Kenia
8bda36c9f4
Create consul version metric with version label ( #9350 )
...
* create consul version metric with version label
* agent/agent.go: add pre-release Version as well as label
Co-Authored-By: Radha13 <kumari.radha3@gmail.com>
* verion and pre-release version labels.
* hyphen/- breaks prometheus
* Add Prometheus gauge defintion for version metric
* Add new metric to telemetry docs
Co-authored-by: Radha Kumari <kumari.radha3@gmail.com>
Co-authored-by: Aestek <thib.gilles@gmail.com>
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
2020-12-09 09:16:53 -05:00
hashicorp-ci
3f2199d323
auto-updated agent/uiserver/bindata_assetfs.go from commit 27c74f714
2020-12-09 13:12:32 +00:00
hashicorp-ci
cdfae9ce63
auto-updated agent/uiserver/bindata_assetfs.go from commit 613be01f4
2020-12-09 09:29:17 +00:00
hashicorp-ci
37613345f2
auto-updated agent/uiserver/bindata_assetfs.go from commit db5283ee2
2020-12-08 15:53:31 +00:00
hashicorp-ci
535ef33bac
auto-updated agent/uiserver/bindata_assetfs.go from commit 3be03029f
2020-12-08 09:32:32 +00:00
hashicorp-ci
d4478782ae
auto-updated agent/uiserver/bindata_assetfs.go from commit 4dfa7622d
2020-12-07 09:24:00 +00:00
hashicorp-ci
b734cf54ed
auto-updated agent/uiserver/bindata_assetfs.go from commit adbd6c0c8
2020-12-03 09:19:50 +00:00
Kyle Havlovitz
57210a59c3
connect: Fix a case where the active root would get unset even when there wasn't a new one
2020-12-02 11:42:23 -08:00
hashicorp-ci
4ee15914b0
auto-updated agent/uiserver/bindata_assetfs.go from commit e23b5b003
2020-12-02 15:53:16 +00:00
hashicorp-ci
a814338374
auto-updated agent/uiserver/bindata_assetfs.go from commit 9ac7bc180
2020-12-02 15:46:59 +00:00
hashicorp-ci
297210ad93
auto-updated agent/uiserver/bindata_assetfs.go from commit a5b9ada9a
2020-12-02 09:49:40 +00:00
hashicorp-ci
af9687e0b8
auto-updated agent/uiserver/bindata_assetfs.go from commit cf38309f6
2020-12-01 15:49:06 +00:00
Kyle Havlovitz
91d5d6c586
Merge pull request #9009 from hashicorp/update-secondary-ca
...
connect: Fix an issue with updating CA config in a secondary datacenter
2020-11-30 14:49:28 -08:00
Kyle Havlovitz
c5167cf9c4
Use a buffered channel for CA intermediate renew func
2020-11-30 14:37:24 -08:00
hashicorp-ci
149e1e5f13
auto-updated agent/uiserver/bindata_assetfs.go from commit afe0f2614
2020-11-30 18:47:37 +00:00
hashicorp-ci
45f7de452f
auto-updated agent/uiserver/bindata_assetfs.go from commit b5abbf122
2020-11-30 17:33:21 +00:00
hashicorp-ci
58797598dc
auto-updated agent/uiserver/bindata_assetfs.go from commit d1ebe8c14
2020-11-30 17:27:35 +00:00
hashicorp-ci
c03baa7b57
auto-updated agent/uiserver/bindata_assetfs.go from commit f46ef3e3f
2020-11-30 17:07:25 +00:00
hashicorp-ci
4801228104
auto-updated agent/uiserver/bindata_assetfs.go from commit a59a2f860
2020-11-30 16:57:34 +00:00
hashicorp-ci
2fd62ba8de
auto-updated agent/uiserver/bindata_assetfs.go from commit 9cf30e74e
2020-11-30 15:09:43 +00:00
Daniel Nephin
17a86be022
Merge pull request #9284 from hashicorp/dnephin/agent-service-register
...
local: mark service as InSync when added to local agent state
2020-11-27 15:49:55 -05:00
Daniel Nephin
4c5fab6e00
local: mark service and checks as InSync when added
...
If the existing service and checks are the same as the new registration.
2020-11-27 15:31:12 -05:00
Hans Hasselberg
8c5c6e77ec
fix serf_wan documentation ( #9289 )
...
WAN config is different than LAN config, source of truth is
f72d2042a8/config.go (L315-L326)
and now the docs are correct.
2020-11-27 20:49:43 +01:00
hashicorp-ci
b6e469e1e9
auto-updated agent/uiserver/bindata_assetfs.go from commit 408174f3b
2020-11-27 15:45:17 +00:00
Daniel Nephin
813f0d552d
Merge pull request #9247 from pierresouchay/streaming_predictible_order_for_health
...
