status-im
/
consul
mirror of https://github.com/status-im/consul.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
consul/agent/structs
History
Connor efe4b21287
Support Vault Namespaces explicitly in CA config (#11477) 
* Support Vault Namespaces explicitly in CA config

If there is a Namespace entry included in the Vault CA configuration,
set it as the Vault Namespace on the Vault client

Currently the only way to support Vault namespaces in the Consul CA
config is by doing one of the following:
1) Set the VAULT_NAMESPACE environment variable which will be picked up
by the Vault API client
2) Prefix all Vault paths with the namespace

Neither of these are super pleasant. The first requires direct access
and modification to the Consul runtime environment. It's possible and
expected, not super pleasant.

The second requires more indepth knowledge of Vault and how it uses
Namespaces and could be confusing for anyone without that context. It
also infers that it is not supported

* Add changelog

* Remove fmt.Fprint calls

* Make comment clearer

* Add next consul version to website docs

* Add new test for default configuration

* go mod tidy

* Add skip if vault not present

* Tweak changelog text
 		2021-11-05 11:42:28 -05:00
..
acl.go state: remove support for updating legacy ACL tokens 2021-10-25 17:25:14 -04:00
acl_cache.go acl: remove ACL.GetPolicy endpoint and resolve legacy acls 2021-09-29 14:33:19 -04:00
acl_cache_test.go test: Remove t.Parallel() from agent/structs tests 2020-05-08 14:06:10 -04:00
acl_oss.go acl: small OSS refactors to help ensure that auth methods with namespace rules work with partitions (#11323) 2021-10-14 15:38:05 -05:00
acl_test.go acl: remove ACLTokenTypeClient, 2021-10-25 17:25:14 -04:00
auto_encrypt.go tls: auto_encrypt enables automatic RPC cert provisioning for consul clients (#5597) 2019-06-27 22:22:07 +02:00
autopilot.go Switch to using the external autopilot module 2020-11-09 09:22:11 -05:00
autopilot_oss.go Switch to using the external autopilot module 2020-11-09 09:22:11 -05:00
catalog.go agent: ensure that most agent behavior correctly respects partition configuration (#10880) 2021-08-19 15:09:42 -05:00
catalog_oss.go replumbing a bunch of api and agent structs for partitions (#10681) 2021-07-22 14:33:22 -05:00
check_definition.go preload json values in structs to determine defaults 2021-10-10 17:52:26 -04:00
check_definition_test.go add http2 ping health checks (#8431) 2021-04-09 15:12:10 -04:00
check_type.go preload json values in structs to determine defaults 2021-10-10 17:52:26 -04:00
config_entry.go Support Check-And-Set deletion of config entries (#11419) 2021-11-01 16:42:01 +00:00
config_entry_discoverychain.go add service resolver subset filter validation 2021-10-13 02:56:04 +05:30
config_entry_discoverychain_oss.go agent/structs: add a bunch more EnterpriseMeta helper functions to help with partitioning (#10669) 2021-07-22 13:20:45 -05:00
config_entry_discoverychain_test.go add service resolver subset filter validation 2021-10-13 02:56:04 +05:30
config_entry_exports.go Ensure partition-exports kind gets marshalled 2021-10-27 15:01:26 -06:00
config_entry_gateways.go Final readability tweaks from review 2021-09-23 10:17:12 +01:00
config_entry_gateways_test.go Fix some more Enterprise Normalization issues affecting tests 2021-09-23 10:12:37 +01:00
config_entry_intentions.go Sync enterprise changes to oss (#10994) 2021-09-08 11:59:30 -04:00
config_entry_intentions_oss.go structs: prohibit config entries from referencing more than one partition at a time (#10478) 2021-06-23 16:44:10 -05:00
config_entry_intentions_test.go Sync enterprise changes to oss (#10994) 2021-09-08 11:59:30 -04:00
config_entry_mesh.go acl: adding a new mesh resource 2021-09-03 09:12:03 -04:00
config_entry_mesh_oss.go Rename cluster config files to mesh as well (#10148) 2021-04-28 18:15:26 -06:00
