9fb8616bac
fix broken test ( #12741 )
2022-04-11 10:56:57 -05:00
231e5b61e7
test: use docker buildkit backend for envoy integration tests ( #12726 )
2022-04-11 10:49:44 -05:00
e62275642b
ui: Add more explanatory texts for empty states ( #12354 )
...
* ui: Add more explanatory texts for empty states
* Change all template "Read the guide"s
* Add missing htmlSafe
* Remove the stuff I commented out to try and grok the hairy rebase
* Changelog
* More rebased yaml weirdness plus added node:read
2022-04-11 12:49:59 +01:00
3bcd93c5e8
Fixup any psuedo elements that don't need currentColor
2022-04-11 10:05:02 +01:00
c36aa48f71
Fallback icons to currentColor
2022-04-11 10:04:26 +01:00
b1edc7b112
Update vault to 1.9.4
...
Vault hasn't been updated for a while, and we should be testing
against a newer version. I'd update to 1.10.0, but we would run afoul
of https://github.com/hashicorp/vault/issues/14863 . We should update
to 1.10.1 as soon as it comes our, or better yet move to using latest.
Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-04-08 15:33:45 -07:00
1d817f683a
Merge pull request #12725 from hashicorp/clarify-service-deregister-after-critical-message
...
improve error msg for deregister critical service
2022-04-07 18:01:54 -04:00
25ba9c147a
xds: ensure that all connect timeout configs can apply equally to tproxy direct dial connections ( #12711 )
...
Just like standard upstreams the order of applicability in descending precedence:
1. caller's `service-defaults` upstream override for destination
2. caller's `service-defaults` upstream defaults
3. destination's `service-resolver` ConnectTimeout
4. system default of 5s
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
2022-04-07 16:58:21 -05:00
c4534bc53d
improve error msg for deregister critical service
...
If a service is automatically registered because it has a critical health check
for longer than deregister_critical_service_after, the error message will now
include:
- mention of the deregister_critical_service_after option
- the value of deregister_critical_service_after for that check
2022-04-07 14:50:02 -07:00
62476e25fb
docs: Updating Gossip EncryptionKey Rotation page with Vault use case ( #12720 )
...
* docs: Updating Gossip EncryptionKey Rotation page with Vault use case
* Adding a note to the vault instructions linking to the gossip key encryption using Vault page.
* Correcting Vault guide for storing the rotated gossip key.
* adding $ to shell sessions where it is missing on the gossip rotation page
* adding $ to more shell sessions where it is missing on the gossip rotation page
2022-04-07 13:41:42 -06:00
1502936c12
Consul on ECS 0.4.0 ( #12694 )
...
Update website docs for Consul on ECS 0.4.0
2022-04-07 11:43:12 -07:00
bf2364590e
add changelog for rpc metric improv project ( #12709 )
...
Co-authored-by: Dhia Ayachi <dhia@hashicorp.com>
2022-04-07 11:35:06 -07:00
9780b672da
Merge pull request #12685 from hashicorp/http-check-redirect-option
...
Add a field to disable following redirects on http checks
2022-04-07 11:29:27 -07:00
fd08b6aaf6
Update k8s docs for Vault as a Secrets Backend ( #12691 )
...
* Updating k8s Vault as a Secrets Backend docs
* Moving files in data-integration folder
* Updating routes to moved files
* Removing known limitations since we have delivered them.
* Revise overview page to point towards the System Integration and Data Integration pages.
