From f0e9076b8b2390a324847add67f725aee4b6a08b Mon Sep 17 00:00:00 2001 From: Mitchell Hashimoto Date: Thu, 7 Jun 2018 08:24:28 -0700 Subject: [PATCH] website: clarify namespaces, conflict --- website/source/docs/connect/intentions.html.md | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/website/source/docs/connect/intentions.html.md b/website/source/docs/connect/intentions.html.md index cac91194b..4c27c1704 100644 --- a/website/source/docs/connect/intentions.html.md +++ b/website/source/docs/connect/intentions.html.md @@ -99,9 +99,16 @@ Precedence cannot be manually overridden today. This is a feature that will be added in a later version of Consul. In the case the two precedence values match, Consul will evaluate -intentions based on lexographical ordering of the destination name. For -example, an intention with destination "bravo" will be applied before -"charlie" if the precedence number matches. +intentions based on lexographical ordering of the destination then +source name. In practice, this is a moot point since authorizing a connection +has an exact source and destination value so its impossible for two +valid non-wildcard intentions to match. + +The numbers in the table above are not stable. Their ordering will remain +fixed but the actual number values may change in the future. +The numbers are non-contiguous because there are +some unused values in the middle in preparation for a future version of +Consul supporting namespaces. ## Intention Management Permissions