luxolus/open-consul
2
0
Fork 0
Code Issues 1 Pull requests Packages Releases Wiki Activity
13734 commits 1 branch 1 tag 358 MiB
Commit graph

3421 commits

Author SHA1 Message Date
Luke Kysow 3ee1ba1e4b
Reword redirect docs for clarity (#9504) 2021-01-07 11:40:59 -08:00
Luke Kysow 72db0cc6d3
Document CRDs and kube namespaces (#9502) 
* Document CRDs and kube namespaces
 2021-01-07 11:22:06 -08:00
Luke Kysow edc947d7ff
Merge pull request #9516 from hashicorp/lkysow/config-entry-sidebar 
Use full names for cfg entries in sidebar
 2021-01-07 11:21:18 -08:00
Luke Kysow 936d12b1b9
Merge pull request #9416 from hashicorp/luke-component-crd 
Document Kube CRDs alongside config entry docs
 2021-01-07 11:20:46 -08:00
Luke Kysow 63834e1237
Add note about code duplication 2021-01-07 11:15:11 -08:00
Jeff Escalante 01430e68f0
update start script, remove extra tabs code 2021-01-07 14:05:00 -05:00
Jeff Escalante 7962f4d983
update to latest deps 2021-01-07 14:00:43 -05:00
Luke Kysow 0a7d2d0ff9
Use nested tabs for gateway examples 2021-01-06 16:45:35 -08:00
Luke Kysow 8b1f88ef70
Use full names for cfg entries in sidebar 2021-01-06 11:01:01 -08:00
Joel Watson f68bf30c06 docs: add note about TMPDIR for snapshots 2021-01-06 12:56:40 -06:00
Luke Kysow 92415d9c0c
Clean up JS for ConfigEntryReference component 2021-01-06 10:33:52 -08:00
Kim Ngo 4130e195a4
Update NIA discuss link to new tag (#9500) 2021-01-05 12:06:09 -06:00
Luke Kysow 76e72de6d3
Document Kube CRDs alongside config entry docs 
* Adds a new react component `ConfigEntryReference` that allows us to
document config entries for both HCL and Kubernetes CRDs.
* Rewrites config entry docs to use new component
* Add CRD examples alongside HCL examples
* Removes examples from Kube CRD doc because the examples are now in the
main CRD docs
 2021-01-05 09:40:43 -08:00
Michael Montgomery a1748aa2cb Merge branch 'master' into 6074-allow-config-MaxHeaderBytes 2020-12-30 14:14:05 -06:00
Michael Montgomery 519f537b8b Fixed failing tests 
Removed use of `NewTestAgent`, per review comment
Removed CLI flag, per review comment
Updated website documentation
Added changelog entry
 2020-12-30 14:09:50 -06:00
Iryna Shustava b5498642d0
Update Helm reference docs (#9463) 2020-12-23 11:42:36 -08:00
David Yu 2a2f8c7394
Update with 0.28 (#9450) 2020-12-21 13:24:33 -08:00
Ashwin Venkatesh 45bfa8101d
Merge pull request #9431 from hashicorp/gen-docs2 
Ensure type shown for maps in k8s docs
 2020-12-18 15:07:14 -05:00
Nitya Dhanushkodi 21d3b29f93
Update helm docs for external client agents. (#9429) 2020-12-18 09:18:17 -08:00
Blake Covarrubias 8fc383c28e docs: Remove beta tag for 1.8 and 1.9 features 
Remove beta tag for 1.8 and 1.9 features which are now GA.
 2020-12-17 16:51:35 -08:00
Luke Kysow 41020f73bd
Ensure type shown for maps in k8s docs 2020-12-17 16:27:02 -08:00
Luke Kysow 4d6dc1fd8f
Use generated helm docs (#9324) 2020-12-17 10:47:54 -08:00
Jeff Escalante 8a816e0b8e
add markdown page component 2020-12-16 16:55:27 -05:00
Jeff Escalante 0f1075470d
update deps, restore search 2020-12-16 16:55:27 -05:00
Jeff Escalante fe3902c906
maintenance complete, pending markdown-page component addition 2020-12-16 16:55:23 -05:00
Kim Ngo 048d9b3ece
nia/docs 0.1.0-techpreview2 (#9405) 
Co-authored-by: Lorna Song <lorna@hashicorp.com>
 2020-12-16 14:47:15 -06:00
R.B. Boyer 3bf8849d14
update comment to correctly reflect type of data in the oidc auth method config (#9364) 2020-12-15 16:25:31 -06:00
Daniel Nephin 462a2b29c3
Merge pull request #9262 from hashicorp/dnephin/docs-deprecate-old-filters 
docs: deprecate some old filter parameters
 2020-12-15 17:11:41 -05:00
kaitlincarter-hc 86a1fc425f
Rotate Learn tutorials (#9404) 
* update Learn tutorials on landing page

