c95927a9a8
Fix some uuids and make it clear that the SecretID is used for agent tokens ( #4845 )
2018-10-24 09:47:55 -04:00
b816bee165
ACL documentation ( #4824 )
...
* Updating the ACL guide.
* Update the docs correctly
* Finish updating the ACL docs - for now.
2018-10-19 13:26:31 -07:00
a72f92cac6
dns: implements prefix lookups for DNS TTL ( #4605 )
...
This will fix https://github.com/hashicorp/consul/issues/4509 and allow forinstance lb-* to match services lb-001 or lb-service-007.
2018-10-19 08:41:04 -07:00
96a35f8abc
re-add Connect multi-dc config changes
...
This reverts commit 8bcfbaffb6588b024cd1a3cf0952e6bfa7d9e900.
2018-10-19 08:41:03 -07:00
847a0a5266
Revert "Connect multi-dc config" ( #4784 )
2018-10-11 17:32:45 +01:00
6c12a35834
Update creating-certificates.html.md ( #4780 )
...
In case `verify_server_hostname` is set in the configuration, Consul checks the certificate against `server.<datacenter>.<domain>`.
The name suggested by the guide generates errors like the following:
```
2018/10/10 12:42:20 [ERR] consul: Failed to confirm peer status for consul-3: rpc error getting client: failed to get conn: x509: certificate is valid for server.node.consul.labs, localhost, not server.consul.labs. Retrying in 16s...
```
Removing the `node` part from the certificate permits them to work also when that option is set.
2018-10-11 14:23:51 +02:00
260a9880ae
[Security] Add finer control over script checks ( #4715 )
...
* Add -enable-local-script-checks options
These options allow for a finer control over when script checks are enabled by
giving the option to only allow them when they are declared from the local
file system.
* Add documentation for the new option
* Nitpick doc wording
2018-10-11 13:22:11 +01:00
94332edf2e
[WIP] Initial draft of Sidecar Service and Managed Proxy deprecation docs ( #4752 )
...
* Initial draft of Sidecar Service and Managed Proxy deprecation docs
* Service definition deprecation notices and sidecar service
* gRPC and sidecar service config options; Deprecate managed proxy options
* Envoy Docs: Basic envoy command; envoy getting started/intro
* Remove change that snuck in
* Envoy custom config example
* Add agent/service API docs; deprecate proxy config endpoint
* Misc grep cleanup for managed proxies; capitalize Envoy
* Updates to getting started guide
* Add missing link
* Refactor Envoy guide into a separate guide and add bootstrap reference notes.
* Add limitations to Envoy docs; Highlight no fixes for known managed proxy issues on deprecation page; clarify snake cae stuff; Sidecar Service lifecycle
2018-10-11 10:44:42 +01:00
42f250fa53
Added SOA configuration for DNS settings. ( #4714 )
...
This will allow to fine TUNE SOA settings sent by Consul in DNS responses,
for instance to be able to control negative ttl.
Will fix: https://github.com/hashicorp/consul/issues/4713
# Example
Override all settings:
* min_ttl: 0 => 60s
* retry: 600 (10m) => 300s (5 minutes),
* expire: 86400 (24h) => 43200 (12h)
* refresh: 3600 (1h) => 1800 (30 minutes)
```
consul agent -dev -hcl 'dns_config={soa={min_ttl=60,retry=300,expire=43200,refresh=1800}}'
```
Result:
```
dig +multiline @localhost -p 8600 service.consul
; <<>> DiG 9.12.1 <<>> +multiline @localhost -p 8600 service.consul
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36557
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;service.consul. IN A
;; AUTHORITY SECTION:
consul. 0 IN SOA ns.consul. hostmaster.consul. (
1537959133 ; serial
1800 ; refresh (30 minutes)
300 ; retry (5 minutes)
43200 ; expire (12 hours)
60 ; minimum (1 minute)
)
;; Query time: 4 msec
;; SERVER: 127.0.0.1#8600(127.0.0.1)
;; WHEN: Wed Sep 26 12:52:13 CEST 2018
;; MSG SIZE rcvd: 93
```
2018-10-10 15:50:56 -04:00
5b98a602af
agent: add primary_datacenter and connect replication config options
2018-10-10 12:17:59 -07:00
475afd0300
docs: deprecate acl_datacenter and replace it with primary_datacenter
2018-10-10 12:16:47 -07:00
a10f1ce2df
Fix retry_join config documentation ( #4757 )
...
