consul/agent/connect/ca
Dan Upton 7a55de375c
xds: don't attempt to load-balance sessions for local proxies (#15789)
Previously, we'd begin a session with the xDS concurrency limiter
regardless of whether the proxy was registered in the catalog or in
the server's local agent state.

This caused problems for users who run `consul connect envoy` directly
against a server rather than a client agent, as the server's locally
registered proxies wouldn't be included in the limiter's capacity.

Now, the `ConfigSource` is responsible for beginning the session and we
only do so for services in the catalog.

Fixes: https://github.com/hashicorp/consul/issues/15753
2023-01-18 12:33:21 -06:00
..
common.go Configure upstream TLS context with peer root certs (#13321) 2022-06-01 15:53:52 -06:00
mock_Provider.go xds: don't attempt to load-balance sessions for local proxies (#15789) 2023-01-18 12:33:21 -06:00
provider.go Detect Vault 1.11+ import in secondary datacenters and update default issuer (#15661) 2022-12-05 15:39:21 -06:00
provider_aws.go Detect Vault 1.11+ import in secondary datacenters and update default issuer (#15661) 2022-12-05 15:39:21 -06:00
provider_aws_test.go Detect Vault 1.11+ import in secondary datacenters and update default issuer (#15661) 2022-12-05 15:39:21 -06:00
provider_consul.go Detect Vault 1.11+ import in secondary datacenters and update default issuer (#15661) 2022-12-05 15:39:21 -06:00
provider_consul_config.go add root_cert_ttl option for consul connect, vault ca providers (#11428) 2021-11-02 11:02:10 -07:00
provider_consul_test.go connect: ensure all vault connect CA tests use limited privilege tokens (#15669) 2022-12-06 10:06:36 -06:00
provider_test.go Vendor in rpc mono repo for net/rpc fork, go-msgpack, msgpackrpc. (#12311) 2022-02-14 09:45:45 -08:00
provider_vault.go connect: ensure all vault connect CA tests use limited privilege tokens (#15669) 2022-12-06 10:06:36 -06:00
provider_vault_test.go connect: ensure all vault connect CA tests use limited privilege tokens (#15669) 2022-12-06 10:06:36 -06:00
testing.go connect: use -dev-no-store-token for test vaults to reduce source of flakes (#15691) 2022-12-06 13:15:13 -06:00