21321 Commits (ce2b0643077ab967e6e80a29c68c4ddd6ca34ec2)

 

All Branches   

Search

Author	SHA1	Message	Date
beckilee	ce2b064307	docs: Fix two typos in Consul introduction	7 months ago
John Murret	04940e2c78	additional changes to ensure sameness groups without DefaultForFailover can be used for DNS (#21107)	7 months ago
Dan Stough	94791f76b5	build: update gha to latest approved tsccr (#21061) ... * build: update gha to latest approved tsccr * chore: update hashicorp gha versions * fix: update upload artifact workload to have unique ids	7 months ago
John Murret	9b2c1be053	NET-5879 - expose sameness group param on service health endpoint and move sameness group health fallback logic into HealthService RPC layer (#21096) ... * NET-5879 - move the filter for non-passing to occur in the health RPC layer rather than the callers of the RPC * fix import of slices * NET-5879 - expose sameness group param on service health endpoint and move sameness group health fallback logic into HealthService RPC layer * fixing deepcopy * fix license headers	7 months ago
John Murret	a975b04302	NET-5879 - move the filter for non-passing to occur in the health RPC layer rather than the callers of the RPC (#21098) ... * NET-5879 - move the filter for non-passing to occur in the health RPC layer rather than the callers of the RPC * fix import of slices * fix test	7 months ago
Blake Covarrubias	48df56f7d2	docs: Add fault injection to Envoy extensions list (#21087) ... Add fault injection to Envoy extensions list	7 months ago
Blake Covarrubias	d0ebc85765	docs: Fix docs for `-ui-content-path` CLI flag (#21095) ... Fix the rendering of the documentation for the `-ui-content-path` CLI flag.	7 months ago
Michael Zalimeni	d312d0461b	ci: temporarily re-enable retired CE backport labels (#21094) ... To ease migration during this week's patch releases, temporarily use the more permissive version of BPA to allow old + new backport labels to be used simultaneously.	7 months ago
Michael Zalimeni	6bf42140ce	ci: test BPA 0.4.1 with no-op doc change (#21091) ... Add a newline to docs/README.md to test a backport without functional changes.	7 months ago
Jeanne Angeles Franco	0b03a9251e	Roll bpa version and cleanup (#21090)	7 months ago
nicoche	794e73080d	docs: fix typo in security/acl (#21003)	7 months ago
John Murret	dc19ce36ef	NET-9143 - sameness group queries in DNS do not respect DefaultForFailover setting and always assume failover behavior (#21029) ... * NET-9143 - sameness group queries in DNS do not respect DefaultForFailover setting and always assume failover behavior * update config entry docs for sameness groups * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> --------- Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	7 months ago
John Murret	17df32e5cb	NET-9084 - add tests to peering endpoint and blockingquery package to assert blocking works properly. (#21078)	7 months ago
Michael Zalimeni	8d4525ae50	doc: add clarifying note to versions.hcl (#21071) ... Make it obvious that this file is only consumed from the default branch.	7 months ago
Michael Zalimeni	f56405e745	security: Upgrade Go to 1.21.10 (#21074) ... This resolves CVE-2024-24787 and CVE-2024-24788.	7 months ago
Jeanne Angeles Franco	f51d08052b	Backport assistant onboarding with LTS support #9224 (#21058) ... * Config changes to use backport-assistant with lts support Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com> --------- Co-authored-by: claire labry <claire@hashicorp.com> Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>	7 months ago
Michael Zalimeni	093618d923	[NET-9141] ci: skip LICENSE copy for Ent linux packages (#21060) ... ci: skip LICENSE copy for Ent linux packages	7 months ago
R.B. Boyer	1535844c62	gossip: refactor some gossip related libraries into a central place (#21036) ... This refactors and relocates the following packages to live under internal/gossip instead of either in the toplevel lib or agent/consul: - librtt : related to serf coordinates - libserf : random serf stuff	7 months ago
R.B. Boyer	502346029d	test: remove v2 integration tests (#21056) ... This removes any references to v2 integration tests from: - envoy integration tests (test/integration/connect) - container tests (test/integration/consul-container) - deployer tests (test-integ)	7 months ago
