Freddy
137a2c32c6
TLS Origination for Terminating Gateways ( #7671 )
2020-04-27 16:25:37 -06:00
Freddy
c1dc2f12f7
Terminating Gateways Proxy Configuration ( #7631 )
2020-04-27 14:41:33 -06:00
R.B. Boyer
16edcbe682
update changelog
2020-04-27 14:30:27 -05:00
R.B. Boyer
051fc0ee07
update changelog
2020-04-27 13:17:03 -05:00
freddygv
4710410cb5
Remove fallthrough
2020-04-27 12:00:14 -06:00
freddygv
d1e6d668c2
Add authz filter when creating filterchain
2020-04-27 11:08:41 -06:00
freddygv
034d7d83d4
Fix snapshot IsEmpty
2020-04-27 11:08:41 -06:00
freddygv
3afe816a94
Clean up dead code, issue addressed by passing ws to serviceGatewayNodes
2020-04-27 11:08:41 -06:00
Freddy
3b1b24c2ce
Update agent/proxycfg/state_test.go
2020-04-27 11:08:41 -06:00
freddygv
eddd5bd73b
PR comments
2020-04-27 11:08:41 -06:00
freddygv
77bb2f1002
Fix internal endpoint test
2020-04-27 11:08:41 -06:00
freddygv
d82e7e8c2a
Fix listener error handling
2020-04-27 11:08:41 -06:00
freddygv
6abc71f915
Skip filter chain creation if no client cert
2020-04-27 11:08:41 -06:00
freddygv
915db10903
Avoid deleting mappings for services linked to other gateways on dereg
2020-04-27 11:08:41 -06:00
freddygv
cd28d4125d
Re-fix bug in CheckConnectServiceNodes
2020-04-27 11:08:41 -06:00
freddygv
09a8e5f36d
Use golden files for gateway certs and fix listener test flakiness
2020-04-27 11:08:41 -06:00
freddygv
840d27a9d5
Un-nest switch in gateway update handler
2020-04-27 11:08:40 -06:00
freddygv
2a85e44519
Add envoy integration tests
2020-04-27 11:08:40 -06:00
freddygv
c0e1751878
Allow terminating-gateway to setup listener before servicegroups are known
2020-04-27 11:08:40 -06:00
freddygv
913b13f31f
Add subset support
2020-04-27 11:08:40 -06:00
freddygv
9f233dece2
Fix ConnectQueryBlocking test
2020-04-27 11:08:40 -06:00
freddygv
86342e4bca
Fix bug in CheckConnectServiceNodes
...
Previously, if a blocking query called CheckConnectServiceNodes
before the gateway-services memdb table had any entries,
a nil watchCh would be returned when calling serviceTerminatingGatewayNodes.
This means that the blocking query would not fire if a gateway config entry
was added after the watch started.
In cases where the blocking query started on proxy registration,
the proxy could potentially never become aware of an upstream endpoint
if that upstream was going to be represented by a gateway.
2020-04-27 11:08:40 -06:00
freddygv
219c78e586
Add xds cluster/listener/endpoint management
2020-04-27 11:08:40 -06:00
freddygv
24207226ca
Add proxycfg state management for terminating-gateways
2020-04-27 11:07:06 -06:00
freddygv
c9385129ae
Require service:read to read terminating-gateway config
2020-04-27 11:07:06 -06:00
Matt Keeler
a1648c61ae
A couple testing helper updates ( #7694 )
2020-04-27 12:17:38 -04:00
R.B. Boyer
58a597693b
update changelog
2020-04-24 17:36:06 -05:00
R.B. Boyer
b989967791
cli: ensure that 'snapshot save' is fsync safe and also only writes to the requested file on success ( #7698 )
2020-04-24 17:34:47 -05:00
R.B. Boyer
c0a32c802a
update changelog
2020-04-24 17:19:59 -05:00
R.B. Boyer
5f1518c37c
cli: fix usage of gzip.Reader to better detect corrupt snapshots during save/restore ( #7697 )
2020-04-24 17:18:56 -05:00
Kit Patella
df14a7c694
Merge pull request #7699 from pierresouchay/fix_comment_misplaced
...
