1a0eaa00f6
[Website] Update alert banner ( #9361 )
...
* Update alert banner
* Update expiration date for banner
2020-12-09 16:13:55 -05:00
8bda36c9f4
Create consul version metric with version label ( #9350 )
...
* create consul version metric with version label
* agent/agent.go: add pre-release Version as well as label
Co-Authored-By: Radha13 <kumari.radha3@gmail.com>
* verion and pre-release version labels.
* hyphen/- breaks prometheus
* Add Prometheus gauge defintion for version metric
* Add new metric to telemetry docs
Co-authored-by: Radha Kumari <kumari.radha3@gmail.com>
Co-authored-by: Aestek <thib.gilles@gmail.com>
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
2020-12-09 09:16:53 -05:00
3be60d9e4e
Update the NIA integration program diagram ( #9349 )
2020-12-08 18:03:39 -06:00
04db17186b
docs: Fix broken URLs in Helm docs
...
- Fix anchors for client.extraEnvironmentVars and
server.extraEnvironmentVars.
- Change extraEnvironmentVars data type to `map`.
- Fix external link to kubernetes.io under
connectInject.namespaceSelector.
2020-12-08 11:13:29 -08:00
f727023b18
docs: reword lack of additional required files
2020-12-05 16:47:41 -08:00
24130f4f09
Merge pull request #9273 from hashicorp/merge/release-1.9.0
...
merge: release/1.9.0
2020-12-02 17:34:10 -05:00
e32cd6b55c
docs: fix mispelling in connect upstream docs ( #9297 )
2020-11-30 08:26:08 -08:00
32e4a18e70
Fix typo in explanation of connect command ( #9295 )
...
Change `Connect Connect` to `Consul Connect, which is consistent with the command output as shown on this page.
2020-11-30 09:54:59 -06:00
8c5c6e77ec
fix serf_wan documentation ( #9289 )
...
WAN config is different than LAN config, source of truth is
f72d2042a8/config.go (L315-L326)
2020-11-27 20:49:43 +01:00
ab7f767445
Bump supported chart to 0.27.0 for Consul 1.9 ( #9279 )
...
* Bump supported chart to 0.27.0 for Consul 1.9
2020-11-25 16:33:21 -08:00
67a11e4d16
Merge pull request #9270 from hashicorp/release/1.9.0
...
merge: release/1.9.0 back into 1.9.x
2020-11-24 17:36:47 -05:00
856a6fbdc1
Consul 1.9 GA Banner ( #9272 )
2020-11-24 13:40:14 -08:00
790e30259b
docs: adding Consul 1.9.x to compat matrix and link to Envoy compat matrix ( #9263 )
...
* Adding Consul 1.9.x to compat matrix and link to Envoy compat matrix
Adding 1.9.x and link to Envoy compat matrix
2020-11-24 10:49:53 -08:00
685cb158cf
docs: deprecate some old filter parameters
...
The filtering can be done with the general purpose `filter` query parameter.
2020-11-23 18:23:58 -05:00
669783f965
Merge pull request #9261 from hashicorp/telemetry/fix-missing-and-stale-docs-2
...
Telemetry/fix missing and stale docs
2020-11-23 13:34:19 -08:00
25f9e232af
add missing descriptions for metrics
2020-11-23 22:06:30 +01:00
7d7cffb613
docs: mark streaming as experimental
2020-11-23 15:59:47 -05:00
7a8844ccce
add entries for missing fsm operations and mark duplicated metrics prefixes as deprecated
2020-11-23 12:42:51 -08:00
64733d8a89
Update NIA architecture image ( #9180 )
2020-11-23 01:47:58 -06:00
3ea27d75e4
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs
...
Telemetry/fix missing and stale docs
2020-11-20 12:54:29 -08:00
dbbc08e9af
Update latest version
2020-11-19 16:45:54 -07:00
4ad076207e
add telemetry and definition help entries for missing catalog and acl metrics
2020-11-19 13:29:44 -08:00
7bcbc59dea
command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint ( #9229 )
...
