Commit Graph

19342 Commits (cc2950874026f226047703ebcd8a64706b07099f)

Author SHA1 Message Date
hc-github-team-consul-core cc29508740
Backport of Docs/cluster peering 1.15 updates into release/1.14.x (#16397)
* backport of commit e878d2d3e4

* backport of commit 5a378f5794

* backport of commit 1f7e812d85

* Docs/cluster peering 1.15 updates (#16291)

* initial commit

* initial commit

* Overview updates

* Overview page improvements

* More Overview improvements

* improvements

* Small fixes/updates

* Updates

* Overview updates

* Nav data

* More nav updates

* Fix

* updates

* Updates + tip test

* Directory test

* refining

* Create restructure w/ k8s

* Single usage page

* Technical Specification

* k8s pages

* typo

* L7 traffic management

* Manage connections

* k8s page fix

* Create page tab corrections

* link to k8s

* intentions

* corrections

* Add-on intention descriptions

* adjustments

* Missing </CodeTabs>

* Diagram improvements

* Final diagram update

* Apply suggestions from code review

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>

* diagram name fix

* Fixes

* Updates to index.mdx

* Tech specs page corrections

* Tech specs page rename

* update link to tech specs

* K8s - new pages + tech specs

* k8s - manage peering connections

* k8s L7 traffic management

* Separated establish connection pages

* Directory fixes

* Usage clean up

* k8s docs edits

* Updated nav data

* CodeBlock Component fix

* filename

* CodeBlockConfig removal

* Redirects

* Update k8s filenames

* Reshuffle k8s tech specs for clarity, fmt yaml files

* Update general cluster peering docs, reorder CLI > API > UI, cross link to kubernetes

* Fix config rendering in k8s usage docs, cross link to general usage from k8s docs

* fix legacy link

* update k8s docs

* fix nested list rendering

* redirect fix

* page error

---------

Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>

---------

Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>
2023-02-23 12:52:26 -06:00
hc-github-team-consul-core ff2c9275e9
backport of commit a0598b81a3 (#16362)
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-22 16:52:41 +00:00
hc-github-team-consul-core c375dd2a79
backport of commit 817d85df12 (#16343)
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-21 20:10:52 +00:00
hc-github-team-consul-core 0a29abcdec
backport of commit 8c0b70c161 (#16337)
Co-authored-by: cskh <hui.kang@hashicorp.com>
2023-02-21 18:00:29 +00:00
hc-github-team-consul-core e2ec1f9718
backport of commit 49f7423ab8 (#16335)
Co-authored-by: cskh <hui.kang@hashicorp.com>
2023-02-21 10:33:43 -05:00
hc-github-team-consul-core 27b02d5b08
fix: revert go mod compat for sdk,api to 1.19 (#16323) (#16327)
Co-authored-by: Dan Stough <dan.stough@hashicorp.com>
2023-02-18 15:12:36 -05:00
Dan Stough 0448e51cf5
Manual Backport of [OSS] security: update go to 1.20.1 into release/1.14.x (#16321)
* security: update go to 1.20.1 (#16263)

* changelog
2023-02-17 18:11:45 -05:00
hc-github-team-consul-core 0442ef1296
Backport of Fix mesh gateways incorrectly matching peer locality. into release/1.14.x (#16286)
* backport of commit 9bc7f6280a

* backport of commit 0c48c9a1e8

---------

Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-02-16 15:31:58 +00:00
Derek Menteer 6717f6c239
Fix nil-pointer panics from proxycfg package. (#16280)
Prior to this PR, servers / agents would panic and crash if an ingress
or api gateway were configured to use a discovery chain that both:

1. Referenced a peered service
2. Had a mesh gateway mode of local

This could occur, because code for handling upstream watches was shared
between both connect-proxy and the gateways. As a short-term fix, this
PR ensures that the maps are always initialized for these gateway services.

This PR also wraps the proxycfg execution and service
registration calls with recover statements to ensure that future issues
like this do not put the server into an unrecoverable state.
2023-02-15 12:30:17 -06:00
hc-github-team-consul-core 461a0f7312
Backport of Update index.mdx into release/1.14.x (#16250)
* backport of commit 54a573a7d5

* backport of commit 93109a2d30

---------

Co-authored-by: Nicholas Richu <105801716+nrichu-hcp@users.noreply.github.com>
2023-02-14 10:25:43 -05:00
hc-github-team-consul-core cc1c340484
Backport of Update index.mdx into release/1.14.x (#16249)
* backport of commit 54a573a7d5