'retry_join': source data must be an array or slice, got string
2018-10-05 14:16:02 -04:00
851bf8c2eb
Update semaphore guide ( #4661 )
...
* Fill in gaps in semaphore guide
* Update to match that values come back b64 encoded
* Add that the value needs to be decoded
* Remove outdated reference to session1
* Fix some typos
* Clarify what is mean by a session having an active key
* Clarify requirements for lock holders in semaphore guide
2018-10-04 12:06:53 -10:00
2fac2d1439
Add Deployment Guide and update links ( #4487 )
...
* Adds Deployment Guide and update links
* Fixes releases link
* Re-organisation of content
* Cuts down "deployment" doc (which should focus on Reference Architecture) by moving raft and performance tuning to the Server Performance page which already covers some of this.
* Moves backups from "deployment" doc (which should focus on Reference Architecture) to "deployment-guide"
* Cleans up some notes and add single DC diagram
* Removes old link to deployment guide from nav
* Corrects minor styling, formatting, and grammar
2018-10-03 11:37:36 -10:00
61a5c965c9
Ensure that errors setting up the DNS servers get propagated back to the shell ( #4598 )
...
Fixes : #4578
Prior to this fix if there was an error binding to ports for the DNS servers the error would be swallowed by the gated log writer and never output. This fix propagates the DNS server errors back to the shell with a multierror.
2018-09-07 10:48:29 -04:00
36fa155675
Adds XL machine spec and notes on large deployments ( #4622 )
...
* Adds XL machine spec and notes on large deployments
* Clarifies machine sizes
* Fixes internal links within the document
* Moves datacenter size guidelines to "Single Datacenter" section
2018-08-31 10:41:48 -05:00
a1bd33da11
website: use 127.0.0.1 instead of consul.rocks ( #4523 )
...
By default, the Consul agent listens on the local interface
at port 8500 for API requests. This change makes the API examples
using `curl` copy-pasteable for this default configuration.
2018-08-28 09:07:15 -07:00
3d5d7ba6df
Update monitoring-telegraf.html.md
2018-08-24 16:48:02 +02:00
8f7e87439a
Fixes #4483 : Add support for Authorization: Bearer token Header ( #4502 )
...
Added Authorization Bearer token support as per RFC6750
* appended Authorization header token parsing after X-Consul-Token
* added test cases
* updated website documentation to mention Authorization header
* improve tests, improve Bearer parsing
2018-08-17 16:18:42 -04:00
0e987522d9
Clarify port usage for agents ( #4510 )
2018-08-14 16:10:01 -07:00
d3573d7c27
Consul Production Deployment Guide
...
Renames guide to "Production Deployment"
Adds link in sidebar menu.
Implements edits suggested by Consul engineering team.
2018-08-10 11:51:05 -07:00
c2c6765fc0
Remove all mention of Atlas, even in deprecated changelogs
2018-08-03 10:51:18 -07:00
2dea506400
a couple more corrections
2018-07-27 19:39:44 -04:00
60e1450606
fix a couple html errors ( #4456 )
2018-07-26 16:30:24 -07:00
056db5d697
Adds Monitoring with Telegraf guide ( #4227 )
...
* Installing Telegraf
* Configuring Telegraf
* Configuring Consul to send metrics to Telegraf
* Important metrics and aggregates
2018-07-23 16:46:43 -07:00
22c5951ec4
Merge pull request #4303 from pierresouchay/non_blocking_acl
...
Only send one single ACL cache refresh across network when TTL is over
2018-07-10 08:57:33 -04:00
6dfbbf1350
Updated documentation and adding more test case for async-cache
2018-07-01 23:50:30 +02:00
8ea69290ac
Updated ACL guide
2018-07-01 23:50:30 +02:00
6f22474661
Changes made :
...
