Commit Graph

8691 Commits

Author SHA1 Message Date
Kyle Havlovitz 68d7a9fbd3
connect/ca: simplify passing of leaf cert TTL 2018-07-25 17:51:45 -07:00
Kyle Havlovitz a125735d76
connect/ca: check LeafCertTTL when rotating expired roots 2018-07-20 16:04:04 -07:00
Kyle Havlovitz ce29660245
website: update docs for leaf cert TTL option 2018-07-16 13:33:42 -07:00
Kyle Havlovitz 45ec8849f3
connect/ca: add configurable leaf cert TTL 2018-07-16 13:33:37 -07:00
John Cowen 39e5470d24 Change let to var 2018-07-12 18:21:26 +01:00
mkeeler a41d9f222f Update website version 2018-07-12 16:43:47 +00:00
mkeeler ba67087e3c
Release v1.2.1 2018-07-12 16:33:56 +00:00
Matt Keeler 757fa86543
Update CHANGELOG.md 2018-07-12 12:28:32 -04:00
Paul Banks 2745c0fc5e
Update CHANGELOG.md 2018-07-12 17:15:09 +01:00
Matt Keeler 31cc0ae046
Update CHANGELOG.md 2018-07-12 12:10:51 -04:00
Paul Banks 57d17aaad2
Merge pull request #4364 from hashicorp/notice-file
Add copyright notice file
2018-07-12 17:09:31 +01:00
Matt Keeler cc46d59269
Merge pull request #4379 from hashicorp/persist-intermediates
connect: persist intermediate CAs on leader change
2018-07-12 12:09:13 -04:00
Paul Banks 6fe7faa554
Merge pull request #4381 from hashicorp/proxy-check-default
Proxy check default
2018-07-12 17:08:35 +01:00
Matt Keeler a764320e89
Update CHANGELOG.md 2018-07-12 12:02:24 -04:00
Matt Keeler 19465d2c8b
Merge pull request #4388 from hashicorp/vendor-windows-svc
Vendor golang.org/x/sys/windows/svc
2018-07-12 11:34:03 -04:00
Matt Keeler 9757a6fb62 Vendor golang.org/x/sys/windows/svc 2018-07-12 11:29:57 -04:00
Paul Banks 693d154d7e
Update CHANGELOG.md 2018-07-12 16:26:05 +01:00
Matt Keeler ecf4cddedc
Merge pull request #4386 from hashicorp/revert-3983-node_renaming
Revert "Allow changing Node names since Node now have IDs"
2018-07-12 11:20:38 -04:00
Matt Keeler 965fc9cf62
Revert "Allow changing Node names since Node now have IDs" 2018-07-12 11:19:21 -04:00
Paul Banks 81ff3fa247
Merge pull request #4375 from pierresouchay/fix_travis_build_temp_errors
Avoid travis to fail with unstable tests
2018-07-12 15:29:01 +01:00
Paul Banks ba49acf960
Merge pull request #4384 from hashicorp/revert-4294
Revert PR 4294 - Catalog Register: Generate UUID for services registered without one
2018-07-12 15:24:57 +01:00
Matt Keeler d8a4d9137b Fixup formatting 2018-07-12 10:14:26 -04:00
Matt Keeler d63c5807cf Revert PR 4294 - Catalog Register: Generate UUID for services registered without one
UUID auto-generation here causes trouble in a few cases. The biggest being older
nodes reregistering will fail when the UUIDs are different and the names match

