15123 Commits (d776a2d23697fdcdb1866f966e4fb60c84712977)

 

All Branches   

Search

Author	SHA1	Message	Date
R.B. Boyer	ac41e30614	state: partition the nodes.uuid and nodes.meta indexes as well (#10882)	3 years ago
R.B. Boyer	097e1645e3	agent: ensure that most agent behavior correctly respects partition configuration (#10880)	3 years ago
Blake Covarrubias	e62b1d05d8	docs: Add common CA config options to provider doc pages (#10842) ... Add the list of common Connect CA configuration options to the provider-specific CA docs. Previously these options were only documented under the agent configuration options. This change makes it so that all supported CA provider configuration options are available from a single location. Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	3 years ago
Mike Wickett	39b3c3e2bd	chore: update alert banner (#10816)	3 years ago
Daniel Nephin	a2c4069de2	Merge pull request #10806 from hashicorp/dnephin/debug-filenames-2 ... debug: use human readable dates for filenames and improve the tests	3 years ago
Daniel Nephin	271352dbb7	Merge pull request #10849 from hashicorp/dnephin/contrib-doc-xds-auth ... xds: document how authorization works	3 years ago
Daniel Nephin	a98b5bc31c	Merge pull request #10804 from hashicorp/dnephin/debug-filenames ... debug: rename cluster.json -> members.json and fix handling of Interrupt Signal	3 years ago
Daniel Nephin	797ee061e4	debug: use human readable dates for filenames ... The unix timestamps that were used make the debug data a little bit more difficult to consume. By using human readable dates we can easily see when the profile data was collected. This commit also improves the test coverage. Two test cases are removed and the assertions from those cases are moved to TestDebugCommand. Now TestDebugCommand is able to validate the contents of all files. This change reduces the test runtime of the command/debug package by almost 50%. It also makes much more strict assertions about the contents by using gotest.tools/v3/fs.	3 years ago
Daniel Nephin	049c4e9623	add changelog	3 years ago
Daniel Nephin	2f8d0e12cf	debug: small cleanup ... Use the new WriteJsonFile function to write index.json Remove .String() from time.local() since that is done by %s Remove an unused field.	3 years ago
Daniel Nephin	26ef0df458	docs: update CLI reference docs for debug ... the cluster target was renamed to members.	3 years ago
Daniel Nephin	4359e38114	debug: restore cancel on SigInt ... Some previous changes broke interrupting the debug on SigInterupt. This change restores the original behaviour by passing a context to requests. Since a new API client function was required to pass the context, I had it also return an io.ReadCloser, so that output can be streamed to files instead of fully buffering in process memory.	3 years ago
Daniel Nephin	31bcd80528	debug: improve a couple of the test cases ... Use gotest.tools/v3/fs to make better assertions about the files Remove the TestAgent from TestDebugCommand_Prepare_ValidateTiming, since we can test that validation without making any API calls.	3 years ago
Daniel Nephin	bbf6a94c9a	debug: rename cluster target to members ... The API is called members. Using the same name as the API should help describe the contents of the file.	3 years ago
Daniel Nephin	251026e374	debug: remove unused	3 years ago
Daniel Nephin	ed9a1d3ff2	Merge pull request #10869 from roopakv/roopak/xsys ... Update x/sys to support go 1.17	3 years ago
R.B. Boyer	e44bce3c4f	state: partition the usage metrics subsystem (#10867)	3 years ago
Roopak Venkatakrishnan	e43cf46267	Update x/sys to support go 1.17	3 years ago
sridhar	cf66becabe	Update website/content/docs/k8s/connect/ingress-gateways.mdx ... Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
Daniel Nephin	8252a2691c	xds: document how authorization works	3 years ago
R.B. Boyer	613dd7d053	state: adjust streaming event generation to account for partitioned nodes (#10860) ... Also re-enabled some tests that had to be disabled in the prior PR.	3 years ago
R.B. Boyer	310e775a8a	state: partition nodes and coordinates in the state store (#10859) ... Additionally: - partitioned the catalog indexes appropriately for partitioning - removed a stray reference to a non-existent index named "node.checks"	3 years ago
Daniel Nephin	540f88d622	Merge pull request #10814 from hashicorp/dnephin/acl-resolver-4 ... acl: remove ACLDisabledTTL	3 years ago
Daniel Nephin	03b2be4df6	Merge pull request #10808 from hashicorp/dnephin/acl-resolver-3 ... acl: isolate the config used by ACLResolver	3 years ago
Daniel Nephin	00a592bb72	proto: mark the DisabledTTL field as deprecated ... Using both the name and the field option.	3 years ago
Daniel Nephin	01bf115c2b	acl: small improvements to ACLResolver disable due to RPC error ... Remove the error return, so that not handling is not reported as an error by errcheck. It was returning the error passed as an arg unmodified so there is no reason to return the same value that was passed in. Remove the term upstreams to remove any confusion with the term used in service mesh. Remove the AutoDisable field, and replace it with the TTL value, using 0 to indicate the setting is turned off. Replace "not Before" with "After". Add some test coverage to show the behaviour is still correct.	3 years ago