Fixed comment on wrong line
2020-04-24 10:09:58 -07:00
Chris Piraino
217a03550b
Merge pull request #7677 from hashicorp/ingress/http-routing
...
Ingress gateways support discovery chain features and routing via mesh gateways
Signed-off-by: Kyle Havlovitz <kylehav@gmail.com>
2020-04-24 10:18:55 -05:00
Chris Piraino
ecc8a2d6f7
Allow ingress gateways to route through mesh gateways
...
- Adds integration test for mesh gateways local + remote modes with ingress
- ingress golden files updated for mesh gateway endpoints
2020-04-24 09:31:32 -05:00
Chris Piraino
cb9df538d5
Add all the xds ingress tests
...
This commit copies many of the connect-proxy xds testcases and reuses
for ingress gateways. This allows us to more easily see changes to the
envoy configuration when make updates to ingress gateways.
2020-04-24 09:31:32 -05:00
Chris Piraino
0ca9b606e8
Pull out setupTestVariationConfigEntriesAndSnapshot in proxycfg
...
This allows us to reuse the same variations for ingress gateway testing
2020-04-24 09:31:32 -05:00
Kyle Havlovitz
e7b1ee55de
Add http routing support and integration test to ingress gateways
2020-04-24 09:31:32 -05:00
Hans Hasselberg
1194fe441f
auto_encrypt: add validations for auto_encrypt.{tls,allow_tls} ( #7704 )
...
Fixes https://github.com/hashicorp/consul/issues/7407 .
2020-04-24 15:51:38 +02:00
Pierre Souchay
5e79efc80f
Fixed comment on wrong line.
...
While investigating and fixing an issue on our 1.5.1 branch,
I saw you also/already fixed the bug I found (tags not updated
for existing servers), but comment is misplaced.
2020-04-24 01:15:15 +02:00
Freddy
3956cff60f
Fix check deletion in anti-entropy sync ( #7690 )
...
* Incorporate entMeta into service equality check
2020-04-23 10:16:50 -06:00
Daniel Nephin
59a606e938
Merge pull request #7680 from hashicorp/dnephin/upgrade-gotestsum
...
ci: Upgrade gotestsum to v0.4.2
2020-04-21 14:58:28 -04:00
Daniel Nephin
1dff855845
Upgrade gotestsum to latest
...
0.4.2 should fix some bugs in test2json causing missing output.
2020-04-21 14:05:46 -04:00
Alvin Huang
47832cc81d
netlify CLI outputs "Website Draft URL" now instead of "Live Draft URL" ( #7676 )
2020-04-20 15:57:34 -04:00
Chris Piraino
115d2d5db5
Expect default enterprise metadata in gateway tests ( #7664 )
...
This makes it so that both OSS and enterprise tests pass correctly
In the api tests, explicitly set namespace to empty string so that tests
can be shared.
2020-04-20 09:02:35 -05:00
Kit Patella
d5cc91ecbb
Merge pull request #7665 from hashicorp/refactor/http/parseTokenWithDefault
...
http: rename paresTokenResolveProxy to parseTokenWithDefault
2020-04-17 13:42:03 -07:00
Kit Patella
ccece5cd21
http: rename paresTokenResolveProxy to parseTokenWithDefault
2020-04-17 13:35:24 -07:00
Kit Patella
e2467f4b2c
Merge pull request #7656 from hashicorp/feature/audit/oss-merge
...
agent: stub out auditing functionality in OSS
2020-04-17 13:33:06 -07:00
Kit Patella
3b105435b8
agent,config: port enterprise only fields to embedded enterprise structs
2020-04-17 13:27:39 -07:00
Daniel Nephin
67d14d8349
Merge pull request #7641 from hashicorp/dnephin/agent-cache-request-info
...
agent/cache: reduce function arguments by removing duplicates
2020-04-17 14:10:49 -04:00
Matt Keeler
d24b65b8f0
Update API module to include the licensed modules in its output ( #7661 )
2020-04-17 13:39:27 -04:00
Chris Piraino
6ef8ae9965
Fix bug where non-typical services are associated with gateways ( #7662 )
...
On every service registration, we check to see if a service should be
assassociated to a wildcard gateway-service. This fixes an issue where
we did not correctly check to see if the service being registered was a
"typical" service or not.
2020-04-17 11:24:34 -05:00