Hans Hasselberg
53e9c134af
introduce certopts ( #9606 )
...
* introduce cert opts
* it should be using the same signer
* lint and omit serial
2021-03-22 10:16:41 +01:00
Daniel Nephin
eb6769ccc6
state: convert acl-policies table to new pattern
2021-03-19 15:24:00 -04:00
Daniel Nephin
340462dd72
state: use constants and add tests for acl-policies table
2021-03-19 15:19:57 -04:00
Daniel Nephin
0c14f3818d
state: add indexer test for services.ID index
2021-03-19 14:13:14 -04:00
Daniel Nephin
dbd3cef1ed
state: handle wildcard for services.ID index
...
When listing services, use the id_prefix directly if wildcards are allowed.
Error if a wildcard is used for a query that does not index the wildcard
2021-03-19 14:12:19 -04:00
Daniel Nephin
627c469f08
state: fix prefix index with the new pattern
...
Prefix queries are generally being used to match part of a partial
index. We can support these indexes by using a function that accept
different types for each subset of the index.
What I found interesting is that in the generic StringFieldIndexer the
implementation for PrefixFromArgs would remove the trailing null, but
at least in these 2 cases we actually want a null terminated string.
We simply want fewer components in the string.
2021-03-19 14:12:17 -04:00
Daniel Nephin
d90845f26d
state: move services.ID to new pattern
2021-03-19 14:11:59 -04:00
hashicorp-ci
f3f3513d83
auto-updated agent/uiserver/bindata_assetfs.go from commit a7a56ca39
2021-03-19 15:19:17 +00:00
Daniel Nephin
4d1d19ed46
state: add tests for gateway-service table indexers
2021-03-18 12:09:42 -04:00
Daniel Nephin
11b4de719c
state: use constants and remove wrapping
...
for GatewayServices table
2021-03-18 12:08:59 -04:00
Daniel Nephin
d879fe581d
state: Move UpstreamDownstream to state package
2021-03-18 12:08:59 -04:00
Daniel Nephin
65f5b99247
state: add tests for mesh-topology table indexers
2021-03-18 12:08:57 -04:00
Daniel Nephin
c749c6c927
state: use constants for mesh-topology table operations
2021-03-18 12:08:03 -04:00
hashicorp-ci
43f6544c21
auto-updated agent/uiserver/bindata_assetfs.go from commit 980299d51
2021-03-18 15:23:26 +00:00
hashicorp-ci
69f6fc9f99
auto-updated agent/uiserver/bindata_assetfs.go from commit 8dc590cf1
2021-03-18 14:41:20 +00:00
Freddy
1c13aa23f1
Merge pull request #9900 from hashicorp/ent-fixes
...
Fixup enterprise tests from tproxy changes
2021-03-18 08:33:30 -06:00
Freddy
0bab999fe4
Merge pull request #9899 from hashicorp/wildcard-ixn-oss
...
Add methods to check intention has wildcard src or dst
2021-03-18 08:33:07 -06:00
freddygv
098b9af901
Fixup enterprise tests from tproxy changes
2021-03-17 23:05:00 -06:00
freddygv
9713e3ba38
Add methods to check intention has wildcard src or dst
2021-03-17 22:15:48 -06:00
freddygv
eb1e0a1751
Cancel watch on all errors
2021-03-17 21:44:14 -06:00
freddygv
52bf00de8b
Split up normalizing from defaulting values for upstream cfg
2021-03-17 21:37:55 -06:00
freddygv
ad6c726453
Uncomment listener tests
2021-03-17 21:37:12 -06:00
freddygv
f4f45af6d0
Merge master and fix upstream config protocol defaulting
2021-03-17 21:13:40 -06:00
freddygv
9bff39ba07
Temporarily silence spurious wakeup. Addressing false positive in beta.
