Commit Graph

12079 Commits

Author SHA1 Message Date
R.B. Boyer b73816fabb dev: adding a make target to regenerate envoy golden files (#10158) 2021-04-30 16:27:58 +00:00
R.B. Boyer 59ee091fb0
[1.8.x] remove Codecov from CI runs (#10145) (#10156)
Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>
2021-04-30 10:17:00 -05:00
R.B. Boyer 55600be4a9
[1.8.x] connect: update supported envoy versions to 1.14.7, 1.13.7, 1.12.7, 1.11.2 (#10106) 2021-04-29 15:56:24 -05:00
Matt Keeler 86cd4fbe8a
Merge pull request #10103 from hashicorp/backport/1.8.x/10073
[Backport/1.8.x] Backport #10073
2021-04-23 16:35:49 -04:00
Matt Keeler 835d3d4258 Add replication metrics (#10073)
# Conflicts:
#	agent/consul/replication.go
2021-04-23 16:18:08 -04:00
Matt Keeler c9919348be Update changelog and add telemetry docs (#10107) 2021-04-23 16:08:19 -04:00
R.B. Boyer a524593d66 test: switch envoy integration tests to use pkill instead of ps+grep+awk+kill (#10097) 2021-04-23 18:24:15 +00:00
Daniel Nephin 40eeebd654 Merge pull request #10094 from hashicorp/update-fingerprint
updating fingerprint
2021-04-23 13:44:13 -04:00
R.B. Boyer 066bacc80c
Merge pull request #10080 from hashicorp/1.8.x-ca-force-skip-xc
[1.8.x] connect/ca: Allow ForceWithoutCrossSigning for all providers
2021-04-21 13:07:57 -05:00
Kyle Havlovitz 658e6a97bb Merge pull request #9672 from hashicorp/ca-force-skip-xc
connect/ca: Allow ForceWithoutCrossSigning for all providers
2021-04-20 15:41:32 -05:00
Sam Salisbury 4e5521c4a9 Merge pull request #10065 from hashicorp/ci/update-ssh-rw-key
ci: rotate the read/write SSH key fingerprint
2021-04-19 17:18:43 +00:00
hashicorp-ci 6206ab2588 Putting source back into Dev Mode 2021-04-15 21:36:35 +00:00
hashicorp-ci 46a6ae729e
Release v1.8.10 2021-04-15 18:15:40 +00:00
hashicorp-ci 201e25ed70
update bindata_assetfs.go 2021-04-15 18:15:39 +00:00
R.B. Boyer 3eb2224ab7
update changelog for 1.8.10 (#10041) 2021-04-15 12:02:59 -05:00
Kent 'picat' Gruber 065fe32c1b Merge pull request #10030 from hashicorp/fix-ent-audit-log-bypass
Add synthetic enterprise entry for CVE-2021-28156
2021-04-15 16:14:43 +00:00
R.B. Boyer 10ca99b793
Merge pull request #10037 from hashicorp/1.8.x/fix-raw-kv-xss
backport(1.8.x): fix raw kv xss
2021-04-15 11:11:09 -05:00
Kent 'picat' Gruber 447dd528f6 Merge pull request #10023 from hashicorp/fix-raw-kv-xss
Add content type headers to raw KV responses
2021-04-15 09:48:14 -04:00
R.B. Boyer cbf1e5d3e9
Merge pull request #10026 from hashicorp/1.8.x-fix-wan-ipv6-key
[1.8.x] Fix advertise_addr_wan_ipv6 configuration key
2021-04-14 16:53:04 -05:00
Daniel Nephin 685c09ef78
Merge pull request #10029 from hashicorp/dnephin/backport-auth-methods-fix-1.8.x
[1.8.x] backport snapshot of ACL Auth Methods bug fix
2021-04-14 17:49:20 -04:00
Daniel Nephin 1cc59bd0cf Merge pull request #9851 from panascais-forks/fix-wan-ipv6-key
Fix advertise_addr_wan_ipv6 configuration key
2021-04-14 16:29:28 -05:00
Daniel Nephin 168e8da213 Merge pull request #10025 from hashicorp/dnephin/fix-snapshot-auth-methods
snapshot: fix saving of auth methods
2021-04-14 17:25:13 -04:00
Daniel Nephin 477cbb5678 Merge pull request #10014 from hashicorp/dnephin/changelog
Add changelog for enterprise change
2021-04-14 18:10:18 +00:00
Matt Keeler 46de6ba9ca
Backport 10013: Move static token resolution into the ACLResolver (#10013) (#10017)
# Conflicts:
#	agent/acl.go
#	agent/acl_test.go
#	agent/agent.go
#	agent/ui_endpoint.go
2021-04-14 13:04:32 -04:00
R.B. Boyer 89e4e3d534
[1.8.x] command: when generating envoy bootstrap configs to stdout do not mix informational logs into the json (#9985)
Backport of #9980 to `1.8.x`

Conflicts:
- just the generated golden command/ files
- envoy.go and envoy_test.go
2021-04-07 15:00:33 -05:00
Hans Hasselberg 0d0f14f901 introduce certopts (#9606)
* introduce cert opts

