18877 Commits

Author SHA1 Message Date
Eric Haberkorn
6570d5f004
Enable outbound peered requests to go through local mesh gateway (#14763) 2022-09-27 09:49:28 -04:00
David Yu
126f77f40d
docs: update to Vault secrets backend for partition init service account and Helm values for injector (#14745)
* docs: update to Vault secrets backend
2022-09-27 00:35:59 -07:00
David Fleming
0edf2f69d0
Fix Link: Consul Enterprise Admin Partitions - Usage - CLI (#14755)
Admin partition CLI documentation was pointing at /commands/admin-partition.  Updated to point at /commands/partition. https://www.consul.io/commands/admin-partition returns not found.
2022-09-26 23:22:49 -07:00
Nick Ethier
1c1b0994b8
add HCP integration component (#14723)
* add HCP integration

* lint: use non-deprecated logging interface
2022-09-26 14:58:15 -04:00
trujillo-adam
09d2ae9e04 refresh of the Consul architecture overview page 2022-09-26 11:21:08 -07:00
Derek Menteer
aa4709ab74
Add envoy connection balancing. (#14616)
Add envoy connection balancing config.
2022-09-26 11:29:06 -05:00
boruszak
0b742a0d75 /docs/dynamic-app-config/ 2022-09-23 16:31:00 -05:00
boruszak
cbc8d5df55 /docs/lambda/ 2022-09-23 16:29:28 -05:00
boruszak
8f85805c80 /docs/ecs/manual/ 2022-09-23 16:23:47 -05:00
boruszak
848a1dec68 /docs/ecs/terraform/ 2022-09-23 16:21:03 -05:00
boruszak
5b82975ebf /docs/ecs/ 2022-09-23 16:16:35 -05:00
boruszak
bcc227e285 /docs/k8s/deployment-configuration/ 2022-09-23 16:11:23 -05:00
boruszak
77d584d433 /docs/k8s/deployment-configurations/multi-cluster/ 2022-09-23 16:08:05 -05:00
boruszak
53129941b5 /docs/security/acl/auth-methods 2022-09-23 16:04:00 -05:00
boruszak
50b238addc /docs/api-gateway/configuration
/docs/api-gateway/
2022-09-23 15:59:02 -05:00
Kyle Schochenmaier
fc16f7ab6a
update helm docs for sync catalog and vault (#14733) 2022-09-23 10:16:05 -07:00
trujillo-adam
b5bdacd972
Merge pull request #14735 from hashicorp/docs/capigw-typos-usage
fixed typos in CAPIgw usage docs
2022-09-23 09:28:29 -07:00
trujillo-adam
b7fe014cbf fixed typos in CAPIgw usage docs 2022-09-23 09:23:21 -07:00
Chris S. Kim
2203cdc4db Add new internal endpoint to list exported services to a peer 2022-09-23 09:43:56 -04:00
Krastin Krastev
440a161b3a
Merge pull request #14232 from hashicorp/krastin/website/telemetry-labels
docs: fix website/docs/agent/telemetry labels chart
2022-09-23 14:56:51 +02:00
Roman Kunin
a0b1806ba2
Fix MD markup (#14702) 2022-09-22 20:00:09 -07:00
freddygv
d818d7b096 Manage local server watches depending on mesh cfg
Routing peering control plane traffic through mesh gateways can be
enabled or disabled at runtime with the mesh config entry.

This commit updates proxycfg to add or cancel watches for local servers
depending on this central config.

Note that WAN federation over mesh gateways is determined by a service
metadata flag, and any updates to the gateway service registration will
force the creation of a new snapshot. If enabled, WAN-fed over mesh
gateways will trigger a local server watch on initialize().

