e6dea80797
website: typo in node meta additional section ( #4429 )
2018-07-25 13:32:36 -07:00
1bd002d44b
Merge pull request #4446 from jharley/patch-1
...
Documentation: Add missing word for Watches clarification
2018-07-25 14:36:00 -05:00
73b68450ca
Add missing word for Watches clarification
...
`Watches use blocking queries monitor` reads awkwardly, I figured 'to' was missing
2018-07-25 15:34:45 -04:00
217137b775
Fixes #4421 : General solution to stop blocking queries with index 0 ( #4437 )
...
* Fix theoretical cache collision bug if/when we use more cache types with same result type
* Generalized fix for blocking query handling when state store methods return zero index
* Refactor test retry to only affect CI
* Undo make file merge
* Add hint to error message returned to end-user requests if Connect is not enabled when they try to request cert
* Explicit error for Roots endpoint if connect is disabled
* Fix tests that were asserting old behaviour
2018-07-25 20:26:27 +01:00
78124043bf
Fix cross compiling with make
...
make XC_OS=linux XC_ARCH=amd64 when running on macos puts its binaries in ${GOPATH}/bin/linux_amd64/consul and not ${GOPATH}/bin/consul
This makes the build pull the binary from the right location.
2018-07-25 15:21:11 -04:00
17de36c36e
Allow config-file based Service Definitions for unmanaged proxies and Connect-natice apps. ( #4443 )
2018-07-25 19:55:41 +01:00
015ea28f7d
Update CHANGELOG.md
2018-07-25 14:50:06 -04:00
39aa3a34ff
Remove deprecated Ruby consul-client library ( #4419 )
...
The GitHub repo for this library says that it is no longer maintained
and should not be used. The Ruby Diplomat library provides similar
functionality instead (and is already listed here).
2018-07-25 11:47:54 -07:00
2eceddafec
Merge pull request #4438 from hashicorp/bugfix/keyring-acl
...
ACL Bug Fixes
2018-07-25 14:47:19 -04:00
dcd3a0d7c4
Update CHANGELOG.md
2018-07-25 09:28:25 -07:00
d0d40a4c34
Merge pull request #4314 from hashicorp/b-ignore-check
...
command/connect/proxy: ignore check doesn't exist on -register
2018-07-25 11:26:40 -05:00
feeea60dea
Ooops that was meant to be to a branch no master... EMORECOFFEE
...
Revert "Add config option to disable HTTP printable char path check"
This reverts commit eebe45a47b4df5c0271b17f0fd1bd85db8bdefca.
2018-07-25 15:54:11 +01:00
d6c16dd0ad
Add config option to disable HTTP printable char path check
2018-07-25 15:52:37 +01:00
23a61f5714
Rewrite all of acl_test.go
...
This is now using table driven testing. In addition to conversion of old tests I also implemented several new tests for the acl fixes in my previous commit.
In particular the issues I saw with ACLs for prepared queries, keyring and operator all have tests for those and comments indicating that they would have previously failed.
2018-07-24 20:29:34 -04:00
f300869574
Fix ACL enforcement
...
This creates one function that takes a rule and the required permissions and returns whether it should be allowed and whether to leave the decision to the parent acl.
Then this function is used everywhere. This makes acl enforcement consistent.
There were several places where a default allow policy with explicit deny rules wasnt being handled and several others where it wasn’t using the parent acl appropriately but would lump no policy in with a deny policy. All of that has been fixed.
2018-07-24 16:21:56 -04:00
b3771e2e6c
Refactor test retry to only affect CI ( #4436 )
...
* Refactor test retry to only affect CI
* Move test install deps out of the retry loop
* Add internal targets to PHONY too
2018-07-24 15:12:48 +01:00
c6d4210cc6
Update CHANGELOG.md
2018-07-24 12:36:44 +01:00
186987874c
Merge pull request #4353 from azam/add-serf-lan-wan-port-args
...
Make RPC, Serf LAN, Serf WAN port configurable from CLI
2018-07-24 12:33:10 +01:00
056db5d697
Adds Monitoring with Telegraf guide ( #4227 )
...
* Installing Telegraf
* Configuring Telegraf
* Configuring Consul to send metrics to Telegraf
* Important metrics and aggregates
2018-07-23 16:46:43 -07:00
7d44a719cd
Update CHANGELOG.md
2018-07-23 09:18:56 -07:00
a125735d76
connect/ca: check LeafCertTTL when rotating expired roots
2018-07-20 16:04:04 -07:00
2d5be9a07e
Merge pull request #4427 from hashicorp/connect-api-docs
...
