21280 Commits (e231f0ee9bc11b8fdfd2d74a3bcae688fc50b30b)

 

All Branches   

Search

Author	SHA1	Message	Date
Krastin Krastev	fa8e8837ac	docs: Fix typos in docs (#20211) ... * Update sameness.mdx * Update service-resolver.mdx	10 months ago
Chris Hut	75af5b15d9	Cc 7146/convert consul hcp to a simpler component for some upcoming changes (#20344) ... * Convert consul-hcp to a simpler component * update existing test to use envStub helper * Add missing copyright - weird no one yelled about this * remove consul-hcp from load * remove this test that doesn't run anymore	10 months ago
David Yu	1c1df4530c	GHA: Update broken-link-check.yml to check once a month (#20368) ... Update broken-link-check.yml	10 months ago
Nathan Coleman	27aecdb8cc	[NET-5075] Implement mesh gateway mode for explicit destinations (#20361)	10 months ago
Tyler Wendlandt	7e08d8988c	NET-5398: Update UI server to include if v2 is enabled (#20353) ... * Update ui server to include V2 Catalog flag * Fix typo	10 months ago
Derek Menteer	e586a4490d	Fix CICD docker image rate limits. (#20304) ... The docker image used in CICD was referencing `registry.k8s.io/pause:3.3`, which appears to no longer function correctly. This commit swaps over to a Hashicorp mirrored image that shouldn't have rate limits or disappearing images.	10 months ago
Nitya Dhanushkodi	0ec7bddb9a	[Net-5594][Net-7466] v2: Only route to endpoints that implement the port being routed to, and make xdscontroller and xdsv2 golden tests use tenancy (#20356) ... * If a workload does not implement a port, it should not be included in the list of endpoints for the Envoy cluster for that port. * Adds tenancy tests for xds controller and xdsv2 resource generation, and adds all those files. * The original change in this PR was for filtering the list of endpoints by the port being routed to (bullet 1). Since I made changes to sidecarproxycontroller golden files, I realized some of the golden files were unused because of the tenancy changes, so when I deleted those, that broke xds controller tests which weren't correctly using tenancy. So when I fixed that, then the xdsv2 tests broke, so I added tenancy support there too. So now, from sidecarproxy controller -> xds controller -> xdsv2 we now have tenancy support and all the golden files are lined up.	10 months ago
Valeriia Ruban	049ca102c4	Cc 7145 hcp link status api (#20330) ... * feat: add api call to hcp/link endpoint * updated * updated * update approach to get the linking status * updated application template * feat: add api call to hcp/link endpoint * updated * updated * update approach to get the linking status * updated application template * update purple banner links * Hook up the linked check to the purple banner * fixed lint issue * Updated tests for new link status API calls as args instead of from service --------- Co-authored-by: Chris Hut <tophernuts@gmail.com>	10 months ago
sarahalsmiller	37ebaa6920	Net 7155- Consul API Gateway Controller Stub Work (#20324) ... * API Gateway proto * fix lint issue * new line * run make proto format * checkpoint * stub * Update internal/mesh/internal/controllers/apigateways/controller.go	10 months ago
Luke Kysow	840f11a0c5	Change logging of registered v2 resource endpoints to add /api prefix (#20352) ... * Change logging of registered v2 resource endpoints to add /api prefix Previous: agent.http: Registered resource endpoint: endpoint=/demo/v1/executive New: agent.http: Registered resource endpoint: endpoint=/api/demo/v1/executive This reduces confusion when attempting to call the APIs after looking at the logs.	10 months ago
Blake Covarrubias	91a783a980	docs: Fix example service registration for built-in proxy (#20336) ... Fix the sample service registration for the built-in proxy by adding the missing `sidecar_service` block.	10 months ago
Semir Patel	efdf80413c	resource: add MutateAndValidate endpoint (#20311)	10 months ago
Nick Cellino	ec0df00fc1	Add finalizer to link resource (#20321) ... * Add finalizer to link resource * Update internal/hcp/internal/controllers/link/controller.go Co-authored-by: Semir Patel <semir.patel@hashicorp.com> * Address PR style feedback --------- Co-authored-by: Semir Patel <semir.patel@hashicorp.com>	10 months ago
Nick Cellino	4801c9cbdc	Add Link API docs (#20308) ... * Add Link API docs * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * Update website/content/api-docs/hcp-link.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * Add summary sentence and move api vs config section up * Add hcp link endpoint to API Overview page * Update website/content/api-docs/index.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * Update note about v1 API endpoint prefix * Add a period at end of v1 prefix note. * Add link to HCP Consul Central --------- Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>	10 months ago
wangxinyi7	7bb2c7cf13	Xw/net 5724 grpc client delete (#20309) ... * delete commmand works	10 months ago
