consul

Tree: d3cebbd32c

Author	SHA1	Message	Date
Mark Anderson	d3cebbd32c	Fixup to support unix domain socket via command line (#10758 ) Missed the need to add support for unix domain socket config via api/command line. This is a variant of the problems described in it is easy to drop one. Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
Daniel Nephin	525bc2d763	Merge pull request #10832 from hashicorp/dnephin/contrib-check-register-flows contrib: add list of check register flows	3 years ago
Daniel Nephin	ccf3a3bbb3	contrib: add list of check register flows	3 years ago
Chris Piraino	8f5e2a440b	docs: remove note on ingress gateway hosts field needing a port number (#10827 ) This was necessary in older versions of Consul, but was obsoleted by making Consul add the port number itself when constructing the Envoy configuration.	3 years ago
Blake Covarrubias	99b1d8ed8c	docs: Update code blocks across website * Use CodeTabs for examples in multiple formats. * Ensure correct language on code fences. * Use CodeBlockConfig for examples with filenames, or which need highlighted content.	3 years ago
hc-github-team-consul-core	199e850d16	auto-updated agent/uiserver/bindata_assetfs.go from commit `ab6a67520`	3 years ago
Kenia	ab6a675209	ui: Split up the socket mode from the socket path (#10581 )	3 years ago
Blake Covarrubias	3363da7d35	docs: Add JSON examples to all config entries This commit adds example JSON configs for several config entry resources were missing examples in this language. The examples have been updated to use the new CodeTabs resource instead of the Tab component.	3 years ago
Blake Covarrubias	1ee8655bfc	cli: Fix broken KV import on Windows (#10820 ) Consul 1.10 (PR #9792) introduced the ability to specify a prefix when importing KV's. This however introduced a regression on Windows systems which breaks `kv import`. The key name is joined with specified`-prefix` using `filepath.Join()` which uses a forward slash (/) to delimit values on Unix-based systems, and a backslash (\) to delimit values on Windows – the latter of which is incompatible with Consul KV paths. This commit replaces filepath.Join() with path.Join() which uses a forward slash as the delimiter, providing consistent key join behavior across supported operating systems. Fixes #10583	3 years ago
Blake Covarrubias	e41d6ee60f	cli: Use admin bind address in self_admin cluster (#10757 ) Configure the self_admin cluster to use the admin bind address provided when starting Envoy. Fixes #10747	3 years ago
trujillo-adam	067c8c2c5c	Merge pull request #10812 from hashicorp/docs-envoy-proxy-breaks-when-enabling-tls docs: adding env var info	3 years ago
trujillo-adam	9e348edfaf	Merge branch 'main' into docs-envoy-proxy-breaks-when-enabling-tls	3 years ago
trujillo-adam	ec7526caaa	Update website/content/docs/connect/proxies/envoy.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
trujillo-adam	7d00adb824	Update website/content/docs/connect/proxies/envoy.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
trujillo-adam	3fabe18acd	docs: adding env var info, resolves #7926	3 years ago
Blake Covarrubias	6a68bfc5e1	cli: Test API access using /status/leader in consul watch (#10795 ) Replace call to /agent/self with /status/leader to verify agent reachability before initializing a watch. This endpoint is not guarded by ACLs, and as such can be queried by any API client regardless of their permissions. Fixes #9353	3 years ago
Daniel Nephin	d3325b0253	Merge pull request #10612 from bigmikes/acl-replication-fix acl: acl replication routine to report the last error message	3 years ago
Giulio Micheloni	d4a3fe33e8	String type instead of error type and changelog.	3 years ago
Mike Morris	cbab337803	changelog: add 1.10.1, 1.9.8 and 1.8.14	3 years ago
Daniel Nephin	5c7589c84a	Merge pull request #10743 from hashicorp/dnephin/acl-resolver-2 acl: decouple filtering from ACLResolver and remove a couple methods	3 years ago
Daniel Nephin	e1f04e8c96	Merge pull request #10742 from hashicorp/dnephin/acl-resolver acl: move agent/consul vet functions	3 years ago
Daniel Nephin	b837ba35a0	acl: remove Server.ResolveTokenIdentityAndDefaultMeta This method suffered from similar naming to a couple other methods on Server, and had not great re-use (2 callers). By copying a few of the lines into one of the callers we can move the implementation into the second caller. Once moved, we can see that ResolveTokenAndDefaultMeta is identical in both Client and Server, and likely should be further refactored, possibly into ACLResolver. This change is being made to make ACL resolution easier to trace.	3 years ago
Daniel Nephin	6cf6e7c5fe	acl: remove Server.ResolveTokenToIdentityAndAuthorizer This method was an alias for ACLResolver.ResolveTokenToIdentityAndAuthorizer. By removing the method that does nothing the code becomes easier to trace.	3 years ago
Daniel Nephin	cc4f155801	acl: recouple acl filtering from ACLResolver ACL filtering only needs an authorizer and a logger. We can decouple filtering from the ACLResolver by passing in the necessary logger. This change is being made in preparation for moving the ACLResolver into an acl package	3 years ago
Daniel Nephin	111f3620a8	acl: remove unused error return filterACLWithAuthorizer could never return an error. This change moves us a little bit closer to being able to enable errcheck and catch problems caused by unhandled error return values.	3 years ago
Daniel Nephin	c0100543d0	acl: rename acl.Authorizer vars to authz For consistency	3 years ago
