R.B. Boyer
cdc5e99184
xds: remove deprecated usages of xDS ( #9602 )
...
Note that this does NOT upgrade to xDS v3. That will come in a future PR.
Additionally:
- Ignored staticcheck warnings about how github.com/golang/protobuf is deprecated.
- Shuffled some agent/xds imports in advance of a later xDS v3 upgrade.
- Remove support for envoy 1.13.x but don't add in 1.17.x yet. We have to wait until the xDS v3 support is added in a follow-up PR.
Fixes #8425
2021-02-22 15:00:15 -06:00
kaitlincarter-hc
49eeb12b15
fix typo and add link to Learn ( #9799 )
2021-02-22 08:32:07 -08:00
Noel Quiles
6f04daa2f1
[Website] Use new logo for Mercedes use case ( #9717 )
...
* Use new logo for Mercedes use case
* Fix home logo
2021-02-22 11:16:36 -05:00
Daniel Nephin
4553554106
Merge pull request #9777 from hashicorp/dnephin/remove-some-deprecation
...
docs: remove a couple deprecations
2021-02-19 13:31:20 -05:00
Alex Dzyoba
b99693b807
command/kv: Add prefix option to kv import command
...
Currently when data is imported via `consul kv import` it overwrites
keys under the root key. Since `consul kv export` can retrieve data for
the given prefix, i.e. part of the KV tree, importing it under root may
be not what users want.
To mirror prefix behavior from export this PR adds prefix feature to the
import command that adds prefix to all keys that are imported.
2021-02-19 14:07:25 +03:00
kaitlincarter-hc
804b24ae6b
rotate homepage tutorials ( #9787 )
2021-02-18 14:02:08 -08:00
Ashwin Venkatesh
ea23b2171c
Update helm docs for consul-helm v0.30.0 ( #9779 )
2021-02-17 14:08:35 -05:00
Luke Kysow
8695402022
Docs describing migrating to CRDs ( #9562 )
...
* Document how users can migrate to CRDs.
* Update documentation for federation with new `ProxyDefaults`
requirement.
* Ensure `controller.enabled: true` is set in our example configs.
* Remove `connect-service-protocol` annotation docs.
2021-02-17 14:01:52 -05:00
Daniel Nephin
500d517efa
docs: remove a couple deprecations
...
These filters can not be reproduced with bexpr just yet.
2021-02-17 13:10:05 -05:00
Zachary Shilton
15913a5e30
Bump components to remove client-side md processing ( #9773 )
2021-02-17 10:22:12 -05:00
Paul Banks
acd850a85d
Add docs for MIME sniffing on metrics endpoint. ( #9696 )
...
* Add docs for MIME sniffing on metrics endpoint.
This was added in 1.7.2 last year but I realised we don't document it so it's kinda surprising Prometheus "just works" now.
* Update website/content/api-docs/agent/index.mdx
2021-02-17 10:39:08 +00:00
Christoph Puhl
f4fe262a79
Update terminating-gateway.mdx
...
fix crds support reference and adding ACL clarification for linked services.
2021-02-15 14:54:40 +01:00
Eddie Rowe
f8bcfd7a53
nagios vs sensu updates
2021-02-12 10:44:41 -06:00
Daniel Nephin
a5a1fb2098
Merge pull request #9758 from hashicorp/dnephin/fix-streaming-bugs
...
http: error if near is used with streaming
2021-02-12 10:37:29 -05:00
Preetha
89c2b9c97d
Add docs section on regenerating expired CA certificates ( #9709 )
...
* Updated docs on regenerating built in CA
* review feedback
* Add sentence about expected behavior after update CA endpoint is used.
2021-02-11 15:38:12 -06:00
Daniel Nephin
da62f22aff
http: error if near is used with streaming
2021-02-11 14:10:38 -05:00
R.B. Boyer
194fb0d144
connect: update supported envoy point releases to 1.16.2, 1.15.3, 1.14.6, 1.13.7 ( #9737 )
2021-02-10 13:11:15 -06:00
Bryce Kalow
5b54842e44
website: update next and nextjs-scripts ( #9698 )
...
Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com>
2021-02-09 09:26:17 -06:00
Derek Strickland
8b91cae80f
Crosslink new microservices collection. ( #9704 )
2021-02-08 13:27:20 -05:00
David Yu
7247d9c0cb
docs: fix another broken link to upgrading k8s servers from token rotation page ( #9707 )
...
fix another broken link to upgrading k8s servers from token rotation page
2021-02-04 09:44:04 -08:00
David Yu
5c749d32f8
docs: Small change to fix broken link to k8s upgrade from k8s tls certs page ( #9705 )
...