1. Website
Changed some of the wordings and reorganized the content of the website.
2. Code:
Removed sleep and exit lines from the code.
2018-06-28 21:18:14 -04:00
dc72945380
Added guide for Windows Service
2018-06-26 18:23:55 -04:00
1da3c42867
Merge remote-tracking branch 'connect/f-connect'
2018-06-25 19:42:51 +00:00
e491abb134
Fix some doc typos.
2018-06-25 12:26:21 -07:00
48ef08c6a6
Add proxy config reference and Complete TODOs in production guide
2018-06-25 12:26:20 -07:00
e8fc5c2ad5
Fix relative links
2018-06-25 12:26:20 -07:00
8ae4ca5752
Link from getting started; note on incremental adoption
2018-06-25 12:26:20 -07:00
c5cdcd08aa
Connect production guide draft 1
2018-06-25 12:26:20 -07:00
37b11ca900
Initial draft of connect production guide
2018-06-25 12:26:20 -07:00
50e26d458c
Merge pull request #4150 from hashicorp/topfunky-patch-1
...
Minor clarification of server nodes
2018-06-20 10:55:45 -04:00
da12d8a88c
update encryption doc and add guide for creating certificates ( #4238 )
...
* update encryption doc and add guide for creating certificates in consul with cfssl
* add details about CLI and disabling HTTP
* delete $ symbols and add guide elements
* add missing periods and steps heading
2018-06-18 15:25:35 -04:00
cbf27d8c30
Put systemd-resolved in backticks
2018-06-05 10:38:42 -04:00
ac2bd6bb45
Mention that PTR queries get sent to all resolvers
2018-06-04 13:56:34 -04:00
7a0ca2456f
Update DNS forwarding docs to include how to use with systemd-resolved
2018-06-04 13:43:47 -04:00
a6df13c6a3
Minor clarification of server nodes
...
In **Node Removal** section, clarify that server nodes are being discussed.
2018-05-23 14:59:31 -07:00
f23c788b2a
Consul production deployment guide
2018-05-11 19:30:13 -07:00
e244a49af5
WIP Edits to Consul production deployment guide
2018-05-10 18:18:08 -07:00
045dfc8687
WIP Consul deployment guide
2018-05-10 17:47:44 -07:00
bf2b3f8d88
Merge pull request #3929 from sryabkov/patch-1
...
Highlighting the dead link in documentation
2018-03-19 16:00:32 -07:00
da7f8ab59d
website: clarify where ACL token is set in the UI
2018-03-14 16:50:04 -07:00
9a911bba0c
website: add section on securing the UI with ACLs
...
Figured it would be worth documenting due to #3931 .
2018-03-14 16:46:04 -07:00
e04a003d7a
Merge pull request #3884 from rberlind/master
...
Updated Stale Reads section of DNS Caching Guide
2018-03-13 16:56:58 -07:00
4e0d229191
Highlighting the dead link
...
I am proposing to remove a dead link (https://atlas.hashicorp.com/help/consul/alternatives ). If the page has moved and the new location is known, it would be of course better to update the link.
2018-03-02 18:22:19 -05:00
37e7e6e7a1
Notes on ACL token storage and permissions
2018-03-02 16:20:11 +00:00
89ede0539f
Fix a couple of minor typos found in docs.
2018-02-13 16:21:12 +00:00
25568c2f1d
Updated Stale Reads section of DNS Caching Guide
...
I updated the content based on discussion with James Phillips in #team-connect on 2/8/2018.
2018-02-12 11:26:10 -05:00
0f83e6840c
Clarification around locking ( #3853 )
2018-02-01 14:08:06 -06:00
62e471a5e8
Update external.html.md
2018-01-12 13:23:16 -08:00
e4325df8ad
Include a warning about the interaction between `translate_wan_addrs` and `bind_addr` in the Basic WAN guide.
2017-12-14 13:12:04 -08:00
df3a548a6c
Fix syntax error.
...
