consul

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

consul api-gateway kubernetes ecs service-discovery service-mesh vault

Tree: 22cf122447

History

Ashvitha f95ffe0355 Allow HCP metrics collection for Envoy proxies Co-authored-by: Ashvitha Sridharan <ashvitha.sridharan@hashicorp.com> Co-authored-by: Freddy <freddygv@users.noreply.github.com> Add a new envoy flag: "envoy_hcp_metrics_bind_socket_dir", a directory where a unix socket will be created with the name `<namespace>_<proxy_id>.sock` to forward Envoy metrics. If set, this will configure: - In bootstrap configuration a local stats_sink and static cluster. These will forward metrics to a loopback listener sent over xDS. - A dynamic listener listening at the socket path that the previously defined static cluster is sending metrics to. - A dynamic cluster that will forward traffic received at this listener to the hcp-metrics-collector service. Reasons for having a static cluster pointing at a dynamic listener: - We want to secure the metrics stream using TLS, but the stats sink can only be defined in bootstrap config. With dynamic listeners/clusters we can use the proxy's leaf certificate issued by the Connect CA, which isn't available at bootstrap time. - We want to intelligently route to the HCP collector. Configuring its addreess at bootstrap time limits our flexibility routing-wise. More on this below. Reasons for defining the collector as an upstream in `proxycfg`: - The HCP collector will be deployed as a mesh service. - Certificate management is taken care of, as mentioned above. - Service discovery and routing logic is automatically taken care of, meaning that no code changes are required in the xds package. - Custom routing rules can be added for the collector using discovery chain config entries. Initially the collector is expected to be deployed to each admin partition, but in the future could be deployed centrally in the default partition. These config entries could even be managed by HCP itself.		2 years ago
..
acl	Fix flakey tests related to ACL token updates (#16545 )	2 years ago
agent	troubleshoot: make output have tables and colors (#16235 )	2 years ago
catalog	re-run gofmt on 1.17 (#11579 )	3 years ago
cli	troubleshoot: make output have tables and colors (#16235 )	2 years ago
config	config entry: hardcode proxy-defaults name as global (#14833 )	2 years ago
connect	Allow HCP metrics collection for Envoy proxies	2 years ago
debug	Fix various flaky tests (#16396 )	2 years ago
event	…
exec	Replace use of 'sane' where appropriate	3 years ago
flags	removes ioutil usage everywhere which was deprecated in go1.16 (#15297 )	2 years ago
forceleave	agent: add variation of force-leave that exclusively works on the WAN (#11722 )	3 years ago
helpers	Native API Gateway Config Entries (#15897 )	2 years ago
info	…
intention	bulk rewrite using this script	3 years ago
join	partitions: various refactors to support partitioning the serf LAN pool (#11568 )	3 years ago
keygen	…
keyring	Fixup acl.EnterpriseMeta	3 years ago
kv	removes ioutil usage everywhere which was deprecated in go1.16 (#15297 )	2 years ago
leave	…
lock	removes ioutil usage everywhere which was deprecated in go1.16 (#15297 )	2 years ago
login	removes ioutil usage everywhere which was deprecated in go1.16 (#15297 )	2 years ago
logout	ACL error improvements: incomplete bootstrapping and non-existent token (#16105 )	2 years ago
maint	Fix maint test	3 years ago
members	[OSS] security: update go to 1.20.1 (#16263 )	2 years ago
monitor	…
operator	Fix a couple inconsistencies in `operator usage instances` command (#16260 )	2 years ago
peering	Bring back parameter ServerExternalAddresses in GenerateToken endpoint (#15267 )	2 years ago
reload	…
rtt	Pass remote addr of incoming HTTP requests through to RPC(..) calls (#15700 )	2 years ago
services	[OSS] feat: access logs for listeners and listener filters (#15864 )	2 years ago
snapshot	removes ioutil usage everywhere which was deprecated in go1.16 (#15297 )	2 years ago
tls	Update docs for tls commands (#16077 )	2 years ago
troubleshoot	troubleshoot: fixes and updated messages (#16294 )	2 years ago
validate	removes ioutil usage everywhere which was deprecated in go1.16 (#15297 )	2 years ago
version	removes ioutil usage everywhere which was deprecated in go1.16 (#15297 )	2 years ago
watch	removes ioutil usage everywhere which was deprecated in go1.16 (#15297 )	2 years ago
registry.go	Add the `operator usage instances` command and api endpoint (#16205 )	2 years ago
registry_oss.go	Add build tag for oss (#13279 )	3 years ago