15622 Commits (c8cafb76543d77d572022df3e31d287adfd6058c)

 

All Branches   

Search

Author	SHA1	Message	Date
R.B. Boyer	c8cafb7654	agent: for various /v1/agent endpoints parse the partition parameter on the request (#11444) ... Also update the corresponding CLI commands to send the parameter appropriately. NOTE: Behavioral changes are not happening in this PR.	3 years ago
R.B. Boyer	af9ffc214d	agent: add a clone function for duplicating the serf lan configuration (#11443)	3 years ago
Mark Anderson	977be77493	Fix back compat issues with UDS config (#11318) ... SocketPath needs to be omitted when empty to avoid confusing older versions of Consul Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
David Yu	823026e319	docs: revised Helm install to create namespace and install on dedicated namespace (#11440) ... * docs: revised Helm install to create namespace and install on dedicated Consul namespace * Update website/content/docs/k8s/installation/install.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Update install.mdx * changing to Helm 3.2+ as a pre-req to make it easier to follow * might as well bump to latest version Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Daniel Nephin	210d37e4ab	Merge pull request #10671 from hashicorp/dnephin/fix-subscribe-test-flake ... subscribe: improve TestSubscribeBackend_IntegrationWithServer_DeliversAllMessages	3 years ago
Daniel Nephin	96a31df5c8	Merge pull request #11255 from hashicorp/dnephin/fix-auth-verify-incoming ... tlsutil: only AuthorizerServerConn when VerifyIncomingRPC is true	3 years ago
sidzi	29f192a130	Refactor requireHttpCodes for segregated error handling (#11287)	3 years ago
Kim Ngo	0c0460b53f	CTS document manual apply (#11426) ... * CTS document manual apply * Add Consul-Terraform-Sync parentheses to CTS acronym * Add tf link for run notifications	3 years ago
Evan Culver	61be9371f5	connect: Remove support for Envoy 1.16 (#11354)	3 years ago
Evan Culver	bec08f4ec3	connect: Add support for Envoy 1.20 (#11277)	3 years ago
Freddy	ab425e3ca1	Merge pull request #11436 from hashicorp/api/exports-marshal ... [OSS] Ensure partition-exports kind gets marshaled	3 years ago
freddygv	4c45cafce2	Update filename to match entry kind - mesh	3 years ago
freddygv	ac96ce6552	Ensure partition-exports kind gets marshalled ... The api module has decoding functions that rely on 'kind' being present of payloads. This is so that we can decode into the appropriate api type for the config entry. This commit ensures that a static kind is marshalled in responses from Consul's api endpoints so that the api module can decode them.	3 years ago
Daniel Nephin	a3c781682d	subscribe: attempt to fix a flaky test ... TestSubscribeBackend_IntegrationWithServer_DeliversAllMessages has been flaking a few times. This commit cleans up the test a bit, and improves the failure output. I don't believe this actually fixes the flake, but I'm not able to reproduce it reliably. The failure appears to be that the event with Port=0 is being sent in both the snapshot and as the first event after the EndOfSnapshot event. Hopefully the improved logging will show us if these are really duplicate events, or actually different events with different indexes.	3 years ago
Freddy	fbcf9f3f6c	Merge pull request #11435 from hashicorp/ent-authorizer-refactor ... [OSS] Export ACLs refactor	3 years ago
Freddy	303532825f	Merge pull request #11432 from hashicorp/ap/exports-mgw ... [OSS] Update mesh gateways to handle partitions	3 years ago
freddygv	43360eb216	Rework acl exports interface	3 years ago
freddygv	0a4ff4bb91	Prefer concrete policyAuthorizer type ... There will only ever be policyAuthorizers embedded in namespaceAuthorizers, this commit swaps out the interface in favor of the concrete type.	3 years ago
Freddy	ec7e94d129	Merge pull request #11433 from hashicorp/exported-service-acls ... [OSS] acl: Expand ServiceRead and NodeRead to account for partition exports	3 years ago
freddygv	e93c144d2f	Update comments	3 years ago
