14236 Commits (e345ef6086ba5d33f23286329249374cecf0828a)

 

All Branches   

Search

Author	SHA1	Message	Date
Freddy	66de74767c	Merge pull request #10003 from hashicorp/proxycfg-tproxy-ent-fixup ... Fixup wildcard ent assertion	4 years ago
freddygv	932fbddd27	Augment intention decision summary with DefaultAllow mode	4 years ago
freddygv	8857195437	Fixup wildcard ent assertion	4 years ago
Freddy	18decbba9d	Merge pull request #9999 from hashicorp/update-enabling-tproxy	4 years ago
Kendall Strautman	03df6f70f2	fix(website): docs link text color (#10001)	4 years ago
freddygv	b8ed82b808	Fixup bexpr filtering	4 years ago
freddygv	d7c43049fa	Remove zero-value validation of upstream cfg structs ... The zero value of these flags was already being excluded in the xDS generation of circuit breaker/outlier detection config. See: makeThresholdsIfNeeded and ToOutlierDetection.	4 years ago
freddygv	7bd51ff536	Replace TransparentProxy bool with ProxyMode ... This PR replaces the original boolean used to configure transparent proxy mode. It was replaced with a string mode that can be set to: - "": Empty string is the default for when the setting should be defaulted from other configuration like config entries. - "direct": Direct mode is how applications originally opted into the mesh. Proxy listeners need to be dialed directly. - "transparent": Transparent mode enables configuring Envoy as a transparent proxy. Traffic must be captured and redirected to the inbound and outbound listeners. This PR also adds a struct for transparent proxy specific configuration. Initially this is not stored as a pointer. Will revisit that decision before GA.	4 years ago
freddygv	9e194b4b3c	Avoid failing test due to undiscoverable node name	4 years ago
hashicorp-ci	2995d0e437	auto-updated agent/uiserver/bindata_assetfs.go from commit 84064f972	4 years ago
Kenia	84064f972e	ui: Return empty string protocol for upstream/downstream metrics request (#9989)	4 years ago
freddygv	98ba582797	Fixup mesh gateway docs	4 years ago
Tara Tufano	9deb52e868	add http2 ping health checks (#8431) ... * add http2 ping checks * fix test issue * add h2ping check to config resources * add new test and docs for h2ping * fix grammatical inconsistency in H2PING documentation * resolve rebase conflicts, add test for h2ping tls verification failure * api documentation for h2ping * update test config data with H2PING * add H2PING to protocol buffers and update changelog * fix typo in changelog entry	4 years ago
Iryna Shustava	5755c97bc7	cli: Add new `consul connect redirect-traffic` command for applying traffic redirection rules when Transparent Proxy is enabled. (#9910) ... * Add new consul connect redirect-traffic command for applying traffic redirection rules when Transparent Proxy is enabled. * Add new iptables package for applying traffic redirection rules with iptables.	4 years ago
Freddy	a02245b75a	Merge pull request #9976 from hashicorp/centralized-upstream-fixups	4 years ago
freddygv	d6db67ef86	Fixup test	4 years ago
Freddy	e385e5992f	Merge pull request #9042 from lawliet89/tg-rewrite	4 years ago
freddygv	c6d64a8078	Stable sort cidr ranges to match on	4 years ago
freddygv	b21224a4c8	PR comments	4 years ago
Daniel Nephin	5d21d4d77f	Merge pull request #9925 from hashicorp/dnephin/update-memberlist ... Update memberlist to v0.2.3	4 years ago
Daniel Nephin	27bbee2abd	Merge pull request #9988 from hashicorp/dnephin/lib-retry-fix-max-wait ... lib/retry: allow jitter to exceed max wait	4 years ago
Daniel Nephin	34f1facebb	Merge pull request #9950 from hashicorp/dnephin/state-use-txn-everywhere ... state: use Txn interface everywhere	4 years ago
Daniel Nephin	c40e1a2ac6	Merge pull request #9880 from hashicorp/dnephin/catalog-events-test-pattern ... state: use runCase pattern for large test	4 years ago
Paul Banks	1406671290	cache: Fix bug where connection errors can cause early cache expiry (#9979) ... Fixes a cache bug where TTL is not updated while a value isn't changing or cache entry is returning fetch errors.	4 years ago
Paul Banks	ee04d452be	cache: fix bug where TTLs were ignored leading to leaked memory in client agents (#9978) ... * Fix bug in cache where TTLs are effectively ignored This mostly affects streaming since streaming will immediately return from Fetch calls when the state is Closed on eviction which causes the race condition every time. However this also affects all other cache types if the fetch call happens to return between the eviction and then next time around the Get loop by any client. There is a separate bug that allows cache items to be evicted even when there are active clients which is the trigger here. * Add changelog entry * Update .changelog/9978.txt	4 years ago
