open-consul/.changelog
Daniel Nephin fa32c78429 ca: set the correct SigningKeyID after config update with Vault provider
The test added in this commit shows the problem. Previously the
SigningKeyID was set to the RootCert not the local leaf signing cert.

This same bug was fixed in two other places back in 2019, but this last one was
missed.

While fixing this bug I noticed I had the same few lines of code in 3
places, so I extracted a new function for them.

There would be 4 places, but currently the InitializeCA flow sets this
SigningKeyID in a different way, so I've left that alone for now.
2021-12-02 16:07:11 -05:00
..
7628.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
7899.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
7970.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8158.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8190.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8194.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8211.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8216.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8218.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8221.txt fix 1.9.0-beta1 changelog formatting (#8941) 2020-10-14 09:35:59 -05:00
8222.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8268.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8311.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8343.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8371.txt Introducing changelog-gen (#8387) 2020-08-06 23:15:29 +02:00
8431.txt make h2ping changelog entry conform with changelog template (#10111) 2021-04-29 14:48:16 -04:00
8458.txt Add http2 and grpc support to ingress gateways (#8458) 2020-08-27 15:34:08 -06:00
8470.txt update changelog snippet 2020-08-12 11:21:54 -05:00
8522.txt add primary keys to list keyring (#8522) 2020-08-18 09:50:24 +02:00
8537.txt Retroactively add changelog for PR 8537 2020-08-27 11:53:49 -04:00
8545.txt agent: expose the list of supported envoy versions on /v1/agent/self (#8545) 2020-08-26 10:04:11 -05:00
8547.txt agent: ensure that we normalize bootstrapped config entries (#8547) 2020-08-27 11:37:25 -05:00
8552.txt Added changelog for #8552 2020-08-28 23:01:04 +02:00
8560.txt Update vault CA for latest api client 2020-09-15 13:33:55 -07:00
8564.txt changelog: fixup release-note formatting (#9966) 2021-04-02 14:59:47 -05:00
8569.txt xds: use envoy's rbac filter to handle intentions entirely within envoy (#8569) 2020-08-27 12:20:58 -05:00
8575.txt Add helpers to the API client to help with getting information from `AgentMember` tags (#8575) 2020-08-27 11:00:48 -04:00
8585.txt Create 8585.txt 2020-09-14 14:16:47 -06:00
8588.txt add entry for 8588 (#8650) 2020-09-10 18:53:36 +02:00
8596.txt connect: all config entries pick up a meta field (#8596) 2020-09-02 14:10:25 -05:00
8599.txt AutopilotServerHealth now handles the 429 status code (#8599) 2021-03-12 09:40:49 -05:00
8601.txt connect: fix bug in preventing some namespaced config entry modifications (#8601) 2020-09-02 10:47:19 -05:00
8602.txt api: create fresh http client for unix sockets (#8602) 2020-09-06 12:27:39 -04:00
8603.txt Changelog entry for usage metrics 2020-09-02 10:48:11 -05:00
8606.txt Add support for -ca-path option in the connect envoy command (#8606) 2020-09-08 12:16:16 +02:00
8646.txt Create 8646.txt 2020-09-15 10:05:23 -07:00
8685.txt Merge pull request #9270 from hashicorp/release/1.9.0 2020-11-24 17:36:47 -05:00
8694.txt changelog: add entries for ui_config and service metrics config (#8919) 2020-10-09 17:31:00 -04:00
8696.txt agent/consuk: Rename RPCRate -> RPCRateLimit 2021-01-14 17:26:00 -05:00
8703.txt Merge pull request #9270 from hashicorp/release/1.9.0 2020-11-24 17:36:47 -05:00
8704.txt use service datacenter for dns name (#8704) 2020-09-22 20:34:09 +02:00
8726.txt Add changelog file 2020-09-25 12:03:49 -04:00
8731.txt Consul Service meta wrongly computes and exposes non_voter meta (#8731) 2020-10-09 17:18:24 -04:00
8741.txt agent: make the json/hcl decoding of ConnectProxyConfig fully work with CamelCase and snake_case (#8741) 2020-09-24 13:58:52 -05:00
8745.txt server: make sure that the various replication loggers use consistent logging (#8745) 2020-09-24 15:49:38 -05:00
8746.txt agent: enable enable_central_service_config by default (#8746) 2020-10-01 09:19:14 -05:00
8747.txt agent: when enable_central_service_config is enabled ensure agent reload doesn't revert check state to critical (#8747) 2020-09-24 16:24:04 -05:00
8764.txt api: support GetMeta() and GetNamespace() on all config entry kinds (#8764) 2020-09-29 09:11:57 -05:00
8771.txt Add changelog entry 2020-10-20 16:42:06 -04:00
8774.txt Merge pull request #9027 from hashicorp/release/1.8.5 2020-10-26 10:59:48 -04:00
8781.txt Add per-agent reconnect timeouts (#8781) 2020-10-08 15:02:19 -04:00
8784.txt Add changelog note 2020-10-09 08:01:55 -07:00
8786.txt server: ensure that we also shutdown network segment serf instances on server shutdown (#8786) 2020-09-30 16:23:43 -05:00
8787.txt Enhance the output of consul snapshot inspect (#8787) 2020-10-09 14:57:29 -05:00
8788.txt changelog: add entries for UI topology viz (#8918) 2020-10-09 17:29:14 -04:00
8812.txt add changelog 2021-05-18 15:04:12 -04:00