Daniel Nephin	d5498770fa	acl: make ACLDisabledTTL a constant ... This field was never user-configurable. We always overwrote the value with 120s from NonUserSource. However, we also never copied the value from RuntimeConfig to consul.Config, So the value in NonUserSource was always ignored, and we used the default value of 30s set by consul.DefaultConfig. All of this code is an unnecessary distraction because a user can not actually configure this value. This commit removes the fields and uses a constant value instad. Someone attempting to set acl.disabled_ttl in their config will now get an error about an unknown field, but previously the value was completely ignored, so the new behaviour seems more correct. We have to keep this field in the AutoConfig response for backwards compatibility, but the value will be ignored by the client, so it doesn't really matter what value we set.	3 years ago
Daniel Nephin	abd2e160f9	Fix test failures ... Tests only specified one of the fields, but in production we copy the value from a single place, so we can do the same in tests. The AutoConfig test broke because of the problem noticed in a previous commit. The DisabledTTL is not wired up properly so it reports 0s here. Changed the test to use an explicit value.	3 years ago
Daniel Nephin	17841248dd	config: remove ACLResolver settings from RuntimeConfig	3 years ago
Daniel Nephin	31e034215f	acl: remove ACLResolver config fields from consul.Config	3 years ago
Daniel Nephin	d4701903f6	acl: replace ACLResolver.Config with its own struct ... This is step toward decoupling ACLResolver from the agent/consul package.	3 years ago
Daniel Nephin	fdfc4e0698	Merge pull request #10661 from hashicorp/dnephin/remove-legacy-acls-1 ... http: disable legacy ACL API endpoints	3 years ago
Daniel Nephin	c2b24adb5f	acl: remove ACLRulesTranslateLegacyToken API endpoint	3 years ago
Daniel Nephin	b7bced9bcf	acl: remove legacy bootstrap ... Return an explicit error from the RPC, and remove the flag from the HTTP API.	3 years ago
Daniel Nephin	70c2cdc8f1	cli: remove a test case for updating a legacy token ... Legacy tokens are no longer accepted, so we don't need to test their upgrade path.	3 years ago
Daniel Nephin	de3439b2cc	api: remove client library tests for old API endpoints ... These methods are being kept around in the api module for now to allow the api module to work with older versions of the HTTP API, but we are no longer able to test them. Since the endpoints are removed there is no way for them to change, so there does not appear to be a need to keep running the tests.	3 years ago
Daniel Nephin	858071d55a	agent: update some tests that were using legacy ACL endpoints ... The tests were updated to use the new ACL endpoints now that the legacy ones have been removed.	3 years ago
Daniel Nephin	7ecd2e5466	http: update legacy ACL endpoints to return an error ... Also move a test for the ACLReplicationStatus endpoint into the correct file.	3 years ago
Daniel Nephin	9671dd6b97	acl: add some notes about removing legacy ACL system	3 years ago
Daniel Nephin	887d11923b	Merge pull request #10792 from hashicorp/dnephin/rename-authz-vars ... acl: use authz consistently as the variable name for an acl.Authorizer	3 years ago
Daniel Nephin	c85c62dffb	Merge pull request #10807 from hashicorp/dnephin/remove-acl-datacenter ... config: remove ACLDatacenter	3 years ago
Daniel Nephin	e637cd71f3	acl: use authz consistently as the variable name for an acl.Authorizer ... Follow up to https://github.com/hashicorp/consul/pull/10737#discussion_r682147950 Renames all variables for acl.Authorizer to use `authz`. Previously some places used `rule` which I believe was an old name carried over from the legacy ACL system. A couple places also used authorizer. This commit also removes another couple of authorizer nil checks that are no longer necessary.	3 years ago
Olatunde Alex-Oni	ad07ed705c	Update documentation for enable_key_list_policy ... The current suggests the option expects a string of either "enabled" or "disabled" but this results in an error `'acl.enable_key_list_policy' expected type 'bool', got unconvertible type 'string', value: 'enabled'`. Setting to a boolean value resolves this, also had a quick look at the code (d2b58cd0d6/agent/config/runtime.go (L109)) and it suggests this too	3 years ago
Mike Morris	2a98ed5b7d	ci: make changelog-checker only validate PR number against main base (#10844)	3 years ago
R.B. Boyer	e0d1e2689c	ci: upgrade to use Go 1.16.7 (#10856)	3 years ago
hc-github-team-consul-core	ed85684d96	auto-updated agent/uiserver/bindata_assetfs.go from commit ae9c31338	3 years ago
Kenia	ae9c313382	ui: Update intention permissions notice wording (#10836)	3 years ago
Kenia	019ce785ab	ui: Create Routing Configurations route and page (#10835)	3 years ago
Blake Covarrubias	97b4fdff0d	Document possible risk w.r.t exposing the admin API in Envoy (#10817) ... Add a section to the Connect Security page which highlights the risks of exposing Envoy's administration interface outside of localhost. Resolves #5692 Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>	3 years ago
Blake Covarrubias	8a396ae73f	Document tagged addresses (#10744) ... Add section for tagged addresses on service definition documentation. Resolves #6989 Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago