Daniel Nephin
82a753285b
Merge pull request #9073 from hashicorp/dnephin/backport-streaming-namespaces
...
streaming: backport namespace changes
2020-11-05 19:19:49 +00:00
Daniel Nephin
f0beecad24
Merge pull request #9061 from hashicorp/dnephin/event-fields
...
stream: support filtering by namespace
2020-11-05 19:19:02 +00:00
Jimmy Merritello
210827b4bb
Bump HSM version ( #9102 )
2020-11-05 17:49:04 +00:00
John Cowen
268f930de4
ui: Move mocks into the ui project ( #9084 )
...
* Add consul-api-double under api
* Update config to reflect api change
* Remove consul-api-double as a dependency
* api -> mock-api
* Fixup mocks path for staging
2020-11-05 16:07:02 +00:00
R.B. Boyer
c14439a146
agent: protect the ui metrics proxy endpoint behind ACLs ( #9099 )
...
This ensures the metrics proxy endpoint is ACL protected behind a
wildcard `service:read` and `node:read` set of rules. For Consul
Enterprise these will need to span all namespaces:
```
service_prefix "" { policy = "read" }
node_prefix "" { policy = "read" }
namespace_prefix "" {
service_prefix "" { policy = "read" }
node_prefix "" { policy = "read" }
}
```
This PR contains just the backend changes. The frontend changes to
actually pass the consul token header to the proxy through the JS plugin
will come in another PR.
2020-11-04 18:52:43 +00:00
John Cowen
fc9975d36c
ui: Metrics - Provide a fetch-like http client that automatically adds the current ACL token ( #9094 )
...
* Remove local httpGet and shim one in from options
* Add custom httpGet to pass through to provider
* Make a fetch wrapper that adds your token
* Pass the fetch like fetchWithToken wrapper through to the provider
* Fix up httpGet to encode query params again and use fetch-like
2020-11-04 09:34:39 +00:00
John Cowen
1704ce55fc
ui: Storybook Install ( #9049 )
...
* ui: Install storybook into the main project
* Add a basic story for a notice
* Remove empty dependencies
2020-11-03 14:11:36 +00:00
Daniel Nephin
b577dc19bf
Merge pull request #9068 from hashicorp/restore-test-signature
...
restore prior signature of test helper so enterprise compiles
2020-11-02 23:16:21 +00:00
R.B. Boyer
1b58aae785
wait_for_namespace should take two args ( #9086 )
2020-11-02 21:58:19 +00:00
R.B. Boyer
cde495aee9
fix envoy integ test wait_for_namespace to actually work on CI ( #9082 )
2020-11-02 21:57:08 +00:00
John Cowen
e2c6e4d069
ui: Remove string casting when passing index/checked for dropmenus ( #9077 )
...
* ui: Remove string casting when passing index/checked
* Check for e.target
2020-11-02 16:07:41 +00:00
John Cowen
2ac2930b39
ui: Use eslint vs ember-cli-lint, sass vs dart-sass ( #9078 )
...
These two dependency changes means that @hashicorp/pds-ember can be
installed and used without any build/dependency issues
2020-11-02 14:36:17 +00:00
R.B. Boyer
d6e7bf40f8
agent: introduce path allow list for requests going through the metrics proxy ( #9059 )
...
Added a new option `ui_config.metrics_proxy.path_allowlist`. This defaults to `["/api/v1/query", "/api/v1/query_range"]` when the metrics provider is set to `prometheus`.
Requests that do not use one of the allow-listed paths (via exact match) get a 403 Forbidden response instead.
2020-10-30 21:50:28 +00:00
R.B. Boyer
26bb51e337
ui: make metrics work again ( #9072 )
...
Fixes regression from #9040
2020-10-30 15:22:30 +00:00
R.B. Boyer
211051d92b
state: ensure we unblock intentions queries upon the upgrade to config entries ( #9062 )
...
1. do a state store query to list intentions as the agent would do over in `agent/proxycfg` backing `agent/xds`
2. upgrade the database and do a fresh `service-intentions` config entry write
3. the blocking query inside of the agent cache in (1) doesn't notice (2)
2020-10-29 20:29:07 +00:00
Daniel Nephin
3fca80a52e
Merge pull request #9025 from hashicorp/dnephin/streaming-options
...
streaming: Use a no-op event publisher if streaming is disabled
2020-10-29 19:31:08 +00:00
Mike Morris
02d0af0bb5
ui: Update node_modules deps path in GNUMakefile ( #9066 )
...
Updates `node_modules` path/makefile target to fix top-level `make ui` command.
2020-10-29 18:29:29 +00:00
Kim Ngo
a9af74d339
docs: Add links in CTS docs for the community to get involved ( #9060 )
2020-10-29 15:09:41 +00:00
Daniel Nephin
bc07901527
Merge pull request #9058 from hashicorp/dnephin/fix-broken-github-workflow
...
Remove the workflow file
2020-10-28 13:11:36 -04:00
Daniel Nephin
06888839d6
Remove the workflow file
...
