Kyle Havlovitz
|
859eaea5c4
|
connect/ca: pull the cluster ID from config during a rotation
|
2018-06-25 12:25:42 -07:00 |
|
Kyle Havlovitz
|
fcc5dc6110
|
connect/ca: leave blank root key/cert out of the default config (unnecessary)
|
2018-06-25 12:25:42 -07:00 |
|
Kyle Havlovitz
|
f3089a6647
|
connect/ca: undo the interface changes and use sign-self-issued in Vault
|
2018-06-25 12:25:42 -07:00 |
|
Kyle Havlovitz
|
cea94d0bcf
|
connect/ca: update Consul provider to use new cross-sign CSR method
|
2018-06-25 12:25:41 -07:00 |
|
Kyle Havlovitz
|
7b0845ccde
|
connect/ca: fix vault provider URI SANs and test
|
2018-06-25 12:25:41 -07:00 |
|
Kyle Havlovitz
|
a98b85b25c
|
connect/ca: add the Vault CA provider
|
2018-06-25 12:25:41 -07:00 |
|
Paul Banks
|
b4fbeb0453
|
Note leadership issues in comments
|
2018-06-25 12:25:41 -07:00 |
|
Paul Banks
|
824a9b4943
|
Actually return Intermediate certificates bundled with a leaf!
|
2018-06-25 12:25:40 -07:00 |
|
Paul Banks
|
81bd1b43a3
|
Fix hot loop in cache for RPC returning zero index.
|
2018-06-25 12:25:37 -07:00 |
|
Paul Banks
|
d6b13463ed
|
Fix misc test failures (some from other PRs)
|
2018-06-25 12:25:13 -07:00 |
|
Paul Banks
|
1283373a64
|
Only set precedence on write path
|
2018-06-25 12:25:13 -07:00 |
|
Paul Banks
|
22b95283e9
|
Fix some tests failures caused by the sorting change and some cuased by previous UpdatePrecedence() change
|
2018-06-25 12:25:13 -07:00 |
|
Paul Banks
|
e2938138f6
|
Sort intention list by precedence
|
2018-06-25 12:25:13 -07:00 |
|
Kyle Havlovitz
|
a242e5b130
|
agent: update accepted CA config fields and defaults
|
2018-06-25 12:25:09 -07:00 |
|
Mitchell Hashimoto
|
4ebddd6adb
|
agent/consul: set precedence value on struct itself
|
2018-06-25 12:24:16 -07:00 |
|
Mitchell Hashimoto
|
52c10d2208
|
agent/consul: support a Connect option on prepared query request
|
2018-06-25 12:24:12 -07:00 |
|
Mitchell Hashimoto
|
e8c899b1b8
|
agent/consul: prepared query supports "Connect" field
|
2018-06-25 12:24:11 -07:00 |
|
Mitchell Hashimoto
|
ad382d7351
|
agent: switch ConnectNative to an embedded struct
|
2018-06-25 12:24:10 -07:00 |
|
Mitchell Hashimoto
|
a3e0ac1ee3
|
agent/consul/state: support querying by Connect native
|
2018-06-25 12:24:08 -07:00 |
|
Mitchell Hashimoto
|
8e02bbc897
|
agent/consul: support catalog registration with Connect native
|
2018-06-25 12:24:07 -07:00 |
|
Mitchell Hashimoto
|
787ce3b269
|
agent: address feedback
|
2018-06-14 09:42:20 -07:00 |
|
Mitchell Hashimoto
|
b5b29cd6af
|
agent: rename test to check
|
2018-06-14 09:42:18 -07:00 |
|
Mitchell Hashimoto
|
a48ff54318
|
agent/consul: forward request if necessary
|
2018-06-14 09:42:17 -07:00 |
|
Mitchell Hashimoto
|
b02502be73
|
agent: comments to point to differing logic
|
2018-06-14 09:42:17 -07:00 |
|
Mitchell Hashimoto
|
526cfc34bd
|
agent/consul: implement Intention.Test endpoint
|
2018-06-14 09:42:17 -07:00 |
|
Paul Banks
|
bd5eb8b749
|
Add default CA config back - I didn't add it and causes nil panics
|
2018-06-14 09:42:17 -07:00 |
|
Paul Banks
|
dbcf286d4c
|
Ooops remove the CA stuff from actual server defaults and make it test server only
|
2018-06-14 09:42:16 -07:00 |
|
Paul Banks
|
834ed1d25f
|
Fixed many tests after rebase. Some still failing and seem unrelated to any connect changes.
