Commit Graph

11405 Commits

Author SHA1 Message Date
R.B. Boyer 22eb016153
acl: add MaxTokenTTL field to auth methods (#7779)
When set to a non zero value it will limit the ExpirationTime of all
tokens created via the auth method.
2020-05-04 17:02:57 -05:00
s-christoff 08b335d8d6
Update CHANGELOG.md 2020-05-04 16:24:40 -05:00
s-christoff f9956c1c46
cli: Add -config flag to "acl authmethod update/create" (#7776) 2020-05-04 16:21:28 -05:00
R.B. Boyer 68499f0204 update changelog 2020-05-04 15:21:08 -05:00
R.B. Boyer ca52ba7068
acl: add DisplayName field to auth methods (#7769)
Also add a few missing acl fields in the api.
2020-05-04 15:18:25 -05:00
Hans Hasselberg b5eab19183
vendor: fix case issue (#7777) 2020-05-04 21:39:01 +02:00
Hans Hasselberg c4093c87cc
agent: don't let left nodes hold onto their node-id (#7747) 2020-05-04 18:39:08 +02:00
Matt Keeler daec810e34
Merge pull request #7714 from hashicorp/oss-sync/msp-agent-token 2020-05-04 11:33:50 -04:00
Matt Keeler 55050beedb
Update go-discover dependency (#7731) 2020-05-04 10:59:48 -04:00
Matt Keeler cbe3a70f56
Update enterprise configurations to be in OSS
This will emit warnings about the configs not doing anything but still allow them to be parsed.

This also added the warnings for enterprise fields that we already had in OSS but didn’t change their enforcement behavior. For example, attempting to use a network segment will cause a hard error in OSS.
2020-05-04 10:21:05 -04:00
R.B. Boyer 9533451a63
acl: refactor the authmethod.Validator interface (#7760)
This is a collection of refactors that make upcoming PRs easier to digest.

The main change is the introduction of the authmethod.Identity struct.
In the one and only current auth method (type=kubernetes) all of the
trusted identity attributes are both selectable and projectable, so they
were just passed around as a map[string]string.

When namespaces were added, this was slightly changed so that the
enterprise metadata can also come back from the login operation, so
login now returned two fields.

Now with some upcoming auth methods it won't be true that all identity
attributes will be both selectable and projectable, so rather than
update the login function to return 3 pieces of data it seemed worth it
to wrap those fields up and give them a proper name.
2020-05-01 17:35:28 -05:00
R.B. Boyer e17a43553e update changelog 2020-05-01 15:56:25 -05:00
R.B. Boyer 54ba8e3868
acl: change authmethod.Validator to take a logger (#7758) 2020-05-01 15:55:26 -05:00
R.B. Boyer 8927b54121
test: move some test helpers over from enterprise (#7754) 2020-05-01 14:52:15 -05:00
R.B. Boyer 88d5060610
docs: add docs for snapshot agent local_scratch_path option (#7730)
Also fix some website upgrade bugs.
2020-05-01 14:51:57 -05:00
Jono Sosulska 5c1858e70c
Adding redirect to discuss, moving question to old (#7732) 2020-05-01 13:02:15 -04:00
R.B. Boyer b282268408
sdk: extracting testutil.RequireErrorContains from various places it was duplicated (#7753) 2020-05-01 11:56:34 -05:00
Hans Hasselberg 51549bd232
rpc: oss changes for network area connection pooling (#7735) 2020-04-30 22:12:17 +02:00
Jeff Escalante 27eb12ec51
fix multiline note (#7744) 2020-04-30 14:07:16 -04:00
Luke Kysow dca331ed44
Update k8s instructions for new helm repo
Also remove index page for operations since it just linked to the other
pages in the list.
2020-04-30 10:04:55 -07:00
John Cowen 604de8758b
ui: Fix using 'ui-like' KVs when using an empty default nspace (#7734)
When using namespaces, the 'default' namespace is a little special in
that we wanted the option for all our URLs to stay the same when using
namespaces if you are using the default namespace, with the option of
also being able to explicitly specify `~default` as a namespace.

In other words both `ui/services/service-name` and
`ui/~default/services/service-name` show the same thing.

This means that if you switch between OSS and Enterprise, all of your
URLs stay the same, but you can still specifically link to the default
namespace itself.

Our routing configuration is duplicated in order to achieve this:

```
- :dc
  - :service
  - :kv
    - :edit
- :nspace
  - :dc
    - :service
    - :kv
      - :edit
```

Secondly, ember routing resolves/matches routes in the order that you specify
them, unless, its seems, when using wildcard routes, like we do in the
KV area.

When not using the wildcard routes the above routing configuration
resolves/matches a `/dc-1/kv/service` to the `dc.kv.edit` route correctly
(dc:dc-1, kv:services), that route having been configured in a higher
priority than the nspace routes.

