8c74a1d33e
Add transparent proxy enhancements changelog ( #17757 )
2023-06-15 11:48:39 -05:00
7dec75f8a6
added redirects and updated links ( #17764 )
2023-06-15 16:43:02 +00:00
0e9a0121a5
Update index.mdx ( #17749 )
2023-06-15 08:59:29 -07:00
fdde92c8c2
Updated docs added explanation. ( #17751 )
...
* init
* fix tests
* added -detailed in docs
* added change log
* fix doc
* checking for entry in map
* fix tests
* removed detailed flag
* removed detailed flag
* revert unwanted changes
* removed unwanted changes
* updated change log
* pr review comment changes
* pr comment changes single API instead of two
* fix change log
* fix tests
* fix tests
* fix test operator raft endpoint test
* Update .changelog/17582.txt
Co-authored-by: Semir Patel <semir.patel@hashicorp.com>
* nits
* updated docs
* explanation added
---------
Co-authored-by: Semir Patel <semir.patel@hashicorp.com>
2023-06-15 09:41:04 -05:00
0994ccf162
validate localities on agent configs and registration endpoints ( #17712 )
2023-06-15 10:01:04 -04:00
37bd0e1b40
docs - update Envoy and Dataplane compat matrix ( #17752 )
...
* Update envoy.mdx
added more detail around default versus other compatible versions
2023-06-15 06:33:48 +00:00
a6333471d4
docs: Failover overview minor fix ( #17743 )
...
* Incorrect symbol
* Clarification
* slight edit for clarity
2023-06-14 13:46:22 -07:00
7ab287c1d5
Add truncation to body ( #17723 )
2023-06-14 11:17:13 -07:00
abb05deeed
Bump atlassian/gajira-transition from 3.0.0 to 3.0.1 ( #17741 )
...
Bumps [atlassian/gajira-transition](https://github.com/atlassian/gajira-transition ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/atlassian/gajira-transition/releases )
- [Commits](4749176faf...38fc9cd61b
2023-06-14 17:39:48 +00:00
9289e680d6
OSS merge: Update error handling login when applying extensions ( #17740 )
2023-06-14 10:04:40 -07:00
fa40654885
[NET-3865] [Supportability] Additional Information in the output of 'consul operator raft list-peers' ( #17582 )
...
* init
* fix tests
* added -detailed in docs
* added change log
* fix doc
* checking for entry in map
* fix tests
* removed detailed flag
* removed detailed flag
* revert unwanted changes
* removed unwanted changes
* updated change log
* pr review comment changes
* pr comment changes single API instead of two
* fix change log
* fix tests
* fix tests
* fix test operator raft endpoint test
* Update .changelog/17582.txt
Co-authored-by: Semir Patel <semir.patel@hashicorp.com>
* nits
* updated docs
---------
Co-authored-by: Semir Patel <semir.patel@hashicorp.com>
2023-06-14 15:12:50 +00:00
6a90c2343b
NET-1825: New ACL token creation docs ( #16465 )
...
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2023-06-14 09:17:30 -05:00
212e0902fb
Bump Alpine to 3.18 ( #17719 )
...
* Update Dockerfile
* Create 17719.txt
2023-06-14 01:02:05 +00:00
8d9f2eb410
fix: typo in link to section ( #17527 )
...
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-13 17:41:34 -07:00
9acbe76ee9
Remove extraneous version info for Config entries ( #17716 )
...
* Update terminating-gateway.mdx
* Update exported-services.mdx
* Update mesh.mdx
2023-06-13 22:50:28 +00:00
28647ef086
Update compatibility.mdx ( #17713 )
2023-06-13 21:51:26 +00:00
ab909b4dae
add enterprise notes for IP-based rate limits ( #17711 )
...
* add enterprise notes for IP-based rate limits
* Apply suggestions from code review
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
* added bolded 'Enterprise' in list items.
---------
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2023-06-13 21:28:54 +00:00
d497623266
docs: missing changelog for _5517 ( #17706 )
2023-06-13 15:11:33 -04:00
0c15748c5a
[core]: Pin github action workflows ( #17695 )
2023-06-13 13:00:55 -04:00
72f991d8d3
agent: remove agent cache dependency from service mesh leaf certificate management ( #17075 )
...
* agent: remove agent cache dependency from service mesh leaf certificate management
This extracts the leaf cert management from within the agent cache.
This code was produced by the following process:
1. All tests in agent/cache, agent/cache-types, agent/auto-config,
agent/consul/servercert were run at each stage.
- The tests in agent matching .*Leaf were run at each stage.
- The tests in agent/leafcert were run at each stage after they
existed.
2. The former leaf cert Fetch implementation was extracted into a new
package behind a "fake RPC" endpoint to make it look almost like all
other cache type internals.
3. The old cache type was shimmed to use the fake RPC endpoint and
generally cleaned up.
