Kyle Havlovitz
|
9c21cc7ac9
|
connect: update leader initializeCA comment
|
2018-07-11 10:00:42 -07:00 |
|
Kyle Havlovitz
|
db254f0991
|
connect: persist intermediate CAs on leader change
|
2018-07-11 09:44:30 -07:00 |
|
MagnumOpus21
|
0b50b84429
|
Agent/Proxy: Formatting and test cases fix
|
2018-07-09 12:46:10 -04:00 |
|
Kyle Havlovitz
|
883b2a518a
|
Store the time CARoot is rotated out instead of when to prune
|
2018-07-06 16:05:25 -07:00 |
|
Kyle Havlovitz
|
3c520019e9
|
connect/ca: add logic for pruning old stale RootCA entries
|
2018-07-02 10:35:05 -07:00 |
|
Matt Keeler
|
02719c52ff
|
Move starting enterprise functionality
|
2018-06-29 17:38:29 -04:00 |
|
Matt Keeler
|
66af873639
|
Move default uuid test into the consul package
|
2018-06-27 09:21:58 -04:00 |
|
Matt Keeler
|
dbc407cec9
|
go fmt changes
|
2018-06-27 09:07:22 -04:00 |
|
Matt Keeler
|
95291ec5ed
|
Make sure to generate UUIDs when services are registered without one
This makes the behavior line up with the docs and expected behavior
|
2018-06-26 17:04:08 -04:00 |
|
mkeeler
|
1da3c42867
|
Merge remote-tracking branch 'connect/f-connect'
|
2018-06-25 19:42:51 +00:00 |
|
Kyle Havlovitz
|
859eaea5c4
|
connect/ca: pull the cluster ID from config during a rotation
|
2018-06-25 12:25:42 -07:00 |
|
Kyle Havlovitz
|
fcc5dc6110
|
connect/ca: leave blank root key/cert out of the default config (unnecessary)
|
2018-06-25 12:25:42 -07:00 |
|
Kyle Havlovitz
|
f3089a6647
|
connect/ca: undo the interface changes and use sign-self-issued in Vault
|
2018-06-25 12:25:42 -07:00 |
|
Kyle Havlovitz
|
cea94d0bcf
|
connect/ca: update Consul provider to use new cross-sign CSR method
|
2018-06-25 12:25:41 -07:00 |
|
Kyle Havlovitz
|
7b0845ccde
|
connect/ca: fix vault provider URI SANs and test
|
2018-06-25 12:25:41 -07:00 |
|
Kyle Havlovitz
|
a98b85b25c
|
connect/ca: add the Vault CA provider
|
2018-06-25 12:25:41 -07:00 |
|
Paul Banks
|
b4fbeb0453
|
Note leadership issues in comments
|
2018-06-25 12:25:41 -07:00 |
|
Paul Banks
|
824a9b4943
|
Actually return Intermediate certificates bundled with a leaf!
|
2018-06-25 12:25:40 -07:00 |
|
Paul Banks
|
81bd1b43a3
|
Fix hot loop in cache for RPC returning zero index.