Add /health/connect to docs and make consistent with /catalog/connect
2018-07-20 21:24:57 +01:00
5c42dacef4
Merge pull request #4320 from hashicorp/f-alias-check
...
Add "Alias" Check Type
2018-07-20 13:01:33 -05:00
5290d69cb3
Make Serf LAN & WAN port configurable from CLI
...
Make RPC port accessible to CLI
Add tests and documentation for server-port, serf-lan-port, serf-wan-port CLI arguments
2018-07-21 02:17:21 +09:00
b3ab641a99
Add /health/connect to docs and make consistent with /catalog/connect
2018-07-20 16:50:28 +01:00
dc314c3229
Update CHANGELOG.md
2018-07-20 09:00:06 -04:00
6802ad6c4f
Merge pull request #4407 from hashicorp/proxy-persist
...
Persist proxies from config files
2018-07-20 08:58:38 -04:00
fe77ea8bdc
readme: add note about security related issues ( #4401 )
...
* readme: add note about security related issues
This is a reminder to encourage responsible disclosure (vs. publicly on GitHub) for security-related issues.
* readme: link to security page
2018-07-19 12:43:36 -07:00
dedc5ad69f
agent/local: silly spacing on select statements
2018-07-19 14:21:30 -05:00
e42ca78c5d
agent/local: address remaining test feedback
2018-07-19 14:20:50 -05:00
95e8f795df
Use the agent logger instead of log module
2018-07-19 11:22:01 -04:00
a89dab55d3
Update a couple erroneous tests.
2018-07-19 09:20:51 -04:00
81f6486fb5
agent/local: don't use time.After in test since notify is instant
2018-07-18 16:16:28 -05:00
953b72318f
Persist proxies from config files
...
Also change how loadProxies works. Now it will load all persisted proxies into a map, then when loading config file proxies will look up the previous proxy token in that map.
2018-07-18 17:04:35 -04:00
a1a0c1db0a
Merge pull request #4410 from hashicorp/bugfix/gh-4175-service-ip
...
UI - Bugfix: Show Service IP not the Node IP
2018-07-18 18:39:39 +01:00
56719485c8
Merge pull request #4383 from hashicorp/feature/ui-tag-text-search
...
UI - Tag Text Search
2018-07-18 18:38:46 +01:00
9ae81696a1
Use `some` for the tags search instead of munging and searching
2018-07-18 18:15:03 +01:00
f7209e63f1
ADd some extra tests to pick up on searching by two joined tags
2018-07-18 18:14:20 +01:00
f993130937
Add basic searching by tags using the freetext search near-term
2018-07-18 18:14:19 +01:00
6c9f4fbe8a
Acceptance test for searching service by tag
2018-07-18 18:13:18 +01:00
e1fed4d41e
Merge pull request #4349 from hashicorp/feature/remove-rm-api-double
...
UI - Stop trying to remove consul-api-double we don't need to anymore
2018-07-18 17:54:21 +01:00
7a41c40dbc
Show the Service.IP address instead of the Node.IP address in detail
2018-07-18 13:37:14 +01:00
d8ab56666c
Make the tests break by switching to a Service.IP
2018-07-18 13:35:57 +01:00
60dff7fc19
Update CHANGELOG.md
2018-07-17 13:23:10 -04:00
40742ddbf6
Put the tree back in dev mode
2018-07-17 13:21:56 -04:00
f1282d5894
Merge pull request #4403 from hashicorp/bugfix/choose-client-address
...
Fix issue with managed proxies and watches attempting to use a client addr that is 0.0.0.0 or ::
2018-07-17 13:19:53 -04:00
a3d1d4af2e
Merge pull request #4352 from hashicorp/doc-dev-flag-generates-certs
...
Note that `-dev` generates certs for Connect.
2018-07-17 11:36:02 +01:00
934d4e4477
Clarify Connect-related implications for `-dev` flag
2018-07-16 14:53:46 -07:00
ce29660245
website: update docs for leaf cert TTL option
2018-07-16 13:33:42 -07:00
45ec8849f3
connect/ca: add configurable leaf cert TTL
2018-07-16 13:33:37 -07:00
Sergey Shepelev