10783 Commits (ed6102326d1c8c8477efb8fb7490b0bf4572f0da)

 

All Branches   

Search

Author	SHA1	Message	Date
R.B. Boyer	ed6102326d	update changelog	5 years ago
R.B. Boyer	0f44bcd3d8	agent: default the primary_datacenter to the datacenter if not configured (#7111) ... Something similar already happens inside of the server (agent/consul/server.go) but by doing it in the general config parsing for the agent we can have agent-level code rely on the PrimaryDatacenter field, too.	5 years ago
Freddy	db3f0711db	Update CHANGELOG.md	5 years ago
Paul Lesiak	527daba03c	bug: Consul lock does not receive signals if lock not acquired (#5909)	5 years ago
Chris Piraino	336f62fa99	Fix up formatting in sdk package (#7109)	5 years ago
Alexey Miasoedov	b71630b752	fix Unix socket path in docs	5 years ago
David Yu	c2fe8c5acf	Merge pull request #7102 from hashicorp/david-yu-patch-2 ... Adding links to Kubernetes install to README.md	5 years ago
David Yu	5b4008996b	Merge pull request #7103 from hashicorp/david-yu-patch-3 ... Adding Service Mesh reference to README.md	5 years ago
David Yu	ee329db79a	Merge pull request #7104 from hashicorp/david-yu-patch-4 ... Small change to TLS connection wording	5 years ago
Song Yihan	04305be555	tests: fix zombie consul process while invoking TestServer.Stop() method in sdk/testutil in Windows (#6032) ... * Fix zombie consul process in Windows Windows doesn't support Interrupt signal, thus while stop it on Windows platform it would fail and left zombie consul process	5 years ago
Kit Ewbank	7b17f789d3	docs: add Helm chart 'dns.clusterIP' value. (#5845)	5 years ago
Hans Hasselberg	7d6ea82527	raft: increase raft notify buffer. (#6863) ... * Increase raft notify buffer. Fixes https://github.com/hashicorp/consul/issues/6852. Increasing the buffer helps recovering from leader flapping. It lowers the chances of the flapping leader to get into a deadlock situation like described in #6852.	5 years ago
Hans Hasselberg	11a571de95	agent: setup grpc server with auto_encrypt certs and add -https-port (#7086) ... * setup grpc server with TLS config used across consul. * add -https-port flag	5 years ago
Hans Hasselberg	82c556d1be	connect: use correct subject key id for leaf certificates. (#7091)	5 years ago
Iryna Shustava	a33154ac9b	Add docs about rolling out TLS on k8s (#7096) ... * Add docs about gradually rolling out TLS on k8s Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>	5 years ago
David Yu	26a0ea1c39	Small change to wording ... Removing automatic connection wording for applications for the time being. From @blake > They can automatically establish TLS connections without being aware that TLS is happening. They are aware that they’re routed through the Connect proxy, the app has to configure itself to use the local upstream port.	5 years ago
David Yu	fd871dc4ca	Small change	5 years ago
David Yu	6a8f07e49c	Adding change to mention a few guides ... Previously mentioned just one one guide in the header	5 years ago
David Yu	b30bbc63e0	Adding Service Mesh reference ... Adding Service Mesh reference for Consul	5 years ago
David Yu	94e8a3b306	Adding links to Kubernetes install ... Adding links to Kubernetes deployment guide and minikube install for visibility	5 years ago
R.B. Boyer	c91d0fa2c9	make TestCatalogNodes_Blocking less flaky (#7074) ... - Explicitly wait to start the test until the initial AE sync of the node. - Run the blocking query in the main goroutine to cut down on possible poor goroutine scheduling issues being to blame for delays. - If the blocking query is woken up with no index change, rerun the query. This may happen if the CI server is loaded and time dilation is happening.	5 years ago
R.B. Boyer	e2eb9f0585	test: ensure we don't ask vault to sign a leaf that outlives its CA when acting as a secondary (#7100)	5 years ago
R.B. Boyer	4af5c2d6dd	fix the submodule go.mod and go.sum files (#7098)	5 years ago
R.B. Boyer	98e0cbdebe	test: run both the TestVaultProvider and TestVaultCAProvider tests in CI (#7097)	5 years ago
Hans Hasselberg	f0fc9aea7f	tests: fix autopilot test (#7092)	5 years ago
Paul Banks	1807af552e	Fix TestAPI_DiscoveryChain_Get flake (#7082)	5 years ago
Aestek	8fc736038a	agent: remove service sidecars in Agent.cleanupRegistration (#7022) ... Sidecar proxies were left behind when cleaning up after an unsuccessful registration. There are now also removed when the service is cleanup up.	5 years ago
Hans Hasselberg	9c1361c02b	raft: update raft to v1.1.2 (#7079) ... * update raft * use hclogger for raft.	5 years ago
Luke Kysow	c9dbcc31ec	Merge pull request #6970 from hashicorp/k8s-docs-refactor ... Kubernetes docs reorganization	5 years ago
Luke Kysow	e0aff262cf	Reorg kube docs	5 years ago
Hans Hasselberg	804eb17094	connect: check if intermediate cert needs to be renewed. (#6835) ... Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates. This PR adds a check that renews the cert if it is half way through its validity period. In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.	5 years ago
