Commit Graph

12092 Commits

Author SHA1 Message Date
Daniel Nephin 4bd66e0348 Merge pull request #10272 from hashicorp/dnephin/backport-namespace-license-fix
Backport some ent changes for serf tags
2021-05-21 12:54:51 -04:00
hc-github-team-consul-core 985ca60d35 Merge branch 'release/1.8.11-beta1' into remote-x 2021-05-18 20:55:05 +00:00
hc-github-team-consul-core 9360f453d3 Putting source back into Dev Mode 2021-05-18 20:55:00 +00:00
hc-github-team-consul-core 8b4feed8f4
Release v1.8.11-beta1 2021-05-18 20:19:38 +00:00
hc-github-team-consul-core 4b23e123ab
update bindata_assetfs.go 2021-05-18 20:19:37 +00:00
Daniel Nephin ee992f788d Merge pull request #8812 from jjshanks/GH-8728
GH-8728 add raft default values
2021-05-18 19:33:17 +00:00
Mike Morris ad9a46439a changelog: add unreleased entries for v1.8.11-beta1 2021-05-18 13:48:42 -04:00
R.B. Boyer 2f9c448801 server: ensure that central service config flattening properly resets the state each time (#10245)
The prior solution to call reply.Reset() aged poorly since newer fields
were added to the reply, but not added to Reset() leading serial
blocking query loops on the server to blend replies.

This could manifest as a service-defaults protocol change from
default=>http not reverting back to default after the config entry
reponsible was deleted.

Backport of #10239 to 1.9.x
2021-05-14 18:25:37 +00:00
R.B. Boyer 63d03e3b6a agent: ensure we hash the non-deprecated upstream fields on ServiceConfigRequest (#10240) (#10244)
Backport of #10240 to 1.9.x
2021-05-14 15:49:55 +00:00
Freddy c2cfa6cf76 Add changelog entry for network area timeout updates (#10241) 2021-05-13 21:06:19 +00:00
Daniel Nephin ea6600dacc Merge pull request #10218 from hashicorp/dnephin/backport-local-agent-fix
[1.9.x] agent/local: do not persist the agent or user token
2021-05-12 17:20:07 +00:00
Daniel Nephin a632542e52
Merge pull request #10175 from hashicorp/dnephin/backport-9683
[1.8.x] local: use agent token to deregister services
2021-05-06 14:18:37 -04:00
Daniel Nephin f8d33b36fd local: default to the agent token instead of the user token
When de-registering in anti-entropy sync, when there is no service or
check token.

The agent token will fall back to the default (aka user) token if no agent
token is set, so the existing behaviour still works, but it will prefer
the agent token over the user token if both are set.