* backport of commit 93109a2d30

---------

Co-authored-by: Nicholas Richu <105801716+nrichu-hcp@users.noreply.github.com>
2023-02-13 21:39:49 +00:00
Derek Menteer 49154850b5
Fix peering acceptors in secondary datacenters. (#16233)
Prior to this commit, secondary datacenters could not be initialized
as peering acceptors if ACLs were enabled. This is due to the fact that
internal server-to-server API calls would fail because the management
token was not generated. This PR makes it so that both primary and
secondary datacenters generate their own management token whenever
a leader is elected in their respective clusters.
2023-02-10 13:06:40 -06:00
hc-github-team-consul-core a5a99c9d4a
docs: update Nomad 1.14 upgrade note to detail additonal info. (#16079)
Co-authored-by: James Rasell <jrasell@hashicorp.com>
2023-02-09 10:04:33 +00:00
hc-github-team-consul-core faaa2c11f0
command: Fix logger not initializing properly in envoy command (#16148) (#16153)
Co-authored-by: Kyle Havlovitz <kylehav@gmail.com>
2023-02-08 12:55:43 -08:00
hc-github-team-consul-core 112235700d
backport of commit 25caeb0928 (#16186)
Co-authored-by: dttung2905 <ttdao.2015@accountancy.smu.edu.sg>
2023-02-07 03:13:33 +00:00
hc-github-team-consul-core 79c0cbfcd2
backport of commit d85f040200 (#16183)
Co-authored-by: Paul Glass <pglass@hashicorp.com>
2023-02-06 23:28:43 +00:00
hc-github-team-consul-core 577a07e821
Backport of docs(service-resolver): clarify the default time unit in service-resolver.ConnectTimeout into release/1.14.x (#16175)
* backport of commit 305403c4f1

* backport of commit 31540d3343

---------

Co-authored-by: cskh <hui.kang@hashicorp.com>
2023-02-06 19:07:59 +00:00
hc-github-team-consul-core f9af9a6b56
backport of commit 611c3591af (#16174)
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-02-06 17:30:43 +00:00
hc-github-team-consul-core e8606d2028
Backport of Document how numRetries can't be set to 0 into release/1.14.x (#16168)
* backport of commit 55e197fad7

* backport of commit 1a6cf311c5

---------

Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2023-02-06 12:20:30 -05:00
hc-github-team-consul-core 6ca8b7491d
Backport of Update helm docs based on consul-k8s release/1.0.x branch into release/1.14.x (#16159)
Co-authored-by: Curt Bushko <cbushko@gmail.com>
Co-authored-by: david-yu <dyu@hashicorp.com>
2023-02-03 19:19:17 -08:00
hc-github-team-consul-core 166fdd105f
backport of commit 124f625eaf (#16151)
Co-authored-by: Ashwin Venkatesh <ashwin.what@gmail.com>
2023-02-03 15:04:38 -08:00
hc-github-team-consul-core 70c5a92a38
Backport of Docs: change connect to SM for mTLS page into release/1.14.x (#16137)
* backport of commit fa27ddb1d6

* backport of commit bf5a4ed6e3

---------

Co-authored-by: Nicholas Richu <105801716+nrichu-hcp@users.noreply.github.com>
2023-02-02 13:57:39 -05:00
hc-github-team-consul-core 757aab81be
Add a flag for enabling debug logs to the `connect envoy` command (#15988) (#16121)
* Add a flag for enabling debug logs to the `connect envoy` command

* Update website/content/commands/connect/envoy.mdx

* Add changelog note

* Add debug log note to envoy proxy doc page

* Update website/content/docs/connect/proxies/envoy.mdx

* Wording tweak in envoy bootstrap section

---------

Co-authored-by: Kyle Havlovitz <kylehav@gmail.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com>
2023-01-31 17:39:16 -08:00
Semir Patel ea9b104c7d Apply 1.14.4 changelog and prep for next release 2023-01-27 15:35:15 -06:00
hc-github-team-consul-core c15132acf4
Backport of docs: Consul at scale guide into release/1.14.x (#16084)
* backport of commit c57ff557db

* backport of commit 24756aa6ff

* backport of commit 7a850531cc

* backport of commit 036eb9f3c9

Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
2023-01-26 15:10:26 -06:00
hc-github-team-consul-core 9d2b958093
backport of commit 58b23a5515 (#16048)
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-01-24 00:35:12 +00:00
hc-github-team-consul-core e076fbb8f5
Backport of Apply agent partition to load services and agent api into release/1.14.x (#16041)
* backport of commit a42e86ffd8

* backport of commit 4ad0f7aff4

Co-authored-by: cskh <hui.kang@hashicorp.com>
2023-01-23 16:41:26 +00:00
hc-github-team-consul-core 078e28f059
Backport of docs: clarify reloadable config option usage into release/1.14.x (#16037)
* backport of commit 745df8f313

* backport of commit c0329441be

* backport of commit dbd69ea28a

Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-01-20 18:43:09 -05:00
hc-github-team-consul-core 174d0763bd
backport of commit 8e54b4b5cf (#16032)
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2023-01-20 15:11:39 -05:00
hc-github-team-consul-core 1ad9c29dfe
backport of commit e522044bb3 (#16027)
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-01-20 17:37:05 +00:00
hc-github-team-consul-core c625d55ad2
Backport of docs: link fixes for Envoy proxy page into release/1.14.x (#16026)
* backport of commit 9ffd2063ba

* backport of commit 6b3344481c

* backport of commit 09ec40e48b

* backport of commit d3f1cf4eea

Co-authored-by: boruszak <jeffrey.boruszak@hashicorp.com>
2023-01-20 12:13:12 -05:00
Ashwin Venkatesh 085cb1a207
Add support for envoy readiness flags (#16015) (#16019)
* Add support for envoy readiness flags
- add flags 'envoy-ready-bind-port` and `envoy-ready-bind-addr` on consul connect envoy to create a ready listener on that address.
2023-01-19 17:09:55 -05:00
Derek Menteer 0379dabe4e
Fix configuration merging for implicit tproxy upstreams. (#16000) (#16007)
Fix configuration merging for implicit tproxy upstreams.

