27227c0fd2
add root_cert_ttl option for consul connect, vault ca providers ( #11428 )
...
* add root_cert_ttl option for consul connect, vault ca providers
Signed-off-by: FFMMM <FFMMM@users.noreply.github.com>
* Apply suggestions from code review
Co-authored-by: Chris S. Kim <ckim@hashicorp.com>
* add changelog, pr feedback
Signed-off-by: FFMMM <FFMMM@users.noreply.github.com>
* Update .changelog/11428.txt, more docs
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
* Update website/content/docs/agent/options.mdx
Co-authored-by: Kyle Havlovitz <kylehav@gmail.com>
Co-authored-by: Chris S. Kim <ckim@hashicorp.com>
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
Co-authored-by: Kyle Havlovitz <kylehav@gmail.com>
2021-11-02 11:02:10 -07:00
6dfcbeceec
Merge pull request #11348 from kbabuadze/fix-answers-alt-domain
...
Fix answers for alt domain
2021-10-29 17:09:20 -04:00
6e9dd995eb
tlsutil: only AuthorizerServerConn when VerifyIncomingRPC is true
...
See github.com/hashicorp/consul/issues/11207
When VerifyIncomingRPC is false the TLS conn will not have the required certificates.
2021-10-27 13:43:25 -04:00
d897a3e16e
describe how alt-domain works in docs
2021-10-26 12:38:13 -04:00
f24bad2a52
Merge pull request #11232 from hashicorp/dnephin/acl-legacy-remove-docs
...
acl: add docs and changelog for the removal of the legacy ACL system
2021-10-25 18:38:00 -04:00
1eaa53798c
Update docs for tls_cipher_suites ( #11070 )
2021-10-21 16:41:51 -04:00
fe09db6158
Merge pull request #11328 from radiantly/ui/feature/allow-${}-style-interpolation
...
ui: Allow ${ } interpolation for UI Dashboard template URLs
2021-10-20 08:59:02 -04:00
bdbc89456f
Single link
2021-10-20 00:25:28 +05:30
3c476b8fbc
Remove note
2021-10-19 23:22:12 +05:30
84b72fd182
Add changelog note and amend docs
2021-10-19 01:08:44 +05:30
79ba05b2a6
ui: Allow ${} interpolation for template URLs
2021-10-15 15:37:51 +05:30
59e893332c
Update docs: Mention grafana dashboard
2021-10-12 12:55:44 +05:30
2cd80e5f66
Merge pull request #11222 from hashicorp/clly/service-mesh-metrics
...
Start tracking connect service mesh usage metrics
2021-10-11 14:35:03 -05:00
51e498717f
docs: add notice that legacy ACLs have been removed.
...
Add changelog
Also remove a metric that is no longer emitted that was missed in a
previous step.
2021-10-05 18:30:22 -04:00
f9ba7c39b5
Add changelog, website and metric docs
...
Add changelog to document what changed.
Add entry to telemetry section of the website to document what changed
Add docs to the usagemetric endpoint to help document the metrics in code
2021-10-05 13:34:24 -05:00
da59ffd660
applied feedback, moved the Lifecycle info to the front
2021-09-30 11:41:37 -07:00
aff20b68d5
providing additional information about the Consul agent
2021-09-29 16:51:03 -07:00
33a5448604
Merge pull request #11136 from hashicorp/dnephin/acl-resolver-fix-default-authz
...
acl: fix default Authorizer for down_policy extend-cache/async-cache
2021-09-29 13:45:12 -04:00
afb1dd5827
Merge pull request #11110 from hashicorp/dnephin/acl-legacy-remove-initialize
...
acl: remove initializeLegacyACL and the rest of the legacy FSM commands
2021-09-29 13:44:30 -04:00
a9ac148c92
Merge pull request #10999 from hashicorp/dnephin/revert-config-xds-port
...
Revert config xds_port
2021-09-29 13:39:15 -04:00
2995ac61f2
acl: remove the last of the legacy FSM
...
Replace it with an implementation that returns an error, and rename some symbols
to use a Deprecated suffix to make it clear.
Also remove the ACLRequest struct, which is no longer referenced.
2021-09-29 12:42:23 -04:00
402d3792b6
Revert "Merge pull request #10588 from hashicorp/dnephin/config-fix-ports-grpc"
...
This reverts commit 74fb650b6b966588f8faeec26935a858af2b8bb5, reversing
changes made to 58bd8173364effb98b9fd9f9b98d31dd887a9bac.
2021-09-29 12:28:41 -04:00
d4c48a3f23
Merge pull request #11101 from hashicorp/dnephin/acl-legacy-remove-rpc-2
...
acl: remove legacy ACL.Apply RPC
2021-09-29 12:23:55 -04:00
4410f8eee5
Revert "Merge pull request #10618 from hashicorp/dnephin/docs-add-deprecation-version-grpc-port"
...