Daniel Nephin	4afc24268d	tlsutil: only AuthorizerServerConn when VerifyIncomingRPC is true ... See github.com/hashicorp/consul/issues/11207 When VerifyIncomingRPC is false the TLS conn will not have the required certificates.	3 years ago
Freddy	a8762be529	Merge pull request #11431 from hashicorp/ap/exports-proxycfg ... [OSS] Update partitioned mesh gw handling for connect proxies	3 years ago
Freddy	b1b6f682e1	Merge pull request #11416 from hashicorp/ap/exports-update ... Rename service-exports to partition-exports	3 years ago
freddygv	3a2061544d	Fixup partitions assertion	3 years ago
freddygv	9480670b72	Fixup imports	3 years ago
freddygv	c72bbb6e8d	Split up locality check from hostname check	3 years ago
freddygv	d28b9052b2	Move the exportingpartitions constant to enterprise	3 years ago
freddygv	448701dbd8	Replace default partition check	3 years ago
freddygv	12923f5ebc	PR comments	3 years ago
freddygv	327e6bff25	Leave todo about default name	3 years ago
freddygv	5bf2497f71	Add oss impl of registerEntCache	3 years ago
freddygv	954d21c6ba	Register the ExportingPartitions cache type	3 years ago
freddygv	a33b6923e0	Account for partitions in xds gen for mesh gw ... This commit avoids skipping gateways in remote partitions of the local DC when generating listeners/clusters/endpoints.	3 years ago
freddygv	935112a47a	Account for partition in SNI for gateways	3 years ago
freddygv	686b883600	Add changelog entry	3 years ago
freddygv	110fae820a	Update xds pkg to account for GatewayKey	3 years ago
freddygv	7e65678c52	Update mesh gateway proxy watches for partitions ... This commit updates mesh gateway watches for cross-partitions communication. * Mesh gateways are keyed by partition and datacenter. * Mesh gateways will now watch gateways in partitions that export services to their partition. * Mesh gateways in non-default partitions will not have cross-datacenter watches. They are not involved in traditional WAN federation.	3 years ago
freddygv	38456bedcb	Add changelog entry	3 years ago
freddygv	aa931682ea	Avoid mixing named and unnamed params	3 years ago
freddygv	bf350224a0	Avoid passing nil config pointer	3 years ago
freddygv	df7b5af6f0	Avoid panic on nil partitionAuthorizer config ... partitionAuthorizer.config can be nil if it wasn't provided on calls to newPartitionAuthorizer outside of the ACLResolver. This usage happens often in tests. This commit: adds a nil check when the config is going to be used, updates non-test usage of NewPolicyAuthorizerWithDefaults to pass a non-nil config, and dettaches setEnterpriseConf from the ACLResolver.	3 years ago
freddygv	22bdf279d1	Update NodeRead for partition-exports ... When issuing cross-partition service discovery requests, ACL filtering often checks for NodeRead privileges. This is because the common return type is a CheckServiceNode, which contains node data.	3 years ago
Kyle Havlovitz	65c9109396	acl: pass PartitionInfo through ent ACLConfig	3 years ago
Kyle Havlovitz	d03f849e49	acl: Expand ServiceRead logic to look at service-exports for cross-partition	3 years ago
freddygv	8006c6df73	Swap in structs.EqualPartitions for cmp	3 years ago
freddygv	37a16e9487	Replace Split with SplitN	3 years ago
freddygv	b9b6447977	Finish removing useInDatacenter	3 years ago
freddygv	e1691d1627	Update XDS for sidecars dialing through gateways	3 years ago
freddygv	62e0fc62c1	Configure sidecars to watch gateways in partitions ... Previously the datacenter of the gateway was the key identifier, now it is the datacenter and partition. When dialing services in other partitions or datacenters we now watch the appropriate partition.	3 years ago
freddygv	eacb73cb78	Remove useInDatacenter from disco chain requests ... useInDatacenter was used to determine whether the mesh gateway mode of the upstream should be returned in the discovery chain target. This commit makes it so that the mesh gateway mode is returned every time, and it is up to the caller to decide whether mesh gateways should be watched or used.	3 years ago