15493 Commits (c630ab611027244e1c499fd8854f52d092d8d1b7)

 

All Branches   

Search

Author	SHA1	Message	Date
John Cowen	7a5f335b7c	ui: Adds Flight icons to our icon set (#11097) ... * ui: Adds Flight icons to our icon set This commit doesn't actually add anything to the UI, rather just makes the flight icons available for use.	3 years ago
John Cowen	5e34d89f7f	ui: Hide create buttons for policies/roles/namespaces with readonly access (#10914) ... This PR adds a check to policy, role and namespace list pages to make sure the user has can write those things before offering to create them via a button. (The create page/form would then be a read-only form)	3 years ago
John Cowen	bce724baf1	ui: Don't show the CRD menu for read-only intentions (#11149) ... * ui: Don't show the CRD menu for read-only intentions The UI bug here manifests itself only when a user/token is configured to have read-only access to intentions. Instead of only letting folks click to see a read only page of the intention, we would show an additional message saying that the intention was read-only due to it being 'Managed by [a kubernetes] CRD'. Whilst the intention was still read only, this extra message was still confusing for users. This PR fixes up the conditional logic and further moves the logic to use ember-can - looking at the history of the files in question, this bug snuck itself in partly due to it being 'permission-y type stuff' previous to using ember-can and when something being editable or not was nothing to do with ACLs. Then we moved to start using ember-can without completely realising what IsEditable previously meant. So overall the code here is a tiny bit clearer/cleaner by adding a proper can view CRD intention instead of overloading the idea of 'editability'.	3 years ago
John Cowen	ce21c5109b	ui: Adds a set of basic unit tests for abilities (#11132)	3 years ago
Paul Banks	fe92cf7cb6	Document HTTP Header manipulation options added in #10613	3 years ago
John Cowen	581357c32a	ui: Remove info panel from the nspace menu when editing nspaces (#11130) ... * ui: Remove info panel form the nspace menu when editing nspaces	3 years ago
John Cowen	01c9dc5728	ui: Add initial partition support to intentions (#11129) ... * ui: Add initial partition support to intentions	3 years ago
Blake Covarrubias	94d3849472	docs: Decode K8s secrets with base64decode function ... Use kubectl's base64decode template function (added in K8s 1.11) to decode values in Secrets. Removes external call to `base64` utility on the host system.	3 years ago
John Cowen	eb00b45ef4	ui: Use last-child for selecting the desired nspace instead of nth-child (#11127)	3 years ago
John Cowen	e59b8ffc17	ui: Remove refresh-route action for session invalidation (#11105) ... * ui: Move action to the correct button for session invalidation * Remove refresh-route completely, its not needed	3 years ago
trujillo-adam	b22684540e	Merge pull request #11028 from hashicorp/docs-k8s-cli-alpha ... adding k8s-cli alpha docs	3 years ago
trujillo-adam	52f82f2831	adding timeout flags, wait flag, and updated build procedure	3 years ago
Daniel Nephin	6e4ecfd05b	docs: clarify acl down policy	3 years ago
Daniel Nephin	cd4e70b34c	acl: fix default authorizer for down_policy ... This was causing a nil panic because a nil authorizer is no longer valid after the cleanup done in https://github.com/hashicorp/consul/pull/10632.	3 years ago
Daniel Nephin	6bb7aef15c	Remove t.Parallel from TestACLResolver_DownPolicy ... These tests run in under 10ms, t.Parallel does nothing but slow them down and make failures harder to debug when one panics.	3 years ago
Dhia Ayachi	e664dbc352	Refactor table index acl phase 2 (#11133) ... * extract common methods from oss and ent * remove unreachable code * add missing normalize for binding rules * fix oss to use Query	3 years ago