This reverts commit 0f700340828f464449c2e0d5a82db0bc5456d385.
This reverts commit d1a8f9cb3f6f48dd9c8d0bc858031ff6ccff51d0.
This reverts commit cf69ec42a418ab6594a6654e9545e12160f30970.
2018-07-12 10:06:50 -04:00
Paul Banks 399444e2d3
Grammar 2018-07-12 14:36:52 +01:00
Matt Keeler a3c92217e2
Update CHANGELOG.md 2018-07-12 09:16:18 -04:00
Matt Keeler 0a365b1a4f
Merge pull request #4374 from hashicorp/feature/proxy-env-vars
Setup managed proxy environment with API client env vars
2018-07-12 09:13:54 -04:00
Paul Banks 8b54b87599
Update proxy config docs and add test for ipv6 2018-07-12 13:07:48 +01:00
Paul Banks 9223102331
Default managed proxy TCP check address sanely when proxy is bound to 0.0.0.0.
This also provides a mechanism to configure custom address or disable the check entirely from managed proxy config.
2018-07-12 12:57:10 +01:00
Matt Keeler eccadda019 Set api.Config’s InsecureSkipVerify to the value of !RuntimeConfig.VerifyOutgoing 2018-07-12 07:49:23 -04:00
Matt Keeler c70d25eaea Add some tests for GenerateEnv 2018-07-12 07:43:51 -04:00
Matt Keeler 240e2affcd Use type switch instead of .Network for more reliably detecting UnixAddrs 2018-07-12 07:30:17 -04:00
John Cowen e2df2b9fd2
Merge pull request #4347 from hashicorp/feature/ui-build-tweaks
Build - Tiny ui build additions
2018-07-12 08:58:29 +01:00
Matt Keeler 09ff064bc7 Look specifically for tcp instead of unix
Add runtime -> api.Config tests
2018-07-11 17:25:36 -04:00
Matt Keeler ebf3319211 Update proxy manager test - test passing ProxyEnv vars 2018-07-11 16:50:27 -04:00
Kyle Havlovitz 2a40f93ac8
connect: use reflect.DeepEqual instead for test 2018-07-11 13:10:58 -07:00
Matt Keeler 6ba57e5dde
Update CHANGELOG.md 2018-07-11 16:04:19 -04:00
Matt Keeler 42729d5aff
Merge pull request #3983 from pierresouchay/node_renaming
Allow changing Node names since Node now have IDs
2018-07-11 16:03:02 -04:00
Kyle Havlovitz f9a35a9338
connect: add provider state to snapshots 2018-07-11 11:34:49 -07:00
Kyle Havlovitz 9c21cc7ac9
connect: update leader initializeCA comment 2018-07-11 10:00:42 -07:00
Kyle Havlovitz db254f0991
connect: persist intermediate CAs on leader change 2018-07-11 09:44:30 -07:00
Matt Keeler 1e5e9fd8cd PR Updates
Proxy now doesn’t need to know anything about the api as we pass env vars to it instead of the api config.
2018-07-11 09:44:54 -04:00
Matt Keeler 7bdcd53803
Update CHANGELOG.md 2018-07-11 08:51:15 -04:00
Matt Keeler bda7cb1448
Merge pull request #4371 from hashicorp/bugfix/gh-4358
Remove https://prefix from TLSConfig.Address
2018-07-11 08:50:10 -04:00
Pierre Souchay 3d0a960470 When renaming a node, ensure the name is not taken by another node.
Since DNS is case insensitive and DB as issues when similar names with different
cases are added, check for unicity based on case insensitivity.

Following another big incident we had in our cluster, we also validate
that adding/renaming a not does not conflicts with case insensitive
matches.

We had the following error once:

 - one node called: mymachine.MYDC.mydomain was shut off
 - another node (different ID) was added with name: mymachine.mydc.mydomain before
   72 hours

When restarting the consul server of domain, the consul server restarted failed
to start since it detected an issue in RAFT database because
mymachine.MYDC.mydomain and mymachine.mydc.mydomain had the same names.

Checking at registration time with case insensitivity should definitly fix
those issues and avoid Consul DB corruption.
2018-07-11 14:42:54 +02:00
John Cowen 9cb6048228
Merge pull request #4348 from hashicorp/bugfix/last-healthcheck-icon
UI - CSS: don't assume the last item in the healthcheck listing is passing
2018-07-11 09:55:05 +01:00
Pierre Souchay e377ec8a46 Tune GNUMakefile to pass more easily Travis tests 2018-07-10 22:55:37 +02:00
Pierre Souchay 2b34d25b01 Avoid travis to fail with flacky tests 2018-07-10 22:55:37 +02:00
Matt Keeler a124512ce3
Merge pull request #4365 from pierresouchay/fix_test_warning
Fixed compilation warning about wrong type
2018-07-10 16:53:29 -04:00
Matt Keeler 358e6c8f6a Pass around an API Config object and convert to env vars for the managed proxy 2018-07-10 12:13:51 -04:00
Pierre Souchay 988acfdc67 Use %q, not %s as it used to 2018-07-10 16:52:08 +02:00