604 Commits (c862148ea2b0edc51cc8938768bad410659faa94)

Author	SHA1	Message	Date
Josh Soref	94835a2715	Spelling (#3958) ... * spelling: another * spelling: autopilot * spelling: beginning * spelling: circonus * spelling: default * spelling: definition * spelling: distance * spelling: encountered * spelling: enterprise * spelling: expands * spelling: exits * spelling: formatting * spelling: health * spelling: hierarchy * spelling: imposed * spelling: independence * spelling: inspect * spelling: last * spelling: latest * spelling: client * spelling: message * spelling: minimum * spelling: notify * spelling: nonexistent * spelling: operator * spelling: payload * spelling: preceded * spelling: prepared * spelling: programmatically * spelling: required * spelling: reconcile * spelling: responses * spelling: request * spelling: response * spelling: results * spelling: retrieve * spelling: service * spelling: significantly * spelling: specifies * spelling: supported * spelling: synchronization * spelling: synchronous * spelling: themselves * spelling: unexpected * spelling: validations * spelling: value	7 years ago
Paul Banks	a8f7681c70	Merge pull request #3962 from canterberry/upgrade/tls-cipher-suites ... 🔒 Update supported TLS cipher suites	7 years ago
Preetha Appan	2eed7766a8	cleanup unit test code a bit	7 years ago
Preetha	c87699abf2	Merge pull request #3885 from eddsteel/support-options-requests ... Support OPTIONS requests	7 years ago
Devin Canterberry	2187ab1e1c	🎨 Formatting changes only; convert leading space to tabs	7 years ago
Devin Canterberry	7236c95e11	✅ Match expectation of TLSCipherSuites to values of tls_cipher_suites	7 years ago
Devin Canterberry	a61abcd931	🐛 Formatting changes only; add missing trailing commas	7 years ago
Devin Canterberry	c901307a47	🔒 Update supported TLS cipher suites ... The list of cipher suites included in this commit are consistent with the values and precedence in the [Golang TLS documentation](https://golang.org/src/crypto/tls/cipher_suites.go). > **Note:** Cipher suites with RC4 are still included within the list > of accepted values for compatibility, but **these cipher suites are > not safe to use** and should be deprecated with warnings and > subsequently removed. Support for RC4 ciphers has already been > removed or disabled by default in many prominent browsers and tools, > including Golang. > > **References:** > > * [RC4 on Wikipedia](https://en.wikipedia.org/wiki/RC4) > * [Mozilla Security Blog](https://blog.mozilla.org/security/2015/09/11/deprecating-the-rc4-cipher/)	7 years ago
Preetha	210cfe5ef9	Merge pull request #3940 from pierresouchay/dns_max_size ... Allow to control the number of A/AAAA Record returned by DNS	7 years ago
Pierre Souchay	419bf29041	Cleaner Unit tests from suggestions from @preetapan	7 years ago
Mitchell Hashimoto	8217564c48	agent/consul/fsm: begin using testify/assert	7 years ago
Pierre Souchay	0b7f620dc6	Allow to control the number of A/AAAA Record returned by DNS ... This allows to have randomized resource records (i.e. each answer contains only one IP, but the IP changes every request) for A, AAAA records. It will fix https://github.com/hashicorp/consul/issues/3355 and https://github.com/hashicorp/consul/issues/3937 See https://github.com/hashicorp/consul/issues/3937#issuecomment-370610509 for details. It basically add a new option called `a_record_limit` and will not return more than a_record_limit when performing A, AAAA or ANY DNS requests. The existing `udp_answer_limit` option is still working but should be considered as deprecated since it works only with DNS clients not supporting EDNS.	7 years ago
Edd Steel	41b1d45cc7	Re-use defined endpoints for tests	7 years ago
Paul Banks	9a47449c6d	Merge pull request #3899 from pierresouchay/fix_blocking_queries_index ... Services Indexes modified per service instead of using a global Index	7 years ago
Pierre Souchay	360dc1dd8d	Simplified error handling for maxIndexForService ... * added unit tests to ensure service index is properly garbage collected * added Upgrade from Version 1.0.6 to higher section in documentation	7 years ago
Paul Banks	dbaabb1dbc	Fix test running in non-bash shells	7 years ago
Paul Banks	6da6e086ef	Merge pull request #3900 from hashicorp/fix-monitor-sigint-3891 ... Fixes #3891: agent monitor no longer unresponsive before logs stream.	7 years ago
Preetha Appan	80791d5b21	Remove extra newline	7 years ago
Preetha Appan	907b97b7f2	Unit test that calls revokeLeadership twice to make sure its idempotent	7 years ago
Preetha Appan	f59abcc394	Make sure revokeLeadership is called if establishLeadership errors	7 years ago
Alex Dadgar	18bf9647d5	Test autopilots start/stop idempotency	7 years ago
Alex Dadgar	33c5afdb31	Improve autopilot shutdown to be idempotent	7 years ago
Pierre Souchay	a8d3745104	Fixed comments for function maxIndexForService	7 years ago