8822.txt Merge pull request #9270 from hashicorp/release/1.9.0 2020-11-24 17:36:47 -05:00
8834.txt Merge pull request #9270 from hashicorp/release/1.9.0 2020-11-24 17:36:47 -05:00
8839.txt add missing changelog entry for #8839 2020-10-07 10:22:40 -05:00
8846.txt changelog: add entries for UI topology viz (#8918) 2020-10-09 17:29:14 -04:00
8855.txt command: remove conditional envoy bootstrap generation for versions <=1.10.0 since those are not supported (#8855) 2020-10-07 10:53:23 -05:00
8858.txt changelog: add entries for UI topology viz (#8918) 2020-10-09 17:29:14 -04:00
8875.txt agent: allow the /v1/connect/intentions/match endpoint to use the agent cache (#8875) 2020-10-08 14:51:53 -05:00
8877.txt Merge pull request #9270 from hashicorp/release/1.9.0 2020-11-24 17:36:47 -05:00
8924.txt Fix: service LocallyRegisteredAsSidecar property is not persisted 2020-10-13 19:38:58 +02:00
9002.txt changelog: add entries for 1.9.0-beta2 (#9129) 2020-11-06 17:18:47 -05:00
9006.txt cli: Add JSON and Pretty Print formatting for `consul snapshot inspect` (#9006) 2020-10-29 11:31:14 -05:00
9007.txt server: break up Intention.Apply monolithic method (#9007) 2020-11-13 09:15:39 -06:00
9008.txt changelog: add entries for 1.9.0-beta2 (#9129) 2020-11-06 17:18:47 -05:00
9009.txt changelog: add entry for fixing active CA root unset (#9323) 2020-12-03 13:45:07 -05:00
9024.txt Merge pull request #9027 from hashicorp/release/1.8.5 2020-10-26 10:59:48 -04:00
9036.txt Merge pull request #9270 from hashicorp/release/1.9.0 2020-11-24 17:36:47 -05:00
9042.txt Changelog 2021-04-06 17:12:10 +08:00
9059.txt changelog: add entries for 1.9.0-beta2 (#9129) 2020-11-06 17:18:47 -05:00
9067.txt Fixed failing tests 2020-12-30 14:09:50 -06:00
9081.txt changelog: add entries for 1.9.0-beta2 (#9129) 2020-11-06 17:18:47 -05:00
9088.txt changelog: add entries for 1.9.0-beta2 (#9129) 2020-11-06 17:18:47 -05:00
9098.txt Fix some minor wording issues 2020-11-11 11:33:38 -06:00
9099.txt changelog: add entries for 1.9.0-beta2 (#9129) 2020-11-06 17:18:47 -05:00
9101.txt agent: return the default ACL policy to callers as a header (#9101) 2020-11-12 10:38:32 -06:00
9103.txt Fixup the autopilot changelog (#9145) 2020-11-09 17:29:06 -05:00
9113.txt connect: switch the default gateway port from 443 to 8443 (#9116) 2020-11-06 20:47:29 -05:00
9119.txt Merge pull request #9155 from hashicorp/release/1.9.0-beta3 2020-11-13 16:45:50 -05:00
9141.txt ui: Changelog changes (#9209) 2020-11-17 10:35:56 -05:00
9142.txt Add changelog entry for autopilot state CLI (#9161) 2020-11-11 14:55:12 -05:00
9151.txt server: remove config entry CAS in legacy intention API bridge code (#9151) 2020-11-13 14:42:21 -06:00
9156.txt Add a paramter in state store methods to indicate whether a resource insertion is from a snapshot restoration (#9156) 2020-11-11 11:21:42 -05:00
9181.txt Trim to one deprecation entry 2020-11-13 14:31:14 -08:00
9186.txt server: skip deleted and deleting namespaces when migrating intentions to config entries (#9186) 2020-11-13 13:56:41 -06:00
9191.txt Refactor to call non-voting servers read replicas (#9191) 2020-11-17 10:53:57 -05:00
9198.txt Merge pull request #9270 from hashicorp/release/1.9.0 2020-11-24 17:36:47 -05:00
9204.txt Prevent panic if autopilot health is requested prior to leader establishment finishing. (#9204) 2020-11-16 17:08:17 -05:00
9207.txt Add DC and NS support for Envoy metrics (#9207) 2020-11-16 16:37:19 -07:00
9229.txt command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint (#9229) 2020-11-19 15:27:31 -06:00
9240.txt Require operator:write to get Connect CA config (#9240) 2020-11-19 10:14:48 -07:00
9247.txt Added changelog entry for 9247 2020-11-20 18:23:01 +01:00
9254.txt server: fix panic when deleting a non existent intention (#9254) 2020-11-24 13:44:20 -05:00
9262.txt docs: deprecate some old filter parameters 2020-11-23 18:23:58 -05:00
9271.txt Add changelog for fixing the namespace replication bug from #9271 (#9347) 2020-12-08 12:04:51 -05:00
9278.txt server: deletions of intentions by name using the intention API is now idempotent (#9278) 2021-01-04 11:27:00 -06:00
9284.txt local: mark service and checks as InSync when added 2020-11-27 15:31:12 -05:00
9296.txt Changelog 2020-11-30 17:27:39 +00:00
9318.txt changelog: add entry for fixing active CA root unset (#9323) 2020-12-03 13:45:07 -05:00
9320.txt Log replication warnings when no error suppression is defined (#9320) 2021-01-08 14:03:06 -06:00
9351.txt acl: global tokens created by auth methods now correctly replicate to secondary datacenters (#9351) 2020-12-09 15:22:29 -06:00
9366.txt server: when wan federating via mesh gateways only do heuristic primary DC bypass on the leader (#9366) 2021-01-22 10:03:24 -06:00
9410.txt ui: [BUGFIX] Ensure namespace is used for node API requests (#9410) 2021-01-04 16:42:44 +00:00
9428.txt connect: connect CA Roots in the primary datacenter should use a SigningKeyID derived from their local intermediate (#9428) 2021-02-08 13:18:51 -06:00
9432.txt ui: [BUGFIX] Request intention listing with ns parameter (#9432) 2021-01-04 17:22:10 +00:00
9436.txt structs: fix caching of ServiceSpecificRequest when ingress=true 2021-01-14 17:01:40 -05:00
