Chris Thain
a8f1350835
ENT merge of ext-authz extension updates ( #17684 )
2023-06-13 06:57:11 -07:00
Ashesh Vidyut
d54d5fb85c
[NET-4107][Supportability] Log Level set to TRACE and duration set to 5m for consul-debug ( #17596 )
...
* changed duration to 5 mins and log level to trace
* documentation update
* change log
2023-06-13 11:07:46 +05:30
Tu Nguyen
4b843ae1b7
Fix FIPS copy ( #17691 )
...
* fix release notes links
* fix typos on fips docs
2023-06-13 03:35:47 +00:00
trujillo-adam
11764a4558
adding redirects for tproxy and envoy extensions ( #17688 )
...
* adding redirects
* Apply suggestions from code review
2023-06-12 20:12:03 -07:00
Tu Nguyen
421e9d8306
fix release notes links ( #17687 )
2023-06-12 19:49:10 -07:00
Tu Nguyen
3a8fc610f2
Add release notes 1.16 rc ( #17665 )
...
* Merge pull request #5773 from hashicorp/docs/rate-limiting-from-ip-addresses-1.16
updated docs for rate limiting for IP addresses - 1.16
* Merge pull request #5609 from hashicorp/docs/enterprise-utilization-reporting
Add docs for enterprise utilization reporting
* Merge pull request #5734 from hashicorp/docs/envoy-ext-1.16
Docs/envoy ext 1.16
* Add release notes for 1.16-rc
* Add consul-e license utlization reporting
* Update with rc absolute links
* Update with rc absolute links
* fix typo
* Apply suggestions from code review
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update to use callout component
* address typo
* docs: FIPS 140-2 Compliance (#17668 )
* Page + nav + formatting
* link fix
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* link fix
* Apply suggestions from code review
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
* Update website/content/docs/enterprise/fips.mdx
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
* fix apigw install values file
* fix typos in release notes
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
2023-06-12 18:53:40 -07:00
trujillo-adam
0ddafcf924
updated failover for k8s w-tproxy page title ( #17683 )
2023-06-12 17:30:17 -07:00
Joshua Timmons
28d81ec79f
Fix two WAL metrics in docs/agent/telemetry.mdx ( #17593 )
2023-06-12 18:50:59 -04:00
Jeff Boruszak
37a13dcf82
docs: minor fixes to JWT auth docs ( #17680 )
...
* Fixes
* service intentions fixes
2023-06-12 22:46:25 +00:00
Jeff Boruszak
66704e5cb9
docs: JWT Authorization for intentions ( #17643 )
...
* Initial page/nav creation
* configuration entry reference page
* Usage + fixes
* service intentions page
* usage
* description
* config entry updates
* formatting fixes
* Update website/content/docs/connect/config-entries/service-intentions.mdx
Co-authored-by: Paul Glass <pglass@hashicorp.com>
* service intentions review fixes
* Overview page review fixes
* Apply suggestions from code review
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
---------
Co-authored-by: Paul Glass <pglass@hashicorp.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 22:13:44 +00:00
trujillo-adam
b678742c68
additional feedback on API gateway upgrades ( #17677 )
...
* additional feedback
* Update website/content/docs/api-gateway/upgrades.mdx
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
---------
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
2023-06-12 22:09:35 +00:00
trujillo-adam
27206d9202
CAPIgw for K8s installation updates for 1.16 ( #17627 )
...
* trimmed CRD step and reqs from installation
* updated tech specs
* Apply suggestions from code review
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
* added upgrade instruction
* removed tcp port req
* described downtime and DT-less upgrades
* applied additional review feedback
---------
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: Jeff Apple <79924108+Jeff-Apple@users.noreply.github.com>
2023-06-12 13:41:16 -07:00
Thomas Eckert
c384f24460
Remove "BETA" marker from config entries ( #17670 )
2023-06-12 16:36:33 -04:00
Jeff Boruszak
ef77f9abd4
docs: Sameness Groups ( #17628 )
...
* port from enterprise branch
* Apply suggestions from code review
Co-authored-by: shanafarkas <105076572+shanafarkas@users.noreply.github.com>
* Update website/content/docs/connect/cluster-peering/usage/create-sameness-groups.mdx
* next steps
* Update website/content/docs/connect/cluster-peering/usage/create-sameness-groups.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/k8s/connect/cluster-peering/usage/create-sameness-groups.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
---------
Co-authored-by: shanafarkas <105076572+shanafarkas@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 20:06:57 +00:00
Hariram Sankaran
290ba0e288
Update service-defaults.mdx ( #17656 )
2023-06-12 19:18:09 +00:00
Michael Zalimeni
446a640323
Post 1.16.0-rc1 updates ( #17663 )
...