Broken link to k8s server upgrade from tls certs page
2021-02-04 09:13:32 -08:00
Kim Ngo
44a5f9057b
docs/nia: recommend sensitive variables for module authoring ( #9692 )
2021-02-02 14:57:46 -06:00
Kim Ngo
cf5d9c5d55
docs/nia: Update verbiage around securely configuring providers ( #9684 )
...
This reorganizes and flags where and when sensitive information may
be written in plain-text
2021-02-02 13:24:25 -06:00
Kyle MacDonald
288f8202d2
website: add utm params for all cloud.hashi links
2021-02-02 09:09:16 -05:00
Kyle MacDonald
b4c9e50e42
Website updates for HCP (2/2)
...
website: prep hcp ctas
Add in updated HCP section
Fix broken link
website: remove superflous heading
website: add new try cloud cta to nav
website: adjust homepage hero CTAs
Update HCP description to match latest
Clean up Hero CTAs
Updates banner
2021-02-01 19:09:38 -08:00
Matt Keeler
74c3b69632
Release 1.9.3 ( #9680 )
2021-02-01 13:34:44 -05:00
Mike Morris
b176611c87
website: add release notes for 1.9 ( #9189 )
...
* website: initial draft of release notes framework
* website: fixup ref to 1-9-0.mdx
* Update website/pages/docs/release-notes/1-9-0.mdx
* Update website/pages/docs/release-notes/1-9-0.mdx
* website: add draft of 1.9.0 release notes
* website: move release-notes directory from /pages to /content
* Update 1-9-0.mdx
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
2021-01-29 18:00:32 -05:00
Ashwin Venkatesh
f7092a068f
Add docs for TLS Server Certificate rotation for K8S ( #9636 )
...
* Add docs for TLS Server Certificate rotation for K8s
2021-01-29 17:13:28 -05:00
Kyle Havlovitz
1dee4173c1
connect/ca: Allow ForceWithoutCrossSigning for all providers
...
This allows setting ForceWithoutCrossSigning when reconfiguring the CA
for any provider, in order to forcibly move to a new root in cases where
the old provider isn't reachable or able to cross-sign for whatever
reason.
2021-01-29 13:38:11 -08:00
Luke Kysow
320fcf4510
Add operations section to k8s notes ( #9625 )
...
* Add operations section to k8s notes
* Unify faq/troubleshooting
2021-01-29 11:15:40 -08:00
Kyle Havlovitz
a299faec89
Merge pull request #9541 from sadedil/patch-1
...
Add a CLI tool for "Client Libraries & SDKs" page
2021-01-28 10:18:41 -08:00
David Yu
23a5633aea
docs: Update Compat Matrix for Consul Helm 0.29 ( #9657 )
...
* docs: Update Compat Matrix for Consul Helm 0.29
Adding 0.29
* Update compatibility.mdx
2021-01-27 14:39:03 -08:00
Luke Kysow
38d630e2e9
Document proxy-defaults config for prometheus ( #9640 )
2021-01-26 17:19:30 -08:00
Jeff Escalante
ceb58d9f09
fix error in component name on autopilot page ( #9638 )
2021-01-25 20:00:28 -05:00
Chris Boulton
448212060a
connect: add local_request_timeout_ms to configure local_app http timeouts ( #9554 )
2021-01-25 13:50:00 -06:00
Peter M
9f4c52612c
changing HCP Consul to reflect GA
...
currently still pointing at private beta link, need to fix for GA.
2021-01-22 17:02:28 -08:00
Iryna Shustava
6b432e7dde
docs: Add k8s troubleshooting docs (hostPort vs hostNetwork) ( #9464 )
2021-01-22 16:31:37 -08:00
Ashwin Venkatesh
a341d6f0c5
Merge pull request #9612 from hashicorp/ui-ingress
...
Update docs with fields for ingress support for consul UI
2021-01-22 15:17:40 -05:00
Ashwin Venkatesh
fbf106446d
Update docs with fields for ingress support for consul UI
2021-01-22 12:19:43 -05:00
danielehc
130128cfcb
Update index.mdx ( #9618 )
2021-01-22 18:07:23 +01:00
Mustafa Sadedil
fc51320d52
Remove tool ref from the wrong page
2021-01-21 23:04:50 +03:00
Mustafa Sadedil
bdecf34663
Add new CLI tool to Community Tools Page (kvit)
2021-01-21 23:03:36 +03:00
markblackman
f6f9589e21
Note to steer consumers away from unmaintained python-consul ( #9544 )
...