Dan Stough	6828780131	feat(v2dns): add partial support for SOA records (#20320)	10 months ago
wangxinyi7	1f29ee604a	grpc CLI client list command (#20260) ... list command works	10 months ago
John Landa	65920dccf4	move deny action to enterprise only for traffic permissions (#20313) ... Add missing import Add explicit enum case for deny action Remove extra comments Add build tags to ent and ce tests Add copyright headers for the ce files Fix case statements for ce validator Remove ce tests with Deny traffic permissions Fix more integration tests Split more ce and ent tests, add back ent deny tests for traffic permissions controller temp rename before rebase Readd ent deny tests for traffic permissions controller	10 months ago
John Maguire	4ce4dd1492	Add new changelog entries for 1.15.9, 1.16.5, 1.17.2 (#20337) ... add new changelog entries for 1.15.9, 1.16.5, 1.17.2	10 months ago
John Maguire	cfe4d59938	[NET-7265] Panic when passing an incorrect type to the data fetcher for gatewayproxy (#20238) ... * panic when passing an incorrect type to the data fetcher * Add assertions for sidecarproxy datafetcher as well * rename assertion function * Add in comments to ensure devs know about potential panics for using invalid types * fix method call	10 months ago
sarahalsmiller	1eca44aef9	NET-7153 Proto messages for API Gateway (#20250) ... * API Gateway proto * fix lint issue * new line * run make proto format * regened with comment * lint * utilizie existing TLS struct * Update proto-public/pbmesh/v2beta1/api_gateway.proto Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com> * generated file * Update proto-public/pbmesh/v2beta1/api_gateway.proto * regen with comment * format the comment --------- Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>	10 months ago
Melissa Kam	7900544249	[CC-7063] Fetch HCP agent bootstrap config in Link reconciler (#20306) ... * Move config-dependent methods to separate package In order to reuse the fetching and file creation part of the bootstrap package, move the code that would cause cyclical dependencies to a different package. * Export needed bootstrap methods and variables Also add back validating persisted config and update tests. * Add support to check for just management token Add a new method that fetches the bootstrap configuration only if there isn't a valid management token file instead of checking for all the hcp-config files. * Pass data dir as a dependency to link controller The link controller needs to check the data directory for the hcp-config files. * Fetch bootstrap config for token in controller Load the management token when reconciling a link resource, which will fetch the agent boostrap configuration if the token is not already persisted locally. Skip this step if the cluster is in read-only mode. * Validate resource ID format in link creation * Handle unauthorized and forbidden errors Check for 401 and 403s when making GNM requests, exit bootstrap fetch loop and return specific failure statuses for link. * Move test function to a testing file * Log load and status write errors	10 months ago
aahel	3446eb3b1b	added computed failover controller (#20329) ... * added computed failover controller * removed some uncessary changes * removed uncessary changes * minor refactor * minor refactor fmt * added copyright	10 months ago
skpratt	0abf8f8426	Net 5092/internal l7 traffic permissions (#20276) ... * wire up L7 Traffic Permissions * testing * update comment	10 months ago
skpratt	44bcda8523	Net 7074/decentralized exported services management (#20318) ... * Add decentralized management of V1 exported-services config entries using V2 multicluster resources. * cleanup --------- Co-authored-by: Matt Keeler <mjkeeler7@gmail.com>	10 months ago
Krastin Krastev	a392242d23	docs: Update k8s/connect/create-sameness-groups (#20317)	10 months ago
Chris Hut	5119667cd1	💜 Cc 7187/purple banner for linking existing clusters (#20275) ... * Adding banner on services page * Simplified version of setting/unsetting banner * Translating the text based off of enterprise or not * Add an integration test * Adding an acceptance test * Enable config dismissal as well * Adding changelog * Adding some copyrights to the other files * Revert "Enable config dismissal as well" This reverts commit e6784c4335. We'll be doing this in CC-7347	10 months ago
Melissa Kam	e5d18753c9	Update SCADA provider version (#20319)	10 months ago
Tauhid Anjum	b37fe80eee	Net 6774 Make Sameness Groups Work With Traffic Permissions CE (#20316) ... * Make Sameness Groups Work With Traffic Permissions * Fix controller dependency	10 months ago
Tauhid Anjum	5d294b26d3	NET-5824 Exported services api (#20015) ... * Exported services api implemented * Tests added, refactored code * Adding server tests * changelog added * Proto gen added * Adding codegen changes * changing url, response object * Fixing lint error by having namespace and partition directly * Tests changes * refactoring tests * Simplified uniqueness logic for exported services, sorted the response in order of service name * Fix lint errors, refactored code	10 months ago
