Blake Covarrubias
a3ad4be429
docs: Add ingress TLS cipher and version documentation ( #12163 )
...
Document the new TLS cipher and version parameters that were added to
ingress gateways in #11576 .
Co-authored-by: Mike Morris <mikemorris@users.noreply.github.com>
2022-01-26 08:12:12 -08:00
David Yu
b199b60ded
docs: Service Sync clarify requirements when using Service Mesh ( #12177 )
...
* docs: Service Sync clarify requirements when using Service Mesh
* replace with relative link
2022-01-25 15:02:19 -08:00
modrake
64e9e8a574
Merge pull request #12178 from hashicorp/RDX-205-add-netcgo-for-darwin-builds
...
RDX-205 add netcgo tag for darwin builds
2022-01-25 14:10:02 -08:00
R.B. Boyer
d2c0945f52
xds: fix for delta xDS reconnect bug in LDS/CDS ( #12174 )
...
When a wildcard xDS type (LDS/CDS/SRDS) reconnects from a delta xDS stream,
prior to envoy `1.19.0` it would populate the `ResourceNamesSubscribe` field
with the full list of currently subscribed items, instead of simply omitting it
to infer that it wanted everything (which is what wildcard mode means).
This upstream issue was filed in envoyproxy/envoy#16063 and fixed in
envoyproxy/envoy#16153 which went out in Envoy `1.19.0` and is fixed in later
versions (later refactored in envoyproxy/envoy#16855).
This PR conditionally forces LDS/CDS to be wildcard-only even when the
connected Envoy requests a non-wildcard subscription, but only does so on
versions prior to `1.19.0`, as we should not need to do this on later versions.
This fixes the failure case as described here: #11833 (comment)
Co-authored-by: Huan Wang <fredwanghuan@gmail.com>
2022-01-25 11:24:27 -06:00
Chris S. Kim
f5d816dace
Remove incorrect usage of url.PathEscape ( #12184 )
...
When r.toHTTP is called, http.Request is built with the path
already escaped. This removes all calls to url.PathEscape that
would have led to double-escaped URLs.
2022-01-25 12:15:06 -05:00
Morgan Drake
6eea2f2d48
add netcgo tag for darwin builds
2022-01-24 14:34:57 -08:00
Michele Degges
d2f36651ab
Make systemd EnvironmentFile optional #12176
2022-01-24 12:47:43 -08:00
Michele Degges
81a79a3595
Adding changelog entry
2022-01-24 12:32:22 -08:00
Michele Degges
282b662641
Don't kill service if envfile isn't present
2022-01-24 12:13:14 -08:00
Michele Degges
7d4d7ab785
Merge branch 'main' of github.com:hashicorp/consul
2022-01-24 12:12:33 -08:00
David Yu
6689425bec
docs: Admin Partitions K8s requirement update ( #12173 )
...
* docs: Admin Partitions K8s requirement update
* Update admin-partitions.mdx
* Update website/content/docs/enterprise/admin-partitions.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* extra space
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
2022-01-24 09:04:02 -08:00
Michele Degges
0e37b28323
Add missing consul.env file for linux packaging ( #12159 )
2022-01-24 10:43:20 -05:00
mrspanishviking
f3514d802b
Merge pull request #11980 from krastin/krastin/docsday-ui-viz
...
adding JSON examples to /docs/connect/observability/ui-visualization
2022-01-24 08:42:46 -07:00
Krastin Krastev
8abf4088c1
fixing K8s notes placement in /docs/connect/observability/ui-visualization
2022-01-24 16:35:18 +01:00
Dao Thanh Tung
6765c0d965
Add api changes to agent endpoint for part 2 ( #12150 )
2022-01-24 10:23:08 -05:00
Krastin Krastev
65d750a84d
migrating <Tabs> to <CodeTabs> in /docs/connect/observability/ui-visualization
2022-01-24 16:10:03 +01:00
Daniel Nephin
e134e43da6
acl: remove calls to ResolveIdentityFromToken
...
We already have an ACLResolveResult, so we can get the accessor ID from
it.
2022-01-22 15:05:42 -05:00
Daniel Nephin
edca8d61a3
acl: remove ResolveTokenToIdentity
...
By exposing the AccessorID from the primary ResolveToken method we can
remove this duplication.
2022-01-22 14:47:59 -05:00
Daniel Nephin
a5e8af79c3
acl: return a resposne from ResolveToken that includes the ACLIdentity
...
So that we can duplicate duplicate methods.
2022-01-22 14:33:09 -05:00
Daniel Nephin
8c9c48e219
acl: remove duplicate methods
...
Now that ACLResolver is embedded we don't need ResolveTokenToIdentity on
Client and Server.
Moving ResolveTokenAndDefaultMeta to ACLResolver removes the duplicate
implementation.
2022-01-22 14:12:08 -05:00
Daniel Nephin
241663a046
acl: embed ACLResolver in Client and Server
...
In preparation for removing duplicate resolve token methods.
