Kyle Havlovitz
ff93919034
Merge pull request #9009 from hashicorp/update-secondary-ca
...
connect: Fix an issue with updating CA config in a secondary datacenter
2020-11-30 22:50:26 +00:00
John Cowen
37140b3ff1
ui: Move identity components ( #9298 )
2020-11-30 18:43:38 +00:00
John Cowen
af5e6e6d12
ui: Add copyable IDs to the Role and Policy views ( #9296 )
2020-11-30 17:29:06 +00:00
John Cowen
f91fb648f9
ui: Moves healthcheck list to Glimmer template-only consul component ( #9293 )
2020-11-30 17:23:37 +00:00
John Cowen
72d9d0a5ec
ui: Remove unused helpers or swap for helpers in ember-string-fns ( #9294 )
...
* ui: Remove unused helpers or swap for helpers in ember-string-fns
* starts-with > string-starts-with
2020-11-30 17:20:19 +00:00
John Cowen
d98fa02a85
ui: Round Trip Time Tooltips ( #9290 )
2020-11-30 17:03:24 +00:00
John Cowen
41ded7eef7
ui: Modifier based tooltips ( #9288 )
2020-11-30 16:52:45 +00:00
Rob Taylor
7c1357efd2
Fix typo in explanation of connect command ( #9295 )
...
Change `Connect Connect` to `Consul Connect, which is consistent with the command output as shown on this page.
2020-11-30 15:56:12 +00:00
John Cowen
de19fa5f59
ui: Nestable DataSources (plus glimmer upgrade) ( #9275 )
2020-11-30 15:06:31 +00:00
Daniel Nephin
60d7f30169
Merge pull request #9284 from hashicorp/dnephin/agent-service-register
...
local: mark service as InSync when added to local agent state
2020-11-27 20:50:53 +00:00
Hans Hasselberg
b3a0b8edd9
fix serf_wan documentation ( #9289 )
...
WAN config is different than LAN config, source of truth is
f72d2042a8/config.go (L315-L326)
and now the docs are correct.
2020-11-27 19:51:04 +00:00
John Cowen
c441d98475
ui: Change metrics link documentation link ( #9281 )
...
* ui: Change metrics link documentation link
* Update ui/packages/consul-ui/app/components/topology-metrics/index.hbs
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
2020-11-27 15:44:20 +00:00
David Yu
d118f7a0c7
Bump supported chart to 0.27.0 for Consul 1.9 ( #9279 )
...
* Bump supported chart to 0.27.0 for Consul 1.9
2020-11-26 00:33:54 +00:00
Daniel Nephin
d230cea541
Merge pull request #9247 from pierresouchay/streaming_predictible_order_for_health
...
[Streaming] Predictable order for results of /health/service/:serviceName to mimic memdb
2020-11-25 20:55:00 +00:00
Mike Morris
632a4de943
Merge pull request #9270 from hashicorp/release/1.9.0
...
merge: release/1.9.0 back into 1.9.x
2020-11-24 17:33:00 -05:00
David Yu
2a0555407c
Consul 1.9 GA Banner ( #9272 )
2020-11-24 21:40:59 +00:00
Mike Morris
3ee6d1c14f
Merge branch 'release/1.9.x' into release/1.9.0
2020-11-24 14:50:39 -05:00
Mike Morris
a05909b3c3
website: remove prerelease banner
2020-11-24 14:46:16 -05:00
Mike Morris
dbb1249f13
Merge branch 'stable-website' into release/1.9.0
2020-11-24 14:44:53 -05:00
hashicorp-ci
c1703a64a6
Putting source back into Dev Mode
2020-11-24 19:40:16 +00:00
hashicorp-ci
a417fe5104
Release v1.9.0
2020-11-24 19:05:48 +00:00
hashicorp-ci
79bb27a363
update bindata_assetfs.go
2020-11-24 19:05:48 +00:00
David Yu
8d374fa9fa
docs: adding Consul 1.9.x to compat matrix and link to Envoy compat matrix ( #9263 )
...
* Adding Consul 1.9.x to compat matrix and link to Envoy compat matrix
Adding 1.9.x and link to Envoy compat matrix
2020-11-24 18:51:06 +00:00
David Yu
687d504214
docs: adding Consul 1.9.x to compat matrix and link to Envoy compat matrix ( #9263 )
...
* Adding Consul 1.9.x to compat matrix and link to Envoy compat matrix
Adding 1.9.x and link to Envoy compat matrix
2020-11-24 18:51:01 +00:00
R.B. Boyer
7467ffbff3
server: fix panic when deleting a non existent intention ( #9254 )
...