4. I selectively duplicated all of Get/Notify/NotifyCallback/Prepopulate
from the agent/cache.Cache implementation over into the new package.
This was renamed as leafcert.Manager.
- Code that was irrelevant to the leaf cert type was deleted
(inlining blocking=true, refresh=false)
5. Everything that used the leaf cert cache type (including proxycfg
stuff) was shifted to use the leafcert.Manager instead.
6. agent/cache-types tests were moved and gently replumbed to execute
as-is against a leafcert.Manager.
7. Inspired by some of the locking changes from derek's branch I split
the fat lock into N+1 locks.
8. The waiter chan struct{} was eventually replaced with a
singleflight.Group around cache updates, which was likely the biggest
net structural change.
9. The awkward two layers or logic produced as a byproduct of marrying
the agent cache management code with the leaf cert type code was
slowly coalesced and flattened to remove confusion.
10. The .*Leaf tests from the agent package were copied and made to work
directly against a leafcert.Manager to increase direct coverage.
I have done a best effort attempt to port the previous leaf-cert cache
type's tests over in spirit, as well as to take the e2e-ish tests in the
agent package with Leaf in the test name and copy those into the
agent/leafcert package to get more direct coverage, rather than coverage
tangled up in the agent logic.
There is no net-new test coverage, just coverage that was pushed around
from elsewhere.
2023-06-13 10:54:45 -05:00
0a1efe73f3
Refactor disco chain prioritize by locality structs ( #17696 )
...
This includes prioritize by localities on disco chain targets rather than
resolvers, allowing different targets within the same partition to have
different policies.
2023-06-13 11:03:30 -04:00
bba5cd8455
fix: stop peering delete routine on leader loss ( #17483 )
2023-06-13 10:20:56 -04:00
ddce431bd7
docs: Update default values for Envoy extension proxy types ( #17676 )
2023-06-13 07:04:01 -07:00
a8f1350835
ENT merge of ext-authz extension updates ( #17684 )
2023-06-13 06:57:11 -07:00
d54d5fb85c
[NET-4107][Supportability] Log Level set to TRACE and duration set to 5m for consul-debug ( #17596 )
...
* changed duration to 5 mins and log level to trace
* documentation update
* change log
2023-06-13 11:07:46 +05:30
4b843ae1b7
Fix FIPS copy ( #17691 )
...
* fix release notes links
* fix typos on fips docs
2023-06-13 03:35:47 +00:00
11764a4558
adding redirects for tproxy and envoy extensions ( #17688 )
...
* adding redirects
* Apply suggestions from code review
2023-06-12 20:12:03 -07:00
421e9d8306
fix release notes links ( #17687 )
2023-06-12 19:49:10 -07:00
3a8fc610f2
Add release notes 1.16 rc ( #17665 )
...
* Merge pull request #5773 from hashicorp/docs/rate-limiting-from-ip-addresses-1.16
updated docs for rate limiting for IP addresses - 1.16
* Merge pull request #5609 from hashicorp/docs/enterprise-utilization-reporting
Add docs for enterprise utilization reporting
* Merge pull request #5734 from hashicorp/docs/envoy-ext-1.16
Docs/envoy ext 1.16
* Add release notes for 1.16-rc
* Add consul-e license utlization reporting
* Update with rc absolute links
* Update with rc absolute links
* fix typo
* Apply suggestions from code review
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update to use callout component
* address typo
* docs: FIPS 140-2 Compliance (#17668 )
* Page + nav + formatting
* link fix
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* link fix
* Apply suggestions from code review
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
* fix apigw install values file
* fix typos in release notes
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
2023-06-12 18:53:40 -07:00
0ddafcf924
updated failover for k8s w-tproxy page title ( #17683 )
2023-06-12 17:30:17 -07:00
28d81ec79f
Fix two WAL metrics in docs/agent/telemetry.mdx ( #17593 )
2023-06-12 18:50:59 -04:00
37a13dcf82
docs: minor fixes to JWT auth docs ( #17680 )
...
* Fixes
* service intentions fixes
2023-06-12 22:46:25 +00:00
66704e5cb9
docs: JWT Authorization for intentions ( #17643 )
...
* Initial page/nav creation
* configuration entry reference page
* Usage + fixes
* service intentions page
* usage
* description
* config entry updates
* formatting fixes
* Update website/content/docs/connect/config-entries/service-intentions.mdx
Co-authored-by: Paul Glass <pglass@hashicorp.com>
* service intentions review fixes
* Overview page review fixes
* Apply suggestions from code review
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
---------
Co-authored-by: Paul Glass <pglass@hashicorp.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 22:13:44 +00:00
b678742c68
additional feedback on API gateway upgrades ( #17677 )
...
* additional feedback
* Update website/content/docs/api-gateway/upgrades.mdx
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
---------
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
2023-06-12 22:09:35 +00:00
27206d9202
CAPIgw for K8s installation updates for 1.16 ( #17627 )
...
