0ad47bdda5
Remove fallthrough
2020-04-27 12:00:14 -06:00
ac809ec635
Add authz filter when creating filterchain
2020-04-27 11:08:41 -06:00
3a44359d7b
Fix snapshot IsEmpty
2020-04-27 11:08:41 -06:00
e751b83a3f
Clean up dead code, issue addressed by passing ws to serviceGatewayNodes
2020-04-27 11:08:41 -06:00
a54f2fd055
Update agent/proxycfg/state_test.go
2020-04-27 11:08:41 -06:00
e30d64289d
PR comments
2020-04-27 11:08:41 -06:00
75e737b0f2
Fix internal endpoint test
2020-04-27 11:08:41 -06:00
8697ab71e4
Fix listener error handling
2020-04-27 11:08:41 -06:00
6ecb3b7a42
Skip filter chain creation if no client cert
2020-04-27 11:08:41 -06:00
7667567688
Avoid deleting mappings for services linked to other gateways on dereg
2020-04-27 11:08:41 -06:00
28fe6920fe
Re-fix bug in CheckConnectServiceNodes
2020-04-27 11:08:41 -06:00
5e260b2913
Use golden files for gateway certs and fix listener test flakiness
2020-04-27 11:08:41 -06:00
b2b5942f4b
Un-nest switch in gateway update handler
2020-04-27 11:08:40 -06:00
7d5a02ad61
Add envoy integration tests
2020-04-27 11:08:40 -06:00
3849b066a6
Allow terminating-gateway to setup listener before servicegroups are known
2020-04-27 11:08:40 -06:00
929491c979
Add subset support
2020-04-27 11:08:40 -06:00
bab101107c
Fix ConnectQueryBlocking test
2020-04-27 11:08:40 -06:00
65e60d02f1
Fix bug in CheckConnectServiceNodes
...
Previously, if a blocking query called CheckConnectServiceNodes
before the gateway-services memdb table had any entries,
a nil watchCh would be returned when calling serviceTerminatingGatewayNodes.
This means that the blocking query would not fire if a gateway config entry
was added after the watch started.
In cases where the blocking query started on proxy registration,
the proxy could potentially never become aware of an upstream endpoint
if that upstream was going to be represented by a gateway.
2020-04-27 11:08:40 -06:00
2e35a9bb18
Add xds cluster/listener/endpoint management
2020-04-27 11:08:40 -06:00
c80f89b92f
Add proxycfg state management for terminating-gateways
2020-04-27 11:07:06 -06:00
243c015c52
Require service:read to read terminating-gateway config
2020-04-27 11:07:06 -06:00
4b1b42cef5
A couple testing helper updates ( #7694 )
2020-04-27 12:17:38 -04:00
04a98f66e9
update changelog
2020-04-24 17:36:06 -05:00
f1d8ea7018
cli: ensure that 'snapshot save' is fsync safe and also only writes to the requested file on success ( #7698 )
2020-04-24 17:34:47 -05:00
12a2cff517
update changelog
2020-04-24 17:19:59 -05:00
032e0ae901
cli: fix usage of gzip.Reader to better detect corrupt snapshots during save/restore ( #7697 )
2020-04-24 17:18:56 -05:00
82b0fbd975
Merge pull request #7699 from pierresouchay/fix_comment_misplaced
...
Fixed comment on wrong line
2020-04-24 10:09:58 -07:00
966af7f89f
Merge pull request #7677 from hashicorp/ingress/http-routing
...
Ingress gateways support discovery chain features and routing via mesh gateways
Signed-off-by: Kyle Havlovitz <kylehav@gmail.com>
2020-04-24 10:18:55 -05:00
b8a5fbf1bf
Allow ingress gateways to route through mesh gateways
...
- Adds integration test for mesh gateways local + remote modes with ingress
- ingress golden files updated for mesh gateway endpoints
2020-04-24 09:31:32 -05:00
af5cc8fd92
Add all the xds ingress tests
...
This commit copies many of the connect-proxy xds testcases and reuses
for ingress gateways. This allows us to more easily see changes to the
envoy configuration when make updates to ingress gateways.
