16058 Commits (fe85138453c38a3ca91467cc9e9dfa924779e3c5)

 

All Branches   

Search

Author	SHA1	Message	Date
freddygv	fe85138453	additional test fixes	3 years ago
freddygv	d26b4860fd	Account for new upstreams constraint in tests	3 years ago
freddygv	2fe27b748d	Check ingress upstreams when gating chain watches	3 years ago
freddygv	6814e84459	Use ptr receiver in all Upstream methods	3 years ago
freddygv	6af9a0d8cf	Avoid storing chain without an upstream	3 years ago
freddygv	ba12dc215b	Clean up chains separately from their watches	3 years ago
freddygv	c5c290c503	Validate chains are associated with upstreams ... Previously we could get into a state where discovery chain entries were not cleaned up after the associated watch was cancelled. These changes add handling for that case where stray chain references are encountered.	3 years ago
freddygv	70d6358426	Store intention upstreams in snapshot	3 years ago
R.B. Boyer	81ea8129d7	proxycfg: ensure all of the watches are canceled if they are cancelable (#11824)	3 years ago
Jared Kirschner	f81dd817ff	Merge pull request #11818 from hashicorp/improve-url-not-found-response ... http: improve 404 Not Found response message	3 years ago
R.B. Boyer	4aabbe529c	proxycfg: use external addresses in tproxy when crossing partition boundaries (#11823)	3 years ago
Jared Kirschner	2de79abc00	http: improve 404 Not Found response message ... When a URL path is not found, return a non-empty message with the 404 status code to help the user understand what went wrong. If the URL path was not prefixed with '/v1/', suggest that may be the cause of the problem (which is a common mistake).	3 years ago
Freddy	85fe875d07	Use anonymousToken when querying by secret ID (#11813) ... Co-authored-by: Chris S. Kim <ckim@hashicorp.com> Co-authored-by: Dan Upton <daniel@floppy.co> This query has been incorrectly querying by accessor ID since New ACLs were added. However, the legacy token compat allowed this to continue to work, since it made a fallback query for the anonymousToken ID. PR #11184 removed this legacy token query, which means that the query by accessor ID is now the only check for the anonymous token's existence. This PR updates the GetBySecret call to use the secret ID of the token.	3 years ago
R.B. Boyer	631c649291	various partition related todos (#11822)	3 years ago
John Cowen	11ab84f840	ui: Add version information back into the footer (#11803)	3 years ago
John Cowen	2ba0e86d6d	ui: Disable setting wildcard partitions for intentions (#11804)	3 years ago
John Cowen	79b25901d7	ui: Change the URL prefix of partitions from `-` to `_` (#11801)	3 years ago
John Cowen	79679da840	ui: Fix a problem showing the default part in a non-primary (#11800) ... When switching to a non-primary datacenter we should only show the word 'default' in place of the partition menu, this fixes up a bug preventing that from happening due to erroneous if/let nesting	3 years ago
John Cowen	b5c0b35ef7	ui: Prefer shorter partition word in certain places vs Admin Partition (#11772)	3 years ago
John Cowen	be23aab001	ui: Ensure we show a special readonly page for intentions (#11767)	3 years ago
John Cowen	e4d33187b9	ui: reuse BucketList for intention view pages (#11765)	3 years ago
Kyle Havlovitz	b50ef696c6	Merge pull request #11812 from hashicorp/metrics-ui-acls ... oss: use wildcard partition in metrics proxy ui endpoint	3 years ago
Kyle Havlovitz	9dcaf0539c	Merge pull request #11798 from hashicorp/vip-goroutine-check ... leader: move the virtual IP version check into a goroutine	3 years ago
Kyle Havlovitz	018693b6ee	acl: use wildcard partition in metrics proxy ui endpoint	3 years ago
Kyle Havlovitz	5fee1ff93e	Merge pull request #11809 from hashicorp/vip-counter-fix ... state: fix freed VIP table id index	3 years ago
Kyle Havlovitz	80a4489844	state: fix freed VIP table id index	3 years ago
Kyle Havlovitz	ecbd3eb2a6	Exit before starting the vip check routine if possible	3 years ago
Chris S. Kim	8bdbe7c0fb	Update CI and release go versions to 1.17.5 (#11799)	3 years ago
