71cd7c6a16
auto-updated agent/uiserver/bindata_assetfs.go from commit 0f7c909f1
2020-12-11 09:44:56 +00:00
f827deb8a7
auto-updated agent/uiserver/bindata_assetfs.go from commit 21e5a8f0f
2020-12-11 09:38:09 +00:00
f9dcaf7f6b
acl: global tokens created by auth methods now correctly replicate to secondary datacenters ( #9351 )
...
Previously the tokens would fail to insert into the secondary's state
store because the AuthMethod field of the ACLToken did not point to a
known auth method from the primary.
2020-12-09 15:22:29 -06:00
6e08ef263e
auto-updated agent/uiserver/bindata_assetfs.go from commit 9d8131907
2020-12-09 19:17:30 +00:00
52ca0f2a2b
auto-updated agent/uiserver/bindata_assetfs.go from commit a78566e2d
2020-12-09 18:54:02 +00:00
bfaf17fa05
auto-updated agent/uiserver/bindata_assetfs.go from commit d6cb2b0d7
2020-12-09 18:45:39 +00:00
8bda36c9f4
Create consul version metric with version label ( #9350 )
...
* create consul version metric with version label
* agent/agent.go: add pre-release Version as well as label
Co-Authored-By: Radha13 <kumari.radha3@gmail.com>
* verion and pre-release version labels.
* hyphen/- breaks prometheus
* Add Prometheus gauge defintion for version metric
* Add new metric to telemetry docs
Co-authored-by: Radha Kumari <kumari.radha3@gmail.com>
Co-authored-by: Aestek <thib.gilles@gmail.com>
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
2020-12-09 09:16:53 -05:00
3f2199d323
auto-updated agent/uiserver/bindata_assetfs.go from commit 27c74f714
2020-12-09 13:12:32 +00:00
cdfae9ce63
auto-updated agent/uiserver/bindata_assetfs.go from commit 613be01f4
2020-12-09 09:29:17 +00:00
37613345f2
auto-updated agent/uiserver/bindata_assetfs.go from commit db5283ee2
2020-12-08 15:53:31 +00:00
535ef33bac
auto-updated agent/uiserver/bindata_assetfs.go from commit 3be03029f
2020-12-08 09:32:32 +00:00
d4478782ae
auto-updated agent/uiserver/bindata_assetfs.go from commit 4dfa7622d
2020-12-07 09:24:00 +00:00
b734cf54ed
auto-updated agent/uiserver/bindata_assetfs.go from commit adbd6c0c8
2020-12-03 09:19:50 +00:00
57210a59c3
connect: Fix a case where the active root would get unset even when there wasn't a new one
2020-12-02 11:42:23 -08:00
4ee15914b0
auto-updated agent/uiserver/bindata_assetfs.go from commit e23b5b003
2020-12-02 15:53:16 +00:00
a814338374
auto-updated agent/uiserver/bindata_assetfs.go from commit 9ac7bc180
2020-12-02 15:46:59 +00:00
297210ad93
auto-updated agent/uiserver/bindata_assetfs.go from commit a5b9ada9a
2020-12-02 09:49:40 +00:00
af9687e0b8
auto-updated agent/uiserver/bindata_assetfs.go from commit cf38309f6
2020-12-01 15:49:06 +00:00
91d5d6c586
Merge pull request #9009 from hashicorp/update-secondary-ca
...
connect: Fix an issue with updating CA config in a secondary datacenter
2020-11-30 14:49:28 -08:00
c5167cf9c4
Use a buffered channel for CA intermediate renew func
2020-11-30 14:37:24 -08:00
149e1e5f13
auto-updated agent/uiserver/bindata_assetfs.go from commit afe0f2614
2020-11-30 18:47:37 +00:00
45f7de452f
auto-updated agent/uiserver/bindata_assetfs.go from commit b5abbf122
2020-11-30 17:33:21 +00:00
58797598dc
auto-updated agent/uiserver/bindata_assetfs.go from commit d1ebe8c14
2020-11-30 17:27:35 +00:00
c03baa7b57
auto-updated agent/uiserver/bindata_assetfs.go from commit f46ef3e3f
2020-11-30 17:07:25 +00:00
4801228104
auto-updated agent/uiserver/bindata_assetfs.go from commit a59a2f860
2020-11-30 16:57:34 +00:00
2fd62ba8de
auto-updated agent/uiserver/bindata_assetfs.go from commit 9cf30e74e
2020-11-30 15:09:43 +00:00
17a86be022
Merge pull request #9284 from hashicorp/dnephin/agent-service-register
...
local: mark service as InSync when added to local agent state
2020-11-27 15:49:55 -05:00
4c5fab6e00
local: mark service and checks as InSync when added
...
