James Phillips
bc9780baad
Adds simple rate limiting for client agent RPC calls to Consul servers. ( #3440 )
...
* Added rate limiting for agent RPC calls.
* Initializes the rate limiter based on the config.
* Adds the rate limiter into the snapshot RPC path.
* Adds unit tests for the RPC rate limiter.
* Groups the RPC limit parameters under "limits" in the config.
* Adds some documentation about the RPC limiter.
* Sends a 429 response when the rate limiter kicks in.
* Adds docs for new telemetry.
* Makes snapshot telemetry look like RPC telemetry and cleans up comments.
2017-09-01 15:02:50 -07:00
James Phillips
20fcfe866e
Tweaks network segments guide.
2017-09-01 11:19:39 -07:00
Kyle Havlovitz
334e082848
Merge pull request #3431 from hashicorp/network-segments-oss
2017-09-01 10:24:58 -07:00
Kyle Havlovitz
02c35fe0ba
Add doc sections for network segments
2017-08-31 11:19:08 -07:00
David Terry
5d891ba7e1
docs: add quotes around example invocation for google cloud retry join
2017-08-30 23:05:45 +02:00
Frank Schroeder
2190a4fb71
doc: document that retry-join values are URL encoded
...
Fixes #3417
2017-08-26 15:19:43 +02:00
Frank Schroeder
b7c3c8756d
doc: fix parameter name for aws retry-join
...
Fixes #3417
2017-08-26 15:19:34 +02:00
Frank Schroeder
0e246054ef
doc: document cloud auto-joining for retry-join-wan
2017-08-23 21:23:34 +02:00
Frank Schröder
fd4bf4070e
doc: retry_join is a string array ( #3388 )
2017-08-10 09:58:26 +02:00
James Phillips
48b1afeb26
Removes partial details in the retry_join config file section. ( #3386 )
2017-08-09 21:27:17 -07:00
Seth Vargo
b6f4df4b03
Document the new auto-join in the config and CLI ( #3381 )
...
* Document the new auto-join in the config and CLI
* Mention and example DNS
2017-08-09 21:14:56 -07:00
Kyle Havlovitz
160395d3c7
Add doc links for metrics endpoint
2017-08-08 13:05:38 -07:00
Kyle Havlovitz
975ded2714
Add support for labels/filters from go-metrics
2017-08-08 01:45:10 -07:00
Nicolae Vlădescu
8be48291da
Add a more elegant alternative to the reap option
...
Add a more elegant alternative to the reap option using the native built-in docker init process
2017-08-07 11:49:40 +03:00
James Phillips
cdd2c75df6
Fixes a bunch of borken list nesting in the options doc.
2017-08-03 17:13:22 -07:00
James Phillips
803ed9a245
Adds secure introduction for the ACL replication token. ( #3357 )
...
Adds secure introduction for the ACL replication token, as well as a separate enable config for ACL replication.
2017-08-03 15:39:31 -07:00
Frank Schroeder
d18141eb4b
doc: add retry-join docs for Softlayer
2017-08-03 21:35:30 +02:00
Frank Schroeder
68e8f3d0f7
agent: use github.com/hashicorp/go-discover
...
Replace the provider specific node discovery code
with go-discover to support AWS, Azure and GCE.
Fixes #3282
2017-08-01 11:41:43 +02:00
James Phillips
923119a7d8
Update options.html.md
2017-07-24 22:37:12 -07:00
James Phillips
2d1111479e
Clarifies endpoint blocking in the docs.
2017-07-19 17:14:19 -07:00
James Phillips
788dd255a1
Adds new config to make script checks opt-in, updates documentation. ( #3284 )
2017-07-17 11:20:35 -07:00
James Phillips
f7629a4f66
Fixes a broken link.
2017-07-17 00:07:34 -07:00
James Phillips
838591c916
Changes remote exec KV read to call GetTokenForAgent(). ( #3283 )
...
* Changes remote exec KV read to call GetTokenForAgent(), which can use
the acl_agent_token instead of the acl_token.
Fixes #3160 .
* Fixes remote exec unit test with ACLs.
* Adds unhappy ACL path to unit tests for remote exec.
