20638 Commits (eb06db0c69fccb841e7e93de3c2748b2069b3e82)

 

All Branches   

Search

Author	SHA1	Message	Date
Iryna Shustava	3c70e14713	sidecar-proxy controller: L4 controller with explicit upstreams (NET-3988) (#18352) ... * This controller generates and saves ProxyStateTemplate for sidecar proxies. * It currently supports single-port L4 ports only. * It keeps a cache of all destinations to make it easier to compute and retrieve destinations. * It will update the status of the pbmesh.Upstreams resource if anything is invalid. * This commit also changes service endpoints to include workload identity. This made the implementation a bit easier as we don't need to look up as many workloads and instead rely on endpoints data.	1 year ago
trujillo-adam	a17f4a0b89	Reformat proxy docs refresh (#18623) ... * first commit; reformat PD conf entry * updated proxies overview page * added Deploy SM proxy usage and removed reg index * moved sidecar proxy usage to main proxy folder * recast sidecar reg page as Deploy sidecar services * fix typos * recast SM reg as conf reference- set the sidebar * add redirects * fix links * add PD conf entry usage to appropro pages * edits to proxy conf ref * fix links on index page * example command to write PD conf entry * updated links to old SM proxy reg page * updated links to sidecar service reg page * tryna fix front matter issues * Apply suggestions from code review Co-authored-by: Ronald <roncodingenthusiast@users.noreply.github.com> * added paragraph about SM proxies to overivew * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> --------- Co-authored-by: Ronald <roncodingenthusiast@users.noreply.github.com> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	1 year ago
Nick Irvine	373c7dc144	switch all client nodes in dc2 to dataplane [NET-4299] (#18608)	1 year ago
Iryna Shustava	4eb2197e82	dataplane: Allow getting bootstrap parameters when using V2 APIs (#18504) ... This PR enables the GetEnvoyBootstrapParams endpoint to construct envoy bootstrap parameters from v2 catalog and mesh resources. * Make bootstrap request and response parameters less specific to services so that we can re-use them for workloads or service instances. * Remove ServiceKind from bootstrap params response. This value was unused previously and is not needed for V2. * Make access logs generation generic so that we can generate them using v1 or v2 resources.	1 year ago
Nick Irvine	80d72e71c1	restore common-topo peering integration tests, but nightly [NET-5476] (#18673)	1 year ago
Derek Menteer	56917eb4c9	Add support for querying tokens by service name. (#18667) ... Add support for querying tokens by service name The consul-k8s endpoints controller has a workflow where it fetches all tokens. This is not performant for large clusters, where there may be a sizable number of tokens. This commit attempts to alleviate that problem and introduces a new way to query by the token's service name.	1 year ago
Dhia Ayachi	ec507fe4a8	update guide to reflect tenancy and scope (#18687) ... * update guide to reflect tenancy and scope * Apply suggestions from code review Co-authored-by: Semir Patel <semir.patel@hashicorp.com> * update ACLHooks signature * Update docs/resources/guide.md Co-authored-by: Semir Patel <semir.patel@hashicorp.com> --------- Co-authored-by: Semir Patel <semir.patel@hashicorp.com>	1 year ago
Ashesh Vidyut	60b0485497	Removed nodename and status from consul snapshot save -append-filename command and using leader version in version (#18680) ... * init * fix tests * fix tests lint * fix api call inside dc * updated doc * address comments	1 year ago
Ashesh Vidyut	ac27585dd4	Fix windows Ent runner (#18683) ... * fix windows image for enterprise * added quotesT	1 year ago