- Update changelog to include new entries from release
- Update submodule versions to latest published
2023-06-12 14:28:51 -04:00
Chris Thain
c04c122ef3
Default `ProxyType` for builtin extensions ( #17657 )
2023-06-12 10:47:31 -07:00
Tu Nguyen
862e78f063
Add new Consul 1.16 docs ( #17651 )
...
* Merge pull request #5773 from hashicorp/docs/rate-limiting-from-ip-addresses-1.16
updated docs for rate limiting for IP addresses - 1.16
* Merge pull request #5609 from hashicorp/docs/enterprise-utilization-reporting
Add docs for enterprise utilization reporting
* Merge pull request #5734 from hashicorp/docs/envoy-ext-1.16
Docs/envoy ext 1.16
* Merge pull request #5773 from hashicorp/docs/rate-limiting-from-ip-addresses-1.16
updated docs for rate limiting for IP addresses - 1.16
* Merge pull request #5609 from hashicorp/docs/enterprise-utilization-reporting
Add docs for enterprise utilization reporting
* Merge pull request #5734 from hashicorp/docs/envoy-ext-1.16
Docs/envoy ext 1.16
* fix build errors
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 10:30:04 -07:00
Poonam Jadhav
f8d3721885
fix: add agent info reporting log ( #17654 )
2023-06-12 12:07:43 -04:00
Nathan Coleman
1074252361
api-gateway: stop adding all header filters to virtual host when generating xDS ( #17644 )
...
* Add header filter to api-gateway xDS golden test
* Stop adding all header filters to virtual host when generating xDS for api-gateway
* Regenerate xDS golden file for api-gateway w/ header filter
2023-06-12 12:06:04 -04:00
Matt Keeler
baaf6d84c7
Add generic experiments configuration and use it to enable catalog v2 resources ( #17604 )
...
* Add generic experiments configuration and use it to enable catalog v2 resources
* Run formatting with -s as CI will validate that this has been done
2023-06-12 11:32:43 -04:00
Paul Glass
809c188b34
docs: Reference doc updates for permissive mTLS settings ( #17371 )
...
* Reference doc updates for permissive mTLS settings
* Document config entry filtering
* Fix minor doc errors (double slashes in link url paths)
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 10:11:36 -05:00
Bryce Kalow
b1d3ec0cdb
Delete check-legacy-links-format.yml ( #17647 )
2023-06-12 14:20:29 +00:00
trujillo-adam
5e846747f4
PmTLS and tproxy improvements with failover and L7 traffic mgmt for k8s ( #17624 )
...
* porting over changes from enterprise repo to oss
* applied feedback on service mesh for k8s overview
* fixed typo
* removed ent-only build script file
* Apply suggestions from code review
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
* Apply suggestions from code review
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
---------
Co-authored-by: Jeff Boruszak <104028618+boruszak@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
2023-06-10 08:35:22 -07:00
R.B. Boyer
ec347ef01d
sort some imports that are wonky between oss and ent ( #17637 )
2023-06-09 11:30:56 -05:00
Andrew Stucki
3cb70566a9
[API Gateway] Fix rate limiting for API gateways ( #17631 )
...
* [API Gateway] Fix rate limiting for API gateways
* Add changelog
* Fix failing unit tests
* Fix operator usage tests for api package
2023-06-09 08:22:32 -04:00
Michael Zalimeni
30e0c234ab
Update list of Envoy versions ( #17546 )
2023-06-09 02:37:49 +00:00
Ronald
7ae457c586
enterprise changelog update for audit ( #17625 )
2023-06-08 19:50:51 -04:00
Luke Kysow
85982889a1
Update intentions.mdx ( #17619 )
...
Make behaviour of L7 intentions clearer
2023-06-08 13:30:05 -07:00
Ronald
17f4689379
backport ent changes to oss ( #17614 )
...
* backport ent changes to oss
* Update .changelog/_5669.txt
Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
---------
Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
2023-06-08 16:34:31 +00:00
Andrew Stucki
9a4f503b2b
[API Gateway] Fix trust domain for external peered services in synthesis code ( #17609 )
...
* [API Gateway] Fix trust domain for external peered services in synthesis code
* Add changelog
2023-06-08 12:18:17 -04:00
Eric Haberkorn
779647b948
Add Envoy and Consul version constraints to Envoy extensions ( #17612 )
2023-06-08 10:26:11 -04:00
Ronald
8118aae5c1
Add writeAuditRPCEvent to agent_oss ( #17607 )
...
* Add writeAuditRPCEvent to agent_oss
* fix the other diffs
* backport change log
2023-06-07 22:35:48 +00:00
Michael Zalimeni
1e920a7f01
[OSS] Post Consul 1.16 updates ( #17606 )
...