* Quick note to steer consumers away from unmaintained python-consul
2021-01-21 11:38:29 -08:00
Zachary Shilton
e90b77b337
Fix link color on home page ( #9611 )
...
* Fix learn-callout theming
* Fix link color in cloud-offerings-list
2021-01-21 13:15:42 -05:00
Kyle MacDonald
ab029e8aca
website: remove netlify artifacts and port missing redirects over to new format ( #9601 )
...
* website: port existing new redirects old format
* website: remove netlify specific artifacts
2021-01-21 10:16:17 -05:00
freddygv
3046edf87a
Release 1.9.2
2021-01-20 17:28:35 -07:00
Mark Lewis
3c6f0d9767
Update options.mdx ( #9578 )
...
MInor typo.
2021-01-18 15:31:39 +00:00
Brandon Romano
120c2cef23
Merge pull request #9558 from hashicorp/br.stack-menu
...
[Website] StackMenu updates for 1/14
2021-01-14 09:28:24 -08:00
Luke Kysow
d6aea9fe7a
Remove guides that live in learn.hashicorp.com now ( #9563 )
2021-01-14 08:46:55 -08:00
Chulki Lee
c734444da5
Fix link markup in docs/connect/ca/vault
2021-01-13 19:20:00 -08:00
Luke Kysow
4217488e78
Move cfg entry docs to under connect from agent ( #9533 )
...
Since all config entries are currently related to service mesh it's a
much more natural place to look for them under Service Mesh than under
Agent.
2021-01-13 12:48:48 -08:00
Brandon Romano
7d5dde078b
Website StackMenu updates for 1/14
2021-01-13 10:06:15 -08:00
Jeff Escalante
2999eb12cc
Docs Website: prepare for move to vercel hosting ( #9427 )
...
* prepare for move to vercel hosting
* add html extension redirect handling
* temporarily add back netlify files for hosting transition
2021-01-12 20:09:23 -05:00
Michael Hofer
acc843f04d
cli: Add consul intention list command (based on PR #6825 ) ( #9468 )
...
This PR is based on the previous work by @snuggie12 in PR #6825 . It adds the command consul intention list to list all available intentions. The list functionality for intentions seems a bit overdue as it's just very handy. The web UI cannot list intentions outside of the default namespace, and using the API is sometimes not the friendliest option. ;)
I cherry picked snuggie12's commits who did most of the heavy lifting (thanks again @snuggie12 for your great work!). The changes in the original commit mostly still worked on the current HEAD. On top of that I added support for namespaces and fixed the docs as they are managed differently today. Also the requested changes related to the "Connect" references in the original PRs have been addressed.
Fixes #5652
Co-authored-by: Matt Hoey <mhoey05@jcu.edu>
2021-01-12 21:14:31 +01:00
Kim Ngo
26d7927eea
docs/nia: Fix example config block to execute properly ( #9547 )
...
CTS running with default configuration will communicate over http
unless the Consul client is configured with TLS. Having the example
set the scheme to https is misleading and will result in an error:
"http: server gave HTTP response to HTTPS client"
2021-01-11 10:27:33 -06:00
Mike Wickett
c9ec8fc7cc
website: update alert banner to promote webinar
2021-01-11 09:28:22 -05:00
Mustafa Sadedil
d514c8a8ab
Add a CLI tool for "Client Libraries & SDKs" page
...
Hi everyone,
I'm developing an open source CLI tool for easily editing Consul KV values from your favorite text editor. I've added to Client Libraries & SDKs page on website.
Repository: https://github.com/sadedil/kvit
Kind regards,
Mustafa
2021-01-10 23:07:18 +03:00
Luke Kysow
a89461cc95
Update k8s gateway docs for CRDs ( #9538 )
2021-01-08 14:30:41 -08:00
Nitya Dhanushkodi
9e58147c30
Document how clients not on K8s can join a DC in K8s. ( #9438 )
2021-01-07 16:14:07 -08:00
Luke Kysow
3ee1ba1e4b
Reword redirect docs for clarity ( #9504 )
2021-01-07 11:40:59 -08:00
Luke Kysow
72db0cc6d3
Document CRDs and kube namespaces ( #9502 )
...