Change the merging logic so that the wildcard upstream has correct proxy-defaults
and service-defaults values combined into it. It did not previously merge all fields,
and the wildcard upstream did not exist unless service-defaults existed (it ignored
proxy-defaults, essentially).

Change the way we fetch upstream configuration in the xDS layer so that it falls back
to the wildcard when no matching upstream is found. This is what allows implicit peer
upstreams to have the correct "merged" config.

Change proxycfg to always watch local mesh gateway endpoints whenever a peer upstream
is found. This simplifies the logic so that we do not have to inspect the "merged"
configuration on peer upstreams to extract the mesh gateway mode.
2023-01-19 10:55:27 -06:00
hc-github-team-consul-core 3e3ab25f9b
xds: don't attempt to load-balance sessions for local proxies (#15789) (#16004)
Previously, we'd begin a session with the xDS concurrency limiter
regardless of whether the proxy was registered in the catalog or in
the server's local agent state.

This caused problems for users who run `consul connect envoy` directly
against a server rather than a client agent, as the server's locally
registered proxies wouldn't be included in the limiter's capacity.

Now, the `ConfigSource` is responsible for beginning the session and we
only do so for services in the catalog.

Fixes: https://github.com/hashicorp/consul/issues/15753

Co-authored-by: Dan Upton <daniel@floppy.co>
2023-01-19 10:34:01 +00:00
hc-github-team-consul-core aa3f89496d
backport of commit 8cdb0e7fd2 (#16002)
Co-authored-by: Chris S. Kim <ckim@hashicorp.com>
2023-01-18 16:55:57 +00:00
hc-github-team-consul-core ad5bd1181c
backport of commit 6199f234e2 (#15995)
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
2023-01-17 13:10:25 -05:00
hc-github-team-consul-core 6523de1392
backport of commit 6199f234e2 (#15991)
Co-authored-by: trujillo-adam <ajosetru@gmail.com>
2023-01-17 13:10:16 -05:00
hc-github-team-consul-core ff1f79dc2f
Backport of Enforce lowercase peer names. into release/1.14.x (#15977)
* backport of commit e1889324d0

* backport of commit 5382b39390

Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-01-13 20:30:50 +00:00
hc-github-team-consul-core b0de16c688
backport of commit 6336255e6a (#15973)
Co-authored-by: Ranjandas <thejranjan@gmail.com>
2023-01-12 22:56:25 -05:00
hc-github-team-consul-core 7ac2df3f3c
Update go-discover to support ECS discovery (#13782) (#15966)
Co-authored-by: Frank DiRocco <160608+fdr2@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-01-12 12:31:14 -06:00
hc-github-team-consul-core 768648f066
backport of commit 4420869997 (#15939)
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-01-11 17:13:28 +00:00
hc-github-team-consul-core 879e92f5ea
backport of commit f27c077de6 (#15934)
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-01-06 14:08:00 -06:00
Matt Keeler 5989784016
Pin protoc-gen-go-binary version (#15929) 2023-01-06 11:48:17 -05:00
hc-github-team-consul-core 821869ba04
backport of commit ae4dea5e16 (#15932)
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-01-06 16:38:05 +00:00
hc-github-team-consul-core fac609854a
backport of commit 5952f019b4 (#15924)
Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>
2023-01-06 08:24:41 -08:00
hc-github-team-consul-core 397a588ca7
backport of commit 822c3fea8a (#15907)
Co-authored-by: Daniel Upton <daniel@floppy.co>
2023-01-06 09:37:43 +00:00
hc-github-team-consul-core c0a8070a6b
Backport of docs: Fix link into release/1.14.x (#15915)
* no-op commit due to failed cherry-picking

* docs: Fix link (#14890)

Co-authored-by: David Yu <dyu@hashicorp.com>

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: lbausch <lbausch@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2023-01-05 21:28:45 -08:00
hc-github-team-consul-core 9d086792a2
Backport of Update api gateway version to latest into release/1.14.x (#15901)
* backport of commit f083928e0a

* backport of commit 72e8fba8bc

* fix cherrypick

Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
2023-01-04 15:21:41 -08:00
hc-github-team-consul-core 4ccea91d96
backport of commit ae9b6a948e (#15893)
Co-authored-by: Daniel Upton <daniel@floppy.co>
2023-01-04 14:39:33 +00:00
hc-github-team-consul-core 64eafb312e
backport of commit 699d4b0bac (#15889)
Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>
2023-01-03 17:05:31 +00:00