[Streaming] Predictable order for results of /health/service/:serviceName to mimic memdb
2020-11-25 15:53:18 -05:00
Pierre Souchay
09673426e3
Applied suggestions from @dnephin
...
* Renamed `cachedHealResultSorter` into `sortCheckServiceNodes`
* Use `<` instead of `strings.Compare`
* Single line comparison in unit test
2020-11-25 21:40:51 +01:00
R.B. Boyer
6d6b6c15c6
server: fix panic when deleting a non existent intention ( #9254 )
...
* server: fix panic when deleting a non existent intention
* add changelog
* Always return an error when deleting non-existent ixn
Co-authored-by: freddygv <gh@freddygv.xyz>
2020-11-24 13:44:20 -05:00
hashicorp-ci
293360339b
auto-updated agent/uiserver/bindata_assetfs.go from commit 6f8b5acbe
2020-11-24 17:51:46 +00:00
hashicorp-ci
4039a19ed3
auto-updated agent/uiserver/bindata_assetfs.go from commit 9c3c7bcf3
2020-11-24 14:38:24 +00:00
Hans Hasselberg
25f9e232af
add missing descriptions for metrics
2020-11-23 22:06:30 +01:00
Kit Patella
7a8844ccce
add entries for missing fsm operations and mark duplicated metrics prefixes as deprecated
2020-11-23 12:42:51 -08:00
Kyle Havlovitz
a01f853aa5
Clean up the logic in persistNewRootAndConfig
2020-11-20 15:54:44 -08:00
Kit Patella
3ea27d75e4
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs
...
Telemetry/fix missing and stale docs
2020-11-20 12:54:29 -08:00
Pierre Souchay
9239df6dbd
[Streaming] Predictable order for results of /health/service/:serviceName to mimic memdb
...
This ensures the result is consitent with/witout streaming
Will partially fix #9239
2020-11-20 16:23:35 +01:00
Kyle Havlovitz
26a9c985c5
Add CA server delegate interface for testing
2020-11-19 20:08:06 -08:00
Kit Patella
4ad076207e
add telemetry and definition help entries for missing catalog and acl metrics
2020-11-19 13:29:44 -08:00
R.B. Boyer
7bcbc59dea
command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint ( #9229 )
...
Fixes #9215
2020-11-19 15:27:31 -06:00
Kit Patella
46205bbf27
remove stale entries and rename/define acl.resolveToken
2020-11-19 13:06:28 -08:00
hashicorp-ci
22a0ab69ae
auto-updated agent/uiserver/bindata_assetfs.go from commit d913af2bb
2020-11-19 18:45:01 +00:00
Freddy
e4e306210a
Require operator:write to get Connect CA config ( #9240 )
...
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.
--
This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
2020-11-19 10:14:48 -07:00
hashicorp-ci
293ba9e0b5
auto-updated agent/uiserver/bindata_assetfs.go from commit 687ce1f9c
2020-11-19 16:13:04 +00:00
Daniel Nephin
35c5f83ea3
Merge pull request #9224 from hashicorp/dnephin/fix-multiple-http-listeners
...
agent: fix bug with multiple listeners
2020-11-18 16:52:29 -05:00
Daniel Nephin
8647483605
Use freeport
...
To prevent other tests which already use freeport from flaking when port 0 steals their reserved port.
2020-11-18 16:07:34 -05:00
hashicorp-ci
75a1727b31
auto-updated agent/uiserver/bindata_assetfs.go from commit 591a96d5b
2020-11-18 19:07:25 +00:00
hashicorp-ci
fc07c63974
auto-updated agent/uiserver/bindata_assetfs.go from commit 1edef424a
2020-11-18 19:00:19 +00:00
Daniel Nephin
fed2a61dfc
agent: fix bug with multiple listeners
...
Previously the listener was being passed to a closure in a loop without
capturing the loop variable. The result is only the last listener is
used, so the http/https servers only listen on one address.
This problem is fixed by capturing the variable by passing it into a
function.
2020-11-18 13:03:29 -05:00
hashicorp-ci
393d83dfa3
auto-updated agent/uiserver/bindata_assetfs.go from commit 664f1d9aa
2020-11-18 11:17:06 +00:00
Kyle Havlovitz
c8d4a40a87
connect: update some function comments in CA manager
2020-11-17 16:00:19 -08:00
Daniel Nephin
d9af48afce
Merge pull request #9160 from hashicorp/dnephin/go-test-race-in-to-out-list
...
ci: change go-test-race package list to exclude list
2020-11-17 13:13:38 -05:00
Matt Keeler
4bca029be9
Refactor to call non-voting servers read replicas ( #9191 )
...
Co-authored-by: Kit Patella <kit@jepsen.io>
2020-11-17 10:53:57 -05:00