* Document CRDs and kube namespaces
2021-01-07 11:22:06 -08:00
Luke Kysow
edc947d7ff
Merge pull request #9516 from hashicorp/lkysow/config-entry-sidebar
...
Use full names for cfg entries in sidebar
2021-01-07 11:21:18 -08:00
Luke Kysow
936d12b1b9
Merge pull request #9416 from hashicorp/luke-component-crd
...
Document Kube CRDs alongside config entry docs
2021-01-07 11:20:46 -08:00
Luke Kysow
63834e1237
Add note about code duplication
2021-01-07 11:15:11 -08:00
Jeff Escalante
01430e68f0
update start script, remove extra tabs code
2021-01-07 14:05:00 -05:00
Jeff Escalante
7962f4d983
update to latest deps
2021-01-07 14:00:43 -05:00
Luke Kysow
0a7d2d0ff9
Use nested tabs for gateway examples
2021-01-06 16:45:35 -08:00
Luke Kysow
8b1f88ef70
Use full names for cfg entries in sidebar
2021-01-06 11:01:01 -08:00
Joel Watson
f68bf30c06
docs: add note about TMPDIR for snapshots
2021-01-06 12:56:40 -06:00
Luke Kysow
92415d9c0c
Clean up JS for ConfigEntryReference component
2021-01-06 10:33:52 -08:00
Kim Ngo
4130e195a4
Update NIA discuss link to new tag ( #9500 )
2021-01-05 12:06:09 -06:00
Luke Kysow
76e72de6d3
Document Kube CRDs alongside config entry docs
...
* Adds a new react component `ConfigEntryReference` that allows us to
document config entries for both HCL and Kubernetes CRDs.
* Rewrites config entry docs to use new component
* Add CRD examples alongside HCL examples
* Removes examples from Kube CRD doc because the examples are now in the
main CRD docs
2021-01-05 09:40:43 -08:00
Michael Montgomery
a1748aa2cb
Merge branch 'master' into 6074-allow-config-MaxHeaderBytes
2020-12-30 14:14:05 -06:00
Michael Montgomery
519f537b8b
Fixed failing tests
...
Removed use of `NewTestAgent`, per review comment
Removed CLI flag, per review comment
Updated website documentation
Added changelog entry
2020-12-30 14:09:50 -06:00
Iryna Shustava
b5498642d0
Update Helm reference docs ( #9463 )
2020-12-23 11:42:36 -08:00
David Yu
2a2f8c7394
Update with 0.28 ( #9450 )
2020-12-21 13:24:33 -08:00
Ashwin Venkatesh
45bfa8101d
Merge pull request #9431 from hashicorp/gen-docs2
...
Ensure type shown for maps in k8s docs
2020-12-18 15:07:14 -05:00
Nitya Dhanushkodi
21d3b29f93
Update helm docs for external client agents. ( #9429 )
2020-12-18 09:18:17 -08:00
Blake Covarrubias
8fc383c28e
docs: Remove beta tag for 1.8 and 1.9 features
...
Remove beta tag for 1.8 and 1.9 features which are now GA.
2020-12-17 16:51:35 -08:00
Luke Kysow
41020f73bd
Ensure type shown for maps in k8s docs
2020-12-17 16:27:02 -08:00
Luke Kysow
4d6dc1fd8f
Use generated helm docs ( #9324 )
2020-12-17 10:47:54 -08:00
Jeff Escalante
8a816e0b8e
add markdown page component
2020-12-16 16:55:27 -05:00
Jeff Escalante
0f1075470d
update deps, restore search
2020-12-16 16:55:27 -05:00
Jeff Escalante
fe3902c906
maintenance complete, pending markdown-page component addition
2020-12-16 16:55:23 -05:00
Kim Ngo
048d9b3ece
nia/docs 0.1.0-techpreview2 ( #9405 )
...
Co-authored-by: Lorna Song <lorna@hashicorp.com>
2020-12-16 14:47:15 -06:00
R.B. Boyer
3bf8849d14
update comment to correctly reflect type of data in the oidc auth method config ( #9364 )
2020-12-15 16:25:31 -06:00
Daniel Nephin
462a2b29c3
Merge pull request #9262 from hashicorp/dnephin/docs-deprecate-old-filters
...
docs: deprecate some old filter parameters
2020-12-15 17:11:41 -05:00
kaitlincarter-hc
86a1fc425f
Rotate Learn tutorials ( #9404 )
...
* update Learn tutorials on landing page
* add Vault image
2020-12-15 12:25:11 -08:00
Tenpo
8265277092
update example for tag_name ( #9226 )
...