Paul Banks	8e00e327b0	Merge pull request #9977 from hashicorp/grpc-tuning ... streaming: Grpc tuning	4 years ago
Daniel Nephin	f9cf2ec9ab	lib/retry: allow jitter to exceed max wait. ... I changed this in https://github.com/hashicorp/consul/pull/8802#pullrequestreview-500779357 because exceeding the MaxWait seemed wrong, but as other have pointed out, that behaviour is probably correct. When multiple waiters hit the max value, we don't want them to converge, so restore the behaviour of allowing jitter to exceed max, and document it.	4 years ago
freddygv	ab752c1c86	Avoid sending zero-value upstream defaults from api	4 years ago
freddygv	a6388c7e2f	Revert "Avoid accumulating synthetic upstreams" ... This reverts commit 86672df4fa.	4 years ago
freddygv	02f6768cd2	Remove kube-dns resolution since clusterip will be a tagged addr	4 years ago
Zachary Shilton	8671762474	website: implement mktg 032 (#9953) ... * website: migrate to new nav-data format * website: clean up unused intro content * website: remove deprecated sidebar_title from frontmatter * website: add react-content to fix global style import issue	4 years ago
R.B. Boyer	5bcfe930c6	command: when generating envoy bootstrap configs to stdout do not mix informational logs into the json (#9980) ... Fixes #9921	4 years ago
hashicorp-ci	dedf2861be	auto-updated agent/uiserver/bindata_assetfs.go from commit a0d12ff16	4 years ago
Kenia	a0d12ff164	ui: Reformat MaxTokenTTL to sortBy as an integer (#9969) ... * Install Duration JS * Use Duration.js to sortBy reformatted MaxTokenTTL * Remove @icholy/duration package * Install parse-duration package * Use parse-duration in auth-method model	4 years ago
Brandon Romano	56b8616a17	Merge pull request #9975 from hashicorp/br.stackmenu ... Upgrades the Stackmenu to latest	4 years ago
freddygv	86672df4fa	Avoid accumulating synthetic upstreams ... Synthetic upstreams from service-defaults config are stored locally in the Upstreams list. Since these come from service-defaults they should be cleaned up locally when no longer present in the service config response.	4 years ago
freddygv	49a4a78fd5	Ensure mesh gateway mode override is set for upstreams for intentions	4 years ago
freddygv	5140c3e51f	Finish resolving upstream defaults in proxycfg	4 years ago
freddygv	986bcccbea	Pass down upstream defaults to client proxies ... This is needed in case the client proxy is in TransparentProxy mode. Typically they won't have explicit configuration for every upstream, so this ensures the settings can be applied to all of them when generating xDS config.	4 years ago
freddygv	77ead5cca9	Prevent wildcard destinations for proxies and upstreams	4 years ago
freddygv	24ee8a0488	Prevent requests without UpstreamIDs from being flagged as legacy. ... New clients in transparent proxy mode can send requests for service config resolution without any upstream args because they do not have explicitly defined upstreams. Old clients on the other hand will never send requests without the Upstreams args unless they don't have upstreams, in which case we do not send back upstream config.	4 years ago
freddygv	2b49cc39ed	Fixup doc phrasing	4 years ago
freddygv	458eb41be1	Prevent synthetic upstreams without addresses from failing duplicate ip/port validation	4 years ago
Paul Banks	5529cb7347	Tune streaming backoff on errors to retry a bit faster when TCP connections drop	4 years ago
Paul Banks	44718456b5	Set gRPC keepalives to mirror Yamux keepalive behaviour	4 years ago
Brandon Romano	17406b300d	Upgrades the Stackmenu to latest	4 years ago
R.B. Boyer	d4c401b350	missed build tag on this file (#9974)	4 years ago
R.B. Boyer	499fee73b3	connect: add toggle to globally disable wildcard outbound network access when transparent proxy is enabled (#9973) ... This adds a new config entry kind "cluster" with a single special name "cluster" where this can be controlled.	4 years ago
Daniel Nephin	f0ba6f858a	Merge pull request #9958 from hashicorp/dnephin/state-improve-indexer-tests ... state: support additional test cases in indexer tests	4 years ago
John Cowen	e4e85a8f83	ui: Move control of login modal to use JS rather than HTML (label/id) (#9883) ... * Add before and after skip links portals * Move EmptyState and ErrorState to use a @login action/function * Move page title setting to the Route component * Add Routes and Outlets everywhere, and use those to access login modal * Add some aria-labels to the modals * Docs * Remove the label/input now we no longer need it, fixup pageobject * Add basic modal docs * Switch out old toggle names for ids * Wrap nspace Route template in a Route component * type > class	4 years ago