2022-01-22 14:07:26 -05:00
David Yu
9dc6abaa70
docs: 1.11.0 release notes ( #12138 )
...
* Work in Progress
* edit nav to show 1.11
* slight updates to release note content
* acl changes
* add details on bbolt
* first draft
* add more admin partition details
* revert package-lock.json
* Update website/content/docs/release-notes/1-11-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-11-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-11-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-11-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-11-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-11-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* add sds change, and 1.10 change for tproxy
* Small changes
* Update website/content/docs/release-notes/1-11-0.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/release-notes/1-11-0.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* adding Consul Service mesh term
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
2022-01-21 15:46:02 -08:00
Peter M
8c2399a862
Updated intro text
...
Jeff and I re-worded/expanded the text a bit here for the introduction section.
2022-01-21 16:14:45 -07:00
Michele Degges
a4fe5362ed
Add missing consul.env file for linux packaging
2022-01-21 13:43:21 -08:00
Chris S. Kim
06fbee2801
Push bindata_assetfs.go to a non-protected branch ( #12151 )
2022-01-21 16:10:54 -05:00
Chris S. Kim
bee18f4a1d
Generate bindata_assetfs.go ( #12146 )
2022-01-21 16:06:44 -05:00
R.B. Boyer
38e0106701
update main to reflect it is v1.12.0-dev ( #12157 )
2022-01-21 15:03:11 -06:00
David Yu
c69b05ca55
docs: Vault Secrets Backend K8s, remove code tabs ( #12156 )
...
* Update connect-ca.mdx
* Update gossip.mdx
* Update index.mdx
* Update server-tls.mdx
2022-01-21 11:28:38 -08:00
David Yu
662fb1b919
docs: Formatting Consul K8s Vault docs ( #12148 )
...
* Update index.mdx
* Update gossip.mdx
* Update install-cli.mdx
* Update gossip.mdx
* Update website/content/docs/k8s/installation/vault/gossip.mdx
Co-authored-by: Bryce Kalow <bkalow@hashicorp.com>
* fix MDX formatting
* local changes
* adding formatting changes
* Update website/content/docs/k8s/installation/vault/connect-ca.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* adding shell-session to service mesh certs
Co-authored-by: Bryce Kalow <bkalow@hashicorp.com>
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
2022-01-21 11:01:48 -08:00
John Cowen
e6a084807b
ui: Enable theming ( #12134 )
...
plus Themeable icons (#12135 )
2022-01-21 12:19:03 +00:00
John Cowen
61d7acd51f
ui: Tweak some code related meta information ( #12117 )
...
* ui: Correct some meta info
* Encoder doesn't take an argument whereas decoder does
* Math.trunc looks like the closest to parseInt but using the correct type
* use a dynamic string when setting things on window
2022-01-21 11:42:48 +00:00
Evan Culver
89ed18dc42
Provide an 'escape-hatch' for website-checker workflow ( #11882 )
2022-01-20 18:34:01 -08:00
Ashwin Venkatesh
7568f3a102
Add support for 'Partition' and 'RetryJoin' ( #12126 )
...
- Adding a 'Partition' and 'RetryJoin' command allows test cases where
one would like to spin up a Consul Agent in a non-default partition to
test use-cases that are common when enabling Admin Partition on
Kubernetes.
2022-01-20 16:49:36 -05:00
R.B. Boyer
b9e9f1106b
docs: update config entry docs for proxy-defaults to follow new template ( #12011 )
2022-01-20 15:35:27 -06:00
Chris S. Kim
6cecd35e6e
ci: Add explanation in forbidigo ( #12140 )
2022-01-20 13:07:10 -05:00
R.B. Boyer
baa45a6987
lint: forbid require.New and assert.New ( #12139 )
...
See #12137
2022-01-20 11:36:29 -06:00
R.B. Boyer
412ee92c27
Merge pull request #12137 from hashicorp/testify-no-structs
...
test: stop using require.New and assert.New from testify
2022-01-20 11:02:39 -06:00
Blake Covarrubias
cdd56970a3
Merge pull request #12024 from hashicorp/docs/update-links-to-avoid-redirects
...
docs: Avoid redirects by pointing links to new URLs
2022-01-20 08:59:51 -08:00
Blake Covarrubias
f09aea524f
Fix spelling errors
2022-01-20 08:54:23 -08:00
Blake Covarrubias
0936a9a6e1
Redirect Ambassador tutorial to Learn
2022-01-20 08:52:52 -08:00
Blake Covarrubias
bc410ffc03
Redirect /platform/k8s/upgrading to new URL
2022-01-20 08:52:52 -08:00
Blake Covarrubias
64016f6108
Redirect old K8s uninstall URLs to new location
2022-01-20 08:52:51 -08:00
Blake Covarrubias
fcd5f66895
Consolidate /download-tools redirects
2022-01-20 08:52:51 -08:00
Blake Covarrubias
9ee9249149
Remove duplicate redirects
2022-01-20 08:52:51 -08:00
Blake Covarrubias
26401c5c26
Convert absolute URLs to relative URLs for consul.io
2022-01-20 08:52:51 -08:00
Blake Covarrubias
59394e4aa2
docs: Avoid redirects by pointing links to new URLs
...