Hans Hasselberg	87f32c8ba6	auto_encrypt: set dns and ip san for k8s and provide configuration (#6944) ... * Add CreateCSRWithSAN * Use CreateCSRWithSAN in auto_encrypt and cache * Copy DNSNames and IPAddresses to cert * Verify auto_encrypt.sign returns cert with SAN * provide configuration options for auto_encrypt dnssan and ipsan * rename CreateCSRWithSAN to CreateCSR	5 years ago
Kit Patella	44280103ee	.gitignore: cut IDE-specific entries, cleanup (#7083) ... * .gitignore: add vscode and MacOS-specific files. add a little org * .gitignore: remove IDE-specific ignores, add docs	5 years ago
Matt Keeler	3027923229	Update CHANGELOG.md	5 years ago
Aestek	ba8fd8296f	Add support for dual stack IPv4/IPv6 network (#6640) ... * Use consts for well known tagged adress keys * Add ipv4 and ipv6 tagged addresses for node lan and wan * Add ipv4 and ipv6 tagged addresses for service lan and wan * Use IPv4 and IPv6 address in DNS	5 years ago
Aestek	5dc8875bd3	agent: do not deregister service checks twice (#6168) ... Deregistering a service from the catalog automatically deregisters its checks, however the agent still performs a deregister call for each service checks even after the service has been deregistered. With ACLs enabled this results in logs like: "message:consul: "Catalog.Deregister" RPC failed to server server_ip:8300: rpc error making call: rpc error making call: Unknown check 'check_id'" This change removes associated checks from the agent state when deregistering a service, which results in less calls to the servers and supresses the error logs.	5 years ago
Matej Urbas	ce023359fe	agent: configurable MaxQueryTime and DefaultQueryTime. (#3777)	5 years ago
neillyt	a2ab9b4aee	Fix Namespace Typo (#7030)	5 years ago
Matt Keeler	8673bc2236	Update CHANGELOG.md	5 years ago
John Cowen	bc86002be9	docs: Add note about using valid DNS labels for service names (#7035) ... Add note about using valid DNS labels for service names	5 years ago
Kit Patella	8be67b777a	Small improvements to Connect docs (#6910) ... * docs/connect add link to intentions and minor phrasing change * docs/connect pluralize 'applications' * Update website/source/docs/connect/connect-internals.html.md Co-Authored-By: Paul Banks <banks@banksco.de>	5 years ago
Freddy	015c6e81e9	Update CHANGELOG.md	5 years ago
Freddy	e635b24215	Update force-leave ACL requirement to operator:write (#7033)	5 years ago
Matt Keeler	663cf1e9a8	AuthMethod updates to support alternate namespace logins (#7029)	5 years ago
Paul Banks	86692f958f	Add contributing dir with Config file checklist (#7017) ... * Add contributing dir with Config file checklist and modify contribution guides * Apply suggestions from code review Co-Authored-By: Chris Piraino <cpiraino@hashicorp.com> Co-authored-by: Chris Piraino <piraino.chris@gmail.com>	5 years ago
Matt Keeler	8bd34e126f	Intentions ACL enforcement updates (#7028) ... * Renamed structs.IntentionWildcard to structs.WildcardSpecifier * Refactor ACL Config Get rid of remnants of enterprise only renaming. Add a WildcardName field for specifying what string should be used to indicate a wildcard. * Add wildcard support in the ACL package For read operations they can call anyAllowed to determine if any read access to the given resource would be granted. For write operations they can call allAllowed to ensure that write access is granted to everything. * Make v1/agent/connect/authorize namespace aware * Update intention ACL enforcement This also changes how intention:read is granted. Before the Intention.List RPC would allow viewing an intention if the token had intention:read on the destination. However Intention.Match allowed viewing if access was allowed for either the source or dest side. Now Intention.List and Intention.Get fall in line with Intention.Matches previous behavior. Due to this being done a few different places ACL enforcement for a singular intention is now done with the CanRead and CanWrite methods on the intention itself. * Refactor Intention.Apply to make things easier to follow.	5 years ago
Pierre Souchay	3bf2e640c7	rpc: log method when a server/server RPC call fails (#4548) ... Sometimes, we have lots of errors in cross calls between DCs (several hundreds / sec) Enrich the log in order to help diagnose the root cause of issue.	5 years ago
Matt Keeler	27f49eede9	Move where the service-resolver watch is done so that it happen… (#7025) ... Before we were issuing 1 watch for every service in the services listing which would have caused the agent to process many more identical events simultaneously.	5 years ago
Hans Hasselberg	ab2f2484ad	connect: use inline_string instead for envoy ca(#7024)	5 years ago
R.B. Boyer	10f04a8c4a	connect: derive connect certificate serial numbers from a memdb index instead of the provider table max index (#7011)	5 years ago