2017-07-16 21:12:16 -07:00
James Phillips
5876b81896
Adds node read privileges to the acl_agent_master_token. ( #3277 )
...
Fixes #3113 .
2017-07-16 20:08:26 -07:00
Kyle Havlovitz
6ea05706a1
Add network area TLS setting to docs
2017-07-14 17:06:33 -07:00
James Phillips
a66d61622a
Adds a version note about block_endpoints config.
2017-07-10 13:56:02 -07:00
James Phillips
68991da95f
Adds the ability to blacklist specific HTTP endpoints. ( #3252 )
2017-07-10 13:51:25 -07:00
Brian Shumate
bb18ffab27
DOCS: Add note in Ports Used section ( #3241 )
...
- Add note about port 8302 to address #3058
2017-07-07 09:38:56 -07:00
Chris Griggs
38f92aa4e8
Update # of ports ( #3238 )
...
I counted twice.
2017-07-06 13:50:12 -07:00
Frank Schroeder
913748bcc4
Revert "agent: add allowStale option for HTTP API ( #3142 )"
...
This reverts commit 1e0fd27a74f5b18775ce91a84310430de35a4a80.
2017-06-27 07:04:55 +02:00
James Phillips
a8d90ccb2c
Adds missing tls_skip_verify option to HTTP check example.
2017-06-24 15:37:52 -07:00
James Phillips
884a82b61a
Update options.html.md
2017-06-24 15:28:23 -07:00
James Phillips
2184136284
Changes host-based node IDs from opt-out to opt-in. ( #3187 )
2017-06-24 09:36:53 -07:00
wojtkiewicz
f320bb9083
agent: add allowStale option for HTTP API ( #3142 )
...
This patch adds an "allowStale" option to the HTTP API
configuration which allows stale reads to provide linear
read scalability.
Fixes #3142
2017-06-22 10:31:13 +02:00
wojtkiewicz
26c8697a40
agent: add "http_config"
...
This patch adds an "http_config" object to the config file
and moves the "http_api_response_headers" option there.
"http_api_response_headers" is now deprecated in favor of
"http_config.response_headers"
2017-06-22 10:31:11 +02:00
Frank Schröder
04b636d1f4
agent: notify systemd after JoinLAN ( #2121 )
...
This patch adds support for notifying systemd via the
NOTIFY_SOCKET by sending 'READY=1' to the socket after
a successful JoinLAN.
Fixes #2121
2017-06-21 06:43:55 +02:00
Kyle Havlovitz
d52a0b2909
Update encryption.html.md
2017-06-16 12:54:25 -07:00
Kyle Havlovitz
5e45aec642
Add an option to disable keyring file ( #3145 )
...
Also disables keyring file in dev mode.
2017-06-15 15:24:04 -07:00
James Phillips
536915fa9a
Fixes version reference in encryption docs.
2017-06-07 21:31:48 -07:00
Frank Schröder
e206ab5cb6
agent: support custom header and method for http checks ( #3106 )
...
This patch adds support for custom headers and
method for HTTP checks.
Fixes #2474
Fixes #2657
Fixes #3106
2017-06-07 01:11:56 +02:00
Kyle Havlovitz
e196576c07
Add settings for upshifting to encrypted gossip ( #3079 )
2017-05-30 08:51:37 -07:00
Michael Leow
ec81c18006
agent: add RetryJoin support for Azure
...
Pull #2978 from leowmjw/develop
Resolves #2978
2017-05-24 10:15:38 +02:00
Frank Schroeder
2391e8e98a
website: rename *.markdown to *.md
2017-05-17 20:25:45 +02:00
Kyle Havlovitz
e4af6583f5
Add a path for transitioning to TLS on an existing cluster ( #3001 )
...
Fixes #1705
2017-05-10 14:25:48 -07:00
Brian Shumate
a1850b789d
DOCS: minor clarification to address #2950
2017-05-05 11:51:46 -04:00
Kyle Havlovitz
b5ed2ba536
Add separate option for verifying incoming HTTPS traffic ( #2974 )
...