Running consul 1.0.0, 'consul operator raft' requires 'list-peers' rather than '-list-peers'
2017-11-20 20:17:20 -08:00
cd2c85a2ed
Update atlas.html.md
2017-11-02 14:16:47 -07:00
6f286dd9b8
Update autopilot documentation to mention correct Consul version that defaults raft protocol to 3.
2017-10-19 11:31:29 -05:00
cb41ae2428
Update sentinel.html.markdown.erb
2017-10-13 12:15:08 -07:00
f97ec6dc3b
Update dns forwarding documentation ( #3574 )
...
Add details about setting up macOS to point to consul for services without the headache of dnsmasq, bind, etc.
2017-10-12 14:25:57 -07:00
0f664d098f
doc: drop last references to -retry-join-* options
2017-10-04 19:12:28 +02:00
a855b69b54
Update ACL guide to describe the new list policy for Keys
2017-10-04 06:19:20 -05:00
dd2cb9f619
Fix grammar in containers guide.
2017-09-29 10:37:04 -05:00
429fc86479
Update containers guide to mention that Consul now handles nodes changing IP addresses.
2017-09-29 10:20:33 -05:00
acc32ccd2c
Update sentinel documentation to remove features that are coming in a future release
2017-09-28 21:00:00 -05:00
ccccba75be
Fix mispelled words
2017-09-27 11:20:01 -07:00
1040dbb2d4
Fix docs/guides/segements sidebar selection.
2017-09-19 16:45:39 -05:00
df742843a4
Adds documentation for Sentinel integration in Consul Enterprise.
2017-09-19 09:02:53 -05:00
402ebe53ef
Update outage.html.md
2017-09-06 21:19:46 -07:00
87eeec254f
Update segments.html.markdown.erb
2017-09-06 16:42:13 -07:00
bc9780baad
Adds simple rate limiting for client agent RPC calls to Consul servers. ( #3440 )
...
* Added rate limiting for agent RPC calls.
* Initializes the rate limiter based on the config.
* Adds the rate limiter into the snapshot RPC path.
* Adds unit tests for the RPC rate limiter.
* Groups the RPC limit parameters under "limits" in the config.
* Adds some documentation about the RPC limiter.
* Sends a 429 response when the rate limiter kicks in.
* Adds docs for new telemetry.
* Makes snapshot telemetry look like RPC telemetry and cleans up comments.
2017-09-01 15:02:50 -07:00
20fcfe866e
Tweaks network segments guide.
2017-09-01 11:19:39 -07:00
5605d735a1
Update segment docs
2017-08-31 17:39:57 -07:00
02c35fe0ba
Add doc sections for network segments
2017-08-31 11:19:08 -07:00
8a53f556f9
Added configuration instructions for forwarding DNS queries from Unbound to consul.
2017-08-18 08:45:43 -06:00
00a5eb9071
Add note about configuring recursors to be able to resolve external services.
2017-08-09 11:13:30 -05:00
31676bba76
Adds a note about not replicating data to FAQ and federation-related spots.
2017-08-04 16:14:39 -07:00
803ed9a245
Adds secure introduction for the ACL replication token. ( #3357 )
...
Adds secure introduction for the ACL replication token, as well as a separate enable config for ACL replication.
2017-08-03 15:39:31 -07:00
4c0c912a52
Fix incorrect punctuation
2017-08-03 16:40:22 -05:00
c31b56a03e
Adds a new /v1/acl/bootstrap API ( #3349 )
2017-08-02 17:05:18 -07:00
a708123164
Minor tweaks, fixed spacing issue with docker run examples
2017-08-01 16:38:34 -05:00
ff4009bed2
Address more review comments
2017-08-01 15:25:13 -05:00
bde197e161
Added links to new containers guide to navbar and index pages
2017-08-01 11:48:25 -05:00
b5fc169e2c
Added a section on configuration
2017-08-01 11:36:34 -05:00
ec52d0036a
More tweaks and grammar corrections
2017-08-01 11:13:24 -05:00
d152b31364
More review feedback
2017-08-01 10:38:43 -05:00
7ab4255231
Addressed review comments
2017-07-31 19:56:42 -05:00
a12cfe8918
Capitalize Consul and Docker throughout
2017-07-31 17:54:03 -05:00
e4de25367d
First pass at a consul containers guide
2017-07-31 17:19:15 -05:00
005c9ad12a
Update geo-failover.html.md
2017-07-26 16:42:35 -07:00
cafe110669
Update geo-failover.html.md
2017-07-26 15:44:17 -07:00
fe0f0285a9
Adds a geo failover guide using prepared queries. ( #3328 )
2017-07-26 15:40:01 -07:00
6e794ea1b3
Adds support for agent-side ACL token management via API instead of config files. ( #3324 )
...