* add Vault image
 2020-12-15 12:25:11 -08:00
Tenpo 8265277092
update example for tag_name (#9226) 
* update example for tag_name

In the example for azure the "tag_name" field is wrong cause say "tag_key" and not "tag_name"

* change tag_key by tag_name in the description of azure
 2020-12-15 15:09:16 -05:00
Derek Strickland 8f1cb4f7f9
Fixed mesh gateway config instructions (#9396) 
Added missing words to mesh gateway config instructions, and corrected punctuation a paragraph above. Please review for technical accuracy.
 2020-12-15 14:07:53 -05:00
R.B. Boyer eae9df241d
docs: call out intentions upgrade issue for 1.9.0+ (#9386) 2020-12-14 09:57:02 -06:00
Maksym e21d66aa59
fix 'agent/check/pass/my-check-id' curl example in documentation (#9372) 2020-12-11 13:23:05 +01:00
kaitlincarter-hc 212c9fc684
Filter API Docs (#9202) 
* reorganize for clarity and update for value syntax

* fix quotes around value

* Apply suggestions from code review

Co-authored-by: Blake Covarrubias <blake@covarrubi.as>

* Apply suggestions from code review

Co-authored-by: Freddy <freddygv@users.noreply.github.com>

Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
 2020-12-09 15:03:44 -08:00
Noel Quiles 1a0eaa00f6
[Website] Update alert banner (#9361) 
* Update alert banner

* Update expiration date for banner
 2020-12-09 16:13:55 -05:00
Kenia 8bda36c9f4
Create consul version metric with version label (#9350) 
* create consul version metric with version label

* agent/agent.go: add pre-release Version as well as label

Co-Authored-By: Radha13 <kumari.radha3@gmail.com>

* verion and pre-release version labels.

* hyphen/- breaks prometheus

* Add Prometheus gauge defintion for version metric

* Add new metric to telemetry docs

Co-authored-by: Radha Kumari <kumari.radha3@gmail.com>
Co-authored-by: Aestek <thib.gilles@gmail.com>
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
 2020-12-09 09:16:53 -05:00
Sabeen Syed 3be60d9e4e
Update the NIA integration program diagram (#9349) 2020-12-08 18:03:39 -06:00
Blake Covarrubias 04db17186b docs: Fix broken URLs in Helm docs 
- Fix anchors for client.extraEnvironmentVars and
server.extraEnvironmentVars.
- Change extraEnvironmentVars data type to `map`.
- Fix external link to kubernetes.io under
connectInject.namespaceSelector.
 2020-12-08 11:13:29 -08:00
Max G f727023b18 docs: reword lack of additional required files 2020-12-05 16:47:41 -08:00
Mike Morris 24130f4f09
Merge pull request #9273 from hashicorp/merge/release-1.9.0 
merge: release/1.9.0
 2020-12-02 17:34:10 -05:00
Seth Hoenig e32cd6b55c
docs: fix mispelling in connect upstream docs (#9297) 2020-11-30 08:26:08 -08:00
Rob Taylor 32e4a18e70
Fix typo in explanation of connect command (#9295) 
Change `Connect Connect` to `Consul Connect, which is consistent with the command output as shown on this page.
 2020-11-30 09:54:59 -06:00
Hans Hasselberg 8c5c6e77ec
fix serf_wan documentation (#9289) 
WAN config is different than LAN config, source of truth is
f72d2042a8/config.go (L315-L326)
and now the docs are correct.
 2020-11-27 20:49:43 +01:00
David Yu ab7f767445
Bump supported chart to 0.27.0 for Consul 1.9 (#9279) 
* Bump supported chart to 0.27.0 for Consul 1.9
 2020-11-25 16:33:21 -08:00
Mike Morris 67a11e4d16 Merge pull request #9270 from hashicorp/release/1.9.0 
merge: release/1.9.0 back into 1.9.x
 2020-11-24 17:36:47 -05:00
David Yu 856a6fbdc1
Consul 1.9 GA Banner (#9272) 2020-11-24 13:40:14 -08:00
David Yu 790e30259b
docs: adding Consul 1.9.x to compat matrix and link to Envoy compat matrix (#9263) 
* Adding Consul 1.9.x to compat matrix and link to Envoy compat matrix

