luxolus
/
open-consul
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity

Fix "fail open" wording 

"fail open" implies that we just allow anything if an agent gets partitioned which is not the right meaning!
This commit is contained in:
Paul Banks 2018-06-08 12:26:27 +01:00 committed by Jack Pearkes
parent 86200f2d03
commit 57595dae2a
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
website/source/docs/connect/intentions.html.md
View File

@ -153,6 +153,8 @@ Updates to intentions are propagated nearly instantly to agents since agents
maintain a continuous blocking query in the background for intention updates
for registered services.
Because all the intention data is cached locally, the agents can fail open.
Because all the intention data is cached locally, the agents can fail static.
Even if the agents are severed completely from the Consul servers, inbound
connection authorization continues to work for a configured amount of time.
Changes to intentions will not be picked up until the partition heals, but
will then automatically take effect when connectivity is restored.