ref: https://www.consul.io/docs/agent/options#acl_tokens

The agent token seems more approrpiate in this case, since this is an
"internal operation", not something initiated by the user.
2021-05-04 14:45:31 -04:00
R.B. Boyer b73816fabb dev: adding a make target to regenerate envoy golden files (#10158) 2021-04-30 16:27:58 +00:00
R.B. Boyer 59ee091fb0
[1.8.x] remove Codecov from CI runs (#10145) (#10156)
Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>
2021-04-30 10:17:00 -05:00
R.B. Boyer 55600be4a9
[1.8.x] connect: update supported envoy versions to 1.14.7, 1.13.7, 1.12.7, 1.11.2 (#10106) 2021-04-29 15:56:24 -05:00
Matt Keeler 86cd4fbe8a
Merge pull request #10103 from hashicorp/backport/1.8.x/10073
[Backport/1.8.x] Backport #10073
2021-04-23 16:35:49 -04:00
Matt Keeler 835d3d4258 Add replication metrics (#10073)
# Conflicts:
#	agent/consul/replication.go
2021-04-23 16:18:08 -04:00
Matt Keeler c9919348be Update changelog and add telemetry docs (#10107) 2021-04-23 16:08:19 -04:00
R.B. Boyer a524593d66 test: switch envoy integration tests to use pkill instead of ps+grep+awk+kill (#10097) 2021-04-23 18:24:15 +00:00
Daniel Nephin 40eeebd654 Merge pull request #10094 from hashicorp/update-fingerprint
updating fingerprint
2021-04-23 13:44:13 -04:00
R.B. Boyer 066bacc80c
Merge pull request #10080 from hashicorp/1.8.x-ca-force-skip-xc
[1.8.x] connect/ca: Allow ForceWithoutCrossSigning for all providers
2021-04-21 13:07:57 -05:00
Kyle Havlovitz 658e6a97bb Merge pull request #9672 from hashicorp/ca-force-skip-xc
connect/ca: Allow ForceWithoutCrossSigning for all providers
2021-04-20 15:41:32 -05:00
Sam Salisbury 4e5521c4a9 Merge pull request #10065 from hashicorp/ci/update-ssh-rw-key
ci: rotate the read/write SSH key fingerprint
2021-04-19 17:18:43 +00:00
hashicorp-ci 6206ab2588 Putting source back into Dev Mode 2021-04-15 21:36:35 +00:00
hashicorp-ci 46a6ae729e
Release v1.8.10 2021-04-15 18:15:40 +00:00
hashicorp-ci 201e25ed70
update bindata_assetfs.go 2021-04-15 18:15:39 +00:00
R.B. Boyer 3eb2224ab7
update changelog for 1.8.10 (#10041) 2021-04-15 12:02:59 -05:00
Kent 'picat' Gruber 065fe32c1b Merge pull request #10030 from hashicorp/fix-ent-audit-log-bypass
Add synthetic enterprise entry for CVE-2021-28156
2021-04-15 16:14:43 +00:00
R.B. Boyer 10ca99b793
Merge pull request #10037 from hashicorp/1.8.x/fix-raw-kv-xss
backport(1.8.x): fix raw kv xss
2021-04-15 11:11:09 -05:00
Kent 'picat' Gruber 447dd528f6 Merge pull request #10023 from hashicorp/fix-raw-kv-xss
Add content type headers to raw KV responses
2021-04-15 09:48:14 -04:00
R.B. Boyer cbf1e5d3e9
Merge pull request #10026 from hashicorp/1.8.x-fix-wan-ipv6-key
[1.8.x] Fix advertise_addr_wan_ipv6 configuration key
2021-04-14 16:53:04 -05:00
Daniel Nephin 685c09ef78
Merge pull request #10029 from hashicorp/dnephin/backport-auth-methods-fix-1.8.x
[1.8.x] backport snapshot of ACL Auth Methods bug fix
2021-04-14 17:49:20 -04:00
Daniel Nephin 1cc59bd0cf Merge pull request #9851 from panascais-forks/fix-wan-ipv6-key
Fix advertise_addr_wan_ipv6 configuration key
2021-04-14 16:29:28 -05:00
Daniel Nephin 168e8da213 Merge pull request #10025 from hashicorp/dnephin/fix-snapshot-auth-methods
snapshot: fix saving of auth methods
2021-04-14 17:25:13 -04:00
Daniel Nephin 477cbb5678 Merge pull request #10014 from hashicorp/dnephin/changelog
Add changelog for enterprise change
2021-04-14 18:10:18 +00:00
Matt Keeler 46de6ba9ca
Backport 10013: Move static token resolution into the ACLResolver (#10013) (#10017)
# Conflicts:
#	agent/acl.go
#	agent/acl_test.go
#	agent/agent.go
#	agent/ui_endpoint.go
2021-04-14 13:04:32 -04:00
R.B. Boyer 89e4e3d534
[1.8.x] command: when generating envoy bootstrap configs to stdout do not mix informational logs into the json (#9985)
Backport of #9980 to `1.8.x`

Conflicts:
- just the generated golden command/ files
- envoy.go and envoy_test.go
2021-04-07 15:00:33 -05:00
Hans Hasselberg 0d0f14f901 introduce certopts (#9606)
* introduce cert opts

* it should be using the same signer

* lint and omit serial
2021-03-22 09:17:23 +00:00
Daniel Nephin 3ade77cd2e Merge pull request #8698 from pierreca/fix-iserreof
Use errors.Is() in IsErrEOF()
2021-03-16 21:57:09 +00:00
Daniel Nephin a0d47afb93 Merge pull request #9853 from hashicorp/dnephin/fix-ci-nomad-integ
ci: update config for nomad main branch rename
2021-03-09 20:29:26 +00:00
hashicorp-ci f0b9dc7175 Putting source back into Dev Mode 2021-03-05 16:59:15 +00:00
hashicorp-ci ceef4d6ada
Release v1.8.9 2021-03-04 19:22:48 +00:00
hashicorp-ci 1f92b6cb84
update bindata_assetfs.go 2021-03-04 19:22:47 +00:00
Mike Morris bad702cc73 changelog: add unreleased entries for v1.8.9, remove v1.8.9-beta1 section 2021-03-04 14:12:46 -05:00
John Cowen 24981a6c68 ui: Remove any trailing fullstop/period DNS characters from Gateways UI API (#9752)
Previous to this commit, the API response would include Gateway
Addresses in the form `domain.name.:8080`, which due to the addition of
the port is probably not the expected response.

This commit rightTrims any `.` characters from the end of the domain
before formatting the address to include the port resulting in
`domain.name:8080`
2021-02-25 09:36:43 +00:00
R.B. Boyer 76795ae6d6
test: omit envoy golden test files that differ from the latest version (#9824)
backport of #9807 to 1.8.x
2021-02-24 15:49:32 -06:00
R.B. Boyer 46edc401ad connect: if the token given to the vault provider returns no data avoid a panic (#9806)
Improves #9800
2021-02-22 20:09:25 +00:00
R.B. Boyer 58f068f53a
[1.8.x] test: remove warnings and ensure the expose checks envoy test actually runs (#9804) 2021-02-22 14:02:08 -06:00
R.B. Boyer 40987a2b69
xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9794)
1.8.x backport of #9765

Conflicts:
- agent/xds/listeners_test.go
- test/integration/connect/envoy/helpers.bash
- agent/xds/testdata (different envoy versions)
2021-02-22 10:45:40 -06:00