Because of this we will only add/remove server watches if WAN federation
over mesh gateways is disabled.
2022-09-22 19:32:10 -06:00
DanStough
28fc98040e docs: fix missing bugfix changelog entries 2022-09-22 16:10:40 -04:00
Derek Menteer
f62557fbcd Add 1.11.10 changelog entries. 2022-09-22 14:25:35 -05:00
Jared Kirschner
c81d0d5e5e
Merge pull request #14701 from mosceo/patch-1
Fix md markup
2022-09-22 12:05:50 -04:00
Roman Kunin
4c95e16815
Fix md markup 2022-09-22 16:41:52 +10:00
DanStough
7704daaad5 release updates for 1.13.2, 1.12.5, and 1.11.9 2022-09-21 15:07:44 -04:00
trujillo-adam
ca461a1b2d
Merge pull request #14690 from hashicorp/docs/fix-api-landing-page-typos
fixed typos in API landing page
2022-09-21 08:37:19 -07:00
trujillo-adam
767864d791 fixed typos in API landing page 2022-09-21 08:13:40 -07:00
Jared Kirschner
b267d09e11
Merge pull request #14571 from hashicorp/docs/fox-peering-metrics-labels-table
docs: fix peering metrics labels table
2022-09-21 08:37:19 -04:00
Jared Kirschner
7f0498d9d9
Merge pull request #14679 from hashicorp/docs/improve-ent-dns-flexibility-oss
docs: all enterprise locality labels now optional
2022-09-21 00:29:27 -04:00
Jared Kirschner
37d2d41e65 docs: address review feedback 2022-09-20 14:43:17 -07:00
John Cowen
f75804c3bd
ui: Topology notices testing/refactor prep (#14575)
* ui: Topology notices testing/refactor prep

* ui: During testing ensure that when global-config=true can be mocked to false (#14578)
2022-09-20 15:49:31 +01:00
John Cowen
443f5c3e5e
ui: Add initial tests for peering searching/sorting (#14568)
* ui: Add initial tests for peering searching/sorting

* New lint
2022-09-20 15:34:08 +01:00
John Cowen
8b0c09d15c
ui: Add merge-central-config to relevant HTTP requests (#14604) 2022-09-20 10:33:19 +01:00
Jared Kirschner
e75f35533b docs: fix peering metrics labels table 2022-09-19 19:10:35 -07:00
Jared Kirschner
90aab0b3bb docs: all enterprise locality labels now optional 2022-09-19 15:00:22 -07:00
cskh
1d7c82c017
doc(peering): missing network requirement for peering and the partiti… (#14677)
* doc(peering): missing network requirement for peering and the partition parameter in the list API

* Delete API: move partition from path parameter to query parameter
2022-09-19 16:11:04 -04:00
malizz
1a0aa38a82
increase the size of txn to support vault (#14599)
* increase the size of txn to support vault

* add test, revert change to acl endpoint

* add changelog

* update test, add passing test case

* Update .changelog/14599.txt

Co-authored-by: Freddy <freddygv@users.noreply.github.com>

Co-authored-by: Freddy <freddygv@users.noreply.github.com>
2022-09-19 09:07:19 -07:00
alex
6a70477aec
add health metric docs (#14382) 2022-09-19 10:33:24 -04:00
Freddy
0095ca0541
Merge pull request #14556 from hashicorp/NET-818-server-cert-v2 2022-09-16 18:08:57 -06:00
freddygv
12489128e0 Add changelog entry 2022-09-16 17:57:10 -06:00
freddygv
5fbb26525b Add awareness of server mode to TLS configurator
Preivously the TLS configurator would default to presenting auto TLS
certificates as client certificates.

Server agents should not have this behavior and should instead present
the manually configured certs. The autoTLS certs for servers are
exclusively used for peering and should not be used as the default for
outbound communication.
2022-09-16 17:57:10 -06:00
freddygv
f30bc96239 Test fixes
- Pulls in CLI test fix from main
- Updates psutils to fix TestAgent_Host on M1 Mac
2022-09-16 17:57:10 -06:00
freddygv
02d3ce1039 Add server certificate manager
This certificate manager will request a leaf certificate for server
agents and then keep them up to date.
2022-09-16 17:57:10 -06:00
freddygv
650e1e32e0 Update TLS configurator for peering traffic
When the TLS-enabled gRPC port receives a request for the expected
it must use the auto-tls certificates.
2022-09-16 17:57:09 -06:00
freddygv
0e5131bd33 Generate ACL token for server management
This commit introduces a new ACL token used for internal server
management purposes.

It has a few key properties:
- It has unlimited permissions.
- It is persisted through Raft as System Metadata rather than in the
ACL tokens table. This is to avoid users seeing or modifying it.
- It is re-generated on leadership establishment.
2022-09-16 17:54:34 -06:00
freddygv
0ea3353537 Add handling in agent cache for server leaf certs 2022-09-16 17:54:34 -06:00
Riddhi Shah
59249b7dda
Update docs for merge-central-config support (#14597)
Updates API docs to highlight merge-central-config support.
2022-09-16 14:48:03 -07:00
Evan Culver
4b89b66fc9
changelog: fix missing backtick (#14663) 2022-09-16 11:30:06 -07:00