Nathan Coleman	b5b3a63183	[NET-9098] Narrow scope of peering config on terminating gw filter chain to TCP services (#21054)	7 months ago
Michael Zalimeni	86b0818c1f	[NET-8601] security: upgrade vault/api to remove go-jose.v2 (#20910) ... security: upgrade vault/api to remove go-jose.v2 This dependency has an open vulnerability (GO-2024-2631), and is no longer needed by the latest `vault/api`. This is a follow-up to the upgrade of `go-jose/v3` in this repository to make all our dependencies consolidate on v3. Also remove the recently added security scan triage block for GO-2024-2631, which was added due to incorrect reports that `go-jose/v3@3.0.3` was impacted; in reality, is was this indirect client dependency (not impacted by CVE) that the scanner was flagging. A bug report has been filed to address the incorrect reporting.	7 months ago
wangxinyi7	4ad1757dfe	add license file (#21035)	7 months ago
R.B. Boyer	8bea6cd82a	deployer: ensure the proxy/dns/pause containers do not continually get replaced due to a change in a docker default (#21043)	7 months ago
Deniz Onur Duzgun	8209b3ff86	security: fine-tune release scanner and bump coredns (#21038) ... * security: bump coredns * add changelog * Revert "security: bump coredns" This reverts commit dcca09d83e. * security: bump coredns * fine-tune security scanner on release * dismiss changelog	7 months ago
Dan Stough	1793b506d5	chore: fix JIRA workflow (#21037) ... fix JIRA workflow	7 months ago
natemollica-dev	126784ee9a	Update snapshot CLI command addition of Decode subcommand from PR#20824 (#21005) ... docs: update snapshot for subcommand decode add by PR#20824	7 months ago
Dan Stough	37e3ebe564	chore: remove workstream from JIRA sync (#21031)	7 months ago
Deniz Onur Duzgun	3a6f2fba18	security: bump envoy version and k8s.io/apimachinery (#21017) ... * security: bump envoy version * add changelog	7 months ago
Jeff Boruszak	bbd8080ec0	HCP Consul Dedicated Rebrand changes (#21026) ... * HCP Consul Dedicated rebrand * Dedicated rebrand * path change * Update website/content/docs/architecture/index.mdx Co-authored-by: Krastin Krastev <krastin@hashicorp.com> * typo --------- Co-authored-by: Krastin Krastev <krastin@hashicorp.com>	7 months ago
Ranjandas	b9296f8e65	Fixed broken link in the ECS documentation (#21018)	7 months ago
Jeff Boruszak	e341fa04ec	docs: DNS caching tutorial becomes doc (#21010) ... * DNS cache page * Add page to nav * Replace old link text * Page edits * fix content check error * formatting fixes * Heading adjustment * nav * It was an H1 error all along	7 months ago
Jeff Boruszak	dbc0889c6f	docs: Enterprise upgrade instruction (#20985) ... * Upgrade general process updates * Add alert + adjust structure * typo	7 months ago
Jeff Boruszak	4a3c3c0b4a	docs: Redirect fix (#21008) ... Redirect fix	7 months ago
Dan Stough	03ab7367a6	feat(dataplane): allow token and tenancy information for proxied DNS (#20899) ... * feat(dataplane): allow token and tenancy information for proxied DNS * changelog	7 months ago
Jeff Boruszak	057ad7e952	docs: Initial HCP Rebrand (#21000) ... * Initial rebrand for HCP Terraform * Apply suggestions from code review Co-authored-by: Rose M Koron <32436232+rkoron007@users.noreply.github.com> * path fix and redirect * reintroduce nav from #20873 and #20994 --------- Co-authored-by: Rose M Koron <32436232+rkoron007@users.noreply.github.com> Co-authored-by: Krastin Krastev <krastin@hashicorp.com>	7 months ago
Jeff Boruszak	d106c7f665	docs: KV tutorial becomes usage doc (#20994) ... * Add KV store usage page * nav typo	7 months ago
Michael Zalimeni	5eea0b6c76	test: force IPv4 on Docker 26+ to fix Envoy int tests (#20986) ... As of Docker Engine 26.0.0 (https://github.com/moby/moby/pull/47062), IPv6 is enabled by default where supported. This causes issues for our tests attempting to resolve requests to other containers over localhost, since on Linux IPv6 will be preferred over IPv4 when available when applying the default behavior defined in RFC3484. As a workaround, force IPv4 with a flag passed to `docker run`.	7 months ago