* Updating Systems Overview page
* Making corrections to Overview and Systems Integration page
* Updating Data Integration page
* Gossip page
* Enterprise Licensepage
* Bootstrap Token
* Replication Token
* Revisions to bootrap, replication, and enterprise license
* snapshot agent page. revisiions to other data integration pages
* Consul Service Mesh TLS Provider page
* ServerTLS page
* Spelling, grammar errors
* Update website/content/docs/k8s/installation/vault/index.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/index.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/server-tls.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/connect-ca.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/gossip.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/snapshot-agent-config.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/bootstrap-token.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/connect-ca.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/enterprise-license.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/replication-token.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/data-integration/replication-token.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Updating data center to datacenter
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* interim changes
* more formatting changes
* adding additional formatting changes
* more formatting on systems integration page
* remove TODO
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: David Yu <dyu@hashicorp.com>
* Update website/content/docs/k8s/installation/vault/index.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/index.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Update website/content/docs/k8s/installation/vault/systems-integration.mdx
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
* Adding partition token
* removing dangling word
* Adding missing navlink for partitions page
* Adding VAULT_TOKEN documentation and a note to VAULT_ADDR about https and the possible need for the VAULT_CACERT.
* Fixing broken links and ordering lists
* Fixing broken links. Changing pre-requisites to prerequisites.
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
2022-04-07 12:16:24 -06:00
8b527889ec
ci: run envoy integration tests on a real machine ( #12715 )
2022-04-07 11:25:10 -05:00
a553982506
Enable running autopilot state updates on all servers ( #12617 )
...
* Fixes a lint warning about t.Errorf not supporting %w
* Enable running autopilot on all servers
On the non-leader servers all they do is update the state and do not attempt any modifications.
* Fix the RPC conn limiting tests
Technically they were relying on racey behavior before. Now they should be reliable.
2022-04-07 10:48:48 -04:00
b3c7f44d32
ui: Ignore Service/Node permissions for Overview just use operator ( #12693 )
2022-04-07 11:35:49 +01:00
6928ea090f
ui: Amend UI branching docs ( #12705 )
2022-04-07 11:34:24 +01:00
11e7931896
Merge pull request #12698 from hashicorp/ma/backport-1.12-info
...
Update branch list for 1.12, remove 1.8
2022-04-06 19:58:55 -07:00
25c32be517
k8s docs - ACLs refactor - Updating terminating gateway documentation to call out updating the role rather than the token with the policy ( #12612 )
...
* k8s docs - ACLs refactor - Updating terminating gateway documentation to call out updating the role rather than the token with the policy
* Modifying role and policy names based on naming convention change.
2022-04-06 15:54:27 -06:00
5245251bbf
[rpc/middleware][consul] plumb intercept off, add server level happy test ( #12692 )
2022-04-06 14:33:05 -07:00
7ed356b338
lower log to trace ( #12708 )
2022-04-06 11:37:08 -07:00
26b554cd04
Update branch list
...
Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-04-06 09:26:41 -07:00
9e986c62e4
Merge pull request #12621 from hashicorp/ma/move-enterprise-meta-oss
...
Move EnterpriseMeta to acl package
2022-04-06 08:49:41 -07:00
3b44343276
Add a field to disable following redirects on http checks
2022-04-05 16:12:18 -07:00
98a2e282be
Fixup acl.EnterpriseMeta
...
Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-04-05 15:11:49 -07:00
b667c5fed8
Fixup script 2
...
Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-04-05 14:52:43 -07:00
92c7c47276
SQ FIX
...
Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-04-05 14:52:43 -07:00
8ddf7cc1bd
Add script (REMOVE LATER)
...
'
Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-04-05 14:52:43 -07:00
05eded4f1d
Manual Structs fixup
...
Change things by hand that I couldn't figure out how to automate
Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-04-05 14:51:10 -07:00
897ba08cfd
add new entmeta stuff.
...
Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-04-05 14:49:31 -07:00
96748197fc
build: remove unused tools from being installed ( #12671 )
2022-04-05 16:01:02 -05:00
d06183ba7f
syncing changes back from enterprise ( #12701 )
2022-04-05 15:46:56 -05:00
e941d50bc8
Creating a changelog entry for #12565 ( #12699 )
2022-04-05 15:55:14 -04:00
41ef1671fa
Merge pull request #12695 from hashicorp/feature-negotiation-grpc-api-oss
...