9440.txt Fix bug in usage metrics when multiple service instances are changed in a single transaction (#9440) 2021-01-12 15:31:47 -06:00
9442.txt ui: Search/filtering 'Filtered by:' search status (#9442) 2021-01-25 18:13:54 +00:00
9468.txt cli: Add consul intention list command (based on PR #6825) (#9468) 2021-01-12 21:14:31 +01:00
9475.txt Add changelog for 9475 2021-03-16 18:22:25 -04:00
9485.txt chore: Adds changelog entry for accessibility improvements (#9509) 2021-01-08 18:17:01 +00:00
9487.txt Add changelog for #9487 (#9491) 2021-01-05 13:05:42 -05:00
9498.txt Ensure that CA initialization does not block leader election. 2021-01-19 15:27:48 -05:00
9505.txt acl: use the presence of a management policy in the state store as a sign that we already migrated to v2 acls (#9505) 2021-01-05 17:04:27 -06:00
9510.txt [bugfix] Prometheus metrics without warnings 2021-01-06 13:54:05 +01:00
9512.txt [Streaming][bugfix] handle TLS signalisation when TLS is disabled on client side 2021-01-06 17:24:58 +01:00
9513.txt ui: Topology intention saving improvements (#9513) 2021-01-19 15:40:39 +00:00
9519.txt server: use the presense of stored federation state data as a sign that we already activated the federation state feature flag (#9519) 2021-01-25 13:24:32 -06:00
9524.txt chore: Changelog entry for #9524 (#9595) 2021-01-20 15:44:41 +00:00
9527.txt server: add OSS stubs supporting validation of source namespaces in service-intentions config entries (#9527) 2021-01-25 11:27:38 -06:00
9528.txt server: initialize mgw-wanfed to use local gateways more on startup (#9528) 2021-01-25 17:30:38 -06:00
9530.txt Display a warning when rpc.enable_streaming = true is set on a client (#9530) 2021-01-08 15:23:23 -05:00
9553.txt ui: Sidebar navigation / redesign (#9553) 2021-01-26 17:40:33 +00:00
9554.txt connect: add local_request_timeout_ms to configure local_app http timeouts (#9554) 2021-01-25 13:50:00 -06:00
9569.txt Fix -ui-content-path without regex (#9569) 2021-01-20 18:40:46 +00:00
9585.txt Add flags to support CA generation for Connect (#9585) 2021-01-27 08:52:15 +01:00
9589.txt Update topology mapping Refs on all proxy instance deletions (#9589) 2021-01-20 15:17:26 +00:00
9593.txt ui: Changelog for #9593 (#9598) 2021-01-20 18:18:46 +00:00
9594.txt ui: Removing formatting to display LockDelay in nanoseconds (#9594) 2021-01-20 12:03:08 -05:00
9602.txt xds: remove deprecated usages of xDS (#9602) 2021-02-22 15:00:15 -06:00
9617.txt changelog: Auth Method feature release (#9963) 2021-04-01 11:00:43 -04:00
9626.txt Upgrade raft-autopilot and wait for autopilot it to stop when revoking leadership (#9644) 2021-01-27 11:14:52 -05:00
9650.txt xds: deduplicate mesh gateway listeners in a stable way (#9650) 2021-02-05 16:28:07 -06:00
9651.txt xds: prevent LDS flaps in mesh gateways due to unstable datacenter lists (#9651) 2021-02-08 10:19:57 -06:00
9658.txt fix typo in changelog 2021-02-26 17:08:33 -06:00
9660.txt chore: changelog for 9660 (#9668) 2021-01-29 16:08:39 +00:00
9672.txt Add a changelog note 2021-03-11 11:47:35 -08:00
9683.txt changelog: fixup release-note formatting (#9960) 2021-04-01 10:31:48 -04:00
9687.txt ui: Restrict the viewing/editing of certain UI elements based on the users ACLs (#9687) 2021-02-19 16:42:16 +00:00
9689.txt Add changelog entry 2021-02-08 09:45:58 -07:00
9703.txt Updated changelog 2021-02-08 18:16:07 +01:00
9715.txt ui: [BUGFIX] Replace all replaceAll with split.join for older browsers without replaceAll (#9715) 2021-02-11 09:49:39 +00:00
9729.txt ui: Update browser targets to ~2016 browsers (#9729) 2021-02-11 10:03:13 +00:00
9737.txt connect: update supported envoy point releases to 1.16.2, 1.15.3, 1.14.6, 1.13.7 (#9737) 2021-02-10 13:11:15 -06:00
9738.txt Stop background refresh of cached data for requests that result in ACL not found errors (#9738) 2021-02-09 10:15:53 -05:00
9741.txt Add fields to the /acl/auth-methods endpoint. (#9741) 2021-02-17 08:16:57 -08:00
9749.txt ui: [BUGFIX] Ensure we show the correct count of instances for each node (#9749) 2021-02-11 11:36:36 +00:00
9752.txt ui: Remove any trailing fullstop/period DNS characters from Gateways UI API (#9752) 2021-02-25 09:34:47 +00:00
9765.txt xds: only try to create an ipv6 expose checks listener if ipv6 is supported by the kernel (#9765) 2021-02-19 14:38:43 -06:00
9768.txt Add flags to consul connect envoy for metrics merging. (#9768) 2021-03-04 16:15:47 -06:00
9772.txt stream: fix a snapshot cache bug 2021-02-16 12:52:23 -05:00
9792.txt Add a changelog entry 2021-03-11 09:46:53 -08:00
9806.txt connect: if the token given to the vault provider returns no data avoid a panic (#9806) 2021-02-22 14:08:49 -06:00
9819.txt ui: a11y modals (#9819) 2021-03-09 09:30:01 +00:00
9847.txt ui: CSP Improvements (#9847) 2021-03-17 10:46:21 +00:00
9851.txt Fix advertise_addr_wan_ipv6 configuration key 2021-03-09 14:56:44 +01:00
9855.txt Support Incremental xDS mode (#9855) 2021-04-29 13:54:05 -05:00
9864.txt ui: Adds warning icon to side menu when ACLs are disabled (#9864) 2021-03-17 11:23:00 +00:00
9872.txt Add changelog and cleanup todo for beta 2021-03-17 16:45:13 -06:00
9894.txt Add changelog entry 2021-03-17 22:09:02 -06:00
9901.txt ui: Ensure intention form cancel button works (#9901) 2021-03-19 15:14:46 +00:00