2021-03-17 17:25:29 -06:00
freddygv
0defd17106
Merge remote-tracking branch 'origin/master' into intention-topology-endpoint
2021-03-17 17:14:38 -06:00
Freddy
8207b832df
Add TransparentProxy option to proxy definitions
2021-03-17 17:01:45 -06:00
Freddy
c664938bae
Add per-upstream configuration to service-defaults
2021-03-17 16:59:51 -06:00
freddygv
7938dd82eb
Add changelog and cleanup todo for beta
2021-03-17 16:45:13 -06:00
freddygv
9f0696528b
Rename hasChains for clarity
2021-03-17 16:42:29 -06:00
freddygv
0da8702f34
PR comments
2021-03-17 16:18:56 -06:00
freddygv
bf96d536d9
Upstreams loop is only for prepared queries and they are not CentrallyConfigured
2021-03-17 15:32:52 -06:00
freddygv
8a062e1546
Handle prepared queries in Upstreams loop and escape hatches in disco chain loop
2021-03-17 15:17:43 -06:00
freddygv
ce964f8ea5
Update xds for transparent proxy
2021-03-17 13:40:49 -06:00
freddygv
a54d6a9010
Update proxycfg for transparent proxy
2021-03-17 13:40:39 -06:00
freddygv
37f684664d
Do not include consul as upstream or downstream
2021-03-17 13:40:04 -06:00
Daniel Nephin
69ce10602f
state: add tests for config-entry indexers
2021-03-17 14:41:46 -04:00
Daniel Nephin
a414649543
state: convert config-entries kind index to new pattern
2021-03-17 14:40:57 -04:00
Daniel Nephin
aadf187094
state: remove config-entries namespace index
...
Use a prefix of the ID index instead.
2021-03-17 14:40:57 -04:00
Daniel Nephin
d70bbf671a
state: remove unnecessary method receiver
2021-03-17 14:40:57 -04:00
Daniel Nephin
650ac62098
state: convert config-entries table to new indexer pattern
...
Using functional indexes to isolate enterprise differentiation and
remove reflection.
2021-03-17 14:40:57 -04:00
Daniel Nephin
9f03e23e44
Merge pull request #9881 from hashicorp/dnephin/state-index-service-check-nodes
...
state: convert services.node and checks.node indexes
2021-03-17 14:12:02 -04:00
Daniel Nephin
bd6332ae25
Merge pull request #9863 from hashicorp/dnephin/config-entry-kind-name
...
state: move ConfigEntryKindName
2021-03-17 14:09:39 -04:00
hashicorp-ci
583743424f
auto-updated agent/uiserver/bindata_assetfs.go from commit 9e715842d
2021-03-17 16:03:18 +00:00
hashicorp-ci
bac1afbb89
auto-updated agent/uiserver/bindata_assetfs.go from commit f9e8b26af
2021-03-17 14:45:58 +00:00
hashicorp-ci
6872c33881
auto-updated agent/uiserver/bindata_assetfs.go from commit aca797658
2021-03-17 11:27:44 +00:00
hashicorp-ci
f4a96768d1
auto-updated agent/uiserver/bindata_assetfs.go from commit 41471719e
2021-03-17 10:50:59 +00:00
freddygv
3f2489c31d
Refactor makePublicListener
...
By accepting a name the function can be used for other inbound listeners,
like the one for TransparentProxy.
2021-03-16 19:22:26 -06:00
Christopher Broglie
f0307c73e5
Add support for configuring TLS ServerName for health checks
...
Some TLS servers require SNI, but the Golang HTTP client doesn't
include it in the ClientHello when connecting to an IP address. This
change adds a new TLSServerName field to health check definitions to
optionally set it. This fixes #9473 .
2021-03-16 18:16:44 -04:00
freddygv
7892964a0c
Add cache-type for Internal.IntentionUpstreams
2021-03-16 11:06:47 -06:00
Daniel Nephin
34eb6c01ff
state: convert services.node and checks.node indexes
...
Using NodeIdentity to share the indexes with both.
2021-03-16 13:00:31 -04:00