* it should be using the same signer

* lint and omit serial
2021-03-22 09:17:23 +00:00
Daniel Nephin 3ade77cd2e Merge pull request #8698 from pierreca/fix-iserreof
Use errors.Is() in IsErrEOF()
2021-03-16 21:57:09 +00:00
Daniel Nephin a0d47afb93 Merge pull request #9853 from hashicorp/dnephin/fix-ci-nomad-integ
ci: update config for nomad main branch rename
2021-03-09 20:29:26 +00:00
hashicorp-ci f0b9dc7175 Putting source back into Dev Mode 2021-03-05 16:59:15 +00:00
hashicorp-ci ceef4d6ada
Release v1.8.9 2021-03-04 19:22:48 +00:00
hashicorp-ci 1f92b6cb84
update bindata_assetfs.go 2021-03-04 19:22:47 +00:00
Mike Morris bad702cc73 changelog: add unreleased entries for v1.8.9, remove v1.8.9-beta1 section 2021-03-04 14:12:46 -05:00
John Cowen 24981a6c68 ui: Remove any trailing fullstop/period DNS characters from Gateways UI API (#9752)
Previous to this commit, the API response would include Gateway
Addresses in the form `domain.name.:8080`, which due to the addition of
the port is probably not the expected response.

This commit rightTrims any `.` characters from the end of the domain
before formatting the address to include the port resulting in
`domain.name:8080`
2021-02-25 09:36:43 +00:00
R.B. Boyer 76795ae6d6
test: omit envoy golden test files that differ from the latest version (#9824)
backport of #9807 to 1.8.x
2021-02-24 15:49:32 -06:00
R.B. Boyer 46edc401ad connect: if the token given to the vault provider returns no data avoid a panic (#9806)
Improves #9800
2021-02-22 20:09:25 +00:00
R.B. Boyer 58f068f53a
[1.8.x] test: remove warnings and ensure the expose checks envoy test actually runs (#9804) 2021-02-22 14:02:08 -06:00
R.B. Boyer 40987a2b69
xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9794)
1.8.x backport of #9765

Conflicts:
- agent/xds/listeners_test.go
- test/integration/connect/envoy/helpers.bash
- agent/xds/testdata (different envoy versions)
2021-02-22 10:45:40 -06:00
hashicorp-ci 88fe6f6bd7 Putting source back into Dev Mode 2021-02-11 19:44:58 +00:00
hashicorp-ci 2f27ba6d38
Release v1.8.9-beta1 2021-02-11 19:00:48 +00:00
hashicorp-ci b18269d20a
update bindata_assetfs.go 2021-02-11 19:00:47 +00:00
Matt Keeler 80bb529f98
Update CHANGELOG.md for the 1.8.9-beta1 release (#9757) 2021-02-11 13:29:09 -05:00
R.B. Boyer 22640c9e87
[1.8.x] connect: update supported envoy point releases to 1.14.6, 1.13.7, 1.12.7, 1.11.2 (#9739)
selective backport of #9737
2021-02-10 13:11:51 -06:00
R.B. Boyer 415be133fa
connect: connect CA Roots in the primary datacenter should use a SigningKeyID derived from their local intermediate (#9428) (#9734)
1.8.x backport of #9428
2021-02-09 16:55:22 -06:00
Matt Keeler 5b543790d2
Backport to release/1.8.x: #9738 - Stop background refresh of cached data for requests that result in ACL not found errors (#9742) 2021-02-09 11:32:38 -05:00
Freddy c18a218bbb Avoid potential proxycfg/xDS deadlock using non-blocking send 2021-02-08 23:18:38 +00:00
R.B. Boyer 556b8bd1c2 server: use the presense of stored federation state data as a sign that we already activated the federation state feature flag (#9519)
This way we only have to wait for the serf barrier to pass once before
we can make use of federation state APIs Without this patch every
restart needs to re-compute the change.
2021-02-08 19:30:58 +00:00
R.B. Boyer eed2302b43 xds: prevent LDS flaps in mesh gateways due to unstable datacenter lists (#9651)
Also fix a similar issue in Terminating Gateways that was masked by an overzealous test.
2021-02-08 16:20:37 +00:00
R.B. Boyer bb5c2e802b xds: deduplicate mesh gateway listeners in a stable way (#9650)
In a situation where the mesh gateway is configured to bind to multiple
network interfaces, we use a feature called 'tagged addresses'.
Sometimes an address is duplicated across multiple tags such as 'lan'
and 'lan_ipv4'.

There is code to deduplicate these things when creating envoy listeners,
but that code doesn't ensure that the same tag wins every time. If the
winning tag flaps between xDS discovery requests it will cause the
listener to be drained and replaced.
2021-02-05 22:28:57 +00:00
Hans Hasselberg e6584182f2 Add flags to support CA generation for Connect (#9585) 2021-01-27 07:55:31 +00:00
Matt Keeler bb8386316d Add changelog entry for change to the temporary client license duration (#9642) 2021-01-26 21:15:53 +00:00