Fixes #9215
2020-11-19 15:27:31 -06:00
46205bbf27
remove stale entries and rename/define acl.resolveToken
2020-11-19 13:06:28 -08:00
e4e306210a
Require operator:write to get Connect CA config ( #9240 )
...
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.
--
This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
2020-11-19 10:14:48 -07:00
c5af73c4f1
Merge pull request #9091 from scellef/correct-upgrade-guide
...
Correcting text on when default was changed in Consul
2020-11-18 16:54:48 -08:00
866628b6e8
Add docs for envoyExtraArgs ( #9206 )
2020-11-18 15:40:39 -08:00
4bca029be9
Refactor to call non-voting servers read replicas ( #9191 )
...
Co-authored-by: Kit Patella <kit@jepsen.io>
2020-11-17 10:53:57 -05:00
a7d945e7b9
[docs] Change links to the DNS information to the right place ( #8675 )
...
The redirects were working in many situations but some (INTERNALS.md) was not. This just flips everything over to using the real link.
2020-11-17 10:03:00 -05:00
292058c569
Docs for upgrading to CRDs ( #9176 )
...
* Add Upgrading to CRDs docs
2020-11-13 15:19:21 -08:00
4ffa3e66d9
Merge pull request #9106 from hashicorp/security-model-docs-revamp
...
Revamp Security Model Documentation
2020-11-13 17:30:24 -05:00
4902e42ca4
Merge pull request #9155 from hashicorp/release/1.9.0-beta3
...
merge: 1.9.0-beta3
2020-11-13 16:45:50 -05:00
41dddba967
docs: add link to the OpenShift platform guide to k8s docs ( #9177 )
2020-11-12 15:06:25 -08:00
2504ddc9f1
Docs: for consul-k8s health checks ( #8819 )
...
* docs for consul-k8s health checks
Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2020-11-12 16:55:44 -06:00
1bd1f44bf2
Update compatibility matrix
...
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
2020-11-12 14:43:33 -08:00
a5bd1ba323
agent: return the default ACL policy to callers as a header ( #9101 )
...
Header is: X-Consul-Default-ACL-Policy=<allow|deny>
This is of particular utility when fetching matching intentions, as the
fallthrough for a request that doesn't match any intentions is to
enforce using the default acl policy.
2020-11-12 10:38:32 -06:00
990134371b
Update ui-visualization.mdx
2020-11-12 15:52:24 +00:00
58f98db227
Add a CLI command for retrieving the autopilot configuration. ( #9142 )
2020-11-11 13:19:02 -05:00
4b9034b976
Merge pull request #9098 from hashicorp/watsonian/kv-size-breakdown
...
Add detailed key size breakdown to snapshot inspect
2020-11-11 11:34:45 -06:00
1dd5362620
docs: add warning in 0.9.0 upgrade notes
2020-11-11 09:23:43 -05:00
a88177fbf9
Missed a spot with old params in docs
2020-11-10 11:22:45 -06:00
aa21a32ca5
Rename params to better reflect their purpose
2020-11-10 10:44:09 -06:00
4298a0f7e1
Make docs for params clearer
2020-11-10 10:35:24 -06:00
114521af25
Add some autopilot docs and update the changelog ( #9139 )
2020-11-09 14:14:19 -05:00
755fb72994
Switch to using the external autopilot module
2020-11-09 09:22:11 -05:00
9ccb340893
chore: upgrade to gopsutil/v3 ( #9118 )
...
* deps: update golang.org/x/sys
* deps: update imports to gopsutil/v3
* chore: make update-vendor
2020-11-06 20:48:38 -05:00
4ac5e4638c
website: update callout to 1.9.0-beta2 ( #9131 )
2020-11-06 20:39:25 -05:00
aa46893717
Adjust the ACLs requirement section wording and add link to ACL docs
...
It's better to avoid the ambiguous Vault statement that was not clarified and drop the loaded "roles" term in favor of "capabilities" since the ACL system is described as capability-based in previous ACL documentation.
2020-11-06 16:25:21 -05:00
1757ed6326
UI Metrics documentation ( #9048 )
...
