R.B. Boyer
b73816fabb
dev: adding a make target to regenerate envoy golden files ( #10158 )
2021-04-30 16:27:58 +00:00
R.B. Boyer
59ee091fb0
[1.8.x] remove Codecov from CI runs ( #10145 ) ( #10156 )
...
Co-authored-by: Jamie Finnigan <jfinnigan@hashicorp.com>
2021-04-30 10:17:00 -05:00
R.B. Boyer
55600be4a9
[1.8.x] connect: update supported envoy versions to 1.14.7, 1.13.7, 1.12.7, 1.11.2 ( #10106 )
2021-04-29 15:56:24 -05:00
Matt Keeler
86cd4fbe8a
Merge pull request #10103 from hashicorp/backport/1.8.x/10073
...
[Backport/1.8.x] Backport #10073
2021-04-23 16:35:49 -04:00
Matt Keeler
835d3d4258
Add replication metrics ( #10073 )
...
# Conflicts:
# agent/consul/replication.go
2021-04-23 16:18:08 -04:00
Matt Keeler
c9919348be
Update changelog and add telemetry docs ( #10107 )
2021-04-23 16:08:19 -04:00
R.B. Boyer
a524593d66
test: switch envoy integration tests to use pkill instead of ps+grep+awk+kill ( #10097 )
2021-04-23 18:24:15 +00:00
Daniel Nephin
40eeebd654
Merge pull request #10094 from hashicorp/update-fingerprint
...
updating fingerprint
2021-04-23 13:44:13 -04:00
R.B. Boyer
066bacc80c
Merge pull request #10080 from hashicorp/1.8.x-ca-force-skip-xc
...
[1.8.x] connect/ca: Allow ForceWithoutCrossSigning for all providers
2021-04-21 13:07:57 -05:00
Kyle Havlovitz
658e6a97bb
Merge pull request #9672 from hashicorp/ca-force-skip-xc
...
connect/ca: Allow ForceWithoutCrossSigning for all providers
2021-04-20 15:41:32 -05:00
Sam Salisbury
4e5521c4a9
Merge pull request #10065 from hashicorp/ci/update-ssh-rw-key
...
ci: rotate the read/write SSH key fingerprint
2021-04-19 17:18:43 +00:00
hashicorp-ci
6206ab2588
Putting source back into Dev Mode
2021-04-15 21:36:35 +00:00
hashicorp-ci
46a6ae729e
Release v1.8.10
2021-04-15 18:15:40 +00:00
hashicorp-ci
201e25ed70
update bindata_assetfs.go
2021-04-15 18:15:39 +00:00
R.B. Boyer
3eb2224ab7
update changelog for 1.8.10 ( #10041 )
2021-04-15 12:02:59 -05:00
Kent 'picat' Gruber
065fe32c1b
Merge pull request #10030 from hashicorp/fix-ent-audit-log-bypass
...
Add synthetic enterprise entry for CVE-2021-28156
2021-04-15 16:14:43 +00:00
R.B. Boyer
10ca99b793
Merge pull request #10037 from hashicorp/1.8.x/fix-raw-kv-xss
...
backport(1.8.x): fix raw kv xss
2021-04-15 11:11:09 -05:00
Kent 'picat' Gruber
447dd528f6
Merge pull request #10023 from hashicorp/fix-raw-kv-xss
...
Add content type headers to raw KV responses
2021-04-15 09:48:14 -04:00
R.B. Boyer
cbf1e5d3e9
Merge pull request #10026 from hashicorp/1.8.x-fix-wan-ipv6-key
...
[1.8.x] Fix advertise_addr_wan_ipv6 configuration key
2021-04-14 16:53:04 -05:00
Daniel Nephin
685c09ef78
Merge pull request #10029 from hashicorp/dnephin/backport-auth-methods-fix-1.8.x
...
[1.8.x] backport snapshot of ACL Auth Methods bug fix
2021-04-14 17:49:20 -04:00
Daniel Nephin
1cc59bd0cf
Merge pull request #9851 from panascais-forks/fix-wan-ipv6-key
...
Fix advertise_addr_wan_ipv6 configuration key
2021-04-14 16:29:28 -05:00
Daniel Nephin
168e8da213
Merge pull request #10025 from hashicorp/dnephin/fix-snapshot-auth-methods
...
snapshot: fix saving of auth methods
2021-04-14 17:25:13 -04:00
Daniel Nephin
477cbb5678
Merge pull request #10014 from hashicorp/dnephin/changelog
...
Add changelog for enterprise change
2021-04-14 18:10:18 +00:00
Matt Keeler
46de6ba9ca
Backport 10013: Move static token resolution into the ACLResolver ( #10013 ) ( #10017 )
...
# Conflicts:
# agent/acl.go
# agent/acl_test.go
# agent/agent.go
# agent/ui_endpoint.go
2021-04-14 13:04:32 -04:00
R.B. Boyer
89e4e3d534
[1.8.x] command: when generating envoy bootstrap configs to stdout do not mix informational logs into the json ( #9985 )
...
Backport of #9980 to `1.8.x`
Conflicts:
- just the generated golden command/ files
- envoy.go and envoy_test.go
2021-04-07 15:00:33 -05:00
Hans Hasselberg
0d0f14f901
introduce certopts ( #9606 )
...
