consul

Commit Graph

Author	SHA1	Message	Date
hc-github-team-consul-core	2897fc7f67	Backport of member cli: add -filter expression to flags into release/1.14.x (#18274 ) * backport of commit `fe571c6c3e` * backport of commit `779901b6cd` --------- Co-authored-by: cskh <hui.kang@hashicorp.com>	1 year ago
hc-github-team-consul-core	b08ca07a73	Backport of NET-4897 - update comment to include the current issue url from the go team. into release/1.14.x (#18264 ) backport of commit `23f0cfc2d6` Co-authored-by: John Murret <john.murret@hashicorp.com>	1 year ago
hc-github-team-consul-core	3f8cb583c7	Backport of [NET-4865] Bump golang.org/x/net to 0.12.0 into release/1.14.x (#18187 ) Backport of [NET-4865] Bump golang.org/x/net to 0.12.0 into release/1.16.x (#18189) Bump golang.org/x/net to 0.12.0 While not necessary to directly address CVE-2023-29406 (which should be handled by using a patched version of Go when building), an accompanying change to HTTP/2 error handling does impact agent code. See https://go-review.googlesource.com/c/net/+/506995 for the HTTP/2 change. Bump this dependency across our submodules as well for the sake of potential indirect consumers of `x/net/http`. Manual backport of `84cbf09185`.	1 year ago
hc-github-team-consul-core	9128a08c46	Backport of [NET-4897] net/http host header is now verified and request.host that contains socked now error into release/1.14.x (#18143 ) ## Backport This PR is auto-generated from #18129 to be assessed for backporting due to the inclusion of the label backport/1.14. 🚨 >Warning automatic cherry-pick of commits failed. If the first commit failed, you will see a blank no-op commit below. If at least one commit succeeded, you will see the cherry-picked commits up to, _not including_, the commit where the merge conflict occurred. The person who merged in the original PR is: @jmurret This person should manually cherry-pick the original PR into a new backport PR, and close this one when the manual backport PR is merged in. > merge conflict error: POST https://api.github.com/repos/hashicorp/consul/merges: 409 Merge conflict [] The below text is copied from the body of the original PR. --- ### Description This is related to https://github.com/hashicorp/consul/pull/18124 where we pinned the go versions in CI to 1.20.5 and 1.19.10. go 1.20.6 and 1.19.11 now validate request host headers for validity, including the hostname cannot be prefixed with slashes. For local communications (npipe://, unix://), the hostname is not used, but we need valid and meaningful hostname. Prior versions go Go would clean the host header, and strip slashes in the process, but go1.20.6 and go1.19.11 no longer do, and reject the host header. Around the community we are seeing that others are intercepting the req.host and if it starts with a slash or ends with .sock, they changing the host to localhost or another dummy value. [client: define a "dummy" hostname to use for local connections by thaJeztah · Pull Request #45942 · moby/moby](https://github.com/moby/moby/pull/45942) ### Testing & Reproduction steps Check CI tests. ### Links * [ ] updated test coverage * [ ] external facing docs updated * [ ] appropriate backport labels added * [ ] not a security concern --- <details> <summary> Overview of commits </summary> - `747195f7aa` - `516492420b` - `f4d6ca19f8` - `a47407115e` - `8c03b36e00` - `c50b17c46e` - `cc8eaf8213` - `ce10138d07` - `133c7ecbf5` - `b0bd440d8f` - `8f223080c0` - `f8578b0749` - `4452224d6a` - `19634a4b3b` </details> --------- Co-authored-by: temp <temp@hashicorp.com> Co-authored-by: John Murret <john.murret@hashicorp.com>	1 year ago
hc-github-team-consul-core	fd5f1d5b63	Backport of watch: support -filter for consul watch: checks, services, nodes, service into release/1.14.x (#17985 ) * backport to 1.14.x --------- Co-authored-by: cskh <hui.kang@hashicorp.com>	1 year ago
Ashesh Vidyut	f4ea364258	[NET-3865] [Supportability] Additional Information in the output of 'consul operator raft list-peers' (#17582 ) (#17828 ) * init * fix tests * added -detailed in docs * added change log * fix doc * checking for entry in map * fix tests * removed detailed flag * removed detailed flag * revert unwanted changes * removed unwanted changes * updated change log * pr review comment changes * pr comment changes single API instead of two * fix change log * fix tests * fix tests * fix test operator raft endpoint test * Update .changelog/17582.txt * nits * updated docs --------- Co-authored-by: Semir Patel <semir.patel@hashicorp.com>	1 year ago
malizz	842139f5b5	backport pr 15979 into 1.14.x (#17287 ) * backport pr 15979 into 1.14.x * update protobuf package and update protos	2 years ago