* Adds token store and removes all runtime use of config for ACL tokens.
* Adds a new API for changing agent tokens on the fly.
2017-07-26 11:03:43 -07:00
31ac5c45e1
Tweaks title.
2017-07-18 14:48:38 -07:00
73ec6541f6
Add UpgradeVersionTag information to docs
2017-07-18 14:01:21 -07:00
30316a9a54
Update acl.html.md
2017-07-18 07:44:35 -07:00
8058f1b234
Improves structure of ACL guide.
2017-07-18 07:41:59 -07:00
52c69bbf17
Removes a merge conflict marker from the ACL guide.
2017-07-18 07:35:17 -07:00
1d8c78645d
Removed localhost from links ( #3289 )
...
Two links were still referring to localhost. Made them relative and tested.
2017-07-17 19:59:58 -07:00
788dd255a1
Adds new config to make script checks opt-in, updates documentation. ( #3284 )
2017-07-17 11:20:35 -07:00
838591c916
Changes remote exec KV read to call GetTokenForAgent(). ( #3283 )
...
* Changes remote exec KV read to call GetTokenForAgent(), which can use
the acl_agent_token instead of the acl_token.
Fixes #3160 .
* Fixes remote exec unit test with ACLs.
* Adds unhappy ACL path to unit tests for remote exec.
2017-07-16 21:12:16 -07:00
5876b81896
Adds node read privileges to the acl_agent_master_token. ( #3277 )
...
Fixes #3113 .
2017-07-16 20:08:26 -07:00
d63bf807a8
Update acl.html.md
2017-07-13 22:40:15 -07:00
8572931afe
Cleans up version 8 ACLs in the agent and the docs. ( #3248 )
...
* Moves magic check and service constants into shared structs package.
* Removes the "consul" service from local state.
Since this service is added by the leader, it doesn't really make sense to
also keep it in local state (which requires special ACLs to configure), and
requires a bunch of special cases in the local state logic. This requires
fewer special cases and makes ACL bootstrapping cleaner.
* Makes coordinate update ACL log message a warning, similar to other AE warnings.
* Adds much more detailed examples for bootstrapping ACLs.
This can hopefully replace https://gist.github.com/slackpad/d89ce0e1cc0802c3c4f2d84932fa3234 .
2017-07-13 22:33:47 -07:00
197394b156
Update autopilot.html.md
2017-07-07 14:38:35 -07:00
781b42e583
Update autopilot.html.md ( #3244 )
2017-07-07 14:34:59 -07:00
714f46f34b
add enterprise badge style alert boxes, change guides/areas.html.md to erb file
2017-06-04 01:30:21 -04:00
ec81c18006
agent: add RetryJoin support for Azure
...
Pull #2978 from leowmjw/develop
Resolves #2978
2017-05-24 10:15:38 +02:00
2391e8e98a
website: rename *.markdown to *.md
2017-05-17 20:25:45 +02:00
21d9d984fa
Adds prepared query API to ACLs table.
2017-05-08 21:37:52 -07:00
bf31ca68bf
Fixup ACL docs
2017-05-06 17:21:13 -07:00
a4f1f9ef40
DOCS: Minor clarification to address #2944
2017-05-05 11:56:12 -04:00
d567a9b53d
Adds support for new-style peers.json recovery for newer Raft protocol versions.
2017-05-04 14:15:59 -07:00
8831a8a4c7
Rearranged into alphabetical order
...