* trimmed CRD step and reqs from installation
* updated tech specs
* Apply suggestions from code review
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
* added upgrade instruction
* removed tcp port req
* described downtime and DT-less upgrades
* applied additional review feedback
---------
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
2023-06-12 13:41:16 -07:00
c384f24460
Remove "BETA" marker from config entries ( #17670 )
2023-06-12 16:36:33 -04:00
ef77f9abd4
docs: Sameness Groups ( #17628 )
...
* port from enterprise branch
* Apply suggestions from code review
Co-authored-by: shanafarkas <105076572+shanafarkas@users.noreply.github.com>
* Update website/content/docs/connect/cluster-peering/usage/create-sameness-groups.mdx
* next steps
* Update website/content/docs/connect/cluster-peering/usage/create-sameness-groups.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/k8s/connect/cluster-peering/usage/create-sameness-groups.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
---------
Co-authored-by: shanafarkas <105076572+shanafarkas@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 20:06:57 +00:00
290ba0e288
Update service-defaults.mdx ( #17656 )
2023-06-12 19:18:09 +00:00
446a640323
Post 1.16.0-rc1 updates ( #17663 )
...
- Update changelog to include new entries from release
- Update submodule versions to latest published
2023-06-12 14:28:51 -04:00
c04c122ef3
Default `ProxyType` for builtin extensions ( #17657 )
2023-06-12 10:47:31 -07:00
862e78f063
Add new Consul 1.16 docs ( #17651 )
...
* Merge pull request #5773 from hashicorp/docs/rate-limiting-from-ip-addresses-1.16
updated docs for rate limiting for IP addresses - 1.16
* Merge pull request #5609 from hashicorp/docs/enterprise-utilization-reporting
Add docs for enterprise utilization reporting
* Merge pull request #5734 from hashicorp/docs/envoy-ext-1.16
Docs/envoy ext 1.16
* Merge pull request #5773 from hashicorp/docs/rate-limiting-from-ip-addresses-1.16
updated docs for rate limiting for IP addresses - 1.16
* Merge pull request #5609 from hashicorp/docs/enterprise-utilization-reporting
Add docs for enterprise utilization reporting
* Merge pull request #5734 from hashicorp/docs/envoy-ext-1.16
Docs/envoy ext 1.16
* fix build errors
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 10:30:04 -07:00
f8d3721885
fix: add agent info reporting log ( #17654 )
2023-06-12 12:07:43 -04:00
1074252361
api-gateway: stop adding all header filters to virtual host when generating xDS ( #17644 )
...
* Add header filter to api-gateway xDS golden test
* Stop adding all header filters to virtual host when generating xDS for api-gateway
* Regenerate xDS golden file for api-gateway w/ header filter
2023-06-12 12:06:04 -04:00
baaf6d84c7
Add generic experiments configuration and use it to enable catalog v2 resources ( #17604 )
...
* Add generic experiments configuration and use it to enable catalog v2 resources
* Run formatting with -s as CI will validate that this has been done
2023-06-12 11:32:43 -04:00
809c188b34
docs: Reference doc updates for permissive mTLS settings ( #17371 )
...
* Reference doc updates for permissive mTLS settings
* Document config entry filtering
* Fix minor doc errors (double slashes in link url paths)
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 10:11:36 -05:00
b1d3ec0cdb
Delete check-legacy-links-format.yml ( #17647 )
2023-06-12 14:20:29 +00:00
5e846747f4
PmTLS and tproxy improvements with failover and L7 traffic mgmt for k8s ( #17624 )
...
* porting over changes from enterprise repo to oss
* applied feedback on service mesh for k8s overview
* fixed typo
* removed ent-only build script file
* Apply suggestions from code review
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
* Apply suggestions from code review
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
---------
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2023-06-10 08:35:22 -07:00
ec347ef01d
sort some imports that are wonky between oss and ent ( #17637 )
2023-06-09 11:30:56 -05:00
3cb70566a9
[API Gateway] Fix rate limiting for API gateways ( #17631 )
...
* [API Gateway] Fix rate limiting for API gateways
* Add changelog
* Fix failing unit tests
* Fix operator usage tests for api package
2023-06-09 08:22:32 -04:00
30e0c234ab
Update list of Envoy versions ( #17546 )
2023-06-09 02:37:49 +00:00
Derek Menteer
trujillo-adam
Luke Kysow
Ashesh Vidyut
Eric Haberkorn
David Yu
Jeff Boruszak
chappie
dependabot[bot]
Chris Thain
Paul Glass
Tobias Birkefeld
Dan Stough
Curt Bushko
R.B. Boyer
Tu Nguyen
Joshua Timmons
Thomas Eckert
Hariram Sankaran
Michael Zalimeni
Poonam Jadhav
Nathan Coleman
Matt Keeler
Bryce Kalow
Andrew Stucki