* Add separate option for verifying incoming HTTPS traffic
2017-04-28 16:15:55 -07:00
rcgenova
63842b1e09
Merge pull request #2964 from hashicorp/d-remove-atlas-references
...
Remove references to the deprecated Consul/Atlas integration
2017-04-27 08:32:09 -07:00
Kyle Havlovitz
42cf797ad9
Add TLS cipher suite options and CA path support ( #2963 )
...
This patch adds options to configure the available
TLS cipher suites and adds support for a path
for multiple CA certificates.
Fixes #2959
2017-04-27 01:29:39 -07:00
Rob Genova
cb285879bf
Remove references to the deprecated Consul/Atlas integration
2017-04-26 22:24:24 +00:00
mckennajones
703bb52369
Updating documentation regarding webui flags
2017-04-17 17:29:14 -07:00
James Phillips
a55e074a33
Merge pull request #2910 from hashicorp/jbs-2867
...
Docs: update bootstrapping and config, fixes #2867
2017-04-13 12:26:27 -07:00
Brian Shumate
35f16d888f
Docs: update bootstrapping and config, fixes #2867
...
- Add various join options to bootstrapping guide
- Add note about Atlas deprecation to bootstrapping guide
- Add notes about -retry-join and retry_join to -join option
- Add notes about -retry-join and retry_join to start_join option
2017-04-13 13:03:26 -04:00
James Phillips
20bf47d2b4
Adds a new -disable-host-node-id option to help when testing with containers.
...
Fixes #2877 .
2017-04-12 22:07:18 -07:00
Cihat Genc
13037fc139
Fix wrong option name in options.html.markdown
2017-04-11 14:58:15 +02:00
James Phillips
8967fad448
Removed RPC link from the sidebar.
2017-04-05 11:51:52 -07:00
James Phillips
217d304619
Does a complete rework of the ACL guide.
2017-04-05 10:36:19 -07:00
James Phillips
686ddd8c83
Deprecates the ACLs internals doc in favor of a guide.
2017-04-04 18:56:42 -07:00
Seth Vargo
b3cd9acdae
Link to new api
2017-04-04 12:52:00 -04:00
Seth Vargo
b0bb01d5da
Update API docs
2017-04-04 12:33:35 -04:00
James Phillips
10fc02d362
Merge pull request #2862 from wjimenez5271/wjimenez5271-docs
...
clarify when acl_default_policy takes effect
2017-03-31 08:49:23 -07:00
Brian Shumate
ca68cdb572
docs: Configuration precedence clarification, fixes #1203
2017-03-30 14:13:50 -04:00
James Phillips
c7f7e969d7
Merge pull request #2854 from hashicorp/remote-exec
...
Changes `disable_remote_exec` default to true so remote exec is opt-in.
2017-03-30 10:29:09 -07:00
Kyle Havlovitz
a2058d23ef
Add CLI/API endpoints for removing peer by ID
2017-03-30 10:13:32 -07:00
James Phillips
ac90110396
Changes `disable_remote_exec` default to true so remote exec is opt-in.
2017-03-30 09:43:32 -07:00
James Phillips
4259ecd8bc
Disables agent-level enforcement on Consul agents unless acl_datacenter is set.
2017-03-29 12:24:42 -07:00
Kyle Havlovitz
15b60b07f0
Merge pull request #2840 from hashicorp/f-advanced-autopilot-guide
...
Add section on advanced autopilot features to the guide
2017-03-28 12:06:51 -07:00
Kyle Havlovitz
4f9a57cda3
Add section on advanced autopilot features to the guide
2017-03-28 11:56:21 -07:00
James Phillips
36aface2e2
Adds network area CLI documentation.
2017-03-28 10:31:56 -07:00
James Phillips
12e20ddfa9
Adds basic operator area HTTP documentation.
2017-03-28 01:09:20 -07:00
James Phillips
086912d800
Breaks the operator HTTP doc into sections.
2017-03-27 23:28:08 -07:00
VEBER Arnaud
d4a7e75246
docs(agent/options): remove atlas_endpoint dup
2017-03-25 13:25:54 +01:00
James Phillips
7c2509f407
Adds node metadata to the reload list.