config_entry_oss.go structs: prohibit config entries from referencing more than one partition at a time (#10478) 2021-06-23 16:44:10 -05:00
config_entry_oss_test.go Split up unused key validation for oss/ent (#8189) 2020-06-25 13:58:29 -06:00
config_entry_test.go Remove outdated partition label from test 2021-10-25 18:47:02 -06:00
connect.go connect: include optional partition prefixes in SPIFFE identifiers (#10507) 2021-06-25 16:47:47 -05:00
connect_ca.go Support Vault Namespaces explicitly in CA config (#11477) 2021-11-05 11:42:28 -05:00
connect_ca_test.go add root_cert_ttl option for consul connect, vault ca providers (#11428) 2021-11-02 11:02:10 -07:00
connect_oss.go Intentions ACL enforcement updates (#7028) 2020-01-13 15:51:40 -05:00
connect_proxy_config.go Ingress gateway header manip plumbing 2021-09-10 21:09:24 +01:00
connect_proxy_config_oss.go agent/structs: add a bunch more EnterpriseMeta helper functions to help with partitioning (#10669) 2021-07-22 13:20:45 -05:00
connect_proxy_config_test.go Omit empty tproxy config in JSON responses (#10402) 2021-06-15 13:53:35 -06:00
discovery_chain.go Header manip for split legs plumbing 2021-09-10 21:09:24 +01:00
discovery_chain_oss.go agent/structs: add a bunch more EnterpriseMeta helper functions to help with partitioning (#10669) 2021-07-22 13:20:45 -05:00
errors.go Special case the error returned when we have a Raft leader but are not tracking it in the ServerLookup (#9487) 2021-01-04 14:05:23 -05:00
federation_state.go wan federation via mesh gateways (#6884) 2020-03-09 15:59:02 -05:00
identity.go state: convert services.node and checks.node indexes 2021-03-16 13:00:31 -04:00
intention.go acl: fix intention:*:write checks (#11061) 2021-09-16 11:08:45 -05:00
intention_oss.go Cleanup unnecessary normalizing method (#11169) 2021-09-28 15:31:12 -04:00
intention_test.go Sync enterprise changes to oss (#10994) 2021-09-08 11:59:30 -04:00
operator.go Switch to using the external autopilot module 2020-11-09 09:22:11 -05:00
prepared_query.go Catalog + Namespace OSS changes. (#7219) 2020-02-10 10:40:44 -05:00
prepared_query_test.go structs: add two cache completeness tests types that implement cache.Request 2021-05-31 16:54:41 -04:00
protobuf_compat.go http: add an X-Consul-Query-Backend header to responses 2021-06-28 16:44:58 -04:00
sanitize_oss.go Update to use a consulent build tag instead of just ent (#5759) 2019-05-01 11:11:27 -04:00
service_definition.go Add failures_before_warning to checks (#10969) 2021-09-14 12:47:52 -04:00
service_definition_test.go Replace goe/verify.Values with testify/require.Equal (#7993) 2020-06-02 12:41:25 -04:00
snapshot.go
…
structs.go Remove some usage of md5 from the system (#11491) 2021-11-04 13:07:54 -07:00
structs_filtering_test.go Sync enterprise changes to oss (#10994) 2021-09-08 11:59:30 -04:00
structs_oss.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
structs_oss_test.go sync changes to oss files made in enterprise (#10670) 2021-07-22 13:58:08 -05:00
structs_test.go acl: remove ACL.GetPolicy endpoint and resolve legacy acls 2021-09-29 14:33:19 -04:00
system_metadata.go connect: intentions are now managed as a new config entry kind "service-intentions" (#8834) 2020-10-06 13:24:05 -05:00
testing.go agent: ensure that we always use the same settings for msgpack (#7245) 2020-02-07 15:50:24 -06:00
testing_catalog.go partition dicovery chains (#10983) 2021-09-07 16:29:32 -04:00
testing_connect_proxy_config.go oss portion of ent #1069 (#10883) 2021-08-20 12:57:45 -04:00
testing_intention.go Cleanup unnecessary normalizing method (#11169) 2021-09-28 15:31:12 -04:00
testing_service_definition.go Add Proxy Upstreams to Service Definition (#4639) 2018-10-10 16:55:34 +01:00
txn.go connect: intentions are now managed as a new config entry kind "service-intentions" (#8834) 2020-10-06 13:24:05 -05:00