Phil Porada	7ea986783d	Add TCP+TLS Healthchecks (#18381) ... * Begin adding TCPUseTLS * More TCP with TLS plumbing * Making forward progress * Keep on adding TCP+TLS support for healthchecks * Removed too many lines * Unit tests for TCP+TLS * Update tlsutil/config.go Co-authored-by: Samantha <hello@entropy.cat> * Working on the tcp+tls unit test * Updated the runtime integration tests * Progress * Revert this file back to HEAD * Remove debugging lines * Implement TLS enabled TCP socket server and make a successful TCP+TLS healthcheck on it * Update docs * Update agent/agent_test.go Co-authored-by: Samantha <hello@entropy.cat> * Update website/content/docs/ecs/configuration-reference.mdx Co-authored-by: Samantha <hello@entropy.cat> * Update website/content/docs/ecs/configuration-reference.mdx Co-authored-by: Samantha <hello@entropy.cat> * Update agent/checks/check.go Co-authored-by: Samantha <hello@entropy.cat> * Address comments * Remove extraneous bracket * Update agent/agent_test.go Co-authored-by: Samantha <hello@entropy.cat> * Update agent/agent_test.go Co-authored-by: Samantha <hello@entropy.cat> * Update website/content/docs/ecs/configuration-reference.mdx Co-authored-by: Samantha <hello@entropy.cat> * Update the mockTLSServer * Remove trailing newline * Address comments * Fix merge problem * Add changelog entry --------- Co-authored-by: Samantha <hello@entropy.cat>	1 year ago
Ashesh Vidyut	0c184042c5	change log for audit log (#18668) ... * change log for audit log * fix file name * breaking change	1 year ago
wangxinyi7	df9d12a56a	Net 2714/xw cli read command (#18462) ... enable `consul resource read` command in cli	1 year ago
Dan Stough	ac867d67e8	test: fix snapshot save w/ append test for ENT (#18656)	1 year ago
Valeriia Ruban	a2f3d1362a	feat: copy edits for built-in policy alert (#18655)	1 year ago
Dan Stough	22df51f18f	fix: add telemetry bind socket to proxyConfiguration proto (#18652)	1 year ago
Valeriia Ruban	99845ebb9d	fix: remove Intention test with latency to make consul-enterprise rep… (#18654) ... fix: remove Intention test with latency to make consul-enterprise repo tests work	1 year ago
Derek Menteer	9915b47898	Add known issue notice for #18636. (#18650)	1 year ago
skpratt	cd3bfc5508	remove stray FIPS file (#18651)	1 year ago
Valeriia Ruban	82c2281cef	feat: Change global-read-only policy to non editable (#18602)	1 year ago
Derek Menteer	a698142325	Add extra logging for mesh health endpoints. (#18647)	1 year ago
Derek Menteer	b56fbc7a62	[NET-4958] Fix issue where envoy endpoints would fail to populate after snapshot restore (#18636) ... Fix issue where agentless endpoints would fail to populate after snapshot restore. Fixes an issue that was introduced in #17775. This issue happens because a long-lived pointer to the state store is held, which is unsafe to do. Snapshot restorations will swap out this state store, meaning that the proxycfg watches would break for agentless.	1 year ago
Semir Patel	b96cff7436	resource: Require scope for resource registration (#18635)	1 year ago
Ashesh Vidyut	13eefbb840	Net 3181 consul gh issue 15709 allow log file naming like nomad - fix bug (#18631) ... * fixes file name for consul * added log file * added tests for rename method * append instead of trunc * fix file truncate issue * added changelog * fix for build destros ci * removed changelog * solaris	1 year ago
Ashesh Vidyut	78e3cbe156	NET 1594 - Snapshot Agent Filename Should Include Consul Version / Datacenter (#18625) ... * init * tests added and few fixes * revert arg message * changelog added * removed var declaration * fix CI * fix test * added node name and status * updated save.mdx * added example * fix tense * fix description	1 year ago
Michael Zalimeni	699aa47416	fix: make UNSPECIFIED protocol pass validation (#18634) ... We explicitly enumerate the allowed protocols in validation, so this change is necessary to use the new enum value. Also add tests for enum validators to ensure they stay aligned to protos unless we explicitly want them to diverge.	1 year ago
Jared Kirschner	892ba52c56	docs: admin partition and DNS clarification (#18613)	1 year ago