Andrew Stucki	673653caa0	Manual Backport of Add ServiceResolver RequestTimeout for route timeouts to make TerminatingGateway upstream timeouts configurable into release/1.14.x (#16561 ) * Leverage ServiceResolver ConnectTimeout for route timeouts to make TerminatingGateway upstream timeouts configurable * Regenerate golden files * Add RequestTimeout field * Add changelog entry	2 years ago
hc-github-team-consul-core	27b02d5b08	fix: revert go mod compat for sdk,api to 1.19 (#16323 ) (#16327 ) Co-authored-by: Dan Stough <dan.stough@hashicorp.com>	2 years ago
Dan Stough	0448e51cf5	Manual Backport of [OSS] security: update go to 1.20.1 into release/1.14.x (#16321 ) * security: update go to 1.20.1 (#16263) * changelog	2 years ago
hc-github-team-consul-core	7c0eec4c1f	Add support for configuring Envoys route idle_timeout (#14340 ) (#15611 ) * Add idleTimeout Co-authored-by: James Oulman <oulman@users.noreply.github.com> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Dhia Ayachi <dhia@hashicorp.com>	2 years ago
Derek Menteer	6632e19f78	Backport 1.14.1 changes (#15513 ) Add post-release changes for 1.14.1 updates.	2 years ago
hc-github-team-consul-core	f4724e2e46	Backport of Fix issue with connect Envoy choosing incorrect TLS settings. into release/1.14.x (#15468 ) This pull request was automerged via backport-assistant	2 years ago
Derek Menteer	3efb619e88	Fix SDK to support older versions of Consul. (#15423 ) (#15459 ) This change was necessary, because the configuration was always generated with a gRPC TLS port, which did not exist in Consul 1.13, and would result in the server failing to launch with an error. This code checks the version of Consul and conditionally adds the gRPC TLS port, only if the version number is greater than 1.14.	2 years ago
Derek Menteer	50cbc7f6c4	Derekm/release updates (#15383 ) * Update changelog with 1.14 notes. * gomod version bumps for 1.14 release. * Post-release gomod changes. * Version bump.	2 years ago
hc-github-team-consul-core	6645e02c6c	update config defaults, add docs (#15302 ) (#15323 ) * update config defaults, add docs * update grpc tls port for non-default values * add changelog * Update website/content/docs/upgrading/upgrade-specific.mdx Co-authored-by: Derek Menteer <105233703+hashi-derek@users.noreply.github.com> * Update website/content/docs/agent/config/config-files.mdx Co-authored-by: Derek Menteer <105233703+hashi-derek@users.noreply.github.com> * update logic for setting grpc tls port value * move default config to default.go, update changelog * update docs * Fix config tests. * Fix linter error. * Fix ConnectCA tests. * Cleanup markdown on upgrade notes. Co-authored-by: Derek Menteer <105233703+hashi-derek@users.noreply.github.com> Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com> Co-authored-by: malizz <maliheh.monshizadeh@hashicorp.com> Co-authored-by: Derek Menteer <105233703+hashi-derek@users.noreply.github.com> Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>	2 years ago
hc-github-team-consul-core	c896ae06bf	Backport of Bring back parameter ServerExternalAddresses in GenerateToken endpoint into release/1.14.x (#15296 ) * backport of commit `4199a7c30a` * backport of commit `53be93fb90` * backport of commit `1b0ce4e96c` * backport of commit `1b4ee792cb` * backport of commit `98f3d5aa51` * backport of commit `1f3b30b768` * Fix gomod for merging. Co-authored-by: Nitya Dhanushkodi <nitya@hashicorp.com> Co-authored-by: Derek Menteer <derek.menteer@hashicorp.com>	2 years ago
hc-github-team-consul-core	4ec5884ca9	backport of commit `d34e9ed5a8` (#15286 ) This pull request was automerged via backport-assistant	2 years ago
hc-github-team-consul-core	a71f0aa105	Backport of Allow consul debug on non-ACL consul servers into release/1.14.x (#15167 ) This pull request was automerged via backport-assistant	2 years ago
hc-github-team-consul-core	35fb3cb433	Backport of Update go version to 1.19 into release/1.14.x (#15139 ) This pull request was automerged via backport-assistant	2 years ago
Nitya Dhanushkodi	5e156772f6	Remove ability to specify external addresses in GenerateToken endpoint (#14930 ) * Reverts "update generate token endpoint to take external addresses (#13844)" This reverts commit `f47319b7c6`.	2 years ago
Chris S. Kim	3d2dffff16	Merge pull request #13388 from deblasis/feature/health-checks_windows_service Feature: Health checks windows service	2 years ago
Derek Menteer	caa1396255	Add remote peer partition and datacenter info.	2 years ago
Chris S. Kim	b0a4c5c563	Include stream-related information in peering endpoints	2 years ago