This reverts commit 81bb5f33ebb33d1084fcc50aab62950eb7ddebc8, reversing
changes made to 20feb42d3a663e72cb46cda6c08c0588f5bbf3b4.
2021-09-29 12:14:32 -04:00
a0e08086f7
Merge pull request #10988 from hashicorp/dnephin/acl-legacy-remove-config
...
acl: isolate deprecated config and warn when they are used
2021-09-29 11:40:14 -04:00
5d593e930b
Merge pull request #10702 from jkirschner-hashicorp/network-segments-docs-enhancements
...
Network segments docs enhancements
2021-09-28 10:24:05 -04:00
52ecd0d107
docs: clarify acl down policy
2021-09-23 18:13:39 -04:00
408eb0e08e
config: Deprecate EnableACLReplication
...
replaced by ACL.TokenReplication
2021-09-23 15:14:59 -04:00
3e6dc2a843
acl: remove ACL.Apply
...
As part of removing the legacy ACL system.
2021-09-22 18:28:08 -04:00
5e6828a117
Add new telemetry to website
...
This will add information about the new kv_usage metric to the website
2021-09-20 12:43:40 -05:00
e0527a503e
docs: improve network segments agent options docs
2021-09-15 10:00:41 -07:00
245ab6dbf4
docs: fixed identation of warning components
2021-08-30 07:12:30 -07:00
4558d51ba3
Apply suggestions from code review
...
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
2021-08-27 07:41:11 -07:00
8eab6b65b7
docs: added information about a conflict when using auto_config and auto_encrypt
2021-08-25 21:25:18 -07:00
ef11e8bc92
docs: Add common CA config options to provider doc pages ( #10842 )
...
Add the list of common Connect CA configuration options to the
provider-specific CA docs.
Previously these options were only documented under the agent
configuration options. This change makes it so that all supported CA
provider configuration options are available from a single location.
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
2021-08-19 11:18:55 -07:00
9ea02121b7
Update documentation for enable_key_list_policy
...
The current suggests the option expects a string of either "enabled" or "disabled" but this results in an error `'acl.enable_key_list_policy' expected type 'bool', got unconvertible type 'string', value: 'enabled'`. Setting to a boolean value resolves this, also had a quick look at the code (d2b58cd0d6/agent/config/runtime.go (L109)
2021-08-16 13:10:54 -07:00
db59597cac
docs: Update code blocks across website
...
* Use CodeTabs for examples in multiple formats.
* Ensure correct language on code fences.
* Use CodeBlockConfig for examples with filenames, or which need
highlighted content.
2021-08-11 13:20:03 -07:00
1673b3a68c
telemetry: add a metric for agent TLS cert expiry
2021-08-04 13:51:44 -04:00
d53db57558
Update options.mdx
...
add service config link to description of enable_central_service_config.
2021-08-03 15:36:51 -04:00
f97e843c61
Add OSS changes for specifying audit log permission mode
2021-07-30 09:58:11 -07:00
efad0234f4
Update website/content/docs/agent/options.mdx
...
Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>
2021-07-29 12:38:30 -04:00
7cf86dc2ab
docs: give better guidance about how to configure the agent TLS CA
2021-07-28 18:22:35 -04:00
441a6c9969
Add DNS recursor strategy option ( #10611 )
...
This change adds a new `dns_config.recursor_strategy` option which
controls how Consul queries DNS resolvers listed in the `recursors`
config option. The supported options are `sequential` (default), and
`random`.
Closes #8807
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: Priyanka Sengupta <psengupta@flatiron.com>
2021-07-19 15:22:51 -07:00
4d2bc76d62
docs: Fix spelling errors across website
2021-07-19 14:29:54 -07:00
4c78825f0c
Merge pull request #10617 from hashicorp/dnephin/config-add-missing-docs
...
docs: add config options that were missing
2021-07-15 11:23:32 -04:00
ce6846fba4
docs: add deprecation version for ports.grpc settings
2021-07-14 17:06:13 -04:00
152585f323
docs: add config options that were missing
...
https://github.com/hashicorp/consul/pull/128 added pid_file
https://github.com/hashicorp/consul/pull/1331 added disable_coordinates
2021-07-14 16:51:07 -04:00
57c5a40869
Merge pull request #10588 from hashicorp/dnephin/config-fix-ports-grpc
...
config: rename `ports.grpc` to `ports.xds`
2021-07-13 13:11:38 -04:00
ef6bc739a1
config: update config settings and flags for ports.xds
2021-07-13 12:31:48 -04:00
51c6fb4cb8
docs: move TLS example next to field reference
2021-07-12 13:08:02 -04:00
FFMMM