Kyle Havlovitz
ad9c104816
acl: use wildcard partition in metrics proxy ui endpoint
2021-12-10 15:58:17 -08:00
Kyle Havlovitz
dc84a8bae3
Merge pull request #11809 from hashicorp/vip-counter-fix
...
state: fix freed VIP table id index
2021-12-10 15:06:27 -08:00
Kyle Havlovitz
45402dad63
state: fix freed VIP table id index
2021-12-10 14:41:45 -08:00
Kyle Havlovitz
ccc119c549
Exit before starting the vip check routine if possible
2021-12-10 14:30:50 -08:00
Chris S. Kim
db6c2663be
Update CI and release go versions to 1.17.5 ( #11799 )
2021-12-10 14:04:56 -05:00
Evan Culver
db7c814722
connect: update SNI label extraction to support new taxonomy for partitions ( #11786 )
2021-12-10 10:26:22 -08:00
John Cowen
c6c1b9f13a
ui: Change partitions to expect []
from the API ( #11791 )
2021-12-10 14:41:08 +00:00
Freddy
374be91fa6
Update stray ref to old admin-partition cmd ( #11797 )
2021-12-09 19:10:01 -07:00
Kyle Havlovitz
2a52630067
leader: move the virtual IP version check into a goroutine
2021-12-09 17:00:33 -08:00
FFMMM
336a234927
[sync ent] increase segment max limit to 4*64, make configurable ( #1424 ) ( #11795 )
...
* commit b6eb27563e747a78b7647d2b5da405e46364cc46
Author: FFMMM <FFMMM@users.noreply.github.com>
Date: Thu Dec 9 13:53:44 2021 -0800
increase segment max limit to 4*64, make configurable (#1424 )
Signed-off-by: FFMMM <FFMMM@users.noreply.github.com>
* fix: rename ent changelog file
Signed-off-by: FFMMM <FFMMM@users.noreply.github.com>
2021-12-09 15:36:11 -08:00
R.B. Boyer
357eea6155
update changelog for ent feature ( #11794 )
2021-12-09 16:44:14 -06:00
Matt Keeler
431de5e3dd
Various Boltdb/Raft Documentation Updates ( #11793 )
...
* Documenting the new raft_boltdb configuration options
* Add documentation around new boltdb metrics.
* Correct documentation for the consul.raft.fsm.apply metric
2021-12-09 16:18:59 -05:00
haxandmat
bb992667de
Improved performance of the version.GetHumanVersion function by 50% on memory allocation. ( #11507 )
...
Co-authored-by: Evan Culver <eculver@hashicorp.com>
2021-12-09 13:14:06 -08:00
Chris S. Kim
ead530bc48
Add partitions to prettyformatters ( #11789 )
2021-12-09 15:58:45 -05:00
Daniel Nephin
ded49b3ab0
Merge pull request #11780 from hashicorp/dnephin/ca-test-vault-in-secondary
...
ca: improve test coverage for RenewIntermediate
2021-12-09 12:29:43 -05:00
Brandon Romano
0d2b0d2ddf
Update alert banner ( #11790 )
2021-12-09 12:09:47 -05:00
R.B. Boyer
5f6bf4e756
agent: ensure service maintenance checks for matching partitions ahead of other errors ( #11788 )
...
This matches behavior in most other agent api endpoints.
2021-12-09 10:05:02 -06:00
John Cowen
4ddc2b4481
ui: Amends to Routing visualization for partitions ( #11747 )
...
* Update disco fixtures now we have partitions
* Add virtual-admin-6 fixture with partition 'redirects' and failovers
* Properly cope with extra partition segment for splitters and resolvers
* Make 'redirects' and failovers look/act consistently
* Fixup some unit tests
2021-12-09 10:47:58 +00:00
John Cowen
27c85bcea0
ui: Fixup notifications for tokens using and topology intention saving ( #11763 )
2021-12-09 09:45:24 +00:00
John Cowen
a104b0e9da
ui: Make 'dangerous' buttons have white text even in dark theme ( #11756 )
2021-12-09 09:37:28 +00:00
Ashwin Venkatesh
4e7c982fc3
update docs ( #11784 )
2021-12-08 21:21:46 -05:00
Daniel Nephin
e6615bdaa7
fix misleading errors on vault shutdown
2021-12-08 18:42:52 -05:00
Daniel Nephin
15c4de0c15
ca: prune some unnecessary lookups in the tests
2021-12-08 18:42:52 -05:00
Daniel Nephin
bf798094d5
ca: remove duplicate WaitFor function
2021-12-08 18:42:52 -05:00
Daniel Nephin
984986f007
ca: fix flakes in RenewIntermediate tests
...
I suspect one problem was that we set structs.IntermediateCertRenewInterval to 1ms, which meant
that in some cases the intermediate could renew before we stored the original value.
Another problem was that the 'wait for intermediate' loop was calling the provider.ActiveIntermediate,
but the comparison needs to use the RPC endpoint to accurately represent a user request. So
changing the 'wait for' to use the state store ensures we don't race.