|
2018-06-25 12:25:37 -07:00 |
|
Paul Banks
|
d6b13463ed
|
Fix misc test failures (some from other PRs)
|
2018-06-25 12:25:13 -07:00 |
|
Paul Banks
|
1283373a64
|
Only set precedence on write path
|
2018-06-25 12:25:13 -07:00 |
|
Paul Banks
|
22b95283e9
|
Fix some tests failures caused by the sorting change and some cuased by previous UpdatePrecedence() change
|
2018-06-25 12:25:13 -07:00 |
|
Paul Banks
|
e2938138f6
|
Sort intention list by precedence
|
2018-06-25 12:25:13 -07:00 |
|
Kyle Havlovitz
|
a242e5b130
|
agent: update accepted CA config fields and defaults
|
2018-06-25 12:25:09 -07:00 |
|
Mitchell Hashimoto
|
4ebddd6adb
|
agent/consul: set precedence value on struct itself
|
2018-06-25 12:24:16 -07:00 |
|
Mitchell Hashimoto
|
52c10d2208
|
agent/consul: support a Connect option on prepared query request
|
2018-06-25 12:24:12 -07:00 |
|
Mitchell Hashimoto
|
e8c899b1b8
|
agent/consul: prepared query supports "Connect" field
|
2018-06-25 12:24:11 -07:00 |
|
Mitchell Hashimoto
|
ad382d7351
|
agent: switch ConnectNative to an embedded struct
|
2018-06-25 12:24:10 -07:00 |
|
Mitchell Hashimoto
|
a3e0ac1ee3
|
agent/consul/state: support querying by Connect native
|
2018-06-25 12:24:08 -07:00 |
|
Mitchell Hashimoto
|
8e02bbc897
|
agent/consul: support catalog registration with Connect native
|
2018-06-25 12:24:07 -07:00 |
|
Matt Keeler
|
6ccc4f39db
|
Merge pull request #4216 from hashicorp/rpc-limiting
Make RPC limits reloadable
|
2018-06-20 09:05:28 -04:00 |
|
Mitchell Hashimoto
|
787ce3b269
|
agent: address feedback
|
2018-06-14 09:42:20 -07:00 |
|
Mitchell Hashimoto
|
b5b29cd6af
|
agent: rename test to check
|
2018-06-14 09:42:18 -07:00 |
|
Mitchell Hashimoto
|
a48ff54318
|
agent/consul: forward request if necessary
|
2018-06-14 09:42:17 -07:00 |
|
Mitchell Hashimoto
|
b02502be73
|
agent: comments to point to differing logic
|
2018-06-14 09:42:17 -07:00 |
|
Mitchell Hashimoto
|
526cfc34bd
|
agent/consul: implement Intention.Test endpoint
|
2018-06-14 09:42:17 -07:00 |
|
Paul Banks
|
bd5eb8b749
|
Add default CA config back - I didn't add it and causes nil panics
|
2018-06-14 09:42:17 -07:00 |
|
Paul Banks
|
dbcf286d4c
|
Ooops remove the CA stuff from actual server defaults and make it test server only
|
2018-06-14 09:42:16 -07:00 |
|
Paul Banks
|
834ed1d25f
|
Fixed many tests after rebase. Some still failing and seem unrelated to any connect changes.
|
2018-06-14 09:42:16 -07:00 |
|
Paul Banks
|
30d90b3be4
|
Generate CSR using real trust-domain
|
2018-06-14 09:42:16 -07:00 |
|
Paul Banks
|
5a1408f186
|
Add CSR signing verification of service ACL, trust domain and datacenter.
|
2018-06-14 09:42:16 -07:00 |
|
Paul Banks
|
c808833a78
|
Return TrustDomain from CARoots RPC
|
2018-06-14 09:42:15 -07:00 |
|
Kyle Havlovitz
|
d1265bc38b
|
Rename some of the CA structs/files
|
2018-06-14 09:42:15 -07:00 |
|
Kyle Havlovitz
|
1660f9ebab
|
Add more metadata to structs.CARoot
|
2018-06-14 09:42:15 -07:00 |
|
Kyle Havlovitz
|
baf4db1c72
|
Use provider state table for a global serial index
|
2018-06-14 09:42:15 -07:00 |
|
Kyle Havlovitz
|
c90b353eea
|
Move connect CA provider to separate package
|
2018-06-14 09:42:15 -07:00 |
|
Mitchell Hashimoto
|
54a1662da8
|
agent/consul: change provider wait from goto to a loop
|
2018-06-14 09:42:14 -07:00 |
|
Mitchell Hashimoto
|
749f81373f
|
agent/consul: check nil on getCAProvider result
|
2018-06-14 09:42:14 -07:00 |
|
Mitchell Hashimoto
|
c57405b323
|
agent/consul: retry reading provider a few times
|
2018-06-14 09:42:14 -07:00 |
|
Paul Banks
|
dcd277de8a
|
Wire up agent leaf endpoint to cache framework to support blocking.
|
2018-06-14 09:42:07 -07:00 |