Daniel Nephin	4f5477ccfa	acl: move vet functions These functions are moved to the one place they are called to improve code locality. They are being moved out of agent/consul/acl.go in preparation for moving ACLResolver to an acl package.	3 years ago
Daniel Nephin	c4eadb6b96	acl: move vetRegisterWithACL and vetDeregisterWithACL These functions are used in only one place. Move the functions next to their one caller to improve code locality. This change is being made in preparation for moving the ACLResolver into an acl package. The moved functions were previously in the same file as the ACLResolver. By moving them out of that file we may be able to move the entire file with fewer modifications.	3 years ago
Daniel Nephin	1deba421c7	Merge pull request #10770 from hashicorp/dnephin/log-cert-expiration telemetry: add log message when certs are about to expire	3 years ago
Daniel Nephin	0c42b38c92	Merge pull request #10793 from hashicorp/dnephin/acl-intentions acl: small cleanup of a couple Authorization flows	3 years ago
Dhia Ayachi	b495036823	defer setting the state before returning to avoid stuck in `INITIALIZING` state (#10630 ) * defer setting the state before returning to avoid being stuck in `INITIALIZING` state * add changelog * move comment with the right if statement * ca: report state transition error from setSTate * update comment to reflect state transition Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	3 years ago
Daniel Nephin	e94016872a	Merge pull request #10768 from hashicorp/dnephin/agent-tls-cert-expiration-metric telemetry: add Agent TLS Certificate expiration metric	3 years ago
Daniel Nephin	c718de730b	acl: remove special handling of services in txn_endpoint Follow up to: https://github.com/hashicorp/consul/pull/10738#discussion_r680190210 Previously we were passing an Authorizer that would always allow the operation, then later checking the authorization using vetServiceTxnOp. On the surface this seemed strange, but I think it was actually masking a bug as well. Over time `servicePreApply` was changed to add additional authorization for `service.Proxy.DestinationServiceName`, but because we were passing a nil Authorizer, that authorization was not handled on the txn_endpoint. `TxnServiceOp.FillAuthzContext` has some special handling in enterprise, so we need to make sure to continue to use that from the Txn endpoint. This commit removes the `vetServiceTxnOp` function, and passes in the `FillAuthzContext` function so that `servicePreApply` can be used by both the catalog and txn endpoints. This should be much less error prone and prevent bugs like this in the future.	3 years ago
hc-github-team-consul-core	af9acf4943	auto-updated agent/uiserver/bindata_assetfs.go from commit `bcd53e73a`	3 years ago
Kenia	bcd53e73a2	ui: Add Vault as a Service External Source (#10769 )	3 years ago
Daniel Nephin	5b2e5882b4	acl: move check for Intention.DestinationName into Authorizer Follow up to https://github.com/hashicorp/consul/pull/10737#discussion_r680134445 Move the check for the Intention.DestinationName into the Authorizer to remove the need to check what kind of Authorizer is being used. It sounds like this check is only for legacy ACLs, so is probably just a safeguard .	3 years ago
Daniel Nephin	bbce192b4d	Merge pull request #10738 from hashicorp/dnephin/remove-authorizer-nil-checks-2 acl: remove the last of the authz == nil checks	3 years ago
Daniel Nephin	9cdd823ffc	Merge pull request #10737 from hashicorp/dnephin/remove-authorizer-nil-checks acl: remove authz == nil checks	3 years ago
trujillo-adam	c5824a834b	Merge pull request #10763 from hashicorp/docs-proxy-integration-improvements general language and readability improvements to proxy integration docs	3 years ago
Daniel Nephin	4979b712b5	Merge pull request #10727 from hashicorp/dependabot-configuration Add initial Dependabot configuration	3 years ago
trujillo-adam	5913aca502	Applying more feedback from @black and @karl-cardenas-coding	3 years ago
trujillo-adam	8ec29432d2	Applying feedback from @blake	3 years ago
Daniel Nephin	0e58e1ac4b	telemetry: add log message when certs are about to expire	3 years ago
Daniel Nephin	9420506fae	telemetry: fix a couple bugs in cert expiry metrics 1. do not emit the metric if Query fails 2. properly check for PrimaryUsersIntermediate, the logic was inverted Also improve the logging by including the metric name in the log message	3 years ago
Daniel Nephin	8c575445da	telemetry: add a metric for agent TLS cert expiry	3 years ago
trujillo-adam	ee1de179ed	Update website/content/docs/connect/proxies/integrate.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
Dhia Ayachi	cfa9cf6d84	fix state index for `CAOpSetRootsAndConfig` op (#10675 ) * fix state index for `CAOpSetRootsAndConfig` op * add changelog * Update changelog Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * remove the change log as it's not needed Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	3 years ago
hc-github-team-consul-core	2f6c95011b	auto-updated agent/uiserver/bindata_assetfs.go from commit `8ad1ab9c0`	3 years ago
Kenia	8ad1ab9c08	ui: Fix Health Checks in K/V form Lock Sessions Info section (#10767 )	3 years ago
trujillo-adam	31b9058602	general language and readability improvements to proxy integration docs	3 years ago

1 2 3 4 5 ...

14961 Commits (d3cebbd32cfa508e0856bf9beceb36c4af924b74) All Branches Search

14961 Commits (d3cebbd32cfa508e0856bf9beceb36c4af924b74)

All Branches