open-consul/agent/consul
freddygv b9b41625b9 Restrict DC for partition-exports writes
There are two restrictions:
- Writes from the primary DC which explicitly target a secondary DC.
- Writes to a secondary DC that do not explicitly target the primary DC.

The first restriction is because the config entry is not supported in
secondary datacenters.

The second restriction is to prevent the scenario where a user writes
the config entry to a secondary DC, the write gets forwarded to the
primary, but then the config entry does not apply in the secondary.
This makes the scope more explicit.
2021-11-09 16:42:42 -07:00
..
authmethod Bump go-discover to fix broken dep tree (#10898) 2021-09-16 15:31:22 -04:00
discoverychain Finish removing useInDatacenter 2021-10-26 23:36:01 -06:00
fsm Support Check-And-Set deletion of config entries (#11419) 2021-11-01 16:42:01 +00:00
prepared_query
state Merge pull request #11514 from hashicorp/dnephin/ca-fix-secondary-init 2021-11-08 17:16:16 -07:00
stream
testdata
usagemetrics Rename service-exports to partition-exports 2021-10-25 17:58:48 -06:00
wanfed
acl.go Rework acl exports interface 2021-10-27 12:50:39 -06:00
acl_authmethod.go
acl_authmethod_oss.go
acl_authmethod_test.go
acl_client.go agent: Ensure partition is considered in agent endpoints (#11427) 2021-10-26 15:20:57 -04:00
acl_endpoint.go acl: remove id and revision from Policy constructors 2021-11-05 15:45:08 -04:00
acl_endpoint_legacy.go acl: remove most of the rest of structs/acl_legacy.go 2021-10-25 17:20:06 -04:00
acl_endpoint_oss.go acl: small OSS refactors to help ensure that auth methods with namespace rules work with partitions (#11323) 2021-10-14 15:38:05 -05:00
acl_endpoint_test.go KV refactoring, part 2 (#11512) 2021-11-08 11:43:21 -05:00
acl_oss.go Rework acl exports interface 2021-10-27 12:50:39 -06:00
acl_oss_test.go acl: ensure the global management policy grants all necessary partition privileges (#11072) 2021-09-16 15:53:10 -05:00
acl_replication.go acl: remove legacy ACL replication 2021-09-03 12:42:06 -04:00
acl_replication_test.go acl: fix test failure 2021-09-29 15:21:30 -04:00
acl_replication_types.go
acl_server.go rename helper method to reflect the non-deprecated terminology (#11509) 2021-11-05 13:51:50 -05:00
acl_server_oss.go
acl_test.go acl: remove id and revision from Policy constructors 2021-11-05 15:45:08 -04:00
acl_token_exp.go rename helper method to reflect the non-deprecated terminology (#11509) 2021-11-05 13:51:50 -05:00
acl_token_exp_test.go
auto_config_backend.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
auto_config_backend_test.go
auto_config_endpoint.go acl: some acl authz refactors for nodes (#10909) 2021-08-25 13:43:11 -05:00
auto_config_endpoint_test.go
auto_encrypt_endpoint.go
auto_encrypt_endpoint_test.go
autopilot.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
autopilot_oss.go
autopilot_test.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
catalog_endpoint.go
catalog_endpoint_test.go acl: remove id and revision from Policy constructors 2021-11-05 15:45:08 -04:00
client.go acl: pass PartitionInfo through ent ACLConfig 2021-10-26 23:41:52 -06:00
client_serf.go acl: remove ACL upgrading from Clients 2021-09-29 14:02:38 -04:00
client_test.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
cluster_test.go
config.go add root_cert_ttl option for consul connect, vault ca providers (#11428) 2021-11-02 11:02:10 -07:00
config_endpoint.go Restrict DC for partition-exports writes 2021-11-09 16:42:42 -07:00
config_endpoint_test.go Restrict DC for partition-exports writes 2021-11-09 16:42:42 -07:00
config_oss.go acl: some acl authz refactors for nodes (#10909) 2021-08-25 13:43:11 -05:00
config_replication.go
config_replication_test.go Support Check-And-Set deletion of config entries (#11419) 2021-11-01 16:42:01 +00:00
config_test.go agent: add a clone function for duplicating the serf lan configuration (#11443) 2021-10-28 16:11:26 -05:00
connect_ca_endpoint.go Use stored entmeta to fill authzContext 2021-10-14 08:57:40 -06:00
connect_ca_endpoint_test.go Convert tests to the new ACL system 2021-09-21 18:35:12 -04:00
coordinate_endpoint.go acl: some acl authz refactors for nodes (#10909) 2021-08-25 13:43:11 -05:00
coordinate_endpoint_test.go Convert tests to the new ACL system 2021-09-21 18:35:12 -04:00
discovery_chain_endpoint.go Remove useInDatacenter from disco chain requests 2021-10-26 23:35:21 -06:00
