Chris S. Kim
8ead1caf53
Retry checks for virtual IP metadata
2022-07-27 13:54:34 -04:00
Chris S. Kim
62ed0250c3
Sort slice of ServiceNames deterministically
2022-07-27 13:54:34 -04:00
Chris S. Kim
a5fe2125e9
Remove unnecessary goroutine in flaky test
...
The watch is established in a background goroutine and the first assertion proves that the watcher is active so there is no reason for the update to happen in a racy goroutine.
Note that this does not completely remove the race condition as the first call to testGetConfigValTimeout could time out before a config is returned.
2022-07-27 13:54:34 -04:00
cskh
4e292b7b72
chore: clarify the error message: service.service must not be empty ( #13907 )
...
- when register service using catalog endpoint, the key of service
name actually should be "service". Add this information to the
error message will help user to quickly fix in the request.
2022-07-27 10:16:46 -04:00
Jared Kirschner
9080bef4a4
Merge pull request #13914 from hashicorp/docs/remove-comparisons-from-ref-docs
...
docs: remove comparative info from ref docs site
2022-07-27 02:42:41 -04:00
Jared Kirschner
bcbe9cc06d
Merge pull request #12903 from hashicorp/docs/show-cli-cmd-options-before-general-options
...
Docs: Show CLI command-specific options before general options
2022-07-27 02:18:04 -04:00
Jared Kirschner
cd562564ba
docs: show CLI cmd-specific opts before general opts
...
Applied to a single command (acl auth-method create).
2022-07-26 22:38:44 -07:00
Jared Kirschner
29c9e18bbf
docs: remove comparative info from ref docs site
2022-07-26 22:27:39 -07:00
Iryna Shustava
c34e4f35fb
docs: update helm reference docs ( #13910 )
2022-07-26 17:54:51 -06:00
cskh
59e81a728e
chore: removed unused method AddService ( #13905 )
...
- This AddService is not used anywhere.
AddServiceWithChecks is place of AddService
- Test code is updated
2022-07-26 16:54:53 -04:00
John Cowen
2547af7e1e
ui: Make peered intentions read-only ( #13814 )
...
* ui: Make peered intentions read-only
* Replace "" to undefined for SourcePeer so its the same as PeerName
* Fixup copypasta
* Ensure tests run with no peers
2022-07-26 17:29:37 +01:00
John Cowen
e3f05adf3b
ui: Add peering establishment to the peer listing page ( #13813 )
...
* ui: Add peering establishment to the peer listing page
* Remove this.form.reset
2022-07-26 15:36:49 +01:00
Michael Klein
a6a79d6811
ui: add deprecation worfklow addon ( #13877 )
...
* add ember-cli-deprecation-workflow
* Add deprecation workflow configuration
This will silence all deprecations by default reducing noise in the test
output significantly.
We can tackle deprecations now one by one but won't have to deal with
very verbose console logs anymore.
2022-07-26 15:01:09 +02:00
alex
437a28d18a
peering: prevent peering in same partition ( #13851 )
...
Co-authored-by: Chris S. Kim <ckim@hashicorp.com>
2022-07-25 18:00:48 -07:00
trujillo-adam
3548a396ad
Merge pull request #13897 from hashicorp/peering-metrics-docs-typo
...
fixed typo
2022-07-25 16:36:49 -07:00
Nitya Dhanushkodi
27bd895ac8
peering: remove validation that forces peering token server addresses to be an IP, allow hostname based addresses ( #13874 )
2022-07-25 16:33:47 -07:00
Jared Kirschner
5a92e439e6
Merge pull request #12045 from hashicorp/partition-cli-acl-info-and-api-crossref
...
Partitions: Include ACL Info and API cross-ref for CLI Commands
2022-07-25 19:10:55 -04:00
Luke Kysow
8c5b70d227
Rename receive to recv in tracker ( #13896 )
...
Because it's shorter
2022-07-25 16:08:03 -07:00
Iryna Shustava
a1df5ae9b7
build: add a build job to build and push UBI images to DockerHub ( #13808 )
2022-07-25 15:43:24 -07:00
Jared Kirschner
51f0a64b6b
docs: remove unnecessary partition CLI cmd info
2022-07-25 15:31:39 -07:00
Jared Kirschner
6add1039b3
docs: adjust HTTP API/CLI characteristics tables
2022-07-25 15:31:39 -07:00
Jared Kirschner
03924fdb30
docs: restructure partition API characteristics
...
The existing characteristics were restructured into a list.
The corresponding CLI command characteristic was added.
2022-07-25 15:31:38 -07:00
Jared Kirschner
903c71618a
docs: remove partition subcommand usage headings
2022-07-25 15:31:38 -07:00
Jared Kirschner
bfe79b7b34
docs: add partition command characteristics
...
Characteristics include:
- Required ACL permissions
- Corresponding HTTP API endpoint
- (Lack of) support for blocking queries and agent caching
2022-07-25 15:31:38 -07:00
Jared Kirschner
55a77c187b
docs: add partial for api/cli characteristics links
2022-07-25 15:31:38 -07:00
trujillo-adam
ec12589862
fixed typo
2022-07-25 14:32:33 -07:00
Luke Kysow
3530d3782d
peering: read endpoints can now return failing status ( #13849 )
...
