f2d8c6fadf
Update catalog mock data for Mode attr
2021-04-15 09:19:22 -04:00
c514664ad1
Add changelog
2021-04-15 09:19:22 -04:00
4662f1f35b
Refactor TopologyMetrics Notices
2021-04-15 09:19:22 -04:00
a7672cc5ba
Create placeholder *(All Services) Card
2021-04-15 09:19:22 -04:00
31840e6c34
Add translations for topology-mterics and transparent-proxy components
2021-04-15 09:19:22 -04:00
672c0a818e
Create icon and dashed line for intention not explictly defined
2021-04-15 09:19:21 -04:00
3f86e22a05
Create not explicitly defined intentions banner
2021-04-15 09:19:21 -04:00
eb2b804211
Create TransparentProxy mode label for service instance page
2021-04-15 09:19:21 -04:00
ba3b84085f
Create Topology Metrics Source Type to be in each Card
2021-04-15 09:19:21 -04:00
db23ab7d16
Refactor Topology Metrics Card component
2021-04-15 09:19:21 -04:00
44df7a5cd4
Create warning banners for permissive default-allow and wildcard-intention
2021-04-15 09:19:21 -04:00
bcad886efd
Update service-topology mock data with new attributes: TransparentProxy, DefaultAllow, WildcardIntention, and Source
2021-04-15 09:19:21 -04:00
7e9bcb06ca
Merge pull request #10030 from hashicorp/fix-ent-audit-log-bypass
...
Add synthetic enterprise entry for CVE-2021-28156
2021-04-14 20:08:51 -04:00
78ce699787
Add component name to entry
...
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
2021-04-14 19:41:04 -04:00
2998db9cda
Merge pull request #10023 from hashicorp/fix-raw-kv-xss
...
Add content type headers to raw KV responses
2021-04-14 18:49:14 -04:00
8f897ee341
Add synthetic enterprise entry for CVE-2021-28156
2021-04-14 18:45:49 -04:00
e17c82306a
Merge pull request #10025 from hashicorp/dnephin/fix-snapshot-auth-methods
...
snapshot: fix saving of auth methods
2021-04-14 17:18:35 -04:00
2a10f01bf5
snapshot: fix saving of auth methods
...
Previously only a single auth method would be saved to the snapshot. This commit fixes the typo
and adds to the test, to show that all auth methods are now saved.
2021-04-14 16:51:21 -04:00
6aed60655f
Add security release-note changelog entry
2021-04-14 16:40:47 -04:00
debbf4a604
Add better security warning to docs about the content-type change
2021-04-14 16:36:40 -04:00
992bf13166
Update KV docs to note new raw response content-type header
2021-04-14 16:21:03 -04:00
91aefe50ab
Add content type headers to raw KV responses
2021-04-14 16:20:22 -04:00
1ae772ff99
mod: bump to github.com/hashicorp/mdns v1.0.4 ( #10018 )
2021-04-14 14:17:52 -05:00
5d493daf82
Merge pull request #10014 from hashicorp/dnephin/changelog
...
Add changelog for enterprise change
2021-04-14 14:09:35 -04:00
aa0eb60f57
Move static token resolution into the ACLResolver ( #10013 )
2021-04-14 12:39:35 -04:00
0470d9ec25
fix broken golden tests
2021-04-14 11:36:47 -05:00
a85bfc0bd0
Merge pull request #10006 from hashicorp/api-ptrs
2021-04-14 10:21:08 -06:00
57b998e027
Merge pull request #9987 from hashicorp/remove-kube-dns-hack
2021-04-14 10:00:53 -06:00
ba4f2f853e
Add changelog for enterprise change
2021-04-14 11:50:15 -04:00
7bbac0ca58
Merge pull request #10008 from hashicorp/mw.update-homepage-links
...
website: update why hashicorp links
2021-04-14 10:57:29 -04:00
001e7fb5a0
add consul-haskell to libraries-and-sdks documentation ( #9982 )
...
See also https://github.com/alphaHeavy/consul-haskell/issues/40 .
2021-04-13 21:06:19 -04:00
e175b309fb
Fixup tests
2021-04-13 16:08:41 -06:00
03b496a1c0
website: update why hashicorp links
2021-04-13 15:55:15 -04:00
50c7915156
Convert new tproxy structs in api module into ptrs
...
This way we avoid serializing these when empty. Otherwise users of the
latest version of the api submodule cannot interact with older versions
of Consul, because a new api client would send keys that the older Consul
doesn't recognize yet.
2021-04-13 12:44:25 -06:00
79257c1489
Merge pull request #10005 from hashicorp/tproxy-fixes
2021-04-13 11:45:40 -06:00
754be9f6a4
Merge pull request #10000 from hashicorp/remove-upstream-cfg-validation
...
Remove zero-value validation of upstream cfg structs
2021-04-13 11:00:02 -06:00
911d7dcaa8
Remove todo that was todone
2021-04-13 10:19:59 -06:00
84a5f91a08
Avoid nil panic when cluster config doesn't exist
2021-04-13 10:17:11 -06:00
86bd47c7a0
Merge pull request #10003 from hashicorp/proxycfg-tproxy-ent-fixup
...
Fixup wildcard ent assertion
2021-04-13 09:56:05 -06:00
36e9326dab
Fixup wildcard ent assertion
2021-04-12 17:04:33 -06:00
2a3229992e
Merge pull request #9999 from hashicorp/update-enabling-tproxy
2021-04-12 16:37:04 -06:00
784e55a38d
fix(website): docs link text color ( #10001 )
2021-04-12 13:47:12 -04:00
b83841ab29
Fixup bexpr filtering
2021-04-12 10:17:52 -06:00
e6d44ae03b
Remove zero-value validation of upstream cfg structs
...
The zero value of these flags was already being excluded in the xDS
generation of circuit breaker/outlier detection config.
See: makeThresholdsIfNeeded and ToOutlierDetection.
2021-04-12 10:08:57 -06:00
eeccba945d
Replace TransparentProxy bool with ProxyMode
...
This PR replaces the original boolean used to configure transparent
proxy mode. It was replaced with a string mode that can be set to:
- "": Empty string is the default for when the setting should be
defaulted from other configuration like config entries.
- "direct": Direct mode is how applications originally opted into the
mesh. Proxy listeners need to be dialed directly.
- "transparent": Transparent mode enables configuring Envoy as a
transparent proxy. Traffic must be captured and redirected to the
inbound and outbound listeners.
This PR also adds a struct for transparent proxy specific configuration.
Initially this is not stored as a pointer. Will revisit that decision
before GA.
2021-04-12 09:35:14 -06:00
fb4d07243d
Avoid failing test due to undiscoverable node name
2021-04-12 09:26:55 -06:00
abc9daf1ea
auto-updated agent/uiserver/bindata_assetfs.go from commit 84064f972
2021-04-12 13:08:41 +00:00
eb8024375a
ui: Return empty string protocol for upstream/downstream metrics request ( #9989 )
2021-04-12 09:03:57 -04:00
9c219a5b58
Fixup mesh gateway docs
2021-04-11 15:48:04 -06:00
b8e7a90f77
add http2 ping health checks ( #8431 )
...
* add http2 ping checks
* fix test issue
* add h2ping check to config resources
* add new test and docs for h2ping
* fix grammatical inconsistency in H2PING documentation
* resolve rebase conflicts, add test for h2ping tls verification failure
* api documentation for h2ping
* update test config data with H2PING
* add H2PING to protocol buffers and update changelog
* fix typo in changelog entry
2021-04-09 15:12:10 -04:00
kenia