However when configured with wildcards (required in the KV area), note
the asterisk below:

```
- :dc
    :service
  - :kv
    - *edit
- :nspace
  - :dc
    - :service
    - :kv
      - *edit
```

Given something like `/dc-1/kv/services` the router instead matches the
`nspace.dc.service` (nspace:dc-1, dc:kv, service:services) route first even
though the `dc.kv.edit` route should still match first.
Changing the `dc.kv.edit` route back to use a non-wildcard route
(:edit instead of *edit), returns the router to match the routes in the
correct order.

In order to work around this, we catch any incorrectly matched routes
(those being directed to the nspace Route but not having a `~`
character in the nspace parameter), and then recalculate the correct
route name and parameters. Lastly we use this recalculated route to
direct the user/app to the correct route.

This route recalcation requires walking up the route to gather up all of
the required route parameters, and although this feels like something
that could already exist in ember, it doesn't seem to. We had already
done a lot of this work a while ago when implementing our `href-mut`
helper. This commit therefore repurposes that work slighlty and externalizes
it outside of the helper itself into a more usable util so we can import
it where we need it. Tests have been added before refactoring it down
to make the code easier to follow.
2020-04-30 09:28:20 +01:00
Freddy 021f0ee36e
Watch fallback channel for gateways that do not exist (#7715)
Also ensure that WatchSets in tests are reset between calls to watchFired. 
Any time a watch fires, subsequent calls to watchFired on the same WatchSet
will also return true even if there were no changes.
2020-04-29 16:52:27 -06:00
Matt Keeler dbbaf135ff
Update CHANGELOG.md 2020-04-29 11:07:02 -04:00
Iryna Shustava d88be94c93
docs: add Helm docs for external servers and bootstrapToken (#7725)
Also, backfill some Helm docs that got lost in the new website merge
2020-04-28 14:38:02 -07:00
Alvin Huang 30acb31035
disable stable-website auto cherry-pick until replatform is merged into stable-website (#7726) 2020-04-28 17:01:51 -04:00
Jeff Escalante 0d6aff29f6
Merge pull request #7610 from hashicorp/je.new-website
New Documentation Website
2020-04-28 13:41:52 -04:00
Alvin Huang df43a796ad use environment variables in website-docker-image for website docker image push 2020-04-28 13:38:38 -04:00
Jeff Escalante e83445fd01
dependencies 2020-04-28 12:53:30 -04:00
Luke Kysow 63d6c3cfbb
Fix broken markdown link 2020-04-28 12:53:29 -04:00
Jeff Escalante a97193065b
update dependencies 2020-04-28 12:53:29 -04:00
Jeff Escalante 70848bf382
remove guides from sidebar 2020-04-28 12:53:29 -04:00
Blake Covarrubias bf4ef056af
Add callouts to Enterprise features (#7548)
Label all enterprise-related content with Enterprise badge/callout.

Resolves #6887

Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
2020-04-28 12:53:29 -04:00
Jeff Escalante bc1d820b62
update dependencies 2020-04-28 12:53:28 -04:00
Jeff Escalante 712aa7ce3b
update deps with a bunch of incremental fixes 2020-04-28 12:53:28 -04:00
kaitlincarter-hc 045ee37976
[Docs] Kuberentes Guides (#7660)
* Update k8s guide titles

* Update website/pages/docs/k8s/installation/gke.mdx

Co-Authored-By: Luke Kysow <1034429+lkysow@users.noreply.github.com>

Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2020-04-28 12:53:28 -04:00
Jeff Escalante 3da057018c
correct rebased k8s/eks location 2020-04-28 12:53:27 -04:00
Jeff Escalante a9ee7dd0de
anchor link analytics (#7648) 2020-04-28 12:53:27 -04:00
Jeff Escalante 4d00a1261d
add clearer safe write note to readme 2020-04-28 12:53:27 -04:00
Jeff Escalante 3b69eb3b59
add 301 to readme 2020-04-28 12:53:27 -04:00
Jeff Escalante 7ecec91869
circle docker image config 2020-04-28 12:53:26 -04:00
Jeff Escalante cc19b88288
a couple more anchor link fixes 2020-04-28 12:53:26 -04:00
Jeff Escalante 62c991c66d
misc cleanup & fixes 2020-04-28 12:53:26 -04:00
Jeff Escalante 214927acee
update meta description 2020-04-28 12:53:26 -04:00
Jeff Escalante 57c5118a83
update deps, add no-index category, fix downloads page 2020-04-28 12:53:25 -04:00
Jeff Escalante 6907c7e3db
fix broken links 2020-04-28 12:53:25 -04:00
Jeff Escalante 95a4c2adde
fix homepage link, docs index 2020-04-28 12:53:25 -04:00
Jeff Escalante af07d9f006
remove guides that were moved to learn 2020-04-28 12:53:24 -04:00
Jeff Escalante 4a5d67a24e
add k8s/consul alias back, fix react prop name 2020-04-28 12:53:24 -04:00
Jeff Escalante a8a3c76983
remove 'sidebar_current' from frontmatter 2020-04-28 12:53:24 -04:00
Jeff Escalante 3da06f9786
home & use case pages 2020-04-28 12:53:23 -04:00