discovery_chain_endpoint_test.go partition dicovery chains (#10983) 2021-09-07 16:29:32 -04:00
enterprise_client_oss.go
enterprise_config_oss.go
enterprise_server_oss.go acl: remove updateEnterpriseSerfTags 2021-10-04 17:01:51 -04:00
enterprise_server_oss_test.go
federation_state_endpoint.go
federation_state_endpoint_test.go
federation_state_replication.go
federation_state_replication_test.go
filter.go acl: some acl authz refactors for nodes (#10909) 2021-08-25 13:43:11 -05:00
filter_test.go acl: remove id and revision from Policy constructors 2021-11-05 15:45:08 -04:00
flood.go
gateway_locator.go
gateway_locator_test.go
health_endpoint.go
health_endpoint_test.go acl: made acl rules in tests slightly more specific 2021-09-22 18:24:56 -04:00
helper_test.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
intention_endpoint.go Default the partition in ixn check 2021-09-16 14:39:01 -06:00
intention_endpoint_test.go acl: remove legacy ACL upgrades from Server 2021-09-29 15:19:23 -04:00
internal_endpoint.go Account for partitions in ixn match/decision 2021-09-16 14:39:01 -06:00
internal_endpoint_test.go Account for partitions in ixn match/decision 2021-09-16 14:39:01 -06:00
issue_test.go
kvs_endpoint.go
kvs_endpoint_test.go Convert tests to the new ACL system 2021-09-21 18:35:12 -04:00
leader.go rename helper method to reflect the non-deprecated terminology (#11509) 2021-11-05 13:51:50 -05:00
leader_connect.go
leader_connect_ca.go ca: Only initialize clusterID in the primary 2021-11-05 18:08:44 -04:00
leader_connect_ca_test.go ca: return an error when secondary fails to initialize 2021-11-05 18:02:51 -04:00
leader_connect_test.go ca: return an error when secondary fails to initialize 2021-11-05 18:02:51 -04:00
leader_federation_state_ae.go
leader_federation_state_ae_test.go Merge pull request #11182 from hashicorp/dnephin/acl-legacy-remove-upgrade 2021-10-04 17:25:39 -04:00
leader_intentions.go Sync enterprise changes to oss (#10994) 2021-09-08 11:59:30 -04:00
leader_intentions_oss.go
leader_intentions_oss_test.go
leader_intentions_test.go
leader_metrics.go agent: move agent tls metric monitor to a more appropriate place 2021-10-27 16:26:09 -04:00
leader_test.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
logging.go
logging_test.go
merge.go
merge_test.go
operator_autopilot_endpoint.go
operator_autopilot_endpoint_test.go Convert tests to the new ACL system 2021-09-21 18:35:12 -04:00
operator_endpoint.go
operator_raft_endpoint.go
operator_raft_endpoint_test.go Convert tests to the new ACL system 2021-09-21 18:35:12 -04:00
options.go
options_oss.go
prepared_query_endpoint.go
prepared_query_endpoint_test.go Convert tests to the new ACL system 2021-09-21 18:35:12 -04:00
raft_rpc.go rpc: authorize raft requests (#10925) 2021-08-26 15:04:32 -07:00
replication.go
replication_test.go
rpc.go grpc: strip local ACL tokens from RPCs during forwarding if crossing datacenters (#11099) 2021-09-22 13:14:26 -05:00
rpc_test.go regenerate expired certs (#11462) 2021-11-01 11:40:16 -04:00
rtt.go
rtt_test.go
segment_oss.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
serf_filter.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
serf_test.go
server.go telemetry: set cert expiry metrics to NaN on start 2021-10-27 15:19:25 -04:00
server_connect.go Avoid returning empty roots with uninitialized CA 2021-11-08 16:51:49 -07:00
server_lookup.go
server_lookup_test.go
server_oss.go agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
server_register.go
server_serf.go acl: remove reading of serf acl tags 2021-09-29 15:45:11 -04:00
server_test.go regenerate expired certs (#11462) 2021-11-01 11:40:16 -04:00
session_endpoint.go
session_endpoint_test.go Convert tests to the new ACL system 2021-09-21 18:35:12 -04:00
session_timers.go
session_timers_test.go
session_ttl.go
session_ttl_test.go
snapshot_endpoint.go
snapshot_endpoint_test.go
stats_fetcher.go
stats_fetcher_test.go
status_endpoint.go
status_endpoint_test.go
subscribe_backend.go grpc: strip local ACL tokens from RPCs during forwarding if crossing datacenters (#11099) 2021-09-22 13:14:26 -05:00
subscribe_backend_test.go subscribe: attempt to fix a flaky test 2021-10-27 15:09:09 -04:00
system_metadata.go
system_metadata_test.go
txn_endpoint.go
txn_endpoint_test.go Convert tests to the new ACL system 2021-09-21 18:35:12 -04:00
util.go acl: remove reading of serf acl tags 2021-09-29 15:45:11 -04:00
util_test.go acl: remove legacy ACL upgrades from Server 2021-09-29 15:19:23 -04:00