consul

History

Freddy fdd10dd8b8 Expose HTTP-based paths through Connect proxy (#6446 ) Fixes: #5396 This PR adds a proxy configuration stanza called expose. These flags register listeners in Connect sidecar proxies to allow requests to specific HTTP paths from outside of the node. This allows services to protect themselves by only listening on the loopback interface, while still accepting traffic from non Connect-enabled services. Under expose there is a boolean checks flag that would automatically expose all registered HTTP and gRPC check paths. This stanza also accepts a paths list to expose individual paths. The primary use case for this functionality would be to expose paths for third parties like Prometheus or the kubelet. Listeners for requests to exposed paths are be configured dynamically at run time. Any time a proxy, or check can be registered, a listener can also be created. In this initial implementation requests to these paths are not authenticated/encrypted.		5 years ago
..
acl	docs: add documentation for all secure acl introduction work (#5640 )	6 years ago
agent	log rotation: limit count of rotated log files (#5831 )	5 years ago
catalog	Implement data filtering of some endpoints (#5579 )	6 years ago
config	Expose HTTP-based paths through Connect proxy (#6446 )	5 years ago
connect	xds: improve how envoy metrics are emitted (#6312 )	5 years ago
debug	Simplified code in various places (#6176 )	5 years ago
event	Pass a testing.T into NewTestAgent and TestAgent.Start (#5342 )	6 years ago
exec	Flaky test overhaul (#6100 )	5 years ago
flags	acl: adding support for kubernetes auth provider login (#5600 )	6 years ago
forceleave	Move internal/ to sdk/ (#5568 )	6 years ago
helpers	Centralized Config CLI (#5731 )	6 years ago
info	Pass a testing.T into NewTestAgent and TestAgent.Start (#5342 )	6 years ago
intention	Move internal/ to sdk/ (#5568 )	6 years ago
join	Pass a testing.T into NewTestAgent and TestAgent.Start (#5342 )	6 years ago
keygen	Update default gossip encryption key size to 32 bytes	5 years ago
keyring	add flag to allow /operator/keyring requests to only hit local servers (#6279 )	5 years ago
kv	Avoid unnecessary conversions (#6178 )	5 years ago
leave	Pass a testing.T into NewTestAgent and TestAgent.Start (#5342 )	6 years ago
lock	Merge pull request #5376 from hashicorp/fix-tests	6 years ago
login	docs: add documentation for all secure acl introduction work (#5640 )	6 years ago
logout	docs: add documentation for all secure acl introduction work (#5640 )	6 years ago
maint	Pass a testing.T into NewTestAgent and TestAgent.Start (#5342 )	6 years ago
members	Pass a testing.T into NewTestAgent and TestAgent.Start (#5342 )	6 years ago
monitor	test: ensure all TestAgent constructions use a constructor (#6443 )	5 years ago
operator	Pass a testing.T into NewTestAgent and TestAgent.Start (#5342 )	6 years ago
reload	Pass a testing.T into NewTestAgent and TestAgent.Start (#5342 )	6 years ago
rtt	Move internal/ to sdk/ (#5568 )	6 years ago
services	Implement Mesh Gateways	5 years ago
snapshot	Move internal/ to sdk/ (#5568 )	6 years ago
tls	tls: auto_encrypt enables automatic RPC cert provisioning for consul clients (#5597 )	6 years ago
validate	Move internal/ to sdk/ (#5568 )	6 years ago
version	commands: run all tests in parallel (again)	7 years ago
watch	cli: actually allow the 'connect envoy' and 'watch' subcommands to work with -token-file (#5733 )	6 years ago
commands_oss.go	Fix envoy 1.10 exec (#5964 )	6 years ago
registry.go	Abandon daemonize for simpler solution (preserving history):	7 years ago