9903.txt api: enable query options on agent endpoints 2021-03-19 13:08:26 -05:00
9910.txt cli: Add new `consul connect redirect-traffic` command for applying traffic redirection rules when Transparent Proxy is enabled. (#9910) 2021-04-09 11:48:10 -07:00
9920.txt Allow passing ALPN next protocols down to connect services. Fixes #4466. (#9920) 2021-03-26 11:34:47 +00:00
9923.txt changelog: fixup release-note formatting (#9960) 2021-04-01 10:31:48 -04:00
9924.txt Update metric name 2021-06-14 17:01:16 -04:00
9967.txt api: ensure v1/health/ingress/:service endpoint works properly when streaming is enabled (#9967) 2021-04-05 13:23:00 -05:00
9973.txt connect: add toggle to globally disable wildcard outbound network access when transparent proxy is enabled (#9973) 2021-04-06 13:19:59 -05:00
9978.txt cache: fix bug where TTLs were ignored leading to leaked memory in client agents (#9978) 2021-04-08 11:08:56 +01:00
9979.txt cache: Fix bug where connection errors can cause early cache expiry (#9979) 2021-04-08 11:11:15 +01:00
9980.txt command: when generating envoy bootstrap configs to stdout do not mix informational logs into the json (#9980) 2021-04-07 14:22:52 -05:00
9981.txt Add changelog entry 2021-05-04 12:41:43 -07:00
10002.txt Fix up changelog for 10002 (#10130) 2021-04-27 14:29:48 -04:00
10009.txt add changelog entry 2021-07-14 17:50:00 -04:00
10013.txt Move static token resolution into the ACLResolver (#10013) 2021-04-14 12:39:35 -04:00
10016.txt Add changelog entry 2021-04-15 13:58:28 -06:00
10023.txt Add security release-note changelog entry 2021-04-14 16:40:47 -04:00
10025.txt snapshot: fix saving of auth methods 2021-04-14 16:51:21 -04:00
10039.txt ui: remove old nspace argument from the proxy instance repository (#10039) 2021-04-15 19:18:07 +01:00
10062.txt ui: Adds human formatting to nanosecond based session durations (#10062) 2021-04-28 12:12:56 +01:00
10069.txt Disallow * as service-defaults name (#10069) 2021-04-19 14:23:01 -06:00
10073.txt Update changelog and add telemetry docs (#10107) 2021-04-23 16:05:00 -04:00
10081.txt Update brand assets (#10081) 2021-05-03 16:19:09 +01:00
10089.txt CLI: Allow snapshot inspect to work on internal raft snapshots directly. (#10089) 2021-04-23 16:17:08 +01:00
10091.txt Fix panic bug in snapshot inspect (#10091) 2021-04-23 20:48:10 +01:00
10100.txt ui: Adds CRD popover 'informed action' for intentions managed by CRDs (#10100) 2021-05-04 17:21:54 +01:00
10101.txt connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101) 2021-04-29 15:22:03 -05:00
10112.txt Add changelog 2021-04-27 19:03:17 -04:00
10121.txt ui: Add conditionals to Lock Session list items (#10121) 2021-05-11 11:35:15 -04:00
10122.txt ui: Fix empty SVG height to prevent service mesh from breaking when there are no upstreams (#10122) 2021-04-28 09:22:18 -04:00
10124.txt ui: Update conditional for topology empty state (#10124) 2021-04-28 09:23:02 -04:00
10127.txt Rename "cluster" config entry to "mesh" (#10127) 2021-04-28 16:13:29 -06:00
10129.txt Make Raft trailing logs and snapshot timing reloadable (#10129) 2021-05-04 15:36:53 +01:00
10131.txt xds: ensure that all envoyproxy/go-control-plane protobuf symbols are linked into the final binary (#10131) 2021-04-29 14:58:26 -05:00
10133.txt ui: Update not-defined intention popover and banner (#10133) 2021-04-28 10:31:14 -04:00
10134.txt Implement traffic redirection exclusion based on proxy config and user-provided values (#10134) 2021-04-29 09:21:15 -07:00
10136.txt ui: Add TProxy Mode notice banner to service instance Upstreams tab (#10136) 2021-04-28 14:06:18 -04:00
10149.txt Add changelog 2021-04-29 12:08:03 -04:00
10151.txt ui: Fix text search for upstream instances (#10151) 2021-05-04 17:25:57 +01:00
10152.txt ui: Remove extra nspace value from service upstreams (#10152) 2021-05-04 17:42:13 +01:00
10157.txt ui: Fix nspace spacing issue (#10157) 2021-05-10 11:19:11 +01:00
10161.txt Add changelog 2021-05-04 14:09:14 -04:00
10162.txt Only consider virtual IPs for transparent proxies (#10162) 2021-05-03 14:15:22 -06:00
10163.txt Give descriptive error if auth method not found (#10163) 2021-05-03 13:39:13 -07:00
10173.txt Save exposed ports in agent's store and expose them via API (#10173) 2021-05-12 13:51:39 -07:00
10174.txt ui: Adds ability to show a 'partial' list in list-collections (#10174) 2021-05-07 16:54:45 +01:00
10181.txt ui: Loader amends/improvements (#10181) 2021-05-07 12:23:29 +01:00
10186.txt ui: [BUGFIX] De-duplicate Tag rendering (#10186) 2021-05-07 12:07:11 +01:00
10188.txt Add changelog 2021-05-06 18:35:52 -04:00
10189.txt http: set consistency header properly 2021-05-06 13:19:45 -04:00
10194.txt ui: Serf Health Check warning notice (#10194) 2021-05-13 11:36:51 +01:00
10204.txt Always set the Content-Type header when a body is present (#10204) 2021-05-25 16:03:48 +01:00
10210.txt Add OSS bits for supporting specifying the enterprise license via config 2021-05-20 16:11:33 -04:00
10211.txt Deprecate API driven licensing. 2021-05-21 11:08:50 -04:00
10212.txt ui: Support Route optional parameters/segments (#10212) 2021-05-26 17:43:46 +01:00
10225.txt ui: Miscellaneous Lock Session fixes (#10225) 2021-05-19 11:05:54 +01:00
10231.txt connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231) 2021-05-12 14:06:06 -05:00
