Kyle Havlovitz
|
32d1eae28b
|
Move ConsulCAProviderConfig into structs package
|
2018-06-14 09:42:04 -07:00 |
Kyle Havlovitz
|
c6e1b72ccb
|
Simplify the CA provider interface by moving some logic out
|
2018-06-14 09:42:04 -07:00 |
Kyle Havlovitz
|
a325388939
|
Clarify some comments and names around CA bootstrapping
|
2018-06-14 09:42:04 -07:00 |
Mitchell Hashimoto
|
bd3b8e042a
|
agent/cache: address PR feedback, lots of typos
|
2018-06-14 09:42:03 -07:00 |
Mitchell Hashimoto
|
0f3f3d13ca
|
agent/cache-types: support intention match queries
|
2018-06-14 09:42:02 -07:00 |
Mitchell Hashimoto
|
9f3dbf7b2a
|
agent/structs: DCSpecificRequest sets all the proper fields for
CacheInfo
|
2018-06-14 09:42:01 -07:00 |
Mitchell Hashimoto
|
e3c1162881
|
agent/cache: Reorganize some files, RequestInfo struct, prepare for partitioning
|
2018-06-14 09:42:00 -07:00 |
Mitchell Hashimoto
|
b0db5657c4
|
agent/cache: ConnectCA roots caching type
|
2018-06-14 09:42:00 -07:00 |
Kyle Havlovitz
|
33418afd3c
|
Add cross-signing mechanism to root rotation
|
2018-06-14 09:42:00 -07:00 |
Kyle Havlovitz
|
d83fbfc766
|
Add the root rotation mechanism to the CA config endpoint
|
2018-06-14 09:41:59 -07:00 |
Kyle Havlovitz
|
f9d92d795e
|
Have the built in CA store its state in raft
|
2018-06-14 09:41:59 -07:00 |
Kyle Havlovitz
|
ab737ef0f8
|
Hook the CA RPC endpoint into the provider interface
|
2018-06-14 09:41:59 -07:00 |
Paul Banks
|
36dbd878c9
|
Adds `api` client code and tests for new Proxy Config endpoint, registering with proxy and seeing proxy config in /agent/services list.
|
2018-06-14 09:41:58 -07:00 |
Paul Banks
|
2a69663448
|
Agent Connect Proxy config endpoint with hash-based blocking
|
2018-06-14 09:41:57 -07:00 |
Paul Banks
|
3e3f0e1f31
|
HTTP agent registration allows proxy to be defined.
|
2018-06-14 09:41:57 -07:00 |
Paul Banks
|
e6071051cf
|
Added connect proxy config and local agent state setup on boot.
|
2018-06-14 09:41:57 -07:00 |
Paul Banks
|
ed9f07c361
|
Allow duplicate source or destination, but enforce uniqueness across all four.
|
2018-06-14 09:41:57 -07:00 |
Mitchell Hashimoto
|
95da20ffd7
|
agent: rename authorize param ClientID to ClientCertURI
|
2018-06-14 09:41:56 -07:00 |
Mitchell Hashimoto
|
6dc2db94ea
|
agent/structs: String format for Intention, used for logging
|
2018-06-14 09:41:55 -07:00 |
Mitchell Hashimoto
|
86a8ce45b9
|
agent: /v1/agent/connect/authorize is functional, with tests
|
2018-06-14 09:41:54 -07:00 |
Paul Banks
|
9309422fd9
|
Add Connect agent, catalog and health endpoints to api Client
|
2018-06-14 09:41:54 -07:00 |
Mitchell Hashimoto
|
a54d1af421
|
agent/consul: encode issued cert serial number as hex encoded
|
2018-06-14 09:41:53 -07:00 |
Mitchell Hashimoto
|
4210003c86
|
agent/structs: hide some fields from JSON
|
2018-06-14 09:41:52 -07:00 |
Mitchell Hashimoto
|
63d674d07d
|
agent: /v1/connect/ca/configuration PUT for setting configuration
|
2018-06-14 09:41:52 -07:00 |
Mitchell Hashimoto
|
c2588262b7
|