Evan Culver	a0c754d44f	connect: update SNI label extraction to support new taxonomy for partitions (#11786)	3 years ago
John Cowen	4400d7c071	ui: Change partitions to expect `[]` from the API (#11791)	3 years ago
Freddy	0913644141	Update stray ref to old admin-partition cmd (#11797)	3 years ago
Kyle Havlovitz	04ef1c3fa0	leader: move the virtual IP version check into a goroutine	3 years ago
FFMMM	74eb257b1c	[sync ent] increase segment max limit to 4*64, make configurable (#1424) (#11795) ... * commit b6eb27563e747a78b7647d2b5da405e46364cc46 Author: FFMMM <FFMMM@users.noreply.github.com> Date: Thu Dec 9 13:53:44 2021 -0800 increase segment max limit to 4*64, make configurable (#1424) Signed-off-by: FFMMM <FFMMM@users.noreply.github.com> * fix: rename ent changelog file Signed-off-by: FFMMM <FFMMM@users.noreply.github.com>	3 years ago
R.B. Boyer	7b915456fd	update changelog for ent feature (#11794)	3 years ago
Matt Keeler	bcce800f55	Various Boltdb/Raft Documentation Updates (#11793) ... * Documenting the new raft_boltdb configuration options * Add documentation around new boltdb metrics. * Correct documentation for the consul.raft.fsm.apply metric	3 years ago
haxandmat	d013ded88d	Improved performance of the version.GetHumanVersion function by 50% on memory allocation. (#11507) ... Co-authored-by: Evan Culver <eculver@hashicorp.com>	3 years ago
Chris S. Kim	71bad67a4d	Add partitions to prettyformatters (#11789)	3 years ago
Daniel Nephin	f9647ece05	Merge pull request #11780 from hashicorp/dnephin/ca-test-vault-in-secondary ... ca: improve test coverage for RenewIntermediate	3 years ago
Brandon Romano	f299488fa9	Update alert banner (#11790)	3 years ago
R.B. Boyer	bb75e63eb4	agent: ensure service maintenance checks for matching partitions ahead of other errors (#11788) ... This matches behavior in most other agent api endpoints.	3 years ago
John Cowen	c410d295be	ui: Amends to Routing visualization for partitions (#11747) ... * Update disco fixtures now we have partitions * Add virtual-admin-6 fixture with partition 'redirects' and failovers * Properly cope with extra partition segment for splitters and resolvers * Make 'redirects' and failovers look/act consistently * Fixup some unit tests	3 years ago
John Cowen	c434fefda2	ui: Fixup notifications for tokens using and topology intention saving (#11763)	3 years ago
John Cowen	340a0e03f5	ui: Make 'dangerous' buttons have white text even in dark theme (#11756)	3 years ago
Ashwin Venkatesh	b71fff9f1c	update docs (#11784)	3 years ago
Daniel Nephin	4116a143e0	fix misleading errors on vault shutdown	3 years ago
Daniel Nephin	968aeff1bb	ca: prune some unnecessary lookups in the tests	3 years ago
Daniel Nephin	305655a8b1	ca: remove duplicate WaitFor function	3 years ago
Daniel Nephin	1dec6bb815	ca: fix flakes in RenewIntermediate tests ... I suspect one problem was that we set structs.IntermediateCertRenewInterval to 1ms, which meant that in some cases the intermediate could renew before we stored the original value. Another problem was that the 'wait for intermediate' loop was calling the provider.ActiveIntermediate, but the comparison needs to use the RPC endpoint to accurately represent a user request. So changing the 'wait for' to use the state store ensures we don't race. Also moves the patching into a separate function. Removes the addition of ca.CertificateTimeDriftBuffer as part of calculating halfTime. This was added in a previous commit to attempt to fix the flake, but it did not appear to fix the problem. Adding the time here was making the tests fail when using the shared patch function. It's not clear to me why, but there's no reason we should be including this time in the halfTime calculation.	3 years ago
Daniel Nephin	2e4e8bd791	ca: improve RenewIntermediate tests ... Use the new verifyLearfCert to show the cert verifies with intermediates from both sources. This required using the RPC interface so that the leaf pem was constructed correctly. Add IndexedCARoots.Active since that is a common operation we see in a few places.	3 years ago
Daniel Nephin	a4ba1f348d	ca: add a test for Vault in secondary DC	3 years ago