status-im
/
consul
mirror of https://github.com/status-im/consul.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
consul/agent
History
Hans Hasselberg 804eb17094
connect: check if intermediate cert needs to be renewed. (#6835) 
Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates.
This PR adds a check that renews the cert if it is half way through its validity period.

In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.
 		2020-01-17 23:27:13 +01:00
..
ae
…
agentpb Updates to allow for Namespacing ACL resources in Consul Enterp… (#6675) 2019-10-24 14:38:09 -04:00
cache agent: cache notifications work after error if the underlying RPC returns index=1 (#6547) 2019-09-26 10:42:17 -05:00
cache-types auto_encrypt: set dns and ip san for k8s and provide configuration (#6944) 2020-01-17 23:25:26 +01:00
checks OSS changes for implementing token based namespace inferencing 2019-12-18 14:07:08 -05:00
config connect: check if intermediate cert needs to be renewed. (#6835) 2020-01-17 23:27:13 +01:00
connect connect: check if intermediate cert needs to be renewed. (#6835) 2020-01-17 23:27:13 +01:00
consul connect: check if intermediate cert needs to be renewed. (#6835) 2020-01-17 23:27:13 +01:00
debug
…
exec
…
local agent: do not deregister service checks twice (#6168) 2020-01-17 14:26:53 +01:00
metadata
…
mock Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
pool Add note about RPC multiplexing and TLS content type mutual exc… (#6698) 2019-10-30 09:24:30 -04:00
proxycfg Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
router Do not surface left servers (#6420) 2019-10-08 22:16:00 -05:00
structs connect: check if intermediate cert needs to be renewed. (#6835) 2020-01-17 23:27:13 +01:00
systemd
…
token acl: use constant time comparing to check token (#6943) 2019-12-16 21:54:52 +01:00
xds Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
acl.go OSS changes for implementing token based namespace inferencing 2019-12-18 14:07:08 -05:00
acl_endpoint.go AuthMethod updates to support alternate namespace logins (#7029) 2020-01-14 10:09:29 -05:00
acl_endpoint_legacy.go Use encoding/json as JSON decoder instead of mapstructure (#6680) 2019-10-29 11:13:36 -07:00
acl_endpoint_legacy_test.go
…
acl_endpoint_test.go [Feature] API: Add a internal endpoint to query for ACL authori… (#6888) 2019-12-06 09:25:26 -05:00
acl_test.go OSS changes for implementing token based namespace inferencing 2019-12-18 14:07:08 -05:00
agent.go auto_encrypt: set dns and ip san for k8s and provide configuration (#6944) 2020-01-17 23:25:26 +01:00
agent_endpoint.go Update force-leave ACL requirement to operator:write (#7033) 2020-01-14 15:40:34 -07:00
agent_endpoint_test.go Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
agent_oss.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
agent_test.go Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
bindata_assetfs.go update bindata_assetfs.go 2019-12-20 17:16:51 +00:00
blacklist.go
…
blacklist_test.go
…
catalog_endpoint.go Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
catalog_endpoint_test.go test: unflake TestCatalogServiceNodes_DistanceSort 2019-11-18 16:21:01 -06:00
check.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
config.go
…
config_endpoint.go Use encoding/json as JSON decoder instead of mapstructure (#6680) 2019-10-29 11:13:36 -07:00
config_endpoint_test.go Expose HTTP-based paths through Connect proxy (#6446) 2019-09-25 20:55:52 -06:00
connect_auth.go Intentions ACL enforcement updates (#7028) 2020-01-13 15:51:40 -05:00
connect_ca_endpoint.go connect: Add AWS PCA provider (#6795) 2019-11-21 17:40:29 +00:00
connect_ca_endpoint_test.go connect: check if intermediate cert needs to be renewed. (#6835) 2020-01-17 23:27:13 +01:00
coordinate_endpoint.go Use encoding/json as JSON decoder instead of mapstructure (#6680) 2019-10-29 11:13:36 -07:00
coordinate_endpoint_test.go test: add additional http status code assertions in coordinate HTTP API tests (#6410) 2019-08-29 09:55:05 -05:00