|
2018-06-14 09:42:16 -07:00 |
|
Paul Banks
|
30d90b3be4
|
Generate CSR using real trust-domain
|
2018-06-14 09:42:16 -07:00 |
|
Paul Banks
|
5a1408f186
|
Add CSR signing verification of service ACL, trust domain and datacenter.
|
2018-06-14 09:42:16 -07:00 |
|
Paul Banks
|
c808833a78
|
Return TrustDomain from CARoots RPC
|
2018-06-14 09:42:15 -07:00 |
|
Kyle Havlovitz
|
d1265bc38b
|
Rename some of the CA structs/files
|
2018-06-14 09:42:15 -07:00 |
|
Kyle Havlovitz
|
1660f9ebab
|
Add more metadata to structs.CARoot
|
2018-06-14 09:42:15 -07:00 |
|
Kyle Havlovitz
|
baf4db1c72
|
Use provider state table for a global serial index
|
2018-06-14 09:42:15 -07:00 |
|
Kyle Havlovitz
|
c90b353eea
|
Move connect CA provider to separate package
|
2018-06-14 09:42:15 -07:00 |
|
Mitchell Hashimoto
|
54a1662da8
|
agent/consul: change provider wait from goto to a loop
|
2018-06-14 09:42:14 -07:00 |
|
Mitchell Hashimoto
|
749f81373f
|
agent/consul: check nil on getCAProvider result
|
2018-06-14 09:42:14 -07:00 |
|
Mitchell Hashimoto
|
c57405b323
|
agent/consul: retry reading provider a few times
|
2018-06-14 09:42:14 -07:00 |
|
Paul Banks
|
dcd277de8a
|
Wire up agent leaf endpoint to cache framework to support blocking.
|
2018-06-14 09:42:07 -07:00 |
|
Kyle Havlovitz
|
b28e11fdd3
|
Fill out connect CA rpc endpoint tests
|
2018-06-14 09:42:06 -07:00 |
|
Kyle Havlovitz
|
7c0976208d
|
Add tests for the built in CA's state store table
|
2018-06-14 09:42:06 -07:00 |
|
Kyle Havlovitz
|
19b9399f2f
|
Add more tests for built-in provider
|
2018-06-14 09:42:06 -07:00 |
|
Kyle Havlovitz
|
a29f3c6b96
|
Fix some inconsistencies around the CA provider code
|
2018-06-14 09:42:06 -07:00 |
|
Kyle Havlovitz
|
2167713226
|
Add CA config to connect section of agent config
|
2018-06-14 09:42:05 -07:00 |
|
Kyle Havlovitz
|
02fef5f9a2
|
Move ConsulCAProviderConfig into structs package
|
2018-06-14 09:42:04 -07:00 |
|
Kyle Havlovitz
|
887cc98d7e
|
Simplify the CAProvider.Sign method
|
2018-06-14 09:42:04 -07:00 |
|
Kyle Havlovitz
|
44b30476cb
|
Simplify the CA provider interface by moving some logic out
|
2018-06-14 09:42:04 -07:00 |
|
Kyle Havlovitz
|
aa10fb2f48
|
Clarify some comments and names around CA bootstrapping
|
2018-06-14 09:42:04 -07:00 |
|
Kyle Havlovitz
|
43f13d5a0b
|
Add cross-signing mechanism to root rotation
|
2018-06-14 09:42:00 -07:00 |
|
Kyle Havlovitz
|
bbfcb278e1
|
Add the root rotation mechanism to the CA config endpoint
|
2018-06-14 09:41:59 -07:00 |