cskh	528147e5ad	upgrade test: run validation func at every node during upgrade (#20293) ... * upgrade test: run validation func at every node during upgrade * add 3 servers in each cluster	10 months ago
Nathan Coleman	995ba32cc0	Use null route cluster for default router when no matches on v2 mesh gateway (#20270) ... * Use black hole cluster for default router when no matches * Update test assertions * Use null route cluster instead of black hole cluster concept * Update test assertions	10 months ago
Lord-Y	758ddf84e9	Case sensitive route match (#19647) ... Add case insensitive param on service route match This commit adds in a new feature that allows service routers to specify that paths and path prefixes should ignore upper / lower casing when matching URLs. Co-authored-by: Derek Menteer <105233703+hashi-derek@users.noreply.github.com>	10 months ago
Nick Cellino	34b343a980	Unconditionally add Access-Control-Expose-Headers HTTP header (#20220) ... * Unconditionally add Access-Control-Expose-Headers HTTP header * Return nil instead of err	10 months ago
Dan Stough	97ae244d8a	feat(v2dns): add grpc DNS support (#20296)	10 months ago
Semir Patel	6d9e8fdd05	resource: retry non-CAS deletes automatically (#20292)	10 months ago
wangxinyi7	6188db4d20	grpc CLI client read command (#20178) ... * apply commmand works	10 months ago
Melissa Kam	a9dd6f5c02	Add a separate test for initializer retries (#20298) ... Separate test for initializer retries	10 months ago
R.B. Boyer	2e08a7e1c7	v2: prevent use of the v2 experiments in secondary datacenters for now (#20299) ... Ultimately we will have to rectify wan federation with v2 catalog adjacent experiments, but for now blanket prevent usage of the resource-apis, v2dns, and v2tenancy experiments in secondary datacenters.	10 months ago
Nick Cellino	37a5fddffa	Create HCP management token in HCP manager (#19830) ... * Create HCP management token in HCP manager * Change InitializeManagementToken to ManagementTokenUpserter * Implement and use management token upsert function * Fix race condition in test * Add idea for improvement as comment * Return early in upsertManagementToken if token exists	10 months ago
Melissa Kam	98c9702ba3	[CC-7031] Add initialization support to resource controllers (#20138) ... * Add Initializer to the controller The Initializer adds support for running any required initialization steps when the controller is first started. * Implement HCP Link initializer The link initializer will create a Link resource if the cloud configuration has been set. * Simplify retry logic and testing * Remove internal retry, replace with logging logic	10 months ago
Matt Keeler	0a261682cd	Migrate the node health controller to use the cache (#20248) ... Some edge case error testing had to be removed because it was no longer possible to force errors when going through the cache layer as opposed to the resource service itself.	10 months ago
Michael Zalimeni	f942f2dc18	security: fix syntax for release scan config (#20279) ... Correct syntax errors introduced in #20264.	10 months ago
Matt Keeler	cee9df574d	Deflake the catalog v2beta1 integration tests (#20278)	10 months ago
Nick Cellino	fe678e9da1	Sync cluster attributes from GNM to Link resource (#20158) ... * Add 'GetCluster' function to HCP client * Sync cluster data inside Link controller * Add access mode to HCP Link * Sync AccessLevel property * Fix imports and remove outdated comments * Switch accessMode to access level * Add comment around HCPClientFn * Fix spacing in link.proto * Add helper for writing status. Fix reconciliation loop	10 months ago
Matt Keeler	f9c04881f9	Failover policy cache (#20244) ... * Migrate the Failover controller to use the controller cache * Remove the Catalog FailoverMapper and its usage in the mesh routes controller.	10 months ago
Michael Zalimeni	b03d770dc3	security: disable Vault secret scans due to false positives (#20264) ... This was recently shown to have issues with false positives that blocked a preview release build, so disabling for now.	10 months ago
Nathan Coleman	c40b59823a	[NET-6431] Remove explicit endpoints function from PST builder (#20262) ... This isn't needed since we just populate RequiredEndpoints, which is already done for the base case	10 months ago
Dan Stough	0edfa74d15	feat(v2dns): recursor support (#20249) ... * feat(v2dns): recursor support * test: fix leaking test agent in dns svc test	10 months ago
Luke Kysow	0cb64ccfc8	docs: update k8s upgrade instructions (#20263) ... * docs: update k8s upgrade instructions With https://github.com/hashicorp/consul-k8s/pull/3000 merged, users can upgrade their k8s installs using a regular helm upgrade since the upgrade is now stable. Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	10 months ago