cd1aa9b426
Remove misleading encrypt param documentation ( #5452 )
...
According to https://www.consul.io/docs/agent/options.html#_encrypt , the `encrypt` param specifies the 16-byte key to use, not the path to a config file containing the key.
2019-03-12 10:26:40 -05:00
2e175be41b
acl: correctly extend the cache for acl identities during resolution ( #5475 )
2019-03-12 10:23:43 -05:00
21fcfcad7f
Merge pull request #5451 from hashicorp/update_go_discover_for_azure
...
Update go-discover vendor
2019-03-11 16:39:39 -04:00
e293045751
Typo fix (segement > segment) ( #5469 )
2019-03-11 16:25:19 +01:00
ec7d700bf4
Update CHANGELOG.md
2019-03-11 14:49:49 +00:00
4bea29f15a
[catalog] Update the node's services indexes on update ( #5458 )
...
Node updates were not updating the service indexes, which are used for
service related queries. This caused the X-Consul-Index to stay the same
after a node update as seen from a service query even though the node
data is returned in heath queries. If that happened in between queries
the client would miss this change.
We now update the indexes of the services on the node when it is
updated.
Fixes : #5450
2019-03-11 14:48:19 +00:00
23bc8636c1
website: delete duplication of "are" ( #5464 )
2019-03-11 10:42:15 +01:00
a505e6e9da
Update go-discover vendor
...
* Adds note about use of ENV variables for auto-join on Azure
2019-03-08 22:57:48 +00:00
9c08893ae4
Merge pull request #5453 from hashicorp/circleci2.0-config
...
refactor circleci config to 2.0
2019-03-08 16:10:57 -05:00
329d8b7cfb
refactor circleci config to 2.0
2019-03-08 16:03:40 -05:00
8d98032ed9
Merge pull request #5445 from hashicorp/docs/helm-annotations
...
Add docs for new Helm `annotations` options
2019-03-08 12:11:30 -08:00
4699423a18
[Docs] ACL Bootstrap Guide ( #5399 )
...
* Adding updates for consul reload of token config.
* Update website/source/docs/guides/acl.html.md
2019-03-08 13:12:16 -06:00
f4c7b84500
[doc] New Ports Documentation ( #5442 )
...
* Adding a ports table.
* Updating layout based on feedback.
2019-03-08 13:10:35 -06:00
3ac9e57efe
Add docs for new Helm `annotations` options
2019-03-08 10:10:25 -08:00
25c9f0e4aa
Merge pull request #5444 from hashicorp/docs/helm-priorityClassName
...
Add docs about new Helm `priorityClassName` options
2019-03-08 10:07:49 -08:00
6c7245ce84
Add docs about new Helm `priorityClassName` options
2019-03-08 09:42:53 -08:00
7d62c8fbec
Merge pull request #5443 from hashicorp/docs/acl-to-sync
...
Move aclSyncToken docs under `syncCatalog`
2019-03-08 09:06:43 -08:00
3dbd73ee23
Move aclSyncToken docs under `syncCatalog`
...
Additionally updates the anchors to follow the established convention.
2019-03-07 16:54:11 -08:00
80194732c5
[docs] fix link to prepared query rules ( #5435 )
...
* [docs] fix link to prepared query rules
* Update website/source/api/query.html.md
Co-Authored-By: judithpatudith <judith@hashicorp.com>
2019-03-07 12:10:40 -08:00
f1864b128e
Merge pull request #5431 from hashicorp/docs/helm-extraConfig
...
[docs] Add examples for the `extraConfig` options in the Helm chart
2019-03-06 14:25:25 -08:00
c07b7cc154
Add examples for the `extraConfig` options in the Helm chart
2019-03-06 13:01:17 -08:00
77727d23ae
Merge pull request #5436 from hashicorp/fix-typo
...
fix typos
2019-03-06 15:00:17 -05:00
8cb8108b1b
fix typos
2019-03-06 14:47:33 -05:00
f4a3b9d518
fix typos reported by golangci-lint:misspell ( #5434 )
2019-03-06 11:13:28 -06:00
9b1bc8d96d
[Docs] Production Guide for ACLs ( #5385 )
...
* New guide for ACLs
* Fixing some formatting issues.
* Update website/source/docs/guides/production-acls.html.md
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
* Update website/source/docs/guides/production-acls.html.md
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
* Update website/source/docs/guides/production-acls.html.md
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
* Resolving PR comments.
* Closing the rest of the PR comments
* Updates for persistence.
* Updating commands.
* Update website/source/docs/guides/production-acls.html.md
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
* Update website/source/docs/guides/production-acls.html.md
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
2019-03-06 10:46:07 -06:00
f658748a79
Merge pull request #5420 from hashicorp/f-catalog-changes
...