Track streams that have been disconnected due to an error and
set their statuses to failing.
2022-07-25 14:27:53 -07:00
Kyle Havlovitz
93de25f87c
Merge pull request #13872 from hashicorp/remove-upstream-log
...
Remove extra logging from ingress upstream watch shutdown
2022-07-25 12:55:30 -07:00
David Yu
5867db4b0e
docs: followup on grammar and typo for latency requirements ( #13888 )
2022-07-25 12:50:11 -07:00
alex
45c3562477
docs: add peering metric doc ( #13862 )
...
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2022-07-25 12:43:06 -07:00
Chris S. Kim
73a84f256f
Preserve PeeringState on upsert ( #13666 )
...
Fixes a bug where if the generate token is called twice, the second call upserts the zero-value (undefined) of PeeringState.
2022-07-25 14:37:56 -04:00
David Yu
5786309356
docs: add details around Consul latency requirements ( #13881 )
...
* docs: add details around Consul latency requirements
2022-07-25 11:02:31 -07:00
Chris S. Kim
8ed49ea4d0
Update envoy metrics label extraction for peered clusters and listeners ( #13818 )
...
Now that peered upstreams can generate envoy resources (#13758 ), we need a way to disambiguate local from peered resources in our metrics. The key difference is that datacenter and partition will be replaced with peer, since in the context of peered resources partition is ambiguous (could refer to the partition in a remote cluster or one that exists locally). The partition and datacenter of the proxy will always be that of the source service.
Regexes were updated to make emitting datacenter and partition labels mutually exclusive with peer labels.
Listener filter names were updated to better match the existing regex.
Cluster names assigned to peered upstreams were updated to be synthesized from local peer name (it previously used the externally provided primary SNI, which contained the peer name from the other side of the peering). Integration tests were updated to assert for the new peer labels.
2022-07-25 13:49:00 -04:00
Michael Klein
f7f26220ba
ui: add peers to node search ( #13875 )
...
* Make nodes searchable by peer
* fix only surface peer filter on service search when feature is on
2022-07-25 18:46:47 +02:00
DanStough
dfd50d68ed
chore: ignore vscode files
2022-07-25 12:31:58 -04:00
DanStough
2da8949d78
feat: convert destination address to slice
2022-07-25 12:31:58 -04:00
Luke Kysow
cf4af7c765
Re-document peering disabled ( #13879 )
...
Change wording because it does have effect on clients because it
disables peering in the UI served from that client.
2022-07-25 09:30:37 -07:00
Freddy
f03cca7576
[OSS] Add ACL enforcement to peering endpoints ( #13878 )
2022-07-25 10:04:10 -06:00
Matt Keeler
58e4d8235b
Enable/Disable Peering Support in the UI ( #13816 )
...
We enabled/disable based on the config flag.
2022-07-25 11:50:11 -04:00
freddygv
b544ce6485
Add ACL enforcement to peering endpoints
2022-07-25 09:34:29 -06:00
Kyle Havlovitz
016f963e7e
Remove excess debug log from ingress upstream shutdown
2022-07-22 17:29:38 -07:00
alex
279d458e6e
peering: use ShouldDial to validate peer role ( #13823 )
...
Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>
2022-07-22 15:56:25 -07:00
Luke Kysow
a1e6d69454
peering: add config to enable/disable peering ( #13867 )
...
* peering: add config to enable/disable peering
Add config:
```
peering {
enabled = true
}
```
Defaults to true. When disabled:
1. All peering RPC endpoints will return an error
2. Leader won't start its peering establishment goroutines
3. Leader won't start its peering deletion goroutines
2022-07-22 15:20:21 -07:00
Kyle Havlovitz
0786517b56
Merge pull request #13847 from hashicorp/gateway-goroutine-leak
...
Fix goroutine leaks in proxycfg when using ingress gateway
2022-07-22 14:43:22 -07:00
Freddy
f99df57840
[OSS] Add new peering ACL rule ( #13848 )
...
This commit adds a new ACL rule named "peering" to authorize
actions taken against peering-related endpoints.
The "peering" rule has several key properties:
- It is scoped to a partition, and MUST be defined in the default
namespace.
- Its access level must be "read', "write", or "deny".
- Granting an access level will apply to all peerings. This ACL rule
cannot be used to selective grant access to some peerings but not
others.
- If the peering rule is not specified, we fall back to the "operator"
rule and then the default ACL rule.
2022-07-22 14:42:23 -06:00
NicoletaPopoviciu
a3cdcf0c86
docs: Updates k8s annotation docs ( #13809 )
...
* Updates k8s annotation docs
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2022-07-22 13:26:31 -07:00
alex
927cee692b
peering: emit exported services count metric ( #13811 )
...
Signed-off-by: acpana <8968914+acpana@users.noreply.github.com>
2022-07-22 12:05:08 -07:00
Matt Keeler
77917b6b5d
Rename some protobuf package names to be fqdn like ( #13861 )
...
These are used in various bits of the wire format (for gRPC) and internally with Go’s registry so we want to namespace things properly.
2022-07-22 14:59:34 -04:00
Kyle Havlovitz
6e1dd05a19
Add changelog note
2022-07-22 10:33:50 -07:00
A.J. Sanon
90ae5ffd16
Add ECS audit logging docs ( #13729 )
2022-07-22 13:30:25 -04:00