10239.txt server: ensure that central service config flattening properly resets the state each time (#10239) 2021-05-14 10:21:44 -05:00
10240.txt agent: ensure we hash the non-deprecated upstream fields on ServiceConfigRequest (#10240) 2021-05-14 10:15:48 -05:00
10243.txt xds: emit a labeled gauge of connected xDS streams by version (#10243) 2021-05-14 13:59:13 -05:00
10248.txt hcs-1936: Prepare for adding license auto-retrieval to auto-config in enterprise 2021-05-24 13:20:30 -04:00
10267.txt Add license inspect command documentation and changelog (#10351) 2021-06-04 14:33:13 -04:00
10270.txt ui: Create and use collapsible notices component (#10270) 2021-05-25 11:02:38 -04:00
10273.txt debug: remove the CLI check for debug_enabled (#10273) 2021-05-27 09:41:53 -04:00
10279.txt generate a single debug file for a long duration capture (#10279) 2021-06-07 13:00:51 -04:00
10287.txt ui: Unix Domain Socket support (#10287) 2021-05-26 17:52:25 +01:00
10298.txt ui: Move all our icons to use CSS custom properties instead of SASS vars (#10298) 2021-06-21 11:54:58 +01:00
10299.txt RPC Timeout/Retries account for blocking requests (#8978) 2021-05-27 17:29:43 -04:00
10301.txt Ensure passthrough clusters can be created (#10301) 2021-05-26 15:05:14 -06:00
10306.txt Bump raft-autopilot version to the latest. (#10306) 2021-05-27 12:59:14 -04:00
10324.txt envoy: fix bootstrap deadlock caused by a full named pipe 2021-05-31 18:53:17 -04:00
10329.txt Add flag for transparent proxies to dial individual instances (#10329) 2021-06-09 14:34:17 -06:00
10330.txt connect/ca: ensure edits to the key type/bits for the connect builtin CA will regenerate the roots (#10330) 2021-07-13 11:12:07 -05:00
10331.txt connect/ca: require new vault mount points when updating the key type/bits for the vault connect CA provider (#10331) 2021-07-13 11:11:46 -05:00
10338.txt Add changelog 2021-06-02 17:39:30 -04:00
10340.txt usagemetrics: add cluster members to metrics API (#10340) 2021-06-03 08:25:53 -07:00
10358.txt fix monitor to only start the monitor in json format when requested (#10358) 2021-06-07 12:08:48 -04:00
10365.txt Revert "Avoid adding original_dst filter when not needed" (#10365) 2021-06-08 13:18:41 -06:00
10368.txt improve monitor performance (#10368) 2021-06-15 12:05:52 -04:00
10381.txt xds: ensure that dependent xDS resources are reconfigured during primary type warming (#10381) 2021-06-14 17:20:27 -05:00
10391.txt proxycfg: Ensure that endpoints for explicit upstreams in other datacenters are watched in transparent mode (#10391) 2021-06-15 11:00:26 -07:00
10394.txt Relax validation for expose.paths config (#10394) 2021-06-14 14:04:11 -06:00
10395.txt grpc: move gRPC INFO logs to be emitted as TRACE logs from Consul (#10395) 2021-06-14 15:13:58 -05:00
10399.txt Add changelog 2021-07-26 17:53:32 -04:00
10401.txt return an empty record when asked for an addr dns with type other then A, AAAA and ANY (#10401) 2021-06-24 20:44:44 -04:00
10404.txt Add changelog entry 2021-06-15 14:15:30 -06:00
10411.txt Format certificates properly (rfc7468) with a trailing new line (#10411) 2021-06-30 20:48:29 -04:00
10423.txt Update .changelog/10423.txt 2021-06-17 12:06:26 -07:00
10424.txt connect/ca: cease including the common name field in generated certs (#10424) 2021-06-25 13:00:00 -05:00
10475.txt structs: prevent service-defaults upstream configs from using wildcard names or namespaces (#10475) 2021-06-23 15:48:54 -05:00
10478.txt structs: prohibit config entries from referencing more than one partition at a time (#10478) 2021-06-23 16:44:10 -05:00
10486.txt connect/proxy: fixes logic bug preventing builtin/native proxy from starting upstream listeners (#10486) 2021-06-24 15:02:34 -05:00
10490.txt tlsutil: fix default server name for health checks 2021-06-24 13:49:58 -04:00
10500.txt check expiry date of the root/intermediate before using it to sign a leaf (#10500) 2021-07-13 12:15:06 -04:00
10503.txt ui: Don't default to the default namespace, use the token default namespace instead (#10503) 2021-07-07 11:46:41 +01:00
10504.txt Add ca certificate metrics (#10504) 2021-07-07 09:41:01 -04:00
10507.txt connect: include optional partition prefixes in SPIFFE identifiers (#10507) 2021-06-25 16:47:47 -05:00
10514.txt streaming: fix enable of streaming in the client 2021-06-28 17:23:14 -04:00
10515.txt fix 64-bit aligment for 32-bit platforms 2021-06-29 16:10:21 -04:00
10535.txt Add changelog to backported bug fix for Topology Metrics (#10538) 2021-06-30 16:51:29 -04:00
10546.txt Add support for returning ACL secret IDs for accessors with acl:write (#10546) 2021-07-08 15:13:08 -07:00
10552.txt Add changelog 2021-07-06 17:57:36 -04:00
10559.txt Add changelog for PR 10559 2021-07-06 18:39:40 -04:00
10564.txt cli/sdk: Allow applying redirect-traffic rules in a provided Linux namespace (#10564) 2021-07-13 10:05:48 -06:00
10566.txt Allow configuring graceful stop in testutil (#10566) 2021-09-08 11:12:54 -04:00
10569.txt ui: [BUGFIX] Ensure in-folder KVs are created in the correct folder (#10569) 2021-07-14 18:49:01 +01:00
10572.txt config: add agent config flag for enterprise clients to indicate they wish to join a particular partition (#10572) 2021-07-08 10:03:38 -05:00