If the existing service and checks are the same as the new registration.
2020-11-27 15:31:12 -05:00
8c5c6e77ec
fix serf_wan documentation ( #9289 )
...
WAN config is different than LAN config, source of truth is
f72d2042a8/config.go (L315-L326)
2020-11-27 20:49:43 +01:00
b6e469e1e9
auto-updated agent/uiserver/bindata_assetfs.go from commit 408174f3b
2020-11-27 15:45:17 +00:00
813f0d552d
Merge pull request #9247 from pierresouchay/streaming_predictible_order_for_health
...
[Streaming] Predictable order for results of /health/service/:serviceName to mimic memdb
2020-11-25 15:53:18 -05:00
09673426e3
Applied suggestions from @dnephin
...
* Renamed `cachedHealResultSorter` into `sortCheckServiceNodes`
* Use `<` instead of `strings.Compare`
* Single line comparison in unit test
2020-11-25 21:40:51 +01:00
6d6b6c15c6
server: fix panic when deleting a non existent intention ( #9254 )
...
* server: fix panic when deleting a non existent intention
* add changelog
* Always return an error when deleting non-existent ixn
Co-authored-by: freddygv <gh@freddygv.xyz>
2020-11-24 13:44:20 -05:00
293360339b
auto-updated agent/uiserver/bindata_assetfs.go from commit 6f8b5acbe
2020-11-24 17:51:46 +00:00
4039a19ed3
auto-updated agent/uiserver/bindata_assetfs.go from commit 9c3c7bcf3
2020-11-24 14:38:24 +00:00
25f9e232af
add missing descriptions for metrics
2020-11-23 22:06:30 +01:00
7a8844ccce
add entries for missing fsm operations and mark duplicated metrics prefixes as deprecated
2020-11-23 12:42:51 -08:00
a01f853aa5
Clean up the logic in persistNewRootAndConfig
2020-11-20 15:54:44 -08:00
3ea27d75e4
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs
...
Telemetry/fix missing and stale docs
2020-11-20 12:54:29 -08:00
9239df6dbd
[Streaming] Predictable order for results of /health/service/:serviceName to mimic memdb
...
This ensures the result is consitent with/witout streaming
Will partially fix #9239
2020-11-20 16:23:35 +01:00
26a9c985c5
Add CA server delegate interface for testing
2020-11-19 20:08:06 -08:00
4ad076207e
add telemetry and definition help entries for missing catalog and acl metrics
2020-11-19 13:29:44 -08:00
7bcbc59dea
command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint ( #9229 )
...
Fixes #9215
2020-11-19 15:27:31 -06:00
46205bbf27
remove stale entries and rename/define acl.resolveToken
2020-11-19 13:06:28 -08:00
22a0ab69ae
auto-updated agent/uiserver/bindata_assetfs.go from commit d913af2bb
2020-11-19 18:45:01 +00:00
e4e306210a
Require operator:write to get Connect CA config ( #9240 )
...
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.
--
This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
2020-11-19 10:14:48 -07:00
293ba9e0b5
auto-updated agent/uiserver/bindata_assetfs.go from commit 687ce1f9c
2020-11-19 16:13:04 +00:00
35c5f83ea3
Merge pull request #9224 from hashicorp/dnephin/fix-multiple-http-listeners
...
agent: fix bug with multiple listeners
2020-11-18 16:52:29 -05:00
8647483605
Use freeport
...
To prevent other tests which already use freeport from flaking when port 0 steals their reserved port.
2020-11-18 16:07:34 -05:00
75a1727b31
auto-updated agent/uiserver/bindata_assetfs.go from commit 591a96d5b
2020-11-18 19:07:25 +00:00
hashicorp-ci