Avoid HTTP redirects for internal site links by updating old URLs to
point to the new location for the target content.
2022-01-20 08:52:51 -08:00
R.B. Boyer
b60d89e7ef
bulk rewrite using this script
...
set -euo pipefail
unset CDPATH
cd "$(dirname "$0")"
for f in $(git grep '\brequire := require\.New(' | cut -d':' -f1 | sort -u); do
echo "=== require: $f ==="
sed -i '/require := require.New(t)/d' $f
# require.XXX(blah) but not require.XXX(tblah) or require.XXX(rblah)
sed -i 's/\brequire\.\([a-zA-Z0-9_]*\)(\([^tr]\)/require.\1(t,\2/g' $f
# require.XXX(tblah) but not require.XXX(t, blah)
sed -i 's/\brequire\.\([a-zA-Z0-9_]*\)(\(t[^,]\)/require.\1(t,\2/g' $f
# require.XXX(rblah) but not require.XXX(r, blah)
sed -i 's/\brequire\.\([a-zA-Z0-9_]*\)(\(r[^,]\)/require.\1(t,\2/g' $f
gofmt -s -w $f
done
for f in $(git grep '\bassert := assert\.New(' | cut -d':' -f1 | sort -u); do
echo "=== assert: $f ==="
sed -i '/assert := assert.New(t)/d' $f
# assert.XXX(blah) but not assert.XXX(tblah) or assert.XXX(rblah)
sed -i 's/\bassert\.\([a-zA-Z0-9_]*\)(\([^tr]\)/assert.\1(t,\2/g' $f
# assert.XXX(tblah) but not assert.XXX(t, blah)
sed -i 's/\bassert\.\([a-zA-Z0-9_]*\)(\(t[^,]\)/assert.\1(t,\2/g' $f
# assert.XXX(rblah) but not assert.XXX(r, blah)
sed -i 's/\bassert\.\([a-zA-Z0-9_]*\)(\(r[^,]\)/assert.\1(t,\2/g' $f
gofmt -s -w $f
done
2022-01-20 10:46:23 -06:00
R.B. Boyer
31f6f55bbe
test: normalize require.New and assert.New syntax
2022-01-20 10:45:56 -06:00
David Yu
19d5d58e5c
docs: Add specific version install guide for `consul-k8s` CLI, refactor install ( #12114 )
...
* docs: Add specific version install guide for `consul-k8s` CLI
* parameterize version
* remove extra path
* Update k8s-cli.mdx
* slight formatting
* Update k8s-cli.mdx
* specific version details in overall install guide
* shell details
* Update install.mdx
* Update k8s-cli.mdx
* Update install.mdx
* broken link
* typo
* Update website/content/docs/k8s/installation/compatibility.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/k8s/k8s-cli.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/k8s/k8s-cli.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/k8s/k8s-cli.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/k8s/k8s-cli.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/k8s/k8s-cli.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/k8s/k8s-cli.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/k8s/k8s-cli.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/k8s/k8s-cli.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* Update website/content/docs/k8s/installation/install.mdx
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
* moving install cli commands to separate page
* add tabs, wip
* add specific distro install guides
* add upgrade tabs
* build failure
* not sure why heading is not working
* remove whitespace
* add more whitespace
* fixes on formatting
* remove package lock
* add back package lock json
* test
* latest
* remove modified file
* adding fix to yum install
* create folder for upgrade and move upgrade cli there
* revert package-lock
* adding upgrade file
* Update website/content/docs/k8s/upgrade/upgrade-cli.mdx
Co-authored-by: Thomas Eckert <teckert@hashicorp.com>
* Update website/content/docs/k8s/installation/install-cli.mdx
Co-authored-by: Thomas Eckert <teckert@hashicorp.com>
* Update website/content/docs/k8s/installation/install-cli.mdx
Co-authored-by: Thomas Eckert <teckert@hashicorp.com>
* Update install-cli.mdx
* multi-line copy
Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>
Co-authored-by: Thomas Eckert <teckert@hashicorp.com>
2022-01-20 08:26:31 -08:00
R.B. Boyer
424f3cdd2c
proxycfg: introduce explicit UpstreamID in lieu of bare string ( #12125 )
...
The gist here is that now we use a value-type struct proxycfg.UpstreamID
as the map key in ConfigSnapshot maps where we used to use "upstream
id-ish" strings. These are internal only and used just for bidirectional
trips through the agent cache keyspace (like the discovery chain target
struct).
For the few places where the upstream id needs to be projected into xDS,
that's what (proxycfg.UpstreamID).EnvoyID() is for. This lets us ALWAYS
inject the partition and namespace into these things without making
stuff like the golden testdata diverge.
2022-01-20 10:12:04 -06:00