20633 Commits (f19c7ef6e3986a2a8b6df98a1c451f07d50c346d)

 

All Branches   

Search

Author	SHA1	Message	Date
jm96441n	f19c7ef6e3	Add new golden file tests	1 year ago
jm96441n	441df6a7a5	Update comment	1 year ago
John Maguire	49d2aa998e	Merge branch 'main' into jwt-multiple-virtual-hosts-main	1 year ago
Semir Patel	830c4ea81c	v2tenancy: cluster scoped reads (#19082)	1 year ago
jm96441n	b34e579b3d	Update comment to be correct	1 year ago
Dhia Ayachi	226590541c	Activate verifier when running WAL with experimental features (#19102) ... * activate verifier when running WAL with experimental features * only change verifier parameters if it's disabled (default value)	1 year ago
jm96441n	b43872f9e0	fix bug with always appending route to jwt config	1 year ago
John Maguire	b8095be821	Merge branch 'main' into jwt-multiple-virtual-hosts-main	1 year ago
Chris S. Kim	92ce814693	Remove old build tags (#19128)	1 year ago
Chris Thain	dcdf2fc6ba	Update Vault CA provider namespace configuration (#19095)	1 year ago
Chris S. Kim	d6200faefb	Minor update to ratelimit wording (#19106)	1 year ago
jm96441n	70c43adcfe	Fix struct definition	1 year ago
jm96441n	5bbb3e90d7	Fix CE code for jwt multiple virtual hosts bug	1 year ago
Ashesh Vidyut	b9314de14f	Stop windows integration tests (#19118) ... stop windows integration tests	1 year ago
Ashesh Vidyut	a30ccdf5dc	NET-4135 - Fix NodeMeta filtering Catalog List Services API (#18322) ... * logs for debugging * Init * white spaces fix * added change log * Fix tests * fix typo * using queryoptionfilter to populate args.filter * tests * fix test * fix tests * fix tests * fix tests * fix tests * fix variable name * fix tests * fix tests * fix tests * Update .changelog/18322.txt Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com> * fix change log * address nits * removed unused line * doing join only when filter has nodemeta * fix tests * fix tests * Update agent/consul/catalog_endpoint.go Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * fix tests * removed unwanted code --------- Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>	1 year ago
Matt Keeler	4713317457	protohcl: allow attribute syntax for all map fields (#19108)	1 year ago
trujillo-adam	a9747dc38c	Docs/ce 470 locality aware (#19071) ... * updated nav; renamed L7 traffic folder * Added locality-aware routing to traffic mgmt overview * Added route to local upstreams topic * Updated agent configuration reference * Added locality param to services conf ref * Added locality param to conf entries * mentioned traffic management in proxies overview * added locality-aware to failover overview * added docs for service rate limiting * updated service defaults conf entry * Apply suggestions from code review Co-authored-by: Chris S. Kim <ckim@hashicorp.com> * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Chris S. Kim <ckim@hashicorp.com> * updated links and added redirects --------- Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	1 year ago
Derek Menteer	af3439b53d	Ensure that upstream configuration is properly normalized. (#19076) ... This PR fixes an issue where upstreams did not correctly inherit the proper namespace / partition from the parent service when attempting to fetch the upstream protocol due to inconsistent normalization. Some of the merge-service-configuration logic would normalize to default, while some of the proxycfg logic would normalize to match the parent service. Due to this mismatch in logic, an incorrect service-defaults configuration entry would be fetched and have its protocol applied to the upstream.	1 year ago
Eric Haberkorn	ad3aab1ef7	Add traffic permissions integration tests. (#19008) ... Add traffic permissions integration tests.	1 year ago
Dhia Ayachi	ed882e2522	Make raft-wal default when `resource-apis` is active (#19090) ... Make raft-wal default when v2 catalog experiment is on	1 year ago
David Yu	677e16a830	Replace `hub` with `gh` for member roles on JIRA sync checks (#19089) ... Update jira-pr.yaml Change from `hub` to `gh` for checking member roles	1 year ago
R.B. Boyer	754ab9abf2	mesh: ensure we add the virtual port number for L7 implicit upstreams (#19085)	1 year ago
Thomas Eckert	342306c312	Allow connections through Terminating Gateways from peered clusters NET-3463 (#18959) ... * Add InboundPeerTrustBundle maps to Terminating Gateway * Add notify and cancelation of watch for inbound peer trust bundles * Pass peer trust bundles to the RBAC creation function * Regenerate Golden Files * add changelog, also adds another spot that needed peeredTrustBundles * Add basic test for terminating gateway with peer trust bundle * Add intention to cluster peered golden test * rerun codegen * update changelog * really update the changelog --------- Co-authored-by: Melisa Griffin <melisa.griffin@hashicorp.com>	1 year ago
Chris S. Kim	aa526db225	Retry flaky tests (#19088)	1 year ago
Chris S. Kim	ad26494016	[CE] Add workload bind type and templated policy (#19077)	1 year ago
Chris S. Kim	ca4ff6ba1d	Bump up compatibility test runner (#19081)	1 year ago