John Maguire	9876923e23	Add the plumbing for APIGW JWT work (#18609) ... * Add the plumbing for APIGW JWT work * Remove unneeded import * Add deep equal function for HTTPMatch * Added plumbing for status conditions * Remove unneeded comment * Fix comments * Add calls in xds listener for apigateway to setup listener jwt auth	1 year ago
Ashesh Vidyut	d45c3c2755	NET-3181 - Allow log file naming like Nomad (#18617) ... * fixes file name for consul * added log file * added tests for rename method	1 year ago
Curt Bushko	f2ce472ae1	PLAT-1192 - Run CI on smaller instances (#18624) ... Use smaller runners	1 year ago
Semir Patel	7b9e243297	resource: Allow nil tenancy (#18618)	1 year ago
Dhia Ayachi	f8d77f027a	delete all v2 resources type when deleting a namespace (CE) (#18621) ... * add namespace scope to ServiceV1Alpha1Type * add CE portion of namespace deletion	1 year ago
John Murret	255aa158db	update comments and docs about running envoy integration tests with the ENVOY_VERSION set. (#18614) ... update ENVOY_VERSION and documentation of it used in the bats envoy tests. Co-authored-by: github-team-consul-core <github-team-consul-core@hashicorp.com>	1 year ago
Ashvitha	0f48b7af5e	[HCP Telemetry] Move first TelemetryConfig Fetch into the TelemetryConfigProvider (#18318) ... * Add Enabler interface to turn sink on/off * Use h for hcpProviderImpl vars, fix PR feeback and fix errors * Keep nil check in exporter and fix tests * Clarify comment and fix function name * Use disable instead of enable * Fix errors nit in otlp_transform * Add test for refreshInterval of updateConfig * Add disabled field in MetricsConfig struct * Fix PR feedback: improve comment and remove double colons * Fix deps test which requires a maybe * Update hcp-sdk-go to v0.61.0 * use disabled flag in telemetry_config.go * Handle 4XX errors in telemetry_provider * Fix deps test * Check 4XX instead * Run make go-mod-tidy	1 year ago
Hardik Shingala	58e5658810	Added OpenTelemetry Access Logging Envoy extension (#18336)	1 year ago
Michael Zalimeni	f8812eddf1	Distinguish v2 catalog Protocol unset from default (#18612) ... Even though we intend to default to TCP when this field is not explicitly provided, uncluding an `UNSPECIFIED` default enum value allows us to create inheritance chains, e.g. service to workload.	1 year ago
Ashwin Venkatesh	797e42dc24	Watch the ProxyTracker from xDS controller (#18611)	1 year ago
John Murret	0e606504bc	NET-4944 - wire up controllers with proxy tracker (#18603) ... Co-authored-by: github-team-consul-core <github-team-consul-core@hashicorp.com>	1 year ago
Joshua Timmons	48c8a834f5	Reduce the frequency of metric exports to minutely (#18584)	1 year ago
Jared Kirschner	180c1e22c1	test: run automated tests against Vault 1.11 - 1.14 (#18590) ... Begin to test against Vault 1.14. Drop tests against Vault 1.10.	1 year ago
Curt Bushko	7bc30e989c	Set concurrency for workflows (#18567) ... * Set concurrency for workflows	1 year ago
Tu Nguyen	0e17e981a2	Fix typo in permissive mTLS docs (#18551) ... Update onboarding-tproxy-mode.mdx	1 year ago
Tu Nguyen	2f58e05be6	Fix broken link on sameness group page (#18511) ... fix broken link	1 year ago
Chris S. Kim	ecdcde4309	CE commit (#18583)	1 year ago
cskh	c8ef063523	CI: send slack notification on failed nightly job (#18578)	1 year ago
John Murret	051f250edb	NET-5338 - NET-5338 - Run a v2 mode xds server (#18579) ... * NET-5338 - NET-5338 - Run a v2 mode xds server * fix linting	1 year ago
Semir Patel	2225bf0550	resource: Make resource writestatus tenancy aware (#18577)	1 year ago
John Maguire	59ab57f350	NET-5147: Added placeholder structs for JWT functionality (#18575) ... * Added placeholder structs for JWT functionality * Added watches for CE vs ENT * Add license header * Undo plumbing work * Add context arg	1 year ago
Semir Patel	067a0112e2	resource: Make resource listbyowner tenancy aware (#18566)	1 year ago
Chris S. Kim	82993fcc4f	CE port of enterprise extension (#18572) ... CE commit	1 year ago
Ashesh Vidyut	2cc2c6b88d	Fix Windows FIPS Build (#18357) ... * Fix Windows FIPS Build * create new file for windows arm * removed build tag * fix buidl tags * fix multiple go build	1 year ago