agent: /v1/connect/ca/leaf/:service_id
|
2018-06-14 09:41:52 -07:00 |
Mitchell Hashimoto
|
e40afd6a73
|
agent/consul: CAS operations for setting the CA root
|
2018-06-14 09:41:51 -07:00 |
Mitchell Hashimoto
|
891cd22ad9
|
agent/consul: key the public key of the CSR, verify in test
|
2018-06-14 09:41:51 -07:00 |
Mitchell Hashimoto
|
d768d5e9a7
|
agent/consul: test for ConnectCA.Sign
|
2018-06-14 09:41:51 -07:00 |
Mitchell Hashimoto
|
f4ec28bfe3
|
agent/consul: basic sign endpoint not tested yet
|
2018-06-14 09:41:51 -07:00 |
Mitchell Hashimoto
|
6d294b6bb4
|
agent/structs: json omit QueryMeta
|
2018-06-14 09:41:50 -07:00 |
Mitchell Hashimoto
|
130098b7b5
|
agent/consul/state: CARoot structs and initial state store
|
2018-06-14 09:41:49 -07:00 |
Mitchell Hashimoto
|
6313bc5615
|
agent: clarified a number of comments per PR feedback
|
2018-06-14 09:41:49 -07:00 |
Mitchell Hashimoto
|
3b07686648
|
agent: remove ConnectProxyServiceName
|
2018-06-14 09:41:49 -07:00 |
Mitchell Hashimoto
|
2feef5f7a3
|
agent/consul: require name for proxies
|
2018-06-14 09:41:48 -07:00 |
Mitchell Hashimoto
|
125fb96ff1
|
agent/structs: tests for PartialClone and IsSame for proxy fields
|
2018-06-14 09:41:48 -07:00 |
Mitchell Hashimoto
|
9781cb1ace
|
agent/local: anti-entropy for connect proxy services
|
2018-06-14 09:41:48 -07:00 |
Mitchell Hashimoto
|
e01914a025
|
agent/consul: Catalog.ServiceNodes supports Connect filtering
|
2018-06-14 09:41:47 -07:00 |
Mitchell Hashimoto
|
0c0c0a58e7
|
agent/consul: proxy registration and tests
|
2018-06-14 09:41:46 -07:00 |
Mitchell Hashimoto
|
6e257ea51c
|
agent: /v1/catalog/service/:service works with proxies
|
2018-06-14 09:41:46 -07:00 |
Mitchell Hashimoto
|
21c6fc623a
|
agent/consul/state: service registration with proxy works
|
2018-06-14 09:41:46 -07:00 |
Mitchell Hashimoto
|
9dc8aa0fb3
|
agent/consul,structs: add tests for ACL filter and prefix for intentions
|
2018-06-14 09:41:45 -07:00 |
Mitchell Hashimoto
|
a67ff1c0dc
|
agent/consul: Basic ACL on Intention.Apply
|
2018-06-14 09:41:44 -07:00 |
Mitchell Hashimoto
|
0719ff6905
|
agent: convert all intention tests to testify/assert
|
2018-06-14 09:41:44 -07:00 |
Mitchell Hashimoto
|
70858598e4
|
agent: use testing intention to get valid intentions
|
2018-06-14 09:41:43 -07:00 |
Mitchell Hashimoto
|
ab4ea3efb4
|
agent/consul: set default intention SourceType, validate it
|
2018-06-14 09:41:43 -07:00 |
Mitchell Hashimoto
|
d92993f75b
|
agent/structs: Intention validation
|
2018-06-14 09:41:42 -07:00 |
Mitchell Hashimoto
|
82a50245e0
|
agent/consul: support intention description, meta is non-nil
|
2018-06-14 09:41:42 -07:00 |
Mitchell Hashimoto
|
a9743f4f15
|
agent,agent/consul: set default namespaces
|
2018-06-14 09:41:42 -07:00 |
Mitchell Hashimoto
|
93de03fe8b
|
agent/consul: RPC endpoint for Intention.Match
|
2018-06-14 09:41:42 -07:00 |
Mitchell Hashimoto
|
377479c01a
|
agent/structs: IntentionPrecedenceSorter for sorting based on precedence
|
2018-06-14 09:41:41 -07:00 |