10581.txt ui: Split up the socket mode from the socket path (#10581) 2021-08-11 13:00:32 -04:00
10598.txt acls: Show `AuthMethodNamespace` when reading/listing ACL token meta (#10598) 2021-07-15 10:38:52 -07:00
10604.txt ui: Show the correct 'ACLs Disabled' page when ACLs are disabled (#10604) 2021-07-14 18:52:13 +01:00
10605.txt ui: [BUGFIX] Fix KV Code Editor syntax loading (#10605) 2021-07-14 18:55:35 +01:00
10608.txt ui: [BUGFIX] Ensure we use the ns query param name when requesting permissions (#10608) 2021-07-15 12:19:07 +01:00
10611.txt Add DNS recursor strategy option (#10611) 2021-07-19 15:22:51 -07:00
10612.txt String type instead of error type and changelog. 2021-08-06 22:35:27 +01:00
10613.txt Add Changelog entry and api package support for HTTP Header manip 2021-09-10 21:09:24 +01:00
10619.txt xds: ensure single L7 deny intention with default deny policy does not result in allow action (CVE-2021-36213) (#10619) 2021-07-15 10:09:00 -05:00
10621.txt Add changelog entry 2021-07-15 09:27:46 -06:00
10630.txt defer setting the state before returning to avoid stuck in `INITIALIZING` state (#10630) 2021-08-05 14:51:19 -04:00
10647.txt Avoid panic on concurrent writes to cached service config map (#10647) 2021-07-20 10:09:29 -06:00
10657.txt config raft apply silent error (#10657) 2021-07-22 10:32:27 -04:00
10688.txt agent: update proxy upstreams to inherit namespace from service (#10688) 2021-07-26 17:12:29 -04:00
10689.txt Log the correlation ID when blocking queries fire (#10689) 2021-07-23 16:36:17 -06:00
10690.txt add support for h2c in h2 ping health checks 2021-10-04 22:51:08 -04:00
10691.txt api: Support QueryOptions on additional agent endpoints (#10691) 2021-07-30 10:07:13 -07:00
10706.txt ui: Fix dropdown option duplications (#10706) 2021-07-27 17:34:11 -04:00
10707.txt add changelog 2021-07-28 17:50:01 -04:00
10717.txt checks: Add Interval and Timeout to API response (#10717) 2021-08-03 15:26:49 -07:00
10732.txt Add changelog 2021-07-30 09:58:11 -07:00
10735.txt ui: Add copy button for Secret ID in Tokens list page (#10735) 2021-07-30 13:52:37 -04:00
10757.txt cli: Use admin bind address in self_admin cluster (#10757) 2021-08-09 17:10:32 -07:00
10758.txt Fixup to support unix domain socket via command line (#10758) 2021-08-12 10:05:22 -07:00
10767.txt ui: Fix Health Checks in K/V form Lock Sessions Info section (#10767) 2021-08-04 12:41:41 -04:00
10768.txt telemetry: add a metric for agent TLS cert expiry 2021-08-04 13:51:44 -04:00
10769.txt ui: Add Vault as a Service External Source (#10769) 2021-08-04 18:22:43 -04:00
10795.txt cli: Test API access using /status/leader in consul watch (#10795) 2021-08-09 09:00:33 -07:00
10804.txt add changelog 2021-08-18 12:54:11 -04:00
10813.txt deps: upgrade gogo-protobuf to v1.3.2 (#10813) 2021-08-12 14:05:46 -04:00
10820.txt cli: Fix broken KV import on Windows (#10820) 2021-08-10 14:42:05 -07:00
10824.txt proxycfg: Lookup the agent token as a default 2021-08-12 15:51:34 -04:00
10835.txt ui: Create Routing Configurations route and page (#10835) 2021-08-16 12:04:04 -04:00
10838.txt grpc: ensure that streaming gRPC requests work over mesh gateway based wan federation (#10838) 2021-08-24 16:28:44 -05:00
10844.txt ci: make changelog-checker only validate PR number against main base (#10844) 2021-08-16 15:40:51 -04:00
10856.txt ci: upgrade to use Go 1.16.7 (#10856) 2021-08-16 12:21:16 -05:00
10858.txt ui: Hide all metrics for ingress gateway services (#10858) 2021-08-26 14:08:31 -04:00
10872.txt ui: Add support in Topology view for Routing Configurations (#10872) 2021-08-26 13:58:06 -04:00
10873.txt Add changelog entry 2021-08-20 17:40:33 -06:00
10901.txt ui: [BUGFIX] Properly encode non-URL safe characters in OIDC responses (#10901) 2021-08-24 16:58:45 +01:00
10902.txt ui: Disabling policy form fields from users with 'read' permissions (#10902) 2021-08-25 09:42:05 -04:00
10903.txt Add changelog; Add API package support for new fields. 2021-09-23 10:12:37 +01:00
10913.txt ui: [BUGFIX] Add missing `@` to fix missing non-subset Failovers (#10913) 2021-08-26 17:01:26 +01:00
10914.txt ui: Hide create buttons for policies/roles/namespaces with readonly access (#10914) 2021-09-27 17:20:44 +01:00
10916.txt ui: Always show main navigation Key/Value link (#10916) 2021-09-22 18:23:59 +01:00
10925.txt rpc: authorize raft requests (#10925) 2021-08-26 15:04:32 -07:00
10952.txt Revert early out errors in license API (#10952) 2021-08-31 10:36:35 -06:00
10961.txt connect: update envoy supported versions to latest patch release 2021-08-31 10:39:18 -06:00
10964.txt tls: consider presented intermediates during server connection tls handshake. (#10964) 2021-09-09 21:48:54 +02:00
10969.txt Add failures_before_warning to checks (#10969) 2021-09-14 12:47:52 -04:00
10987.txt xds: fix representation of incremental xDS subscriptions (#10987) 2021-09-21 09:58:56 -05:00
11026.txt sso/oidc: add support for acr_values request parameter (#11026) 2021-09-17 09:10:05 -07:00
11077.txt ui: Gracefully recover from non-existent DC errors (#11077) 2021-09-22 18:26:36 +01:00
11080.txt api: add partition field to acl structs (#11080) 2021-09-17 11:53:03 -05:00
11085.txt xds: ensure the active streams counters are 64 bit aligned on 32 bit systems (#11085) 2021-09-20 11:07:11 -05:00