The comment out file causes github to send us error emails on every commit
2020-10-28 13:09:29 -04:00
R.B. Boyer
b724e096c2
add namespace waiting function to envoy integration tests ( #9051 )
2020-10-28 11:58:40 -05:00
Daniel Nephin
7b9ee25956
Merge pull request #9026 from hashicorp/dnephin/streaming-without-cache-query-param
...
streaming: rename config and remove requirement for cache=1
2020-10-28 12:33:25 -04:00
Daniel Nephin
477d665309
Merge pull request #8618 from hashicorp/dnephin/remove-txn-readtxn
...
state: Use ReadTxn everywhere
2020-10-28 12:32:47 -04:00
R.B. Boyer
8e70c3fc25
missed adding the test delay to the l7-intentions envoy integration test ( #9052 )
2020-10-28 08:43:11 -05:00
Jono Sosulska
97eac7e4c8
Turn off issue labeler for now ( #9054 )
2020-10-27 17:34:16 -04:00
Kyle Havlovitz
9f893307de
Merge pull request #9053 from hashicorp/vault-token-lookupself
...
connect: Use the lookup-self endpoint for Vault token
2020-10-27 14:34:03 -07:00
Daniel Nephin
1a5af13fce
Merge pull request #8974 from hashicorp/dnephin/grpc-counter-metrics
...
agent/grpc: add counter metrics
2020-10-27 17:10:05 -04:00
Daniel Nephin
62c9124011
docs: Add the new metrics to telemetry.mdx
2020-10-27 16:49:50 -04:00
Daniel Nephin
f0ac093fef
agent/grpc: add connection count metrics
...
Gauge metrics are great for understanding the current state, but can somtimes hide problems
if there are many disconnect/reconnects.
This commit adds counter metrics for connections and streams to make it easier to see the
count of newly created connections and streams.
2020-10-27 16:49:49 -04:00
Daniel Nephin
5319ba02b0
agent/grpc: rename metrics
...
These new names should make it easier to add counter metics with similar prefixes
2020-10-27 16:49:49 -04:00
Daniel Nephin
c82d6aa4ff
Merge pull request #8961 from hashicorp/dnephin/grpc-resolve-node-id
...
agent/grpc: fix some test flakes and handle duplicate server IDs in the pool
2020-10-27 16:47:37 -04:00
Daniel Nephin
74ac34e358
Merge pull request #8998 from hashicorp/dnephin/lib-ttlcache
...
lib/ttlcache: extract a new package from agent/cache
2020-10-27 16:43:10 -04:00
Daniel Nephin
0f81915495
Merge pull request #8987 from hashicorp/dnephin/stream-filter
...
streaming: apply filter to a single item
2020-10-27 16:39:43 -04:00
Daniel Nephin
8bcd5040c7
agent/grpc: Add an integration test for ClientPool with TLS
...
Also deregister the resolver.Builder in tests.
2020-10-27 16:34:18 -04:00
Daniel Nephin
e9479175a4
tlsutil: remove unused UseTLS field
2020-10-27 16:34:17 -04:00
Daniel Nephin
8a785a351c
agent/grpc: pass metrics to constructor
...
Instead of referencing a package var. This does not fix the flaky test, but it seems more correct.
2020-10-27 16:34:17 -04:00
Daniel Nephin
d19657404f
agent/grpc: fix a flaky test by performing more retries
...
Instead of using retry.Run, which appears to have problems in some cases where it does not
emit an error message, use a for loop.
Increase the number of attempts and remove any sleep, since this operation is not that expensive to do
in a tight loop
2020-10-27 16:34:17 -04:00
Daniel Nephin
df405ac978
agent/grpc: remove misleading warnings from test output
...
Handle shutdown properly in tests so that the tests don't warn about using a closed connection.
2020-10-27 16:34:16 -04:00
Daniel Nephin
e101aa8a74
agent/grpc: fix a flake in TestHandler_EmitsStats
2020-10-27 16:34:16 -04:00
Daniel Nephin
19da9c3a9b
agent/grpc: use a separate channel for closing the Accept
...
Closing l.conns can lead to a race and a 'panic: send on closed chan' when a
connection is in the middle of being handled when the server is shutting down.
Found using '-race -count=800'
2020-10-27 16:34:15 -04:00
Daniel Nephin
d8299670cc
agent/grpc/resolver: namespace the server ID with the DC name
...
So that if two datacenters end up with overlapping serverIDs we don't send requests to the wrong server
2020-10-27 16:34:15 -04:00
Kyle Havlovitz
f700a5707b
connect: Use the lookup-self endpoint for Vault token
2020-10-27 13:03:45 -07:00
hashicorp-ci
bea3d0fd96
auto-updated agent/uiserver/bindata_assetfs.go from commit f4208b5fb
2020-10-27 14:56:48 +00:00
John Cowen
f4208b5fba
ui: Metrics - Don't swallow metrics errors ( #9044 )
...
* ui: Make eventsources use http-like errors for stopping
* ui: Don't swallow errors from prometheus, pass them to the ui to handle
2020-10-27 14:51:15 +00:00
hashicorp-ci
7a1538f747
auto-updated agent/uiserver/bindata_assetfs.go from commit 30da884d5
2020-10-27 14:31:16 +00:00
John Cowen
30da884d55
ui: Delete old yarn lock file ( #9046 )
...
* Update the make file to look for node_modules in the workspace
* Delete old travis file
2020-10-27 14:26:42 +00:00
Kenia
cdf5ba703f
ui: Remove downstream dc filter ( #9040 )
...
* Remove datacenter filter and update props passed down
* Merging changes fixed
* Fixup tests for metrics link
2020-10-27 10:25:23 -04:00
Jono Sosulska
094c8c8a29
Remove auto-docs-cherrypick and update UI label ( #9047 )
...
* Remove auto-docs-cherrypick and update UI regex
2020-10-27 10:24:05 -04:00
hashicorp-ci
b6113eba09
auto-updated agent/uiserver/bindata_assetfs.go from commit ed6a2c150
2020-10-27 14:09:17 +00:00
Kenia
ed6a2c150f
ui: Topology limited access banner ( #9041 )
...
* Add limited access banner to Topology tab based on ACLs
* Update to folder structure
2020-10-27 10:04:22 -04:00