2020-04-24 09:31:32 -05:00
b131b857da
Pull out setupTestVariationConfigEntriesAndSnapshot in proxycfg
...
This allows us to reuse the same variations for ingress gateway testing
2020-04-24 09:31:32 -05:00
d433679bd8
Add http routing support and integration test to ingress gateways
2020-04-24 09:31:32 -05:00
ef88089924
auto_encrypt: add validations for auto_encrypt.{tls,allow_tls} ( #7704 )
...
Fixes https://github.com/hashicorp/consul/issues/7407 .
2020-04-24 15:51:38 +02:00
36a0a976d5
Fixed comment on wrong line.
...
While investigating and fixing an issue on our 1.5.1 branch,
I saw you also/already fixed the bug I found (tags not updated
for existing servers), but comment is misplaced.
2020-04-24 01:15:15 +02:00
d46ef80751
Fix check deletion in anti-entropy sync ( #7690 )
...
* Incorporate entMeta into service equality check
2020-04-23 10:16:50 -06:00
54b8a410a9
Merge pull request #7680 from hashicorp/dnephin/upgrade-gotestsum
...
ci: Upgrade gotestsum to v0.4.2
2020-04-21 14:58:28 -04:00
2d0895c2ae
Upgrade gotestsum to latest
...
0.4.2 should fix some bugs in test2json causing missing output.
2020-04-21 14:05:46 -04:00
66ae2e1e27
netlify CLI outputs "Website Draft URL" now instead of "Live Draft URL" ( #7676 )
2020-04-20 15:57:34 -04:00
c4123791a9
Expect default enterprise metadata in gateway tests ( #7664 )
...
This makes it so that both OSS and enterprise tests pass correctly
In the api tests, explicitly set namespace to empty string so that tests
can be shared.
2020-04-20 09:02:35 -05:00
ddf26ee20e
Merge pull request #7665 from hashicorp/refactor/http/parseTokenWithDefault
...
http: rename paresTokenResolveProxy to parseTokenWithDefault
2020-04-17 13:42:03 -07:00
0c4492ae80
http: rename paresTokenResolveProxy to parseTokenWithDefault
2020-04-17 13:35:24 -07:00
2b95bd7ca9
Merge pull request #7656 from hashicorp/feature/audit/oss-merge
...
agent: stub out auditing functionality in OSS
2020-04-17 13:33:06 -07:00
313c662f8c
agent,config: port enterprise only fields to embedded enterprise structs
2020-04-17 13:27:39 -07:00
57f700d6da
Merge pull request #7641 from hashicorp/dnephin/agent-cache-request-info
...
agent/cache: reduce function arguments by removing duplicates
2020-04-17 14:10:49 -04:00
a2030dcbef
Update API module to include the licensed modules in its output ( #7661 )
2020-04-17 13:39:27 -04:00
c5ab43ebbc
Fix bug where non-typical services are associated with gateways ( #7662 )
...
On every service registration, we check to see if a service should be
assassociated to a wildcard gateway-service. This fixes an issue where
we did not correctly check to see if the service being registered was a
"typical" service or not.
2020-04-17 11:24:34 -05:00
3114943f8d
agent/cache: remove error return from fetch
...
A previous change removed the only error, so the return value can be
removed now.
2020-04-17 11:55:01 -04:00
d015d3c563
agent/cache: reduce function arguments by removing duplicates
...
A few of the unexported functions in agent/cache took a large number of
arguments. These arguments were effectively overrides for values that
were provided in RequestInfo.
By using a struct we can not only reduce the number of arguments, but
also simplify the logic by removing the need for overrides.
2020-04-17 11:35:07 -04:00
7536b41e8f
Merge pull request #7647 from hashicorp/dnephin/agent-cache-register-opts
...
agent/cache: Make all cache options RegisterOptions
2020-04-17 11:33:07 -04:00
7aaedd8ab5
config/runtime: fix an extra field in config sanitize
2020-04-16 16:37:25 -07:00
freddygv