consul

History

Ashvitha f95ffe0355 Allow HCP metrics collection for Envoy proxies Co-authored-by: Ashvitha Sridharan <ashvitha.sridharan@hashicorp.com> Co-authored-by: Freddy <freddygv@users.noreply.github.com> Add a new envoy flag: "envoy_hcp_metrics_bind_socket_dir", a directory where a unix socket will be created with the name `<namespace>_<proxy_id>.sock` to forward Envoy metrics. If set, this will configure: - In bootstrap configuration a local stats_sink and static cluster. These will forward metrics to a loopback listener sent over xDS. - A dynamic listener listening at the socket path that the previously defined static cluster is sending metrics to. - A dynamic cluster that will forward traffic received at this listener to the hcp-metrics-collector service. Reasons for having a static cluster pointing at a dynamic listener: - We want to secure the metrics stream using TLS, but the stats sink can only be defined in bootstrap config. With dynamic listeners/clusters we can use the proxy's leaf certificate issued by the Connect CA, which isn't available at bootstrap time. - We want to intelligently route to the HCP collector. Configuring its addreess at bootstrap time limits our flexibility routing-wise. More on this below. Reasons for defining the collector as an upstream in `proxycfg`: - The HCP collector will be deployed as a mesh service. - Certificate management is taken care of, as mentioned above. - Service discovery and routing logic is automatically taken care of, meaning that no code changes are required in the xds package. - Custom routing rules can be added for the collector using discovery chain config entries. Initially the collector is expected to be deployed to each admin partition, but in the future could be deployed centrally in the default partition. These config entries could even be managed by HCP itself.		2 years ago
..
CONSUL_GRPC_ADDR-with-https-scheme-enables-tls.golden	Fix issue with connect Envoy choosing incorrect TLS settings. (#15466 )	2 years ago
CONSUL_HTTP_ADDR-with-https-scheme-does-not-affect-grpc-tls.golden	Fix issue with connect Envoy choosing incorrect TLS settings. (#15466 )	2 years ago
access-log-path.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
access-logs-enabled-custom.golden	[OSS] feat: add access log config to consul envoy connect (#15946 )	2 years ago
access-logs-enabled.golden	[OSS] feat: add access log config to consul envoy connect (#15946 )	2 years ago
acl-enabled-and-token.golden	Warn if ACL is enabled but no token is provided to Envoy (#15967 )	2 years ago
acl-enabled-but-no-token.golden	Warn if ACL is enabled but no token is provided to Envoy (#15967 )	2 years ago
both-CONSUL_HTTP_ADDR-PLAIN-and-CONSUL_GRPC_ADDR-TLS-is-tls.golden	Fix issue with connect Envoy choosing incorrect TLS settings. (#15466 )	2 years ago
both-CONSUL_HTTP_ADDR-TLS-and-CONSUL_GRPC_ADDR-PLAIN-is-plain.golden	Fix issue with connect Envoy choosing incorrect TLS settings. (#15466 )	2 years ago
custom-bootstrap.golden	[OSS] consul connect envoy command changes for agentless (#13361 )	3 years ago
defaults-nodemeta.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
defaults.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
deprecated-grpc-addr-config.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
envoy-readiness-probe.golden	Add support for envoy readiness flags (#16015 )	2 years ago
existing-ca-file.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
existing-ca-path.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
extra_-multiple.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
extra_-single.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
grpc-addr-env.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
grpc-addr-flag.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
grpc-addr-unix-with-tls.golden	Fix issue where TLS configuration was ignored for unix sockets in consul connect envoy. (#15913 )	2 years ago
grpc-addr-unix.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
grpc-tls-addr-config.golden	Address PR comments.	2 years ago
hcp-metrics.golden	Allow HCP metrics collection for Envoy proxies	2 years ago
ingress-gateway-address-specified.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
ingress-gateway-no-auto-register.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
ingress-gateway-nodemeta.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
ingress-gateway-register-with-service-and-proxy-id.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
ingress-gateway-register-with-service-without-proxy-id.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
ingress-gateway.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
prometheus-metrics-tls-ca-file.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
prometheus-metrics-tls-ca-path.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
prometheus-metrics.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
stats-config-override.golden	xds: modify rbac rules to use the XFCC header for peered L7 enforcement (#13629 )	2 years ago
token-arg.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
token-env.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
token-file-arg.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
token-file-env.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
xds-addr-config.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago
zipkin-tracing-config.golden	Update envoy metrics label extraction for peered clusters and listeners (#13818 )	2 years ago