15275 Commits (e664dbc35261d4ed6712893a5c164db8a9955fef)

 

All Branches   

Search

Author	SHA1	Message	Date
Dhia Ayachi	e664dbc352	Refactor table index acl phase 2 (#11133) ... * extract common methods from oss and ent * remove unreachable code * add missing normalize for binding rules * fix oss to use Query	3 years ago
CJ	978699943f	docs: Fix grammatical errors in glossary (#10751)	3 years ago
Paul Banks	1ecec84fd7	Merge pull request #10903 from hashicorp/feature/ingress-sds ... Add Support to for providing TLS certificates for Ingress listeners from an SDS source	3 years ago
Dhia Ayachi	5904e4ac79	Refactor table index (#11131) ... * convert tableIndex to use the new pattern * make `indexFromString` available for oss as well * refactor `indexUpdateMaxTxn`	3 years ago
Paul Banks	7b4cbe3143	Final readability tweaks from review	3 years ago
Paul Banks	e0efb420f7	Add Envoy integration test for split-route SDS case	3 years ago
Paul Banks	ab27214a10	Minor improvements to SDS server from review	3 years ago
Paul Banks	70bc89b7f4	Fix subtle loop bug and add test	3 years ago
Paul Banks	07f81991df	Refactor SDS validation to make it more contained and readable	3 years ago
Paul Banks	5cfd030d03	Refactor Ingress-specific lister code to separate file	3 years ago
Paul Banks	136928a90f	Minor PR typo and cleanup fixes	3 years ago
Paul Banks	20d0bf81f7	Revert abandonned changes to proxycfg for Ent test consistency	3 years ago
Paul Banks	a9119e36a5	Fix merge conflict in xds tests	3 years ago
Paul Banks	2b755d7b3f	Allow skipping v2 compat tests for SDS as it's only the SDS server integration that doesn't support v2	3 years ago
Paul Banks	e01c3585a5	Fix integration tests in CI - serve SDS certs from the Docker image not a mounted path	3 years ago
Paul Banks	843079f33a	Fix integration test for older Envoy versions	3 years ago
Paul Banks	2281d883b9	Fix some more Enterprise Normalization issues affecting tests	3 years ago
Paul Banks	b5345ea878	Add changelog; Add API package support for new fields.	3 years ago
Paul Banks	9fa60c7472	Remove unused argument to fix lint error	3 years ago
Paul Banks	659321d008	Handle namespaces in route names correctly; add tests for enterprise	3 years ago
Paul Banks	cd8ad007fe	Add basic integration test for Envoy ingress with SDS	3 years ago
Paul Banks	2a3d3d3c23	Update xDS routes to support ingress services with different TLS config	3 years ago
Paul Banks	16b3b1c737	Update xDS Listeners with SDS support	3 years ago
Paul Banks	ccbda0c285	Update proxycfg to hold more ingress config state	3 years ago
Paul Banks	4e39f03d5b	Add ingress-gateway config for SDS	3 years ago
Mark Anderson	d88d9e71c2	partitions/authmethod-index work from enterprise (#11056) ... * partitions/authmethod-index work from enterprise Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
Chris S. Kim	f972048ebc	connect: Allow upstream listener escape hatch for prepared queries (#11109)	3 years ago
R.B. Boyer	706fc8bcd0	grpc: strip local ACL tokens from RPCs during forwarding if crossing datacenters (#11099) ... Fixes #11086	3 years ago
John Cowen	6bc8af364f	ui: Add initial i18n docs page (#10888)	3 years ago
John Cowen	61e69a9fe5	ui: Add partition parameter when clearing child-selector forms in ACLs (#11106)	3 years ago
John Cowen	ececa7da45	ui: Add an isDestroyed check for the MenuPanel component (#11104) ... This solves an occasionally flakey tests I see every so often	3 years ago
John Cowen	e088d8674c	ui: Remove legacy ACLs (#11096)	3 years ago
John Cowen	6e396e4456	ui: Gracefully recover from non-existent DC errors (#11077) ... * ui: Gracefully recover from non-existent DC errors This PR fixes what happens in the UI if you try to navigate to a non-existing DC. When we received a 500 error from an API response due to a non-existent DC, previously we would show a 404 error, which is what we were trying to convey. But in the spirit of the UI being a 'thin client', its probably best to just show the 500 error from the API response, which may help folks to debug any issues better. * Automatically set the CONSUL_DATACENTER_LOCAL env var for testing	3 years ago
John Cowen	cf638ee551	ui: Always show main navigation Key/Value link (#10916) ... * ui: Ignore response from API for KV permissions Currently there is no way for us to use our HTTP authorization API endpoint to tell us whether a user has access to any KVs (including the case where a user may not have access to the root KV store, but do have access to a sub item) This is a little weird still as in the above case the user would click on this link and still get a 403 for the root, and then have to manually type in the URL for the KV they do have access to. Despite this we think this change makes sense as at least something about KV is visible in the main navigation. Once we have the ability to know if any KVs are accessible, we can add this guard back in. We'd initially just removed the logic around the button, but then noticed there may be further related KV issues due to the nested nature of KVs so we finally decided on simply ignoring the responses from the HTTP API, essentially reverting the KV area back to being a thin client. This means when things are revisited in the backend we can undo this easily change in one place. * Move acceptance tests to use ACLs perms instead of KV ones	3 years ago