[OSS] Supported dataplane features gRPC endpoint
2022-04-05 11:26:33 -07:00
24245edfcc
routine: fix that acl stops replicating after regaining leadership ( #12295 ) ( #12565 )
...
* routine: fix that acl stops replicating after regaining leadership (#12295 )
* routine: add TestManager_StopBlocking (#12295 )
* routine: update TestManager_StopBlocking (#12295 )
2022-04-05 14:17:53 -04:00
7be40406fa
ca: move ConnectCA.Sign authorization logic to CAManager ( #12609 )
...
OSS sync of enterprise changes at 8d6fd125
2022-04-05 13:16:20 -05:00
6cf22a5cef
Merge pull request #12672 from hashicorp/tgate-san-validation
...
Respect SNI with terminating gateways and log a warning if it isn't set alongside TLS
2022-04-05 11:15:59 -07:00
a85a4b3bbd
build: conditionally install or reinstall protobuf supporting tools as needed ( #12674 )
2022-04-05 11:58:07 -05:00
82d3418642
website: fix usages of img tag ( #12696 )
2022-04-05 11:18:57 -05:00
217f9fe1a9
Update .changelog/12695.txt
...
Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com>
2022-04-05 09:08:37 -07:00
d49ea7930a
docs: rename Connect Service Mesh Kubernetes to Consul Service Mesh on Kubernetes ( #12690 )
...
* docs:rename Connect Service Mesh Kubernetes to Consul Service Mesh on Kubernetes
2022-04-05 07:46:14 -07:00
b0ebea8d7a
Add changelog
2022-04-05 07:44:26 -07:00
ec1ae5eca1
[OSS] Supported dataplane features gRPC endpoint
...
Adds a new gRPC service and endpoint to return the list of supported
consul dataplane features. The Consul Dataplane will use this API to
customize its interaction with that particular server.
2022-04-05 07:38:58 -07:00
a70e1886c9
WatchRoots gRPC endpoint ( #12678 )
...
Adds a new gRPC streaming endpoint (WatchRoots) that dataplane clients will
use to fetch the current list of active Connect CA roots and receive new
lists whenever the roots are rotated.
2022-04-05 15:26:14 +01:00
f51c02a923
Update Helm docs to reflect 0.42.0 release ( #12689 )
...
* Update Helm docs to reflect 0.42.0 release
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
2022-04-04 14:50:59 -07:00
79144dbac6
docs: Update links to K8s service mesh annotations ( #12652 )
...
The list of supported annotations for Consul service mesh were moved
from /docs/k8s/connect to /docs/k8s/annotations-and-labels in PR
#12323 .
This commit updates various across the site to point to the new
URL for these annotations.
2022-04-04 14:35:07 -07:00
13fba7567f
Merge pull request #12687 from hashicorp/acl-fix
...
docs: fixes broken url in acl overview page
2022-04-04 14:06:09 -07:00
2bc11a5db6
Updating helm docs with additionalVault and ACLs refactor functionality. ( #12669 )
...
* Updating helm docs with additionalVault and ACLs refactor funtionality.
* PR Feedback corrections.
- Fix indentation.
- Fix description of secretName and secretKey to be consistent
- Change description of manageACLsRole to be more clear.
- Make the added vault role field descriptions consistent
* PR Feedback - correcting description for adminPartitionsRole
* Fixing broken shell sessions
* Fixing broken shell sessions by changing shell-session tobecloser tocomment marker
2022-04-04 14:36:19 -06:00
1db1905cb5
docs: fixes broken url in acl overview page
2022-04-04 09:47:15 -07:00
R.B. Boyer
John Cowen
John Cowen
Mark Anderson
Jared Kirschner
Jared Kirschner
John Murret
Chris Thain
FFMMM
Kyle Havlovitz
Matt Keeler
Riddhi Shah
weichuliu
Dan Upton
Bryce Kalow
David Yu
Thomas Eckert
Blake Covarrubias
mrspanishviking