* UI Metrics documentation
* Update website/pages/docs/connect/observability/ui-visualization.mdx
* Fix some review comments
* Fix review comments
* Apply suggestions from code review
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
2020-11-06 20:32:28 +00:00
7d692f0b13
Use the EnterpriseAlert inline widget
2020-11-06 10:47:22 -05:00
9e1054097b
Add mention of auto_encrypt to mTLS requirements
2020-11-06 10:15:26 -05:00
c3aa90fe27
Fix sublist format for client agent threats
2020-11-05 16:41:15 -05:00
e0735f6fe0
Add link to the keygen command
2020-11-05 16:34:32 -05:00
0fa4a13233
Use short link to keyring command
2020-11-05 16:33:04 -05:00
8e1b9cb177
Add link to default_policy with code format to ACLs requirement section
2020-11-05 16:30:00 -05:00
845cd6d1da
Cleanup verify_server_hostname mTLS requirement
2020-11-05 16:27:23 -05:00
99906ad09d
Add extra clarification around verify_incoming_https for localhost
...
In many cases access to localhost is restricted to trusted/privellged actors only
2020-11-05 16:20:41 -05:00
f2c124702c
Fix inline links + format in mTLS requirements section
2020-11-05 16:09:07 -05:00
e39c20c715
Capitalize enterprise and add link to enerprise docs
2020-11-05 16:03:14 -05:00
6688fc7e5c
Soften language by replacing utilize with use
2020-11-05 15:59:53 -05:00
43f3a42a11
Fix NIA doc links ( #9110 )
...
fix config link and anchor
2020-11-05 13:35:57 -06:00
eda072a280
Bump HSM version ( #9102 )
2020-11-05 11:48:12 -06:00
4ae01f349a
Update docs with new flags
2020-11-05 10:31:36 -06:00
2c62e82143
Actually fix spelling of recommendations
...
I obviously have no idea how to spell this word
2020-11-05 11:13:14 -05:00
ef4c2f40d7
Fix spelling of recomendations
...
Thank you @rboyer!
2020-11-04 17:44:51 -05:00
9f802dffc2
Revamp security model documentation
2020-11-04 17:05:44 -05:00
7180f9e114
Correcting text on when default was changed in Consul
2020-11-02 15:10:34 -08:00
d6652b0bc9
use hashicorp docker mirror to prevent rate limit ( #9070 )
2020-10-30 17:59:13 -04:00
ee3eb03f50
cli: Add JSON and Pretty Print formatting for `consul snapshot inspect` ( #9006 )
2020-10-29 11:31:14 -05:00
1b0efbfd27
docs: Add links in CTS docs for the community to get involved ( #9060 )
2020-10-29 10:07:20 -05:00
cfe0ffde15
Merge pull request #9026 from hashicorp/dnephin/streaming-without-cache-query-param
...
streaming: rename config and remove requirement for cache=1
2020-10-28 12:33:25 -04:00
aaca3610ff
docs: Add the new metrics to telemetry.mdx
2020-10-27 16:49:50 -04:00
7589b0f265
Merge pull request #9021 from hashicorp/pruett.alertbanner-exp
...
Expose `expirationDate` prop in <AlertBanner/>
2020-10-26 16:08:23 -04:00
593946449e
website: update version.js ( #9034 )
2020-10-26 10:58:25 -04:00
bb4d43ae50
NIA: add Terraform version compatibility ( #9023 )
2020-10-26 09:46:34 -05:00
1dcbfd17c3
health: change the name of UseStreamingBackend config
...
Remove it from the cache section, and update the docs.
2020-10-23 17:47:01 -04:00
895110ef11
Expose `expirationDate` prop in <AlertBanner/>
2020-10-23 11:19:41 -04:00
728b025d5d
Update managed-deprecated.mdx ( #9016 )
...
fix typo / spell checker replacing w/ wrong word
2020-10-23 10:54:16 -04:00
2183842f0e
connect: add support for envoy 1.16.0, drop support for 1.12.x, and bump point releases as well ( #8944 )
...
Supported versions will be: "1.16.0", "1.15.2", "1.14.5", "1.13.6"
2020-10-22 13:46:19 -05:00
e65934a549
NIA: document daemon exiting on task errors ( #8985 )
2020-10-22 13:22:55 -05:00
00f4ac9f6c
Add extraEnvironmentVars and client.affinity to Helm values ( #8997 )
...