11090.txt Add changelog entry 2021-09-20 12:52:19 -05:00
11095.txt ui: [BUGFIX] Re-enable namespace menus whilst editing intentions (#11095) 2021-09-22 10:21:20 +01:00
11099.txt grpc: strip local ACL tokens from RPCs during forwarding if crossing datacenters (#11099) 2021-09-22 13:14:26 -05:00
11107.txt Add changelog entry for audit logging header extraction improvement 2021-09-22 10:23:01 -04:00
11109.txt connect: Allow upstream listener escape hatch for prepared queries (#11109) 2021-09-22 15:27:10 -04:00
11115.txt add changelog entry 2021-09-22 10:57:36 -07:00
11117.txt ui: Make it hard to not URLEncode DataSource srcs/URIs (#11117) 2021-09-30 15:54:46 +01:00
11129.txt ui: Add initial partition support to intentions (#11129) 2021-09-24 17:31:58 +01:00
11130.txt ui: Remove info panel from the nspace menu when editing nspaces (#11130) 2021-09-24 18:05:22 +01:00
11136.txt Add changelog 2021-09-29 12:45:42 -04:00
11149.txt ui: Don't show the CRD menu for read-only intentions (#11149) 2021-09-27 17:19:32 +01:00
11163.txt Add Changelog 2021-10-19 20:58:28 +01:00
11188.txt ui: Adds initial CRUD for partitions (#11188) 2021-10-08 16:29:30 +01:00
11200.txt ui: Replaces almost all remaining instances of SASS variables with CSS (#11200) 2021-10-07 19:21:11 +01:00
11216.txt ui: Topology - Fix up Default Allow and Permissive Intentions notices (#11216) 2021-10-12 09:27:06 -04:00
11222.txt Add changelog, website and metric docs 2021-10-05 13:34:24 -05:00
11231.txt fix consul_autopilot_healthy metric emission (#11231) 2021-10-08 10:31:50 -07:00
11232.txt docs: add notice that legacy ACLs have been removed. 2021-10-05 18:30:22 -04:00
11237.txt ui: Fix up blocking reconciliation for multiple models (#11237) 2021-10-07 12:38:04 +01:00
11241.txt fix: only add prom autopilot gauges to servers (#11241) 2021-10-13 09:25:30 -07:00
11245.txt Update filter chain creation for sidecar/ingress listeners (#11245) 2021-11-09 14:43:51 -07:00
11255.txt tlsutil: only AuthorizerServerConn when VerifyIncomingRPC is true 2021-10-27 13:43:25 -04:00
11263.txt acl: fix bug in 'consul members' filtering with partitions (#11263) 2021-10-13 09:18:16 -05:00
11277.txt connect: Add support for Envoy 1.20 (#11277) 2021-10-27 18:38:10 -07:00
11280.txt ui: Topology view with no dependencies (#11280) 2021-11-05 13:46:41 -04:00
11293.txt added changelog 2021-10-20 16:02:14 +05:30
11298.txt ui: Move the Role remove dialog to use InformedAction (#11298) 2021-10-14 13:54:27 +01:00
11311.txt ui: Ensure we provide an id for filtering policy-tokens (#11311) 2021-10-26 19:00:32 +01:00
11318.txt Fix back compat issues with UDS config (#11318) 2021-10-28 13:31:10 -07:00
11323.txt acl: small OSS refactors to help ensure that auth methods with namespace rules work with partitions (#11323) 2021-10-14 15:38:05 -05:00
11348.txt added changelog 2021-10-27 02:33:36 +03:00
11364.txt ci: test against go1.17 2021-10-21 16:18:32 -04:00
11371.txt ui: Add Consul API Gateway as an external source (#11371) 2021-11-10 16:54:12 -05:00
11375.txt update raft to v1.3.2 (#11375) 2021-10-21 13:21:22 -04:00
11376.txt fix leadership transfer on leave suggestions (#11387) 2021-10-21 14:02:26 -04:00
11380.txt ui: Ensure dc selector correctly shows the currently selected dc (#11380) 2021-10-26 19:26:04 +01:00
11399.txt fix autopilot_failure_tolerance, add autopilot metrics test case (#11399) 2021-10-25 10:55:59 -07:00
11409.txt ui: Ensure we check intention service prefix permissions for per service (#11409) 2021-11-04 12:10:28 +00:00
11417.txt Add changelog entry (#11549) 2021-11-10 14:53:52 -05:00
11419.txt Support Check-And-Set deletion of config entries (#11419) 2021-11-01 16:42:01 +00:00
11428.txt add root_cert_ttl option for consul connect, vault ca providers (#11428) 2021-11-02 11:02:10 -07:00
11429.txt agent: refactor the agent delegate interface to be partition friendly (#11429) 2021-10-26 15:08:55 -05:00
11431.txt Add changelog entry 2021-10-27 09:02:10 -06:00
11433.txt Add changelog entry 2021-10-27 09:06:34 -06:00
11444.txt agent: for various /v1/agent endpoints parse the partition parameter on the request (#11444) 2021-10-28 16:44:38 -05:00
11446.txt cli: update consul members output to display partitions and sort the results usefully (#11446) 2021-10-28 17:27:31 -05:00
11449.txt plumb thru root cert tll to the aws ca provider (#11449) 2021-11-04 12:19:08 -07:00
11461.txt changelog 2021-11-01 22:47:20 +00:00
11472.txt ui: [Port] Ensure the tokens default nspace (and partition) is passed thru to the auth endpoint (#11490) 2021-11-11 12:02:29 +00:00
11474.txt ui: Fix code editor resizing and restyle (#11474) 2021-11-12 15:28:06 +00:00
11475.txt ui: Filter global intentions list by selected partition (#11475) 2021-11-09 17:38:24 +00:00
11477.txt Support Vault Namespaces explicitly in CA config (#11477) 2021-11-05 11:42:28 -05:00
11479.txt ui: When certain menus are selected reset either nspace/partition (#11479) 2021-11-17 15:59:26 +00:00
11480.txt command/redirect_traffic: Redirect DNS requests to Consul if -consul-dns-ip is passed in (#11480) 2021-11-10 09:10:48 -05:00
11491.txt Fixup changelog filename (#11501) 2021-11-09 09:32:27 -08:00