2017-03-24 10:29:39 -07:00
James Phillips
7be075f1f1
Adds a note about the deprecated RPC ports.
2017-03-24 10:23:45 -07:00
James Phillips
16a9f6d671
Modifies server reconcile path to not use the server's token for internal operations.
2017-03-23 13:34:30 -07:00
Kyle Havlovitz
37ea20cb44
Add advanced autopilot features
2017-03-22 15:25:16 -07:00
James Phillips
82b6fbd844
Adds router into RPC paths with work in progress on coordinates.
2017-03-16 16:42:18 -07:00
Kyle Havlovitz
006c6b93b3
Merge pull request #2802 from hashicorp/f-autopilot-improvements
...
Fix an issue with changing server ID when re-joining
2017-03-15 20:26:16 -07:00
Kyle Havlovitz
bc0494e396
Reorganized cluster health check loop and logic
2017-03-15 18:27:17 -07:00
Kyle Havlovitz
c40279e012
Fix an issue with changing server IDs and add a few UX enhancements around autopilot features
2017-03-15 16:09:55 -07:00
Nic Jackson
414ac8bf7b
Updated documentation to add information that bootstrap overrides server mode
2017-03-14 17:56:33 -07:00
Kyle Havlovitz
3c6bece859
Add autopilot guide to the docs
2017-03-10 14:55:18 -08:00
Kyle Havlovitz
4807215fa1
Merge pull request #2788 from hashicorp/f-autopilot-2
...
Autopilot server health monitoring
2017-03-10 12:29:45 -08:00
Kyle Havlovitz
8130f9b1c1
Cleaned up and reorganized some autopilot-related code
2017-03-09 18:21:40 -08:00
James Phillips
0cb637927c
Adds back the RPC page with a deprecation notice.
...
Fixes #2794 .
2017-03-09 11:09:11 -08:00
James Phillips
61ea6faf6c
Fixes a typo in the snapshot docs.
2017-03-08 19:49:07 -08:00
Kyle Havlovitz
0606133b75
Merge branch 'master' into f-autopilot-2
2017-03-06 16:02:19 -08:00
Kyle Havlovitz
8bcab6c6d7
Add autopilot server health tracking
...
This adds two goroutines to perform autopilot tasks on the leader - one
to monitor the health of servers and another to periodically clean up
dead servers with a limit on removal count. Also adds a new http endpoint,
`/v1/operator/autopilot/health`, for querying this information through an
operator RPC endpoint.
2017-03-06 16:00:10 -08:00
Sean Chittenden
c6feba6ab7
Revert "Change `ClientAddr` to default to `BindAddr` when not present."
2017-03-06 13:32:43 -08:00
Sean Chittenden
17ccae59f4
Note the default value prior to 0.8 for `-client` was `127.0.0.1`.
2017-03-06 12:26:35 -08:00
Sean Chittenden
e1ced1de30
Change `ClientAddr` to default to `BindAddr` when not present.
...
With this change, it is now possible to only specify the `-bind` or
`bind_addr` attributes and get a functioning consul agent.
2017-03-04 20:52:52 -08:00
James Phillips
233795704c
Moves raft_protocol config out into its own top-level item.
2017-03-04 09:20:23 -08:00
James Phillips
aba567273e
Merge pull request #2690 from zeroae/f-simple-rfc2782
...
RFC 2782 support with optional .service tag
2017-03-02 14:49:36 -08:00
Kyle Havlovitz
44f0b08db7
Merge pull request #2771 from hashicorp/f-autopilot
...
Autopilot dead server cleanup, config, and raft version compatibility
2017-02-28 15:04:16 -08:00
Kyle Havlovitz
23c492a74e
Rename DeadServerCleanup and make wording adjustments
2017-02-28 14:45:21 -08:00
Kyle Havlovitz
3b67c50c1d
Remove the RPC client interface and update docs
2017-02-28 13:41:09 -08:00
Kyle Havlovitz
f7b6d776f4
Add cli docs and minor test/comment tweaks
2017-02-24 16:55:44 -08:00
Kyle Havlovitz
7d514a7ef6
Add docs and api client methods for autopilot config
2017-02-23 21:00:15 -08:00
Kyle Havlovitz
af1bc4fa27
Add config section to docs for autopilot
2017-02-22 13:11:01 -08:00
Ellery Addington-White
17b9f3346d
Adds missing double quote
2017-02-16 13:38:55 -08:00
James Phillips
b88a7eee95
Adds clarifying note about the wakeup jitter.