Daniel Nephin	e8ac5fd90b	config: Move ACLEnableKeyListPolicy to DeprecatedConfig	3 years ago
Daniel Nephin	5c40b717ed	config: move acl_ttl to DeprecatedConfig	3 years ago
Daniel Nephin	977f6d8888	config: move acl_{default,down}_policy to DeprecatedConfig	3 years ago
Daniel Nephin	5eafcea4d4	config: Deprecate EnableACLReplication ... replaced by ACL.TokenReplication	3 years ago
Daniel Nephin	5dc16180ad	config: move ACL master token and replication to DeprecatedConfig	3 years ago
CJ	978699943f	docs: Fix grammatical errors in glossary (#10751)	3 years ago
Paul Banks	1ecec84fd7	Merge pull request #10903 from hashicorp/feature/ingress-sds ... Add Support to for providing TLS certificates for Ingress listeners from an SDS source	3 years ago
Dhia Ayachi	5904e4ac79	Refactor table index (#11131) ... * convert tableIndex to use the new pattern * make `indexFromString` available for oss as well * refactor `indexUpdateMaxTxn`	3 years ago
Paul Banks	7b4cbe3143	Final readability tweaks from review	3 years ago
Paul Banks	e0efb420f7	Add Envoy integration test for split-route SDS case	3 years ago
Paul Banks	ab27214a10	Minor improvements to SDS server from review	3 years ago
Paul Banks	70bc89b7f4	Fix subtle loop bug and add test	3 years ago
Paul Banks	07f81991df	Refactor SDS validation to make it more contained and readable	3 years ago
Paul Banks	5cfd030d03	Refactor Ingress-specific lister code to separate file	3 years ago
Paul Banks	136928a90f	Minor PR typo and cleanup fixes	3 years ago
Paul Banks	20d0bf81f7	Revert abandonned changes to proxycfg for Ent test consistency	3 years ago
Paul Banks	a9119e36a5	Fix merge conflict in xds tests	3 years ago
Paul Banks	2b755d7b3f	Allow skipping v2 compat tests for SDS as it's only the SDS server integration that doesn't support v2	3 years ago
Paul Banks	e01c3585a5	Fix integration tests in CI - serve SDS certs from the Docker image not a mounted path	3 years ago
Paul Banks	843079f33a	Fix integration test for older Envoy versions	3 years ago
Paul Banks	2281d883b9	Fix some more Enterprise Normalization issues affecting tests	3 years ago
Paul Banks	b5345ea878	Add changelog; Add API package support for new fields.	3 years ago
Paul Banks	9fa60c7472	Remove unused argument to fix lint error	3 years ago
Paul Banks	659321d008	Handle namespaces in route names correctly; add tests for enterprise	3 years ago
Paul Banks	cd8ad007fe	Add basic integration test for Envoy ingress with SDS	3 years ago
Paul Banks	2a3d3d3c23	Update xDS routes to support ingress services with different TLS config	3 years ago
Paul Banks	16b3b1c737	Update xDS Listeners with SDS support	3 years ago
Paul Banks	ccbda0c285	Update proxycfg to hold more ingress config state	3 years ago
Paul Banks	4e39f03d5b	Add ingress-gateway config for SDS	3 years ago
Daniel Nephin	c84867feda	acl: remove ACL.Apply ... As part of removing the legacy ACL system.	3 years ago
Daniel Nephin	ae05419aea	acl: made acl rules in tests slightly more specific ... When converting these tests from the legacy ACL system to the new RPC endpoints I initially changed most things to use _prefix rules, because that was equivalent to the old legacy rules. This commit modifies a few of those rules to be a bit more specific by replacing the _prefix rule with a non-prefix one where possible.	3 years ago
Mark Anderson	d88d9e71c2	partitions/authmethod-index work from enterprise (#11056) ... * partitions/authmethod-index work from enterprise Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
Chris S. Kim	f972048ebc	connect: Allow upstream listener escape hatch for prepared queries (#11109)	3 years ago
Evan Culver	7e20a5e4f9	connect: remove support for Envoy 1.15	3 years ago