11495.txt segments: ensure that the serf_lan_allowed_cidrs applies to network segments (#11495) 2021-11-04 17:17:19 -05:00
11505.txt ui: Bump our browser support (#11505) 2021-11-11 13:37:49 +00:00
11514.txt Add changelog entry 2021-11-08 17:14:27 -07:00
11520.txt ui: Temporarily force all UI capabilities (#11520) 2021-11-10 11:05:27 +00:00
11522.txt xds: prefer fed state gateway definitions if they're fresher (#11522) 2021-11-09 16:45:36 +00:00
11541.txt Add changelog entry 2021-11-09 16:45:20 -07:00
11556.txt ui: Adding partitions + icons to upstreams/upstream instances (#11556) 2021-11-17 17:46:50 +00:00
11566.txt Add changelog entry 2021-11-12 14:45:58 -07:00
11573.txt connect: Support auth methods for the vault connect CA provider (#11573) 2021-11-18 13:15:28 -07:00
11577.txt ui: Notifications re-organization/re-style (#11577) 2021-11-24 18:14:07 +00:00
11578.txt ui: Fix brand coloring for inline-code plus docs (#11578) 2021-11-23 18:32:11 +00:00
11585.txt api: ensure new partition fields are omit empty for back compat (#11585) 2021-11-16 12:28:34 -06:00
11586.txt deps: update gopsutil to fix Windows ARM and macOS non-Apple LLVM builds (#11586) 2021-11-16 15:40:11 -05:00
11591.txt ui: Store the default partition when logging in (#11591) 2021-11-17 17:52:31 +00:00
11604.txt ui: Support for SSO with Admin Partitions (#11604) 2021-11-24 14:53:12 +00:00
11607.txt agent: purge service/check registration files for incorrect partitions on reload (#11607) 2021-11-18 14:44:20 -06:00
11640.txt ui: Add `Service.Namespace` variable to dashboard URL templates (#11640) 2021-11-25 10:47:07 +00:00
11654.txt ui: Add `Service.Partition` as available variable for dashboard urls (#11654) 2021-12-01 11:05:57 +00:00
11656.txt ui: Don't show policy datacenter selector for non-default partitions (#11656) 2021-12-01 11:05:15 +00:00
11665.txt Rename `master` and `agent_master` ACL tokens in the config file format (#11665) 2021-12-01 21:08:14 +00:00
11666.txt ui: Refactor KV and Lock Sessions following partitions update (#11666) 2021-12-01 11:33:33 +00:00
11669.txt Rename `agent_master` ACL token in the API and CLI (#11669) 2021-12-02 17:05:27 +00:00
11671.txt ca: fix stored CARoot representation with Vault provider 2021-12-02 12:42:49 -05:00
11672.txt ca: set the correct SigningKeyID after config update with Vault provider 2021-12-02 16:07:11 -05:00
11681.txt ui: Don't cache event sources following a 401 (#11681) 2021-12-01 13:24:52 +00:00
11693.txt add MustRevalidate flag to connect_ca_leaf cache type; always use on non-blocking queries (#11693) 2021-12-02 11:32:15 -08:00
11699.txt auto-config: ensure the feature works properly with partitions (#11699) 2021-12-01 13:32:34 -06:00
_619.txt Create _619.txt 2020-10-09 10:51:37 -04:00
_666.txt Add a paramter in state store methods to indicate whether a resource insertion is from a snapshot restoration (#9156) 2020-11-11 11:21:42 -05:00
_683.txt Add changelog entry for namespace licensing fix (#9203) 2020-11-16 15:45:55 -05:00
_745.txt Add changelog entry for change to the temporary client license duration (#9642) 2021-01-26 16:15:05 -05:00
_795.txt Add component name to entry 2021-04-14 19:41:04 -04:00
_855.txt Add changelog for enterprise change 2021-04-14 11:50:15 -04:00
_907.txt Add changelog entry for network area timeout updates (#10241) 2021-05-13 15:05:38 -06:00
_917.txt Add changelog 2021-05-20 12:57:15 -04:00
_923.txt changelog: add entry for network areas WAN config fix 2021-05-26 17:49:19 -04:00
_938.txt Add license inspect command documentation and changelog (#10351) 2021-06-04 14:33:13 -04:00
_987.md Create _987.md 2021-09-16 18:21:39 -04:00
_1085.txt Add changelog entry 2021-08-25 19:46:21 -06:00
_1093.txt Add changelog entry 2021-08-25 19:46:21 -06:00
_1200.txt add changelog entry for enterprise fix (#11226) 2021-10-05 14:44:53 -05:00
_1202.txt partitions: various refactors to support partitioning the serf LAN pool (#11568) 2021-11-15 09:51:14 -06:00
_1203.txt update changelog (#11262) 2021-10-12 16:31:56 -05:00
_1238.txt Add changelog entry 2021-11-11 16:09:00 -05:00
_1284.txt rename helper method to reflect the non-deprecated terminology (#11509) 2021-11-05 13:51:50 -05:00
_1292.txt add changelog entry (#11494) 2021-11-04 16:52:54 -05:00
_1300.txt update changelog (#11513) 2021-11-05 17:00:19 -05:00
_1321.txt changelog: entry for enterprise licensing bug fix (#11551) 2021-11-11 13:39:05 +00:00
_1328.txt changelog: entry for snapshot agent `license_path` bug (#11561) 2021-11-16 23:07:14 +00:00
_1330.txt changelog sync (#11565) 2021-11-12 16:10:36 -06:00
_1342.txt update changelog (#11575) 2021-11-16 15:21:20 -06:00
_1368.txt fix changelog file name (#11710) 2021-12-02 11:41:08 -05:00
_8621.txt Adds changelog entry for snapshot agent improvement (#8622) 2020-09-04 14:07:57 -06:00
_8825.txt Add streaming changelog file 2020-10-13 18:16:33 -04:00
_8984.txt changelog: update to hashicorp/sentinel@v0.16.0 in Enterprise (#8984) 2020-10-26 12:32:44 -04:00
_releases-111.txt changelog: add note about packaging EULA and ToE alongside Enterprise binaries 2021-06-16 16:58:08 -04:00
changelog.tmpl changelog: add notes section to changelog template 2021-06-16 16:58:11 -04:00
note.tmpl changelog: fixup note.tmpl syntax 2020-10-09 22:44:51 -04:00