...
Closes #2727 .
2017-02-09 20:28:38 -08:00
James Phillips
723391b22d
Removes broken WriteRequest ACL reference for catalog endpoints.
...
Fixes #1034 .
2017-02-07 19:02:18 -08:00
Andrey Upadyshev
f2b5a6439c
Fix `acquire` parameter nesting
2017-02-03 00:20:35 +01:00
Kyle Havlovitz
4fc3bd3abf
Added -relay-factor param to keyring operations
2017-02-01 21:53:29 -05:00
Kyle Havlovitz
f48cd78bc5
Merge pull request #2699 from hashicorp/f-tls-min-version
...
Add TLSMinVersion to config options
2017-02-01 16:31:53 -05:00
Kyle Havlovitz
086975ac0a
Add TLSMinVersion to config options
2017-02-01 16:20:33 -05:00
James Phillips
d593771d3c
Merge pull request #2692 from Toady00/patch-1
...
Specify PUT for agent maintenance endpoint
2017-02-01 06:58:20 -08:00
James Phillips
cbaf7ee81e
Merge pull request #2666 from hashicorp/sethvargo-patch-1
...
Say which ec2 perms to use
2017-02-01 06:57:07 -08:00
Brandon Dennis
fe8e7238e5
Specify PUT for agent maintenance endpoint
...
Through most of the documentation if the method isn't specified it should be a `GET` request, but here it should be a `PUT`.
2017-01-31 16:00:27 -05:00
Patrick Sodré
5b68178dc1
Simple RFC 2782 support with optional .service tag
...
Add support for SRV queries of names matching:
_<service>._<protocol>.[.service][.datacenter]<.domain>
2017-01-30 19:46:02 -05:00
Andrey Upadyshev
0523eaf1f3
Fix missing query parameters formatting in HTTP API documentation
2017-01-25 14:34:56 +01:00
Kyle Havlovitz
cc271aa436
Merge branch 'master' into f-prepared-query-nodemeta
2017-01-23 20:17:48 -05:00
Kyle Havlovitz
3cd054e81f
Add tests for node meta in prepared queries and update docs
2017-01-23 19:17:30 -05:00
Seth Vargo
222ade1f84
Say which ec2 perms to use
2017-01-20 17:13:28 -05:00
James Phillips
2e67edb2f2
Fixes a paste-o in the docs.
2017-01-18 16:02:04 -08:00
James Phillips
55cd1d975c
Adds catalog support for node IDs.
2017-01-18 14:26:42 -08:00
James Phillips
96bff003b7
Adds basic support for node IDs.
2017-01-17 22:47:59 -08:00
Mikhail Zholobov
d54630ed79
website: Fix nesting for "raft_multiplier" option
2017-01-17 14:59:18 +02:00
Kyle Havlovitz
9080006a37
Add support for multiple metadata filters to remaining endpoints
...
Enabled multiple meta filters for /v1/catalog/nodes and /v1/catalog/services
2017-01-13 20:49:13 -05:00
Kyle Havlovitz
e37f25dc02
Add node metadata filtering to remaining health/catalog endpoints
2017-01-13 20:08:43 -05:00
Kyle Havlovitz
2139dbb029
Merge branch 'master' into f-gce-discovery
2017-01-11 22:57:07 -05:00
Kyle Havlovitz
84b157eade
Condense gce discovery logging a bit
2017-01-11 22:37:22 -05:00
Kyle Havlovitz
821735d175
Merge pull request #2643 from hashicorp/f-node-metadata
...
Node metadata
2017-01-11 20:29:24 -05:00
Kyle Havlovitz
15f008b3e3
Update client api and docs for node metadata
2017-01-11 19:28:58 -05:00
Kyle Havlovitz
561d6c71e0
Update website docs for node metadata
2017-01-11 17:52:31 -05:00
Brian Shumate
f81d8c0754
DOCS: update environment variables
...
