15869 Commits (ffca66d5df2b19e148e2767d7c112a0ba8916c5c)

 

All Branches   

Search

Author	SHA1	Message	Date
freddygv	686b883600	Add changelog entry	3 years ago
freddygv	110fae820a	Update xds pkg to account for GatewayKey	3 years ago
freddygv	7e65678c52	Update mesh gateway proxy watches for partitions ... This commit updates mesh gateway watches for cross-partitions communication. * Mesh gateways are keyed by partition and datacenter. * Mesh gateways will now watch gateways in partitions that export services to their partition. * Mesh gateways in non-default partitions will not have cross-datacenter watches. They are not involved in traditional WAN federation.	3 years ago
freddygv	38456bedcb	Add changelog entry	3 years ago
99	34d62a9c85	Final fixes	3 years ago
freddygv	aa931682ea	Avoid mixing named and unnamed params	3 years ago
freddygv	bf350224a0	Avoid passing nil config pointer	3 years ago
freddygv	df7b5af6f0	Avoid panic on nil partitionAuthorizer config ... partitionAuthorizer.config can be nil if it wasn't provided on calls to newPartitionAuthorizer outside of the ACLResolver. This usage happens often in tests. This commit: adds a nil check when the config is going to be used, updates non-test usage of NewPolicyAuthorizerWithDefaults to pass a non-nil config, and dettaches setEnterpriseConf from the ACLResolver.	3 years ago
freddygv	22bdf279d1	Update NodeRead for partition-exports ... When issuing cross-partition service discovery requests, ACL filtering often checks for NodeRead privileges. This is because the common return type is a CheckServiceNode, which contains node data.	3 years ago
Kyle Havlovitz	65c9109396	acl: pass PartitionInfo through ent ACLConfig	3 years ago
Kyle Havlovitz	d03f849e49	acl: Expand ServiceRead logic to look at service-exports for cross-partition	3 years ago
freddygv	8006c6df73	Swap in structs.EqualPartitions for cmp	3 years ago
freddygv	37a16e9487	Replace Split with SplitN	3 years ago
freddygv	b9b6447977	Finish removing useInDatacenter	3 years ago
freddygv	e1691d1627	Update XDS for sidecars dialing through gateways	3 years ago
freddygv	62e0fc62c1	Configure sidecars to watch gateways in partitions ... Previously the datacenter of the gateway was the key identifier, now it is the datacenter and partition. When dialing services in other partitions or datacenters we now watch the appropriate partition.	3 years ago
freddygv	eacb73cb78	Remove useInDatacenter from disco chain requests ... useInDatacenter was used to determine whether the mesh gateway mode of the upstream should be returned in the discovery chain target. This commit makes it so that the mesh gateway mode is returned every time, and it is up to the caller to decide whether mesh gateways should be watched or used.	3 years ago
Konstantine	a02daecb83	added changelog	3 years ago
Konstantine	ec98e33140	fixed configurations options order in dns.mdx	3 years ago
R.B. Boyer	ef559dfdd4	agent: refactor the agent delegate interface to be partition friendly (#11429)	3 years ago
Chris S. Kim	ff6a33511e	docs: Document datacenter limitations for admin partitions (#11425)	3 years ago
Chris S. Kim	fa293362be	agent: Ensure partition is considered in agent endpoints (#11427)	3 years ago
Brandon Romano	8ba3abf4d8	Switch to og-image & Fix build error with acl-legacy (#11423) ... * Update share card image & switch to og-image * Remove path from api-docs-nav-data. Working * Add redirect back in Co-authored-by: Pamela Bortnick <pbortnick@gmail.com>	3 years ago
John Cowen	76f5de1455	ui: Ensure dc selector correctly shows the currently selected dc (#11380) ... * ui: Ensure dc selector correctly shows the currently selected dc * ui: Restrict access to non-default partitions in non-primaries (#11420) This PR restricts access via the UI to only the default partition when in a non-primary datacenter i.e. you can only have multiple (non-default) partitions in the primary datacenter.	3 years ago