sarahalsmiller	08761f16c8	Net 6820 customize mesh gateway limits (#20945) ... * add upstream limits to mesh gateway cluster generation * changelog * go mod tidy * readd changelog data * undo reversion from rebase * run codegen * Update .changelog/20945.txt Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com> * address notes * gofmt * clean up * gofmt * Update agent/proxycfg/mesh_gateway.go * gofmt * nil check --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	8 months ago
Nathan Coleman	5e9f02d4be	[NET-8091] Add file-system-certificate config entry for API gateway (#20873) ... * Define file-system-certificate config entry * Collect file-system-certificate(s) referenced by api-gateway onto snapshot * Add file-system-certificate to config entry kind allow lists * Remove inapplicable validation This validation makes sense for inline certificates since Consul server is holding the certificate; however, for file system certificates, Consul server never actually sees the certificate. * Support file-system-certificate as source for listener TLS certificate * Add more required mappings for the new config entry type * Construct proper TLS context based on certificate kind * Add support or SDS in xdscommon * Remove unused param * Adds back verification of certs for inline-certificates * Undo tangential changes to TLS config consumption * Remove stray curly braces * Undo some more tangential changes * Improve function name for generating API gateway secrets * Add changelog entry * Update .changelog/20873.txt Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com> * Add some nil-checking, remove outdated TODO * Update test assertions to include file-system-certificate * Add documentation for file-system-certificate config entry Add new doc to nav * Fix grammar mistake * Rename watchmaps, remove outdated TODO --------- Co-authored-by: Melisa Griffin <melisa.griffin@hashicorp.com> Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>	8 months ago
Di Sheng	e52b1702e9	FIX: wrong indentation of to block in Example yaml (#20974) ... docs: Fix wrong indentation of `to` block in cross-namespace `backendRef` example YAML file	8 months ago
Michael Zalimeni	a8d08e759f	fix: consume ignored entries in CE downgrade via Ent snapshot (#20977) ... This operation would previously fail due to unconsumed bytes in the decoder buffer when reading the Ent snapshot (the first byte of the record would be misinterpreted as a type indicator, and the remaining bytes would fail to be deserialized or read as invalid data). Ensure restore succeeds by decoding the ignored record as an interface{}, which will consume the record bytes without requiring a concrete target struct, then moving on to the next record.	8 months ago
Eric Haberkorn	e231f0ee9b	Add an agent config option to diable per tenancy usage metrics. (#20976)	8 months ago
John Murret	d261a987f1	update go-control-plane envoy dependency to 0.12.0 (#20973) ... * update go-control-plane envoy dependency to 0.12.0 * add changelog * go mod tidy * fix linting issues * add agent/grpc-internal to the list of SA1019 ignores	8 months ago
Michael Zalimeni	159fcfb2fa	security: ignore test and internal tool modules (#20963)	8 months ago
Michael Zalimeni	ad23e96a32	ci: fix Envoy int test versions (#20964) ... Follow-up to #20956	8 months ago
Deniz Onur Duzgun	3152ac3702	security: bump go, x/net and envoy versions (#20956) ... * Bump go version * Bump x/net * Bump envoy version * Add changelog --------- Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>	8 months ago
Freddy	8659c06a73	Add diagrams for write flow through Raft (#20948) ... Add diagrams about write flow through Raft	8 months ago
Jared Kirschner	174f92aa24	docs: fix apply DNS ACL token via CLI (#20951)	8 months ago
sarahalsmiller	be8d572eb2	NET-8524 Remove registation of api gateway controller (#20950) ... remove registation of api gateway controller	8 months ago
Nathan Coleman	9af713ff17	[NET-5772] Make tcp external service registered on terminating gw reachable from peered cluster (#19881) ... * Include SNI + root PEMs from peered cluster on terminating gw filter chain This allows an external service registered on a terminating gateway to be exported to and reachable from a peered cluster * Abstract existing logic into re-usable function * Regenerate golden files w/ new listener logic * Add changelog entry * Use peering bundles that are stable across test runs	8 months ago