luxolus/open-consul
2
0
Fork 0
Code Issues 1 Pull requests Packages Releases Wiki Activity
11396 commits 1 branch 1 tag 358 MiB
Commit graph

11396 commits

This branch
This branch
All branches
Author SHA1 Message Date
Denislav Denov 3932b5b907
Update website/pages/docs/commands/license.mdx 
Co-authored-by: danielehc <40759828+danielehc@users.noreply.github.com>
 2020-05-08 15:51:52 +03:00
Denislav Denov aa5527303b
Update license.mdx 
Hello team,

I noticed that the reset part of the consul license command was missing in the documentation so I added it and created this PR.
 2020-05-08 11:13:41 +03:00
R.B. Boyer bf70ad1802
cli: oss refactors to support making the auth method CLI aware of namespace rules in enterprise (#7812) 2020-05-07 17:08:42 -05:00
Chris Piraino 2d657c3c0f
Allow ingress gateways to send empty clusters, routes, and listeners (#7795) 
This is useful when updating an config entry with no services, and the
expected behavior is that envoy closes all listeners and clusters.

We also allow empty routes because ingress gateways name route
configurations based on the port of the listener, so it is important we
remove any stale routes. Then, if a new listener with an old port is
added, we will not have to deal with stale routes hanging around routing
to the wrong place.

Endpoints are associated with clusters, and thus by deleting the
clusters we don't have to care about sending empty endpoint responses.
 2020-05-07 16:19:25 -05:00
Jeff Escalante 55e5c1b9ef add alert banner to website 2020-05-06 20:06:39 -04:00
Chris Piraino ad8a0544f2
Require individual services in ingress entry to match protocols (#7774) 
We require any non-wildcard services to match the protocol defined in
the listener on write, so that we can maintain a consistent experience
through ingress gateways. This also helps guard against accidental
misconfiguration by a user.

- Update tests that require an updated protocol for ingress gateways
 2020-05-06 16:09:24 -05:00
Freddy a749f46316
Remove timeout and call to Fatal from goroutine (#7797) 2020-05-06 14:33:17 -06:00
R.B. Boyer 65af2a323c update changelog 2020-05-06 15:32:27 -05:00
R.B. Boyer 095f0503e8
test: make auth method cli crud test work in both oss and ent (#7800) 2020-05-06 15:16:50 -05:00
R.B. Boyer ea21280636
test: make auth method cli crud test helper ignore the default namespace (#7799) 2020-05-06 15:09:47 -05:00
Chris Piraino cf03f3df31
Merge pull request #7678 from hashicorp/ingress/host-header-routing 
Allow ingress gateways to route traffic based on Host header
 2020-05-06 15:07:36 -05:00
Chris Piraino ac115e39b2 A proxy-default config entry only exists in the default namespace 2020-05-06 15:06:14 -05:00
Chris Piraino ff501ffb40 Correctly set a namespace label in the required domain for xds routes 
If an upstream is not in the default namespace, we expect DNS requests
to be served over "<service-name>.ingress.<namespace>.*"
 2020-05-06 15:06:14 -05:00
Chris Piraino 9a130f2ccc Remove outdated comment 2020-05-06 15:06:14 -05:00
Chris Piraino 21e0ed8f8d Better document wildcard specifier interactions 2020-05-06 15:06:14 -05:00
Chris Piraino d8ac79041d Re-add comment on connect-proxy virtual hosts 2020-05-06 15:06:14 -05:00
Kyle Havlovitz 26533dcb09 Make sure IngressHosts isn't parsed during JSON decode 2020-05-06 15:06:14 -05:00
Chris Piraino c30a7bfdfe Comment why it is ok to expect upstreams slice to not be empty 2020-05-06 15:06:13 -05:00
Chris Piraino 9b9dfa8eeb xds: Use only the port number as the configured route name 
This removes duplication of protocol from the stats_prefix
 2020-05-06 15:06:13 -05:00
Kyle Havlovitz 04b6bd637a Filter wildcard gateway services to match listener protocol 
This now requires some type of protocol setting in ingress gateway tests
to ensure the services are not filtered out.

- small refactor to add a max(x, y) function
- Use internal configEntryTxn function and add MaxUint64 to lib
 2020-05-06 15:06:13 -05:00
Chris Piraino 210dda5682 Allow Hosts field to be set on an ingress config entry 
- Validate that this cannot be set on a 'tcp' listener nor on a wildcard
service.
- Add Hosts field to api and test in consul config write CLI
- xds: Configure envoy with user-provided hosts from ingress gateways
 2020-05-06 15:06:13 -05:00
Chris Piraino 837d2aa7d2 Remove service_subset field from ingress config entry 
We decided that this was not a useful MVP feature, and just added
unnecessary complexity
 2020-05-06 15:06:13 -05:00
Kyle Havlovitz e4268c8b7f Support multiple listeners referencing the same service in gateway definitions 2020-05-06 15:06:13 -05:00
Kyle Havlovitz b21cd112e5 Allow ingress gateways to route traffic based on Host header 
This commit adds the necessary changes to allow an ingress gateway to
route traffic from a single defined port to multiple different upstream
services in the Consul mesh.