- Move environment variables to section of CLI page
- Remove environment variables page
- Remove environment variables nagivation menu entry
2017-01-09 12:02:06 -05:00
Brian Shumate
d5bdc4c98b
DOCS: update environment variables page
...
- Relocate Environment Variables page to Agent section
- Correct front matter newlines issue
2017-01-06 09:42:49 -05:00
James Phillips
5647e37ef2
Merge pull request #2611 from amiryal/patch-1
...
Correct heading level in encryption documentation
2017-01-05 12:13:13 -08:00
Ruslan Sennov
e81502babb
update `/v1/agent/service/register` endpoint doc
2016-12-26 23:32:20 +03:00
Amir Yalon
58ee61c3c7
Correct heading level in encryption documentation
...
The ‘RPC Encryption’ heading is semantically at the same level as ‘Gossip Encryption’.
2016-12-22 10:51:20 +02:00
James Phillips
fe07574220
Fixes a typo in the agent options docs.
2016-12-14 21:03:16 -08:00
James Phillips
b617e54ff0
Merge pull request #2594 from hashicorp/acl-complete
...
Adds complete ACL support for /v1/agent endpoints.
2016-12-14 20:49:00 -08:00
Kyle Havlovitz
398f4a04ef
Add a notice about deprecation of atlas features
2016-12-14 15:13:51 -05:00
James Phillips
927aa3789a
Adds ACL management support to the agent.
2016-12-14 07:07:41 -08:00
James Phillips
67f1fe8d0b
Adds support for a new "acl_agent_token" which is used for internal
...
catalog operations.
2016-12-12 14:52:27 -08:00
Chris Marchesi
1b4e26d005
command/agent: Google Compute Engine host discovery
...
This commit adds several command-line and config options that facilitate
host discovery through Google Compute Engine (GCE), much like the
recently added EC2 host discovery options. This should assist with
bootstrapping and joining servers within GCE when non-static addresses
are used, such as when using managed instance groups.
Documentation has also been added. It should be noted that if running
from within a GCE instance, the only option that should be necessary is
-retry-join-gce-tag-value.
2016-12-06 17:46:40 -08:00
James Phillips
eb07e77c1c
Adds an opt-in for new ACL policies and features coming in Consul 0.8.
2016-12-06 11:06:14 -08:00
James Phillips
c5ca72c5a5
Fixes broken link in options doc.
2016-12-05 18:53:51 -08:00
Mike Zupan
492d39fbb3
Needs to be moved
...
This took 2 hours from my life. The near has to be inside a service and not in the main block.
2016-12-01 22:47:02 -08:00
William Lord
67a84e0e20
Update snapshot.html.markdown
2016-12-01 10:11:35 +00:00
James Phillips
bd5adea5ba
Merge pull request #2555 from hashicorp/pr-2497-slackpad
...
Updates Circonus library and adds support for custom display name and tags.
2016-11-30 21:42:01 -08:00
James Phillips
7d67346f42
Changes Consul version number for new Circonus options.
2016-11-30 21:35:54 -08:00
Kyle Havlovitz
dd05afb32e
Add reload/leave http endpoints ( #2516 )
2016-11-30 13:29:42 -05:00
James Phillips
ee16675eda
Merge pull request #2532 from jamtur01/docspass
...
Documentation pass
2016-11-29 15:15:04 -08:00
James Phillips
f4f96c180d
Update dns.html.markdown
2016-11-29 15:01:38 -08:00
Kyle Havlovitz
d91854f3b0
Add monitor http endpoint
2016-11-28 18:36:26 -05:00
James Turnbull
edd5739e90
Final dc pass
2016-11-25 13:29:55 -05:00
James Turnbull
25566a292b
Removed two space after period exceptions
2016-11-25 13:25:09 -05:00
James Turnbull
39364aa937
Another catch
2016-11-25 13:14:09 -05:00
James Turnbull
38be465b7d
And a handful more
2016-11-25 12:39:08 -05:00
James Turnbull
51bc365377
More consistency
2016-11-25 12:34:07 -05:00