discovery_chain_endpoint.go Add Namespace support to the API module and the CLI commands (#6874) 2019-12-06 11:14:56 -05:00
discovery_chain_endpoint_test.go connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340) 2019-08-19 13:03:03 -05:00
dns.go Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
dns_oss.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
dns_test.go Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
enterprise_delegate_oss.go
…
event_endpoint.go ACL Authorizer overhaul (#6620) 2019-10-15 16:58:50 -04:00
event_endpoint_test.go
…
health_endpoint.go Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
health_endpoint_test.go test: unflake two TestHealthServiceNode_* tests 2019-11-18 16:21:01 -06:00
http.go ui: feature support templating for index.html (#6921) 2019-12-13 14:50:07 -05:00
http_decode_test.go Use encoding/json as JSON decoder instead of mapstructure (#6680) 2019-10-29 11:13:36 -07:00
http_oss.go AuthMethod updates to support alternate namespace logins (#7029) 2020-01-14 10:09:29 -05:00
http_oss_test.go
…
http_register.go [Feature] API: Add a internal endpoint to query for ACL authori… (#6888) 2019-12-06 09:25:26 -05:00
http_test.go tests: increase TLSHandshakeTimeout to help slow tests (#6864) 2019-12-05 13:20:07 +01:00
intentions_endpoint.go Use encoding/json as JSON decoder instead of mapstructure (#6680) 2019-10-29 11:13:36 -07:00
intentions_endpoint_test.go
…
keyring.go add flag to allow /operator/keyring requests to only hit local servers (#6279) 2019-08-12 11:11:11 -07:00
keyring_test.go test: ensure all TestAgent constructions use a constructor (#6443) 2019-09-05 10:24:36 -07:00
kvs_endpoint.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
kvs_endpoint_test.go
…
notify.go
…
notify_test.go
…
operator_endpoint.go Use encoding/json as JSON decoder instead of mapstructure (#6680) 2019-10-29 11:13:36 -07:00
operator_endpoint_test.go add flag to allow /operator/keyring requests to only hit local servers (#6279) 2019-08-12 11:11:11 -07:00
prepared_query_endpoint.go Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
prepared_query_endpoint_test.go
…
remote_exec.go
…
remote_exec_test.go Update retries that weren't using retry.R (#6146) 2019-07-16 14:47:45 -06:00
retry_join.go tls: auto_encrypt enables automatic RPC cert provisioning for consul clients (#5597) 2019-06-27 22:22:07 +02:00
retry_join_test.go Bump go-discover to support EC2 Metadata Service v2 (#6865) 2019-12-04 11:59:16 -05:00
service_checks_test.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
service_manager.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
service_manager_test.go Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
session_endpoint.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
session_endpoint_test.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
sidecar_service.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
sidecar_service_test.go test: don't leak agent goroutines in TestAgent_sidecarServiceFromNodeService (#6396) 2019-08-26 15:19:59 -05:00
signal_unix.go
…
signal_windows.go
…
snapshot_endpoint.go
…
snapshot_endpoint_test.go
…
status_endpoint.go Allow forwarding of some status RPCs (#6198) 2019-07-25 14:26:22 -04:00
status_endpoint_test.go Fix flaky tests (#6229) 2019-07-29 15:07:25 -04:00
testagent.go Miscellaneous Fixes (#6896) 2019-12-06 14:01:34 -05:00
testagent_test.go
…
translate_addr.go Add support for dual stack IPv4/IPv6 network (#6640) 2020-01-17 09:54:17 -05:00
txn_endpoint.go Use encoding/json as JSON decoder instead of mapstructure (#6680) 2019-10-29 11:13:36 -07:00
txn_endpoint_test.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
ui_endpoint.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
ui_endpoint_test.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
user_event.go Sync of OSS changes to support namespaces (#6909) 2019-12-09 21:26:41 -05:00
user_event_test.go
…
util.go
…
util_test.go
…
watch_handler.go
…
watch_handler_test.go
…