Swapped a couple of the guides around in the index page so that
they are in alphabetical order and match the navigation order.
2017-04-28 07:04:38 +01:00
c640ef11c4
add link to Consul Enterprise page
2017-04-26 22:45:12 +00:00
cb285879bf
Remove references to the deprecated Consul/Atlas integration
2017-04-26 22:24:24 +00:00
c30ac1c14d
Docs: fix typo ( #2951 )
2017-04-25 07:08:46 -07:00
90e3ef7b86
Updated autopilot guide to correct synax issue with example config
2017-04-19 17:15:12 +01:00
f09713f16c
Add a config example to autopilot guide
2017-04-18 14:40:20 -07:00
74444bca8e
ACL guide fixes
2017-04-17 17:59:03 -04:00
a24228d34a
Fixes broken link to network areas API.
2017-04-13 19:19:42 -07:00
a9d9c43110
Put back manual process steps
2017-04-13 15:20:02 -04:00
35f16d888f
Docs: update bootstrapping and config, fixes #2867
...
- Add various join options to bootstrapping guide
- Add note about Atlas deprecation to bootstrapping guide
- Add notes about -retry-join and retry_join to -join option
- Add notes about -retry-join and retry_join to start_join option
2017-04-13 13:03:26 -04:00
af1d22135a
[docs] Autopilot guide: clarify left status
2017-04-10 11:18:54 -07:00
5fa71eda84
Cleans up some typos in the ACL Guide.
2017-04-06 08:05:17 -07:00
9d2c13341b
update all links to enterprise to avoid redirect
2017-04-05 12:13:23 -07:00
3a81726023
Fixes a broken link.
2017-04-05 10:50:35 -07:00
ac6bf5dbf0
Cleans up some doc typos.
2017-04-05 10:40:30 -07:00
217d304619
Does a complete rework of the ACL guide.
2017-04-05 10:36:19 -07:00
686ddd8c83
Deprecates the ACLs internals doc in favor of a guide.
2017-04-04 18:56:42 -07:00
649cb4f385
Removes guide link for Atlas integration.
2017-04-04 18:55:09 -07:00
b3cd9acdae
Link to new api
2017-04-04 12:52:00 -04:00
b0bb01d5da
Update API docs
2017-04-04 12:33:35 -04:00
e9c53e6b89
Changes title to Server Read Scaling.
2017-04-03 12:51:00 -07:00
3dac92cc97
Adds top-level guide links that were missing.
2017-03-31 09:06:24 -07:00
75b8ff44e3
Capitalizes title.
2017-03-29 11:32:56 -07:00
44b6d36995
Adds which DC each command runs in and a DNS example to the areas guide.
2017-03-29 11:30:05 -07:00
15b60b07f0
Merge pull request #2840 from hashicorp/f-advanced-autopilot-guide
...
Add section on advanced autopilot features to the guide
2017-03-28 12:06:51 -07:00
bbaa3f29d5
Merge pull request #2839 from hashicorp/network-area-docs
...
Adds network area docs.
2017-03-28 11:57:57 -07:00
42c8907fa6
Adds network areas guide.
2017-03-28 11:56:55 -07:00
4f9a57cda3
Add section on advanced autopilot features to the guide
2017-03-28 11:56:21 -07:00
6cb9269fb5
Update autopilot.html.markdown
2017-03-28 09:54:36 +02:00
8163a480cb
docs: Point of clarifcation about cluster leadership for #2782
2017-03-23 13:00:23 -04:00
f5050cce58
Adjust autopilot sections based on feedback
2017-03-10 15:22:20 -08:00
3c6bece859
Add autopilot guide to the docs
2017-03-10 14:55:18 -08:00
a973ed9570
Merge pull request #2572 from hashicorp/jbs-2535
...
Notes about memory usage (helps with #2535 )
2017-02-02 09:08:58 -08:00
e148b1bb98
fixing typo in documentaion
2017-01-11 21:08:20 -08:00
398f4a04ef
Add a notice about deprecation of atlas features
2016-12-14 15:13:51 -05:00
Matt Keeler