Commit Graph

817 Commits (fb7bccc69053c20c31ecceffe24b16dcd5c0f789)

Author SHA1 Message Date
Mitchell Hashimoto fb7bccc690
agent: bolster commenting for clearer understandability
7 years ago
Mitchell Hashimoto 9a987d6452
agent: default deny on connect authorize endpoint
7 years ago
Mitchell Hashimoto 86a8ce45b9
agent: /v1/agent/connect/authorize is functional, with tests
7 years ago
Mitchell Hashimoto 3ef0b93159
agent/connect: Authorize for CertURI
7 years ago
Mitchell Hashimoto 70d1d5bf06
agent: get rid of method checks since they're done in the http layer
7 years ago
Paul Banks 9309422fd9
Add Connect agent, catalog and health endpoints to api Client
7 years ago
Mitchell Hashimoto 845f7cd8ad
agent/consul/state: ensure exactly one active CA exists when setting
7 years ago
Mitchell Hashimoto ffe4cdfc15
agent/connect: support any values in the URL
7 years ago
Mitchell Hashimoto 75bf0e1638
agent/connect: support SpiffeIDSigning
7 years ago
Mitchell Hashimoto 17ca8ad083
agent/connect: rename SpiffeID to CertURI
7 years ago
Mitchell Hashimoto 0cbcb07d61
agent/connect: use proper keyusage fields for CA and leaf
7 years ago
Mitchell Hashimoto 73442ada5a
agent/connect: address PR feedback for the CA.go file
7 years ago
Mitchell Hashimoto d28ee70a56
agent: implement an always-200 authorize endpoint
7 years ago
Mitchell Hashimoto a54d1af421
agent/consul: encode issued cert serial number as hex encoded
7 years ago
Mitchell Hashimoto 4210003c86
agent/structs: hide some fields from JSON
7 years ago
Mitchell Hashimoto 63d674d07d
agent: /v1/connect/ca/configuration PUT for setting configuration
7 years ago
Mitchell Hashimoto 1c3dbc83ff
agent/consul/fsm,state: snapshot/restore for CA roots
7 years ago
Mitchell Hashimoto 90f423fd02
agent/consul/fsm,state: tests for CA root related changes
7 years ago
Mitchell Hashimoto 1c72639d60
agent/consul: set more fields on the issued cert
7 years ago
Mitchell Hashimoto c2588262b7
agent: /v1/connect/ca/leaf/:service_id
7 years ago
Mitchell Hashimoto 571d9aa785
agent: CA root HTTP endpoints
7 years ago
Mitchell Hashimoto e40afd6a73
agent/consul: CAS operations for setting the CA root
7 years ago
Mitchell Hashimoto 578db06600
agent/consul: tests for CA endpoints
7 years ago
Mitchell Hashimoto 891cd22ad9
agent/consul: key the public key of the CSR, verify in test
7 years ago
Mitchell Hashimoto d768d5e9a7
agent/consul: test for ConnectCA.Sign
7 years ago
Mitchell Hashimoto f4ec28bfe3
agent/consul: basic sign endpoint not tested yet
7 years ago
Mitchell Hashimoto 548ce190d5
agent/connect: package for agent-related Connect, parse SPIFFE IDs
7 years ago
Mitchell Hashimoto 6d294b6bb4
agent/structs: json omit QueryMeta
7 years ago
Mitchell Hashimoto e7536e5485
agent: /v1/connect/ca/roots
7 years ago
Mitchell Hashimoto 5a950190f3
agent/consul: RPC endpoints to list roots
7 years ago
Mitchell Hashimoto 130098b7b5
agent/consul/state: CARoot structs and initial state store
7 years ago
Mitchell Hashimoto 4d852e62a3
agent: address PR feedback
7 years ago
Mitchell Hashimoto 22a0eb6c67
agent: commenting some tests
7 years ago
Mitchell Hashimoto 6313bc5615
agent: clarified a number of comments per PR feedback
7 years ago
Mitchell Hashimoto 353953fcd2
agent/consul: Health.ServiceNodes ACL check for Connect
7 years ago
Mitchell Hashimoto b6c0cb7115
agent/consul: Catalog endpoint ACL requirements for Connect proxies
7 years ago
Mitchell Hashimoto 3b07686648
agent: remove ConnectProxyServiceName
7 years ago
Mitchell Hashimoto 2feef5f7a3
agent/consul: require name for proxies
7 years ago
Mitchell Hashimoto 714026dfb7
agent: validate service entry on register
7 years ago
Mitchell Hashimoto 125fb96ff1
agent/structs: tests for PartialClone and IsSame for proxy fields
7 years ago
Mitchell Hashimoto 9781cb1ace
agent/local: anti-entropy for connect proxy services
7 years ago
Mitchell Hashimoto 44ec8d94d2
agent: clean up connect/non-connect duplication by using shared methods
7 years ago
Mitchell Hashimoto 368137b81b
agent: /v1/health/connect/:service
7 years ago
Mitchell Hashimoto 7d79f9c46f
agent/consul: implement Health.ServiceNodes for Connect, DNS works
7 years ago
Mitchell Hashimoto 406366c45b
agent: working DNS for Connect queries, I think, but have to
7 years ago
Mitchell Hashimoto fd33b76ec2
agent: /v1/catalog/connect/:service
7 years ago
Mitchell Hashimoto e01914a025
agent/consul: Catalog.ServiceNodes supports Connect filtering
7 years ago
Mitchell Hashimoto 2062e37270
agent/consul/state: ConnectServiceNodes
7 years ago
Mitchell Hashimoto 7ed26e2c64
agent/consul: enforce ACL on ProxyDestination
7 years ago
Mitchell Hashimoto 0c0c0a58e7
agent/consul: proxy registration and tests
7 years ago