John Cowen	b96794401f	ui: Add initial "How 2 Test UI" docs (#11296) ... Attempt to document out what a beginner to the project needs to know here in order to get started quickly Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>	3 years ago
Kim Ngo	a189244061	Update CTS compatibility matrix to include TFC and flexible (#11424)	3 years ago
John Cowen	86c88cc43a	ui: Ensure we provide an id for filtering policy-tokens (#11311)	3 years ago
Konstantine	a8643339bc	describe how alt-domain works in docs	3 years ago
Konstantine	55599d0b41	remove spaces	3 years ago
Konstantine	ce85d2eada	fix altDomain responses for services where address is IP, added tests	3 years ago
Konstantine	a7e8c51f80	fix encodeIPAsFqdn to return alt-domain when requested, added test case	3 years ago
Konstantine	ffb00f01b5	fixed altDomain response for NS type queries, and added test	3 years ago
Konstantine	a828c45a62	edited TestDNS_AltDomains_Service to test responses for altDomains, and added TXT additional section check	3 years ago
Konstantine	0864bfdb71	fixed alt-domain answer for SRV records, and TXT records in additional section	3 years ago
Chris S. Kim	76bbeb3baf	ui: Pass primary dc through to uiserver (#11317) ... Co-authored-by: John Cowen <johncowen@users.noreply.github.com>	3 years ago
Scott Macfarlane	6c0008913a	Create linux packaging structure ... Copied from hashicorp/linux-packaging 24e7e2675b Signed-off-by: Scott Macfarlane <smacfarlane@hashicorp.com>	3 years ago
99	cb40e1f55a	Add crt release workflow	3 years ago
99	6f7a3eab37	Add Dockerfile	3 years ago
Scott Macfarlane	10bc230d1e	Create initial ci.hcl for CRT Releases ... Signed-off-by: Scott Macfarlane <smacfarlane@hashicorp.com>	3 years ago
freddygv	8aefdc31da	Remove outdated partition label from test	3 years ago
freddygv	5c24ed61a8	Rename service-exports to partition-exports ... Existing config entries prefixed by service- are specific to individual services. Since this config entry applies to partitions it is being renamed. Additionally, the Partition label was changed to Name because using Partition at the top-level and in the enterprise meta was leading to the enterprise meta partition being dropped by msgpack.	3 years ago
Daniel Nephin	4ae2c8de9d	Merge pull request #11232 from hashicorp/dnephin/acl-legacy-remove-docs ... acl: add docs and changelog for the removal of the legacy ACL system	3 years ago
David Yu	fc68feec65	docs: Move consul-k8s architecture docs to Overview (#11414) ... * docs: Move consul-k8s architecture docs to Overview	3 years ago
Daniel Nephin	c841c76373	Merge pull request #11184 from hashicorp/dnephin/acl-legacy-remove-state-store ... acl: remove legacy type constants, and remove state store support for setting legacy ACLs	3 years ago
Daniel Nephin	5663ff3a70	Merge pull request #11183 from hashicorp/dnephin/acl-legacy-remove-struct ... acl: remove the remaining parts of structs/acl_legacy.go	3 years ago
Daniel Nephin	5d41b4d2f4	Update agent/consul/acl_client.go ... Co-authored-by: Freddy <freddygv@users.noreply.github.com>	3 years ago
Daniel Nephin	65d48e5042	state: remove support for updating legacy ACL tokens	3 years ago
Daniel Nephin	0784a31e85	acl: remove init check for legacy anon token ... This token should always already be migrated from a previous version.	3 years ago
Daniel Nephin	daba3c2309	acl: remove legacy parameter to ACLDatacenter ... It is no longer used now that legacy ACLs have been removed.	3 years ago
Daniel Nephin	3390f85ab4	acl: remove ACLTokenTypeManagement	3 years ago