Adding 1.9.x and link to Envoy compat matrix
 2020-11-24 10:49:53 -08:00
Daniel Nephin 685cb158cf docs: deprecate some old filter parameters 
The filtering can be done with the general purpose `filter` query parameter.
 2020-11-23 18:23:58 -05:00
Kit Patella 669783f965
Merge pull request #9261 from hashicorp/telemetry/fix-missing-and-stale-docs-2 
Telemetry/fix missing and stale docs
 2020-11-23 13:34:19 -08:00
Hans Hasselberg 25f9e232af add missing descriptions for metrics 2020-11-23 22:06:30 +01:00
Daniel Nephin 7d7cffb613 docs: mark streaming as experimental 2020-11-23 15:59:47 -05:00
Kit Patella 7a8844ccce add entries for missing fsm operations and mark duplicated metrics prefixes as deprecated 2020-11-23 12:42:51 -08:00
Sabeen Syed 64733d8a89
Update NIA architecture image (#9180) 2020-11-23 01:47:58 -06:00
Kit Patella 3ea27d75e4
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs 
Telemetry/fix missing and stale docs
 2020-11-20 12:54:29 -08:00
freddygv dbbc08e9af Update latest version 2020-11-19 16:45:54 -07:00
Kit Patella 4ad076207e add telemetry and definition help entries for missing catalog and acl metrics 2020-11-19 13:29:44 -08:00
R.B. Boyer 7bcbc59dea
command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint (#9229) 
Fixes #9215
 2020-11-19 15:27:31 -06:00
Kit Patella 46205bbf27 remove stale entries and rename/define acl.resolveToken 2020-11-19 13:06:28 -08:00
Freddy e4e306210a
Require operator:write to get Connect CA config (#9240) 
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.

--

This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
 2020-11-19 10:14:48 -07:00
Kit Patella c5af73c4f1
Merge pull request #9091 from scellef/correct-upgrade-guide 
Correcting text on when default was changed in Consul
 2020-11-18 16:54:48 -08:00
Nitya Dhanushkodi 866628b6e8
Add docs for envoyExtraArgs (#9206) 2020-11-18 15:40:39 -08:00
Matt Keeler 4bca029be9
Refactor to call non-voting servers read replicas (#9191) 
Co-authored-by: Kit Patella <kit@jepsen.io>
 2020-11-17 10:53:57 -05:00
Matt Keeler a7d945e7b9
[docs] Change links to the DNS information to the right place (#8675) 
The redirects were working in many situations but some (INTERNALS.md) was not. This just flips everything over to using the real link.
 2020-11-17 10:03:00 -05:00
Luke Kysow 292058c569
Docs for upgrading to CRDs (#9176) 
* Add Upgrading to CRDs docs
 2020-11-13 15:19:21 -08:00
Kent 'picat' Gruber 4ffa3e66d9
Merge pull request #9106 from hashicorp/security-model-docs-revamp 
Revamp Security Model Documentation
 2020-11-13 17:30:24 -05:00
Mike Morris 4902e42ca4 Merge pull request #9155 from hashicorp/release/1.9.0-beta3 
merge: 1.9.0-beta3
 2020-11-13 16:45:50 -05:00
Iryna Shustava 41dddba967
docs: add link to the OpenShift platform guide to k8s docs (#9177) 2020-11-12 15:06:25 -08:00
Kyle Schochenmaier 2504ddc9f1
Docs: for consul-k8s health checks (#8819) 
* docs for consul-k8s health checks

Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
 2020-11-12 16:55:44 -06:00
Nitya Dhanushkodi 1bd1f44bf2
Update compatibility matrix 
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
 2020-11-12 14:43:33 -08:00
R.B. Boyer a5bd1ba323
agent: return the default ACL policy to callers as a header (#9101) 
Header is: X-Consul-Default-ACL-Policy=<allow|deny>