Document client.extraEnvironmentVars, server.extraEnvironmentVars, and
client.affinity Helm chart values.
Remove deprecated connectInject.imageEnvoy and meshGateway.imageEnvoy
values.
2020-10-21 23:28:39 -07:00
e4f72840ab
docs: Remove sentence about pluggable CAs
...
Consul's Connect CA documentation mentions future releases will
support a pluggable CA system. This sentence has existed in the docs
for over two years, however there are currently no plans to develop
this feature on the near-term roadmap.
This commit removes this sentence to avoid giving the impression that
this feature will be available in an upcoming release.
2020-10-20 11:51:22 -07:00
d7bff12ebb
Merge pull request #8959 from hashicorp/docs-update-api-cli
...
Update docs-navigation.js
2020-10-20 11:45:33 -04:00
aabd0130a9
Update links ( #8949 )
2020-10-19 14:38:10 -05:00
cc520e13fa
Add A10 and Checkpoint TF modules ( #8950 )
2020-10-15 16:11:09 -05:00
b4897cca6e
Update to CRD docs ( #8956 )
...
* Update to CRD docs
* Update website/pages/docs/k8s/crds.mdx
* Modify proxy default and service default protocols
Carry over from previous PR that I forgot to submit a review/suggestion to, TCP and HTTP are not valid protocols for Proxy Defaults and Service Defaults
kubectl apply -f sdefault.yml
Error from server: error when creating "sdefault.yml": admission webhook "mutate-servicedefaults.consul.hashicorp.com" denied the request: servicedefaults.consul.hashicorp.com "your-service-name" is invalid: spec.expose.paths[0].protocol: Invalid value: "tcp": must be one of "http", "http2"
kubectl apply -f sdefault.yml
Error from server: error when creating "sdefault.yml": admission webhook "mutate-servicedefaults.consul.hashicorp.com" denied the request: servicedefaults.consul.hashicorp.com "your-service-name" is invalid: spec.expose.paths[0].protocol: Invalid value: "tcp": must be one of "http", "http2"
Co-authored-by: David Yu <dyu@hashicorp.com>
2020-10-15 10:35:26 -07:00
718380cebe
Update HSM version w/ Waypoint ( #8971 )
2020-10-15 12:07:33 -05:00
1acfa2ede7
Update banner for Consul 1.9
2020-10-14 16:31:58 -07:00
5825f5f6be
truncate jepsen.mdx log for length
2020-10-14 13:13:38 -07:00
7ccba40ebb
[Website] Bump HSM version ( #8957 )
...
* Bump HSM version
* New pkg
2020-10-14 13:25:16 -05:00
63280ae289
Update docs-navigation.js
...
Added links for API and CLI docs to sidebar
2020-10-14 14:12:50 -04:00
7093b2ea43
docs: all intention documentation updates ( #8869 )
2020-10-14 10:23:05 -05:00
e7cc973c7c
Merge pull request #8920 from hashicorp/crd-docs
...
CRD Docs
2020-10-14 09:42:45 -05:00
1d5fc07248
CRD docs
2020-10-13 17:00:24 -07:00
4cdb2ca066
Recommend using vault token auto-renew in 1.8.5 ( #8945 )
2020-10-13 16:18:19 -07:00
2a2670ea39
Add files via upload
...
updating logo grid image
2020-10-13 15:16:34 -07:00
d1402b5386
Merge pull request #8943 from hashicorp/vault-renew-docs
...
docs: Add a note about auto-renewing the Vault token
2020-10-13 14:36:44 -07:00
6ebfd29658
website: add v1.9.0-beta1 download callout ( #8939 )
2020-10-13 17:33:49 -04:00
37f95e6e79
docs: Add a note about auto-renewing the Vault token
2020-10-13 14:25:42 -07:00
25956c58dd
Add ui metrics config docs ( #8921 )
...
* Add ui metrics docs
* Update website/pages/docs/agent/options.mdx
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
2020-10-13 22:11:12 +01:00
Noel Quiles