Also moves the patching into a separate function.
Removes the addition of ca.CertificateTimeDriftBuffer as part of calculating halfTime. This was added
in a previous commit to attempt to fix the flake, but it did not appear to fix the problem. Adding the
time here was making the tests fail when using the shared patch
function. It's not clear to me why, but there's no reason we should be
including this time in the halfTime calculation.
2021-12-08 18:42:52 -05:00
Daniel Nephin
bc7ec4455f
ca: improve RenewIntermediate tests
...
Use the new verifyLearfCert to show the cert verifies with intermediates
from both sources. This required using the RPC interface so that the
leaf pem was constructed correctly.
Add IndexedCARoots.Active since that is a common operation we see in a
few places.
2021-12-08 18:42:52 -05:00
Daniel Nephin
0784073d5e
ca: add a test for Vault in secondary DC
2021-12-08 18:42:51 -05:00
Daniel Nephin
373f445db5
ca: Add CARoots.Active method
...
Which will be used in the next commit.
2021-12-08 18:41:51 -05:00
R.B. Boyer
2f345cca33
acl: ensure that the agent recovery token is properly partitioned ( #11782 )
2021-12-08 17:11:55 -06:00
Daniel Nephin
0f95a2c3b1
Merge pull request #11721 from hashicorp/dnephin/ca-export-fsm-operation
...
ca: use the real FSM operation in tests
2021-12-08 17:49:00 -05:00
Daniel Nephin
be1ddc5942
ca: use the real FSM operation in tests
...
Previously we had a couple copies that reproduced the FSM operation.
These copies introduce risk that the test does not accurately match
production.
This PR removes the test versions of the FSM operation, and exports the
real production FSM operation so that it can be used in tests.
The consul provider tests did need to change because of this. Previously
we would return a hardcoded value of 2, but in production this value is
always incremented.
2021-12-08 17:29:44 -05:00
R.B. Boyer
957758cb61
test: test server should auto cleanup ( #11779 )
2021-12-08 13:26:06 -06:00
Marco Molteni
db5f4eaadc
cli: consul tls: create private keys with mode 0600
...
This applies to
consul tls ca create
consul tls cert create -client
consul tls cert create -server
Closes : #11741
2021-12-08 20:16:36 +01:00
Evan Culver
32a04317bf
rpc: Unset partition before forwarding to remote datacenter ( #11758 )
2021-12-08 11:02:14 -08:00
trujillo-adam
9440677f31
Merge branch 'main' into docs/admin-partitions-rc-updates
2021-12-08 10:29:57 -08:00
trujillo-adam
55d482d006
Updates for admin partitions to include changes for RC
2021-12-08 09:37:01 -08:00
Freddy
54ac9b90db
Add v1.11.0-rc changelog entry ( #11776 )
2021-12-08 09:34:31 -07:00
Giovanni Torres
d74109d124
docs: add missing verb
...
This change adds a missing verb at the end of the sentence.
2021-12-07 16:08:17 -08:00
Daniel Nephin
e16e6e66c5
Merge pull request #10895 from bigmikes/serve-panic-recovery
...
grpc, xds: recovery middleware to return and log error in case of panic
2021-12-07 18:34:40 -05:00
Daniel Nephin
52c8b4994b
Merge remote-tracking branch 'origin/main' into serve-panic-recovery
2021-12-07 16:30:41 -05:00
Melissa Kam
89af62dca0
Merge pull request #11769 from hashicorp/cts-typo-fix
...
docs/nia: Fix typo in CTS CLI options
2021-12-07 14:40:08 -06:00
Noel Quiles
c125fb35a8
website: Upgrade <HashiStackMenu /> to latest ( #11760 )
2021-12-07 15:32:06 -05:00
Jared Kirschner
d9dacced07
Merge pull request #11770 from hashicorp/move-dns-alt-domain-section
...
improve location of DNS alt domain docs section
2021-12-07 15:18:44 -05:00
Matthieu MOREL
2411a5f58f
dependabot : add standard and hashicorp labels ( #11676 )
2021-12-07 15:12:32 -05:00
Jared Kirschner
d4bc953719
improve location of DNS alt domain docs section
2021-12-07 15:10:14 -05:00
Dan Upton
b19c7f17ef
Rename Master
and AgentMaster
fields in config protobuf ( #11764 )
2021-12-07 19:59:38 +00:00
Melissa Kam
f4b07b86ce
docs/nia: Fix typo in CTS CLI options
2021-12-07 13:55:49 -06:00
Chris S. Kim
b74ddd7b70
Godocs updates for catalog endpoints ( #11716 )
2021-12-07 10:18:28 -05:00
Mathew Estafanous
6626f91ff1
Transition all endpoint tests in agent_endpoint_test.go to go through ServeHTTP ( #11499 )
2021-12-07 09:44:03 -05:00
Dan Upton
4192468358
Remove references to "master" ACL tokens in tests ( #11751 )
2021-12-07 12:48:50 +00:00