Connor	1e3ba26223	Merge pull request #11090 from hashicorp/clly/kv-usage-metrics ... Add KVUsage to consul state usage metrics	3 years ago
Ashwin Venkatesh	fd7f670f12	Update docs (#11111)	3 years ago
Connor Kelly	ba706501e1	Strip out go 1.17 bits	3 years ago
R.B. Boyer	5253c78be7	Merge pull request #11108 from hashicorp/sync-1.11.0-alpha-tag ... Sync 1.11.0 alpha tag	3 years ago
hc-github-team-consul-core	9cbd27dbbd	Putting source back into Dev Mode	3 years ago
R.B. Boyer	a1e8564b92	Version 1.11.0-alpha ... -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEs2y6kaLAcwxDX8KAsLRBCXaFtnYFAmFDyoMACgkQsLRBCXaF tna8nQ//bVAd6nKI0Xgotmf2Loce0yobD6PH8IyzllO24jPSGwHFXQsx0d8a5QkV H1wx6KrXysXKCojrICX3/88T4KNypYpIXIBZoTBQ0rEXaTMoqACcT4y58/UcjFg2 bN8T/wjvD8BV2e0xcZb2C6SgXx8m64UtZKePN1fobKBEpSCszJz8EeWPtPzXdWps f9axbgV81qy9DTyO7MvbOvco/QaEgzjK+o/57bcLBXZmfWpI1DIARkgIY8XB7pC3 Gq59OegjqjiCliJcnLfIpvemLZg/7BhnLOO5ccvctdgoxFUnzsWk+mKTL0tPyy+d ZNa1kVgIQKWUoSRje7rHUSu+270PifLegp3zrHLrwKpa2UQGldck13hSMTyBqz1n 5TywpdMJoXZSj5tml2lvaskUh91zvO9v6sX4zJJkES/Kt2KXdHBAGkmzPuiXl5YW 1eScGz5990CwULinV+Cb32HYEojSSD4FWs9KC5NpJmI2kIOiybgiUKIG5uKdz0wh 971BDjCNTC+x+pivtyEy0HAWOUlqROYRpCc40e7Xx0LmJvQ0nqCK2rCWC+0Bi1jK QCeesSK7vm6Hnw3/OnlIu7fu71+KZs1qGJBtBcqCoxTsgONd5+woWL5ziUZd7Bh2 JloGlOrUFk2Ci2XeD0EO5lboLwsaMVDHXXx1beee5u7b2nORKDA= =tXEa -----END PGP SIGNATURE----- Merge tag 'v1.11.0-alpha' into main Version 1.11.0-alpha	3 years ago
Matt Keeler	c04d5c4238	Add changelog entry for audit logging header extraction improvement	3 years ago
Matt Keeler	a6a359cc80	Add a mock Agent delegate to ease/improve some types of testing	3 years ago
hc-github-team-consul-core	47b99d0b78	auto-updated agent/uiserver/bindata_assetfs.go from commit 9c0233cf5	3 years ago
John Cowen	9c0233cf59	Revert "ui: Add partition parameter when clearing child-selector forms in ACLs" ... This reverts commit a670bde57d.	3 years ago
John Cowen	a670bde57d	ui: Add partition parameter when clearing child-selector forms in ACLs	3 years ago
hc-github-team-consul-core	7efb015ca9	auto-updated agent/uiserver/bindata_assetfs.go from commit cfbd1bb84	3 years ago
John Cowen	cfbd1bb84e	ui: [BUGFIX] Re-enable namespace menus whilst editing intentions (#11095) ... This PR supersedes #10706 and fixes #10686 whilst making sure that saving intentions continues to work. The original fix in #10706 ignored the change action configured for the change event on the menus, meaning that the selected source/destination namespace could not be set by the user when editing/creating intentions. This, coupled with the fact that using the later intention exact endpoint for API requests endpoint means that you could not use wildcard namespaces for saving intentions. All in all this meant that intentions could no longer be saved using the UI (whilst using ENT) This PR reverts #10706 to fix the intention saving issue, and adds a fix for the original visual issue of nspaces doubling up in the menu once clicked. This meant repeating the existing functionality for nspaces aswell as services. It did seem strange to me that the original issue was only apparent for the nspace menus and not the service menus which should all function exactly the same way. There is potentially more to come here partly related to what the exact functionality should be, but I'm working with other folks to figure out what the best way forwards is longer term. In the meantime this brings us back to the original functionality with the visual issue fixed. Squashed commits: * Revert "ui: Fix dropdown option duplications (#10706)" This reverts commit eb5512fb74. * ui: Ensure additional nspaces are added to the unique list of nspaces * Add some acceptance tests	3 years ago
Daniel Nephin	aee8a9511d	Merge pull request #10985 from hashicorp/dnephin/acl-legacy-remove-replication ... acl: remove legacy ACL replication	3 years ago
Connor	1ddee0680c	Apply suggestions from code review ... Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com>	3 years ago
R.B. Boyer	b2d17ac448	xds: fix representation of incremental xDS subscriptions (#10987) ... Fixes #10563 The `resourceVersion` map was doing two jobs prior to this PR. The first job was to track what version of every resource we know envoy currently has. The second was to track subscriptions to those resources (by way of the empty string for a version). This mostly works out fine, but occasionally leads to consul removing a resource and accidentally (effectively) unsubscribing at the same time. The fix separates these two jobs. When all of the resources for a subscription are removed we continue to track the subscription until envoy explicitly unsubscribes	3 years ago