint over to prefixed-api mocks	10 months ago
Chris Hut	da42f7a00b	Hide the hcp link banner behind an env variable (#20392)	10 months ago
Heat Hamilton	9f90060b0f	website: update dependencies (#20387) ... * Update nvmrc to use v18, next to v14 and npm to v9.6.7 * Update husky pre-commit hook to v9; updated Husky to v9; updated node version in website readme * Updated @hashicorp/platform-cli	10 months ago
John Murret	7c6a3c83f2	NET-7165 - v2 - add service questions (#20390) ... * NET-7165 - v2 - add service questions * removing extraneous copied over code from autogen PR script. * fixing license checking	10 months ago
Melissa Kam	3b9bb8d6f9	[CC-7044] Start HCP manager as part of link creation (#20312) ... * Check for ACL write permissions on write Link eventually will be creating a token, so require acl:write. * Convert Run to Start, only allow to start once * Always initialize HCP components at startup * Support for updating config and client * Pass HCP manager to controller * Start HCP manager in link resource Start as part of link creation rather than always starting. Update the HCP manager with values from the link before starting as well. * Fix metrics sink leaked goroutine * Remove the hardcoded disabled hostname prefix The HCP metrics sink will always be enabled, so the length of sinks will always be greater than zero. This also means that we will also always default to prefixing metrics with the hostname, which is what our documentation states is the expected behavior anyway. * Add changelog * Check and set running status in one method * Check for primary datacenter, add back test * Clarify merge reasoning, fix timing issue in test * Add comment about controller placement * Expand on breaking change, fix typo in changelog	10 months ago
Chris Hut	64a46105ea	Fixing UI tests (#20386) ... Fixing tests as we're not calling env.var, we're using a property on the env service	10 months ago
Curt Bushko	48d1b059d2	add support for more envoy versions for LTS (#20358) ... add support for more envoy versions for LTS	10 months ago
Tyler Wendlandt	b9f3e5e247	NET-5398: V2 unavailable UI message (#20359) ... * Update ui server to include V2 Catalog flag * Fix typo * Add route and redirects for the unavailable warning * Add qualtrics link * Remove unneccessary check and redirect	10 months ago
Matt Keeler	d350115e7f	Fix filename with two periods (#20389)	10 months ago
Matt Keeler	34a32d4ce5	Remove V2 PeerName field from pbresource.Tenancy (#19865) ... The peer name will eventually show up elsewhere in the resource. For now though this rips it out of where we don’t want it to be.	10 months ago
Nitya Dhanushkodi	92aab7ea31	[NET-5586][rebased] v2: Support virtual port references in config (#20371) ... [OG Author: michael.zalimeni@hashicorp.com, rebase needed a separate PR] * v2: support virtual port in Service port references In addition to Service target port references, allow users to specify a port by stringified virtual port value. This is useful in environments such as Kubernetes where typical configuration is written in terms of Service virtual ports rather than workload (pod) target port names. Retaining the option of referencing target ports by name supports VMs, Nomad, and other use cases where virtual ports are not used by default. To support both uses cases at once, we will strictly interpret port references based on whether the value is numeric. See updated `ServicePort` docs for more details. * v2: update service ref docs for virtual port support Update proto and generated .go files with docs reflecting virtual port reference support. * v2: add virtual port references to L7 topo test Add coverage for mixed virtual and target port references to existing test. * update failover policy controller tests to work with computed failover policy and assert error conditions against FailoverPolicy and ComputedFailoverPolicy resources * accumulate services; don't overwrite them in enterprise --------- Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com> Co-authored-by: R.B. Boyer <rb@hashicorp.com>	10 months ago
Chris S. Kim	a2d50af1bd	Fix panic on error (#20377)	10 months ago
Dan Stough	0ca7313b07	feat(v2dns): add PTR query support (#20362)	10 months ago
Derek Menteer	ba5cac434a	Use mirrored image for CICD tests. (#20378)	10 months ago
Krastin Krastev	fa8e8837ac	docs: Fix typos in docs (#20211) ... * Update sameness.mdx * Update service-resolver.mdx	10 months ago
Chris Hut	75af5b15d9	Cc 7146/convert consul hcp to a simpler component for some upcoming changes (#20344) ... * Convert consul-hcp to a simpler component * update existing test to use envStub helper * Add missing copyright - weird no one yelled about this * remove consul-hcp from load * remove this test that doesn't run anymore	10 months ago