cskh	079c9d6927	docs: clarify the requriment for cross-partition network (#19052)	1 year ago
trujillo-adam	788c58699e	Docs/ce 477 dataplanes on ecs (#19010) ... * updated architecture topic * fixed type in arch diagram filenames * fixed path to img file * updated index page - still need to add links * moved arch and tech specs to reference folder * moved other ref topics to ref folder * set up the Deploy folder and TF install topics * merged secure conf into TF deploy instructions * moved bind addr and route conf to their own topics * moved arch and tech specs back to main folder * update migrate-existing-tasks content * merged manual deploy content; added serv conf ref * fixed links * added procedure for upgrading to dataplanes * fixed linked reported by checker * added updates to dataplanes overview page * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com> * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com> * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com> * Apply suggestions from code review Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com> * updated links and added redirects * removed old architecture content --------- Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com> Co-authored-by: Ganesh S <ganesh.seetharaman@hashicorp.com>	1 year ago
Ashesh Vidyut	af9a486fdc	Fixes docs of Consul Debug - Adds info about Since Flag (#19056) ... fix docs	1 year ago
Valeriia Ruban	344f4638bb	chor: update rule to run frontend github tasks when changes are made … (#19053)	1 year ago
Chris S. Kim	cf9e1b6158	Add upgrade warnings (#19061)	1 year ago
Eric Haberkorn	9656fd157f	Fix Explicit Destination Integration Test (#19060) ... fix explicit destination integration test	1 year ago
Chris S. Kim	1a9666c49d	Remove parallel flag (#19057)	1 year ago
Chris S. Kim	b43cde5d19	Add workload identity hooks (#19045)	1 year ago
Eric Haberkorn	f2b7b4591a	Fix Traffic Permissions Default Deny (#19028) ... Whenver a traffic permission exists for a given workload identity, turn on default deny. Previously, this was only working at the port level.	1 year ago
John Murret	d67e5c6e35	NET-5590 - authorization: check for identity:write in CA certs, xds server, and getting envoy bootstrap params (#19049) ... * NET-5590 - authorization: check for identity:write in CA certs, xds server, and getting envoy bootstrap params * gofmt file	1 year ago
Chris S. Kim	41e6f6cd8b	Reduce number of ports that consul test agents take (#19047)	1 year ago
R.B. Boyer	df930a59ac	chore: fix ce/ent drift in sdk and testing/deployer submodules (#19041)	1 year ago
Poonam Jadhav	6c92dd1359	NET-5600/container-test-acl-enabled (#18887) ... * feat: add container tests for resource http api with acl enabled * refactor: clean up	1 year ago
sarahalsmiller	9addd9ed7c	[NET-5788] Fix needed for JWTAuth in Consul Enterprise (#19038) ... change needed for fix in consul-enterprise	1 year ago
Chris S. Kim	2467660ab2	Remove explicit -p from CI tests (#18999)	1 year ago
cskh	a62cfd997b	docs: fix the description of meshgateway.mode=local in peering doc (#19042) ... docs: fix the description of meshgateway=local in peering doc	1 year ago
skpratt	21ea527089	TrafficPermissions: add ACL hooks (#19023) ... * add ACL hooks * add hooks for CTPs	1 year ago
Nitya Dhanushkodi	9a48266712	remove log (#19029)	1 year ago
Chris Thain	5e45db18b7	Include RequestTimeout in marshal/unmarshal of ServiceResolverConfigE… (#19031)	1 year ago
Eric Haberkorn	7ce6ebaeb3	Handle Traffic Permissions With Empty Sources Properly (#19024) ... Fix issues with empty sources * Validate that each permission on traffic permissions resources has at least one source. * Don't construct RBAC policies when there aren't any principals. This resulted in Envoy rejecting xDS updates with a validation error. ``` error= | rpc error: code = Internal desc = Error adding/updating listener(s) public_listener: Proto constraint validation failed (RBACValidationError.Rules: embedded message failed validation | caused by RBACValidationError.Policies[consul-intentions-layer4-1]: embedded message failed validation | caused by PolicyValidationError.Principals: value must contain at least 1 item(s)): rules { ```	1 year ago
David Yu	e6a111af1a	Update release notes to indicate folks should upgrade to to 1.16.2 or later (#19002) ... * Update v1_16_x.mdx * Update upgrade-specific.mdx * Update website/content/docs/upgrading/upgrade-specific.mdx Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>	1 year ago
Blake Covarrubias	fbc2b93bc4	docs: Rename Consul OSS to Consul CE (#19009) ... Rename references of Consul OSS to Consul Community Edition (CE). Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>	1 year ago
Ashesh Vidyut	23062489c2	Fix type of datacenter in Service Resolvers Config Entry (#19004)	1 year ago
Matt Keeler	2240e746dd	Skip the catalog v2 upgrade test (#19005) ... We intentionally broke api compatibility here as we are not yet maintaining backwards compat for the v2 apis	1 year ago