This is of particular utility when fetching matching intentions, as the
fallthrough for a request that doesn't match any intentions is to
enforce using the default acl policy.
 2020-11-12 10:38:32 -06:00
Paul Banks 990134371b
Update ui-visualization.mdx 2020-11-12 15:52:24 +00:00
Matt Keeler 58f98db227
Add a CLI command for retrieving the autopilot configuration. (#9142) 2020-11-11 13:19:02 -05:00
Joel Watson 4b9034b976
Merge pull request #9098 from hashicorp/watsonian/kv-size-breakdown 
Add detailed key size breakdown to snapshot inspect
 2020-11-11 11:34:45 -06:00
Joel Watson 1dd5362620 docs: add warning in 0.9.0 upgrade notes 2020-11-11 09:23:43 -05:00
Joel Watson a88177fbf9 Missed a spot with old params in docs 2020-11-10 11:22:45 -06:00
Joel Watson aa21a32ca5 Rename params to better reflect their purpose 2020-11-10 10:44:09 -06:00
Joel Watson 4298a0f7e1 Make docs for params clearer 2020-11-10 10:35:24 -06:00
Matt Keeler 114521af25
Add some autopilot docs and update the changelog (#9139) 2020-11-09 14:14:19 -05:00
Matt Keeler 755fb72994
Switch to using the external autopilot module 2020-11-09 09:22:11 -05:00
Mike Morris 9ccb340893
chore: upgrade to gopsutil/v3 (#9118) 
* deps: update golang.org/x/sys

* deps: update imports to gopsutil/v3

* chore: make update-vendor
 2020-11-06 20:48:38 -05:00
Mike Morris 4ac5e4638c
website: update callout to 1.9.0-beta2 (#9131) 2020-11-06 20:39:25 -05:00
Kent 'picat' Gruber aa46893717 Adjust the ACLs requirement section wording and add link to ACL docs 
It's better to avoid the ambiguous Vault statement that was not clarified and drop the loaded "roles" term in favor of "capabilities" since the ACL system is described as capability-based in previous ACL documentation.
 2020-11-06 16:25:21 -05:00
Paul Banks 1757ed6326
UI Metrics documentation (#9048) 
* UI Metrics documentation

* Update website/pages/docs/connect/observability/ui-visualization.mdx

* Fix some review comments

* Fix review comments

* Apply suggestions from code review

Co-authored-by: R.B. Boyer <rb@hashicorp.com>

Co-authored-by: R.B. Boyer <rb@hashicorp.com>
 2020-11-06 20:32:28 +00:00
Kent 'picat' Gruber 7d692f0b13 Use the EnterpriseAlert inline widget 2020-11-06 10:47:22 -05:00
Kent 'picat' Gruber 9e1054097b Add mention of auto_encrypt to mTLS requirements 2020-11-06 10:15:26 -05:00
Kent 'picat' Gruber c3aa90fe27 Fix sublist format for client agent threats 2020-11-05 16:41:15 -05:00
Kent 'picat' Gruber e0735f6fe0 Add link to the keygen command 2020-11-05 16:34:32 -05:00
Kent 'picat' Gruber 0fa4a13233 Use short link to keyring command 2020-11-05 16:33:04 -05:00
Kent 'picat' Gruber 8e1b9cb177 Add link to default_policy with code format to ACLs requirement section 2020-11-05 16:30:00 -05:00
Kent 'picat' Gruber 845cd6d1da Cleanup verify_server_hostname mTLS requirement 2020-11-05 16:27:23 -05:00
Kent 'picat' Gruber 99906ad09d Add extra clarification around verify_incoming_https for localhost 
In many cases access to localhost is restricted to trusted/privellged actors only
 2020-11-05 16:20:41 -05:00
Kent 'picat' Gruber f2c124702c Fix inline links + format in mTLS requirements section 2020-11-05 16:09:07 -05:00
Kent 'picat' Gruber e39c20c715 Capitalize enterprise and add link to enerprise docs 2020-11-05 16:03:14 -05:00
Kent 'picat' Gruber 6688fc7e5c Soften language by replacing utilize with use 2020-11-05 15:59:53 -05:00
Kim Ngo 43f3a42a11
Fix NIA doc links (#9110) 
fix config link and anchor
 2020-11-05 13:35:57 -06:00
Jimmy Merritello eda072a280
Bump HSM version (#9102) 2020-11-05 11:48:12 -06:00
Joel Watson 4ae01f349a Update docs with new flags 2020-11-05 10:31:36 -06:00
Kent 'picat' Gruber 2c62e82143 Actually fix spelling of recommendations 
I obviously have no idea how to spell this word
 2020-11-05 11:13:14 -05:00
Kent 'picat' Gruber ef4c2f40d7 Fix spelling of recomendations 
Thank you @rboyer!
 2020-11-04 17:44:51 -05:00
Kent 'picat' Gruber 9f802dffc2 Revamp security model documentation 2020-11-04 17:05:44 -05:00