* introduce cert opts
* it should be using the same signer
* lint and omit serial
2021-03-22 09:17:23 +00:00
Daniel Nephin
3ade77cd2e
Merge pull request #8698 from pierreca/fix-iserreof
...
Use errors.Is() in IsErrEOF()
2021-03-16 21:57:09 +00:00
Daniel Nephin
a0d47afb93
Merge pull request #9853 from hashicorp/dnephin/fix-ci-nomad-integ
...
ci: update config for nomad main branch rename
2021-03-09 20:29:26 +00:00
hashicorp-ci
f0b9dc7175
Putting source back into Dev Mode
2021-03-05 16:59:15 +00:00
hashicorp-ci
ceef4d6ada
Release v1.8.9
2021-03-04 19:22:48 +00:00
hashicorp-ci
1f92b6cb84
update bindata_assetfs.go
2021-03-04 19:22:47 +00:00
Mike Morris
bad702cc73
changelog: add unreleased entries for v1.8.9, remove v1.8.9-beta1 section
2021-03-04 14:12:46 -05:00
John Cowen
24981a6c68
ui: Remove any trailing fullstop/period DNS characters from Gateways UI API ( #9752 )
...
Previous to this commit, the API response would include Gateway
Addresses in the form `domain.name.:8080`, which due to the addition of
the port is probably not the expected response.
This commit rightTrims any `.` characters from the end of the domain
before formatting the address to include the port resulting in
`domain.name:8080`
2021-02-25 09:36:43 +00:00
R.B. Boyer
76795ae6d6
test: omit envoy golden test files that differ from the latest version ( #9824 )
...
backport of #9807 to 1.8.x
2021-02-24 15:49:32 -06:00
R.B. Boyer
46edc401ad
connect: if the token given to the vault provider returns no data avoid a panic ( #9806 )
...
Improves #9800
2021-02-22 20:09:25 +00:00
R.B. Boyer
58f068f53a
[1.8.x] test: remove warnings and ensure the expose checks envoy test actually runs ( #9804 )
2021-02-22 14:02:08 -06:00
R.B. Boyer
40987a2b69
xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel ( #9794 )
...
1.8.x backport of #9765
Conflicts:
- agent/xds/listeners_test.go
- test/integration/connect/envoy/helpers.bash
- agent/xds/testdata (different envoy versions)
2021-02-22 10:45:40 -06:00
hashicorp-ci
88fe6f6bd7
Putting source back into Dev Mode
2021-02-11 19:44:58 +00:00
hashicorp-ci
2f27ba6d38
Release v1.8.9-beta1
2021-02-11 19:00:48 +00:00
hashicorp-ci
b18269d20a
update bindata_assetfs.go
2021-02-11 19:00:47 +00:00
Matt Keeler
80bb529f98
Update CHANGELOG.md for the 1.8.9-beta1 release ( #9757 )
2021-02-11 13:29:09 -05:00
R.B. Boyer
22640c9e87
[1.8.x] connect: update supported envoy point releases to 1.14.6, 1.13.7, 1.12.7, 1.11.2 ( #9739 )
...
selective backport of #9737
2021-02-10 13:11:51 -06:00
R.B. Boyer
415be133fa
connect: connect CA Roots in the primary datacenter should use a SigningKeyID derived from their local intermediate ( #9428 ) ( #9734 )
...
1.8.x backport of #9428
2021-02-09 16:55:22 -06:00
Matt Keeler
5b543790d2
Backport to release/1.8.x: #9738 - Stop background refresh of cached data for requests that result in ACL not found errors ( #9742 )
2021-02-09 11:32:38 -05:00
Freddy
c18a218bbb
Avoid potential proxycfg/xDS deadlock using non-blocking send
2021-02-08 23:18:38 +00:00
R.B. Boyer
556b8bd1c2
server: use the presense of stored federation state data as a sign that we already activated the federation state feature flag ( #9519 )
...
This way we only have to wait for the serf barrier to pass once before
we can make use of federation state APIs Without this patch every
restart needs to re-compute the change.
2021-02-08 19:30:58 +00:00
R.B. Boyer
eed2302b43
xds: prevent LDS flaps in mesh gateways due to unstable datacenter lists ( #9651 )
...
Also fix a similar issue in Terminating Gateways that was masked by an overzealous test.
2021-02-08 16:20:37 +00:00
R.B. Boyer
bb5c2e802b
xds: deduplicate mesh gateway listeners in a stable way ( #9650 )
...
In a situation where the mesh gateway is configured to bind to multiple
network interfaces, we use a feature called 'tagged addresses'.
Sometimes an address is duplicated across multiple tags such as 'lan'
and 'lan_ipv4'.
There is code to deduplicate these things when creating envoy listeners,
but that code doesn't ensure that the same tag wins every time. If the
winning tag flaps between xDS discovery requests it will cause the
listener to be drained and replaced.
2021-02-05 22:28:57 +00:00
Hans Hasselberg
e6584182f2
Add flags to support CA generation for Connect ( #9585 )
2021-01-27 07:55:31 +00:00
Matt Keeler
bb8386316d
Add changelog entry for change to the temporary client license duration ( #9642 )
2021-01-26 21:15:53 +00:00