* chore: update dev build to 1.17
* chore(ci): add nightly 1.16 test
Drop the oldest and add the newest running release branch to nightly
builds.
2023-06-07 21:46:49 +00:00
Michael Zalimeni
1db02a0349
Disable terminating-gateway for property-override ( #17605 )
...
More validation is needed to ensure this behaves as expected; in the
meantime, align with docs and disable this proxy type.
2023-06-07 19:39:25 +00:00
R.B. Boyer
820cdf53da
fix some testing.T retry.R mixups ( #17600 )
...
Fix some linter warnings before updating the lint-consul-retry code in hashicorp/lint-consul-retry#4
2023-06-07 13:53:27 -05:00
Dhia Ayachi
39d4aaf224
fix rate limiting mapping to be the same between api and struct packages ( #17599 )
2023-06-07 14:50:22 -04:00
skpratt
a35cafa728
update tests for fips ( #17592 )
2023-06-07 10:57:56 -05:00
Matt Keeler
a5ba889034
Implement the service endpoints controller ( #17216 )
...
* Add a ReplaceType dep mapper and move them into their own file
* Implement the service endpoints controller
* Implement a Catalog Controllers Integration Test
2023-06-06 17:09:48 -04:00
Michael Zalimeni
2dd5551003
Fix Property Override Services parsing ( #17584 )
...
Ensure that the embedded api struct is properly parsed when
deserializing config containing a set ResourceFilter.Services field.
Also enhance existing integration test to guard against bugs and
exercise this field.
2023-06-06 15:40:37 -04:00
Joshua Timmons
7a2ee145bf
Fix metric names in Consul agent telemetry docs ( #17577 )
2023-06-06 14:42:30 -04:00
Michael Zalimeni
8e52d489ce
Add Prop Override Envoy extension integration test ( #17569 )
2023-06-06 10:04:31 -04:00
Andrew Stucki
f9d9d4db60
Fix subscribing/fetching objects not in the default partition ( #17581 )
...
* Fix subscribing/fetching objects not in the default namespace
* add changelog
2023-06-06 09:09:33 -04:00
cskh
dd71bb80d6
docs: clarify the behavior of prepending hostname to metrics ( #17521 )
...
* docs: clarify the behavior of prepending hostname to metrics
* Update website/content/docs/agent/config/config-files.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-05 23:47:26 +00:00
Matt Keeler
77f44fa878
Various bits of cleanup detected when using Go Workspaces ( #17462 )
...
TLDR with many modules the versions included in each diverged quite a bit. Attempting to use Go Workspaces produces a bunch of errors.
This commit:
1. Fixes envoy-library-references.sh to work again
2. Ensures we are pulling in go-control-plane@v0.11.0 everywhere (previously it was at that version in some modules and others were much older)
3. Remove one usage of golang/protobuf that caused us to have a direct dependency on it.
4. Remove deprecated usage of the Endpoint field in the grpc resolver.Target struct. The current version of grpc (v1.55.0) has removed that field and recommended replacement with URL.Opaque and calls to the Endpoint() func when needing to consume the previous field.
4. `go work init <all the paths to go.mod files>` && `go work sync`. This syncrhonized versions of dependencies from the main workspace/root module to all submodules
5. Updated .gitignore to ignore the go.work and go.work.sum files. This seems to be standard practice at the moment.
6. Update doc comments in protoc-gen-consul-rate-limit to be go fmt compatible
7. Upgraded makefile infra to perform linting, testing and go mod tidy on all modules in a flexible manner.
8. Updated linter rules to prevent usage of golang/protobuf
9. Updated a leader peering test to account for an extra colon in a grpc error message.
2023-06-05 16:08:39 -04:00
Curt Bushko
caa044fce5
Generate helm docs for release consul-k8s 1.1.2 ( #17568 )
...
* generate docs
2023-06-05 16:04:54 -04:00
malizz
8617f8af16
continue anti-entropy sync when failures exist ( #17560 )
2023-06-05 12:16:21 -07:00
Andrew Stucki
4ddb88ec7e
Fix up case where subscription is terminated due to ACLs changing or a snapshot restore occurring ( #17566 )
...
* Fix up case where subscription is terminated due to ACLs changing or a snapshot restore occurring
* Add changelog entry
* Switch to use errors.Is
2023-06-05 13:10:17 -04:00
malizz
88951bfafa
add changelog entries for 1.15.3 ( #17558 )
2023-06-02 12:35:21 -07:00
Dave Rawks
a55d368a0e
Resolves issue-16844 - systemd notify by default ( #16845 )
...
* updates `consul.service` systemd service unit to use `Type=notify` to
resolve issue #16844
* add changelog update to match
2023-06-02 10:04:48 -07:00