David Yu	1c1df4530c	GHA: Update broken-link-check.yml to check once a month (#20368) ... Update broken-link-check.yml	10 months ago
Nathan Coleman	27aecdb8cc	[NET-5075] Implement mesh gateway mode for explicit destinations (#20361)	10 months ago
Tyler Wendlandt	7e08d8988c	NET-5398: Update UI server to include if v2 is enabled (#20353) ... * Update ui server to include V2 Catalog flag * Fix typo	10 months ago
Derek Menteer	e586a4490d	Fix CICD docker image rate limits. (#20304) ... The docker image used in CICD was referencing `registry.k8s.io/pause:3.3`, which appears to no longer function correctly. This commit swaps over to a Hashicorp mirrored image that shouldn't have rate limits or disappearing images.	10 months ago
Nitya Dhanushkodi	0ec7bddb9a	[Net-5594][Net-7466] v2: Only route to endpoints that implement the port being routed to, and make xdscontroller and xdsv2 golden tests use tenancy (#20356) ... * If a workload does not implement a port, it should not be included in the list of endpoints for the Envoy cluster for that port. * Adds tenancy tests for xds controller and xdsv2 resource generation, and adds all those files. * The original change in this PR was for filtering the list of endpoints by the port being routed to (bullet 1). Since I made changes to sidecarproxycontroller golden files, I realized some of the golden files were unused because of the tenancy changes, so when I deleted those, that broke xds controller tests which weren't correctly using tenancy. So when I fixed that, then the xdsv2 tests broke, so I added tenancy support there too. So now, from sidecarproxy controller -> xds controller -> xdsv2 we now have tenancy support and all the golden files are lined up.	10 months ago
Valeriia Ruban	049ca102c4	Cc 7145 hcp link status api (#20330) ... * feat: add api call to hcp/link endpoint * updated * updated * update approach to get the linking status * updated application template * feat: add api call to hcp/link endpoint * updated * updated * update approach to get the linking status * updated application template * update purple banner links * Hook up the linked check to the purple banner * fixed lint issue * Updated tests for new link status API calls as args instead of from service --------- Co-authored-by: Chris Hut <tophernuts@gmail.com>	10 months ago
sarahalsmiller	37ebaa6920	Net 7155- Consul API Gateway Controller Stub Work (#20324) ... * API Gateway proto * fix lint issue * new line * run make proto format * checkpoint * stub * Update internal/mesh/internal/controllers/apigateways/controller.go	10 months ago
Luke Kysow	840f11a0c5	Change logging of registered v2 resource endpoints to add /api prefix (#20352) ... * Change logging of registered v2 resource endpoints to add /api prefix Previous: agent.http: Registered resource endpoint: endpoint=/demo/v1/executive New: agent.http: Registered resource endpoint: endpoint=/api/demo/v1/executive This reduces confusion when attempting to call the APIs after looking at the logs.	10 months ago
Blake Covarrubias	91a783a980	docs: Fix example service registration for built-in proxy (#20336) ... Fix the sample service registration for the built-in proxy by adding the missing `sidecar_service` block.	10 months ago
Semir Patel	efdf80413c	resource: add MutateAndValidate endpoint (#20311)	10 months ago
Nick Cellino	ec0df00fc1	Add finalizer to link resource (#20321) ... * Add finalizer to link resource * Update internal/hcp/internal/controllers/link/controller.go Co-authored-by: Semir Patel <semir.patel@hashicorp.com> * Address PR style feedback --------- Co-authored-by: Semir Patel <semir.patel@hashicorp.com>	10 months ago
Nick Cellino	4801c9cbdc	Add Link API docs (#20308) ... * Add Link API docs * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * Add summary sentence and move api vs config section up * Add hcp link endpoint to API Overview page * Update website/content/api-docs/index.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * Update note about v1 API endpoint prefix * Add a period at end of v1 prefix note. * Add link to HCP Consul Central --------- Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>	10 months ago
wangxinyi7	7bb2c7cf13	Xw/net 5724 grpc client delete (#20309) ... * delete commmand works	10 months ago
Dan Stough	6828780131	feat(v2dns): add partial support for SOA records (#20320)	10 months ago
wangxinyi7	1f29ee604a	grpc CLI client list command (#20260) ... list command works	10 months ago