consul/agent/connect/ca
hc-github-team-consul-core 3e3ab25f9b
xds: don't attempt to load-balance sessions for local proxies (#15789) (#16004)
Previously, we'd begin a session with the xDS concurrency limiter
regardless of whether the proxy was registered in the catalog or in
the server's local agent state.

This caused problems for users who run `consul connect envoy` directly
against a server rather than a client agent, as the server's locally
registered proxies wouldn't be included in the limiter's capacity.

Now, the `ConfigSource` is responsible for beginning the session and we
only do so for services in the catalog.

Fixes: https://github.com/hashicorp/consul/issues/15753

Co-authored-by: Dan Upton <daniel@floppy.co>
2023-01-19 10:34:01 +00:00
..
common.go Configure upstream TLS context with peer root certs (#13321) 2022-06-01 15:53:52 -06:00
mock_Provider.go xds: don't attempt to load-balance sessions for local proxies (#15789) (#16004) 2023-01-19 10:34:01 +00:00
provider.go Backport of Detect Vault 1.11+ import in secondary datacenters and update default issuer into release/1.14.x (#15683) 2022-12-05 21:56:47 +00:00
provider_aws.go Backport of Detect Vault 1.11+ import in secondary datacenters and update default issuer into release/1.14.x (#15683) 2022-12-05 21:56:47 +00:00
provider_aws_test.go Backport of Detect Vault 1.11+ import in secondary datacenters and update default issuer into release/1.14.x (#15683) 2022-12-05 21:56:47 +00:00
provider_consul.go Backport of Detect Vault 1.11+ import in secondary datacenters and update default issuer into release/1.14.x (#15683) 2022-12-05 21:56:47 +00:00
provider_consul_config.go add root_cert_ttl option for consul connect, vault ca providers (#11428) 2021-11-02 11:02:10 -07:00
provider_consul_test.go connect: ensure all vault connect CA tests use limited privilege tokens (#15689) 2022-12-06 12:30:45 -06:00
provider_test.go Vendor in rpc mono repo for net/rpc fork, go-msgpack, msgpackrpc. (#12311) 2022-02-14 09:45:45 -08:00
provider_vault.go connect: ensure all vault connect CA tests use limited privilege tokens (#15689) 2022-12-06 12:30:45 -06:00
provider_vault_test.go connect: ensure all vault connect CA tests use limited privilege tokens (#15689) 2022-12-06 12:30:45 -06:00
testing.go connect: use -dev-no-store-token for test vaults to reduce source of flakes (#15691) (#15694) 2022-12-06 13:28:49 -06:00