To do this, we now require all HTTP requests coming into the ingress
gateway to specify a Host header that matches "<service-name>.*" in
order to correctly route traffic to the correct service.

- Differentiate multiple listener's route names by port
- Adds a case in xds for allowing default discovery chains to create a
  route configuration when on an ingress gateway. This allows default
  services to easily use host header routing
- ingress-gateways have a single route config for each listener
  that utilizes domain matching to route to different services.
 2020-05-06 15:06:13 -05:00
R.B. Boyer 1187d7288e
acl: oss plumbing to support auth method namespace rules in enterprise (#7794) 
This includes website docs updates.
 2020-05-06 13:48:04 -05:00
Preetha b730590c82
Merge pull request #7792 from hashicorp/changelog-fixup 
Remove duplicated entries in CHANGELOG.md
 2020-05-06 13:31:03 -05:00
Preetha 859496157d
Remove duplicated entries in CHANGELOG.md 
Remove some duplicated entries in the unreleased section of the changelog that were released in  1.7.3
 2020-05-06 08:56:41 -05:00
Hans Hasselberg 1817748157
Update CHANGELOG.md 2020-05-06 01:38:59 +02:00
Luke Kysow 3b9e53e290
Merge pull request #7724 from hashicorp/helm-repo 
Update k8s instructions for new helm repo
 2020-05-05 16:17:53 -07:00
R.B. Boyer b6cc92020d
test: make the kube auth method test helper use freeport (#7788) 2020-05-05 16:55:21 -05:00
Hans Hasselberg 5d2b10e862
segments: oss changes for enterprise network area changes (#7786) 
OSS code changes for network segments
 2020-05-05 21:41:19 +02:00
Hans Hasselberg e3e2b82a00 network_segments: stop advertising segment tags 2020-05-05 21:32:05 +02:00
Hans Hasselberg 854aac510f agent: refactor to use a single addrFn 2020-05-05 21:08:10 +02:00
Hans Hasselberg 0f2e189012 agent: rename local/global to src/dst 2020-05-05 21:07:34 +02:00
Chris Piraino 3cb54b0c1a
Update CHANGELOG.md 2020-05-05 10:56:50 -05:00
Chris Piraino 837bd6f558
Construct a default destination if one does not exist for service-router (#7783) 2020-05-05 10:49:50 -05:00
Matt Keeler 930af9168d
Update CHANGELOG.md 2020-05-05 09:56:56 -04:00
Matt Keeler 53d44a67d2
Update CHANGELOG.md 2020-05-05 09:53:46 -04:00
Mike Morris f39bd26a7c
vendor: revert golang.org/x/sys bump to avoid FreeBSD regression (#7780) 2020-05-05 09:26:17 +02:00
Iryna Shustava a61329c747
docs: add Helm docs for external servers and bootstrapToken (#7725) 2020-05-04 18:09:59 -07:00
R.B. Boyer 3f521de377 update changelog 2020-05-04 17:03:59 -05:00
R.B. Boyer c9c557477b
acl: add MaxTokenTTL field to auth methods (#7779) 
When set to a non zero value it will limit the ExpirationTime of all
tokens created via the auth method.
 2020-05-04 17:02:57 -05:00
s-christoff 75cb0715b1
Update CHANGELOG.md 2020-05-04 16:24:40 -05:00
s-christoff 2535cb85eb
cli: Add -config flag to "acl authmethod update/create" (#7776) 2020-05-04 16:21:28 -05:00
R.B. Boyer c74575d446 update changelog 2020-05-04 15:21:08 -05:00
R.B. Boyer 265d2ea9e1
acl: add DisplayName field to auth methods (#7769) 
Also add a few missing acl fields in the api.
 2020-05-04 15:18:25 -05:00
Hans Hasselberg f80ba59c26
vendor: fix case issue (#7777) 2020-05-04 21:39:01 +02:00
Hans Hasselberg 1be90e0fa1
agent: don't let left nodes hold onto their node-id (#7747) 2020-05-04 18:39:08 +02:00
Matt Keeler 669d22933e
Merge pull request #7714 from hashicorp/oss-sync/msp-agent-token 2020-05-04 11:33:50 -04:00
Matt Keeler 31c5bcc53e
Update go-discover dependency (#7731) 2020-05-04 10:59:48 -04:00