freddygv	fac3ddc857	Use internal server certificate for peering TLS A previous commit introduced an internally-managed server certificate to use for peering-related purposes. Now the peering token has been updated to match that behavior: - The server name matches the structure of the server cert - The CA PEMs correspond to the Connect CA Note that if Conect is disabled, and by extension the Connect CA, we fall back to the previous behavior of returning the manually configured certs and local server SNI. Several tests were updated to use the gRPC TLS port since they enable Connect by default. This means that the peering token will embed the Connect CA, and the dialer will expect a TLS listener.	2 years ago
Alex Oskotsky	13da2c5fad	Add the ability to retry on reset connection to service-routers (#12890 )	2 years ago
cskh	995671ff6f	fix(api): missing peer name in query option (#14835 )	2 years ago
John Murret	79a541fd7d	Upgrade serf to v0.10.1 and memberlist to v0.5.0 to get memberlist size metrics and broadcast queue depth metric (#14873 ) * updating to serf v0.10.1 and memberlist v0.5.0 to get memberlist size metrics and memberlist broadcast queue depth metric * update changelog * update changelog * correcting changelog * adding "QueueCheckInterval" for memberlist to test * updating integration test containers to grab latest api	2 years ago
Eric Haberkorn	1b565444be	Rename `PeerName` to `Peer` on prepared queries and exported services (#14854 )	2 years ago
Eric Haberkorn	80e51ff907	Add exported services event to cluster peering replication. (#14797 )	2 years ago
cskh	69f40df548	feat(ingress gateway: support configuring limits in ingress-gateway c… (#14749 ) * feat(ingress gateway: support configuring limits in ingress-gateway config entry - a new Defaults field with max_connections, max_pending_connections, max_requests is added to ingress gateway config entry - new field max_connections, max_pending_connections, max_requests in individual services to overwrite the value in Default - added unit test and integration test - updated doc Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Dan Stough <dan.stough@hashicorp.com>	2 years ago
Derek Menteer	aa4709ab74	Add envoy connection balancing. (#14616 ) Add envoy connection balancing config.	2 years ago
DanStough	7704daaad5	release updates for 1.13.2, 1.12.5, and 1.11.9	2 years ago
Alessandro De Blasis	461b42ed48	fix(check): added missing OSService props	2 years ago
DanStough	2a2debee64	feat(peering): validate server name conflicts on establish	2 years ago
DanStough	0150e88200	feat: add PeerThroughMeshGateways to mesh config	2 years ago
malizz	e743eefbd1	update enforcing consecutive 5xx type to pointer type (#14592 ) * update enforcing condecutive 5xx type to pointer type * update test	2 years ago
cskh	f22685b969	Config-entry: Support proxy config in service-defaults (#14395 ) * Config-entry: Support proxy config in service-defaults * Update website/content/docs/connect/config-entries/service-defaults.mdx Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	2 years ago
Derek Menteer	02ae66bda8	Add kv txn get-not-exists operation.	2 years ago
cskh	0f7d4efac3	fix(txn api): missing proxy config in registering proxy service (#14471 ) * fix(txn api): missing proxy config in registering proxy service	2 years ago
DanStough	08f7e52d82	fix(api): OSS<->ENT exported service incompatibility	2 years ago
malizz	b3ac8f48ca	Add additional parameters to envoy passive health check config (#14238 ) * draft commit * add changelog, update test * remove extra param * fix test * update type to account for nil value * add test for custom passive health check * update comments and tests * update description in docs * fix missing commas	2 years ago
Eric Haberkorn	77918d9dea	Fix a breaking change to the API package introduced in #13835 (#14378 ) `QueryDatacenterOptions` was renamed to `QueryFailoverOptions` without creating an alias. This adds `QueryDatacenterOptions` back as an alias to `QueryFailoverOptions` and marks it is deprecated.	2 years ago
Eric Haberkorn	1099665473	Update the structs and discovery chain for service resolver redirects to cluster peers. (#14366 )	2 years ago
cskh	527ebd068a	fix: missing MaxInboundConnections field in service-defaults config entry (#14072 ) * fix: missing max_inbound_connections field in merge config	2 years ago
Eric Haberkorn	1a73b0ca20	Add `Targets` field to service resolver failovers. (#14162 ) This field will be used for cluster peering failover.	2 years ago
Matt Keeler	f74d0cef7a	Implement/Utilize secrets for Peering Replication Stream (#13977 )	2 years ago
DanStough	2da8949d78	feat: convert destination address to slice	2 years ago
freddygv	b544ce6485	Add ACL enforcement to peering endpoints	2 years ago
Eric Haberkorn	501089292e	Add Cluster Peering Failover Support to Prepared Queries (#13835 ) Add peering failover support to prepared queries	2 years ago

1 2 3 4 5 ...

794 Commits (e25e26a39e045390e47f735bc1fc1137fd74bfad)