Pierre Souchay	09351ba9a6	[Revert] Only update services if tags are different ... This patch did give some better results, but break watches on the services of a node. It is possible to apply the same optimization for nodes than to services (one index per instance), but it would complicate further the patch. Let's do it in another PR.	7 years ago
Pierre Souchay	60454b570a	Only update services if tags are different	7 years ago
Pierre Souchay	a05d38737c	Enable Raft index optimization per service name on health endpoint ... Had to fix unit test in order to check properly indexes.	7 years ago
Paul Banks	de58eb1820	Fixes #3891: agent monitor no longer unresponsive before logs stream. ... The root cause is actually that the agent's streaming HTTP API didn't flush until the first log line was found which commonly was pretty soon since the default level is INFO. In cases where there were no logs immediately due to level for instance, the client gets stuck in the HTTP code waiting on a response packet from the server before we enter the loop that checks the shutdown channel from the signal handler. This fix flushes the initial status immediately on the streaming endpoint which lets the client code get into it's expected state where it's listening for shutdown or log lines.	7 years ago
Pierre Souchay	4f10fae3c3	Get only first service to test whether we have to cleanup index of a service	7 years ago
Pierre Souchay	bac8fb046f	Fixed comment about raftIndex + use test.Helper()	7 years ago
Pierre Souchay	73127ef407	Services Indexes modified per service instead of using a global Index ... This patch improves the watches for services on large cluster: each service has now its own index, such watches on a specific service are not modified by changes in the global catalog. It should improve a lot the performance of tools such as consul-template or libraries performing watches on very large clusters with many services/watches.	7 years ago
Edd Steel	d0f0d67b4a	Clarify comments	7 years ago
Edd Steel	f770f360e9	Test every endpoint for OPTIONS/MethodNotFound	7 years ago
Edd Steel	c5f0bb3711	Allow endpoints to handle OPTIONS/MethodNotFound themselves	7 years ago
Edd Steel	f5af8b0f03	Initialise `allowedMethods` in init()	7 years ago
Kyle Havlovitz	139b98a427	Fix the coordinate update endpoint not passing the ACL token	7 years ago
Edd Steel	77f19f7505	Support OPTIONS requests ... - register endpoints with supported methods - support OPTIONS requests, indicating supported methods - extract method validation (error 405) from individual endpoints - on 405 where multiple methods are allowed, create a single Allow header with comma-separated values, not multiple Allow headers.	7 years ago
Andrei Burd	b608091014	adding human readability for dns requests debug log (#3751)	7 years ago
James Phillips	3724e49ddf	Fixes a panic on TCP-based DNS lookups. ... This came in via the monkey patch in #3861. Fixes #3877	7 years ago
James Phillips	c2a59f1e6c	Addresses additional state mutations. ... Did a sweep of 84d6ac2d51 and checked them all.	7 years ago
James Phillips	1c6de1d623	Fixes all the racy output-side updates to tags.	7 years ago
James Phillips	11f6961e47	Adds a more robust unit test for index churn.	7 years ago
James Phillips	d9a6e2a901	Makes server manager shift away from failed servers from Serf events. ... Because this code was doing pointer equality checks, it would work for the case of a failed attempted RPC because the objects are from the manager itself: https://github.com/hashicorp/consul/blob/v1.0.3/agent/consul/rpc.go#L283-L302 But the pointer check would always fail for events coming in from the Serf path because the server object is newly-created: https://github.com/hashicorp/consul/blob/v1.0.3/agent/router/serf_adapter.go#L14-L40 This means that we didn't proactively shift RPC traffic away from a failed server, we'd have to wait for an RPC to fail, which exposes the error to the calling client. By switching over to a name check vs. a pointer check we get the correct behavior. We added a DEBUG log as well to help observe this behavior during integrated testing. Related to #3863 since the fix here needed the same logic duplicated, owing to the complicated atomic stuff. /cc @dadgar for a heads up in case this also affects Nomad.	7 years ago
James Phillips	fc155dac19	Adds a before/after test for #3845.	7 years ago
James Phillips	533f65b7a6	Merge pull request #3845 from 42wim/tagfix ... Fix service tags not added to health check. Part two	7 years ago
Kyle Havlovitz	f6ecaa4a1c	Add enterprise default config section	7 years ago
James Phillips	e748c63fff	Merge pull request #3855 from hashicorp/pr-3782-slackpad ... Adds support for gRPC health checks.	7 years ago
James Phillips	5f31c8d8d3	Changes "TLS" to "GRPCUseTLS" since it only applies to GRPC checks.	7 years ago
Wim	ce771f1fb3	Fix service tags not added to health check. Part two	7 years ago
Veselkov Konstantin	5f38e1148a	fix refactoring	7 years ago
Veselkov Konstantin	8e16bd7d77	fix refactoring	7 years ago