Catalog API Doc Changes
2019-03-06 11:00:37 -05:00
ea38ad18f1
Update to registering services via Catalog API
2019-03-06 09:41:12 -05:00
ad25767416
Update to registering services via Catalog API
2019-03-06 09:23:37 -05:00
eb0895c5fb
tlsutil: don't use `server_name` config for RPC connections ( #5394 )
...
* server name only for outgoing https for checks
2019-03-05 21:35:43 +01:00
2ffbea41c8
improve flaky LANReap tests by expliciting configuring the tombstone timeout
...
In TestServer_LANReap autopilot is running, so the alternate flow
through the serf reaping function is possible. In that situation the
ReconnectTimeout is not relevant so for parity also override the
TombstoneTimeout value as well.
For additional parity update the TestServer_WANReap and
TestClient_LANReap versions of this test in the same way even though
autopilot is irrelevant here .
2019-03-05 14:34:03 -06:00
5bea49ecb0
tests: avoid leaking child processes from agent/proxyprocess package
2019-03-05 14:29:25 -06:00
a99f7aaa25
website: fix broken links
2019-03-05 14:24:33 -06:00
feaece034b
website: fix gemfile.lock ( #5429 )
2019-03-05 20:55:04 +01:00
a4e2fe67eb
Putting source back into Dev Mode
2019-03-05 19:26:42 +00:00
9e7d0ff2d4
Merge branch 'master' of https://github.com/hashicorp/consul
2019-03-05 19:05:53 +00:00
aa6a392489
[docs] Add IntelliJ Consul to the list of community tools ( #5379 )
2019-03-05 13:58:03 +01:00
567e41ff6b
Release v1.4.3
2019-03-04 19:21:20 +00:00
67f4633134
Update Changelog
2019-03-04 19:18:25 +00:00
90040f8bff
Fixes for CVE-2019-8336
...
Fix error in detecting raft replication errors.
Detect redacted token secrets and prevent attempting to insert.
Add a Redacted field to the TokenBatchRead and TokenRead RPC endpoints
This will indicate whether token secrets have been redacted.
Ensure any token with a redacted secret in secondary datacenters is removed.
Test that redacted tokens cannot be replicated.
2019-03-04 19:13:24 +00:00
ae8f273a92
Update to registering services via Catalog API
2019-03-04 09:46:37 -05:00
9e91906664
Update to registering services via Catalog API
2019-03-04 09:45:24 -05:00
59cca0b975
Update CHANGELOG.md
2019-03-04 09:43:51 -05:00
d35824b1fa
default to tls 1.2 as promised. ( #5340 )
2019-03-04 09:42:04 -05:00
7a418f70cf
Update CHANGELOG.md
2019-03-04 09:35:13 -05:00
2aac4d5168
Register and deregisters services and their checks atomically in the local state ( #5012 )
...
Prevent race between register and deregister requests by saving them
together in the local state on registration.
Also adds more cleaning in case of failure when registering services
/ checks.
2019-03-04 09:34:05 -05:00
219e9f8297
Update CHANGELOG.md
2019-03-04 09:29:54 -05:00
6e6910ea11
Dont modify memdb owned token data for get/list requests of tokens ( #5412 )
...
Previously we were fixing up the token links directly on the *ACLToken returned by memdb. This invalidated some assumptions that a snapshot is immutable as well as potentially being able to cause a crash.
The fix here is to give the policy link fixing function copy on write semantics. When no fixes are necessary we can return the memdb object directly, otherwise we copy it and create a new list of links.
Eventually we might find a better way to keep those policy links in sync but for now this fixes the issue.
2019-03-04 09:28:46 -05:00
02f991843f
Fix race condition in DNS when using cache ( #5398 )
...
* Fix race condition in DNS when using cache
The healty node filtering was modifying the result from the cache, which
caused a crash when multiple queries were made to the same service
simultaneously.
We now copy the node slice before filtering to ensure we do not modify
the data stored in the cache.
* Fix wording in dns cache config doc
s/dns_max_age/cache_max_age/
2019-03-04 09:22:01 -05:00
767b8c22ea
Update CHANGELOG.md
2019-03-04 09:20:58 -05:00
200c0fb3e9
Call RemoveServer for reap events ( #5317 )
...
This ensures that servers are removed from RPC routing when they are reaped.
2019-03-04 09:19:35 -05:00
Reid Beels
R.B. Boyer
Alvin Huang
Lowe Schmidt
Paul Banks
Aestek
Masato Yamazaki
petems
Alvin Huang
Rebecca Zanzig
kaitlincarter-hc
Rebecca Zanzig
Judith Malnick
Chip Vaughn
Chip Vaughn
Hans Hasselberg
R.B. Boyer
Matt Keeler
novotnyr
Matt Keeler