* server: fix panic when deleting a non existent intention
* add changelog
* Always return an error when deleting non-existent ixn
Co-authored-by: freddygv <gh@freddygv.xyz>
2020-11-24 18:44:58 +00:00
R.B. Boyer
3c7cf0216d
server: fix panic when deleting a non existent intention ( #9254 )
...
* server: fix panic when deleting a non existent intention
* add changelog
* Always return an error when deleting non-existent ixn
Co-authored-by: freddygv <gh@freddygv.xyz>
2020-11-24 13:44:45 -05:00
John Cowen
3668431e4e
ui: Ensure the per item logout button logs you out ( #9269 )
2020-11-24 17:48:47 +00:00
John Cowen
a09f94f6c0
ui: Ensure the per item logout button logs you out ( #9269 )
2020-11-24 17:48:17 +00:00
Mike Morris
373d736251
deps: update consul/api and consul/sdk pins
2020-11-24 12:41:01 -05:00
Mike Morris
e03ba00946
api: update to consul/sdk v0.7.0
2020-11-24 12:35:53 -05:00
Mike Morris
52e5a2fb32
changelog: 1.9.0 ( #9265 )
...
* changelog: add post-rc1 entries
* changelog: regenerate entries from LAST_RELEASE_GIT_TAG=v1.8.4, remove beta releases
* changelog: tweak categories for a few entries and add Go 1.15 note
* changelog: apply category changes to CHANGELOG.md
manually remove Go 1.14 upgrade note and two intermediate UI bug fix
entries for the new topology feature
2020-11-24 12:21:43 -05:00
John Cowen
5a754ae4da
ui: Include nspace in up/downstream link when nspaces are enabled ( #9257 )
2020-11-24 14:34:58 +00:00
John Cowen
e88367fd06
ui: Include nspace in up/downstream link when nspaces are enabled ( #9257 )
2020-11-24 14:34:40 +00:00
Kit Patella
727780140e
Merge pull request #9261 from hashicorp/telemetry/fix-missing-and-stale-docs-2
...
Telemetry/fix missing and stale docs
2020-11-23 21:34:59 +00:00
Kit Patella
146466a708
Merge pull request #9261 from hashicorp/telemetry/fix-missing-and-stale-docs-2
...
Telemetry/fix missing and stale docs
2020-11-23 21:34:55 +00:00
Daniel Nephin
aa07128f46
Merge pull request #9259 from hashicorp/dnephin/doc-streaming-experimental
...
docs: mark streaming as experimental
2020-11-23 21:14:12 +00:00
Daniel Nephin
39b2a30c56
Merge pull request #9259 from hashicorp/dnephin/doc-streaming-experimental
...
docs: mark streaming as experimental
2020-11-23 21:14:08 +00:00
Daniel Nephin
035b6a1cdb
Merge pull request #9012 from hashicorp/dnephin/log-fix-rotation
...
logging: prune logs on startup
2020-11-23 19:57:47 +00:00
Freddy
ff5215d882
Require operator:write to get Connect CA config ( #9240 )
...
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.
--
This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
2020-11-23 06:27:20 -07:00
Sabeen Syed
b82317d506
Update NIA architecture image ( #9180 )
2020-11-23 07:49:22 +00:00
Sabeen Syed
97b26f19c7
Update NIA architecture image ( #9180 )
2020-11-23 07:49:17 +00:00
Kit Patella
fe6ef7e414
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs
...
Telemetry/fix missing and stale docs
2020-11-20 20:55:51 +00:00
Kit Patella
6e607d7cd3
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs
...
Telemetry/fix missing and stale docs
2020-11-20 20:55:45 +00:00
Kenia
0de23419d6
ui: Card component nspace refactor ( #9228 ) ( #9248 )
...
* Refactoring conditional for showing nspaces
* Styling empty state for Stats component
2020-11-20 11:41:57 -05:00
Freddy
3ffd1fdc8b
Merge pull request #9246 from hashicorp/changelog-186
2020-11-20 00:41:05 +00:00
Freddy
25c17d7afe
Merge pull request #9246 from hashicorp/changelog-186
2020-11-20 00:41:01 +00:00
Freddy
4e44341d36
Require operator:write to get Connect CA config ( #9240 )
...
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.
--
This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
2020-11-19 16:50:17 -07:00
R.B. Boyer
140c220131
[1.9.0] command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint ( #9230 )
...
Manual backport of #9229 into 1.9.0 branch
Fixes #9215
2020-11-19 15:33:41 -06:00
R.B. Boyer
32f6d17e5d
command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint ( #9229 )
...
Fixes #9215
2020-11-19 21:28:09 +00:00
Kenia
36307f1b0c
ui: Card component nspace refactor ( #9228 )
...
* Refactoring conditional for showing nspaces
* Styling empty state for Stats component
2020-11-19 18:42:19 +00:00