* update example for tag_name
In the example for azure the "tag_name" field is wrong cause say "tag_key" and not "tag_name"
* change tag_key by tag_name in the description of azure
2020-12-15 15:09:16 -05:00
Derek Strickland
8f1cb4f7f9
Fixed mesh gateway config instructions ( #9396 )
...
Added missing words to mesh gateway config instructions, and corrected punctuation a paragraph above. Please review for technical accuracy.
2020-12-15 14:07:53 -05:00
R.B. Boyer
eae9df241d
docs: call out intentions upgrade issue for 1.9.0+ ( #9386 )
2020-12-14 09:57:02 -06:00
Maksym
e21d66aa59
fix 'agent/check/pass/my-check-id' curl example in documentation ( #9372 )
2020-12-11 13:23:05 +01:00
kaitlincarter-hc
212c9fc684
Filter API Docs ( #9202 )
...
* reorganize for clarity and update for value syntax
* fix quotes around value
* Apply suggestions from code review
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Apply suggestions from code review
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
2020-12-09 15:03:44 -08:00
Noel Quiles
1a0eaa00f6
[Website] Update alert banner ( #9361 )
...
* Update alert banner
* Update expiration date for banner
2020-12-09 16:13:55 -05:00
Kenia
8bda36c9f4
Create consul version metric with version label ( #9350 )
...
* create consul version metric with version label
* agent/agent.go: add pre-release Version as well as label
Co-Authored-By: Radha13 <kumari.radha3@gmail.com>
* verion and pre-release version labels.
* hyphen/- breaks prometheus
* Add Prometheus gauge defintion for version metric
* Add new metric to telemetry docs
Co-authored-by: Radha Kumari <kumari.radha3@gmail.com>
Co-authored-by: Aestek <thib.gilles@gmail.com>
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
2020-12-09 09:16:53 -05:00
Sabeen Syed
3be60d9e4e
Update the NIA integration program diagram ( #9349 )
2020-12-08 18:03:39 -06:00
Blake Covarrubias
04db17186b
docs: Fix broken URLs in Helm docs
...
- Fix anchors for client.extraEnvironmentVars and
server.extraEnvironmentVars.
- Change extraEnvironmentVars data type to `map`.
- Fix external link to kubernetes.io under
connectInject.namespaceSelector.
2020-12-08 11:13:29 -08:00
Max G
f727023b18
docs: reword lack of additional required files
2020-12-05 16:47:41 -08:00
Mike Morris
24130f4f09
Merge pull request #9273 from hashicorp/merge/release-1.9.0
...
merge: release/1.9.0
2020-12-02 17:34:10 -05:00
Seth Hoenig
e32cd6b55c
docs: fix mispelling in connect upstream docs ( #9297 )
2020-11-30 08:26:08 -08:00
Rob Taylor
32e4a18e70
Fix typo in explanation of connect command ( #9295 )
...
Change `Connect Connect` to `Consul Connect, which is consistent with the command output as shown on this page.
2020-11-30 09:54:59 -06:00
Hans Hasselberg
8c5c6e77ec
fix serf_wan documentation ( #9289 )
...
WAN config is different than LAN config, source of truth is
f72d2042a8/config.go (L315-L326)
and now the docs are correct.
2020-11-27 20:49:43 +01:00
David Yu
ab7f767445
Bump supported chart to 0.27.0 for Consul 1.9 ( #9279 )
...
* Bump supported chart to 0.27.0 for Consul 1.9
2020-11-25 16:33:21 -08:00
Mike Morris
67a11e4d16
Merge pull request #9270 from hashicorp/release/1.9.0
...
merge: release/1.9.0 back into 1.9.x
2020-11-24 17:36:47 -05:00
David Yu
856a6fbdc1
Consul 1.9 GA Banner ( #9272 )
2020-11-24 13:40:14 -08:00
David Yu
790e30259b
docs: adding Consul 1.9.x to compat matrix and link to Envoy compat matrix ( #9263 )
...
* Adding Consul 1.9.x to compat matrix and link to Envoy compat matrix
Adding 1.9.x and link to Envoy compat matrix
2020-11-24 10:49:53 -08:00
Daniel Nephin
685cb158cf
docs: deprecate some old filter parameters
...
The filtering can be done with the general purpose `filter` query parameter.
2020-11-23 18:23:58 -05:00
Kit Patella
669783f965
Merge pull request #9261 from hashicorp/telemetry/fix-missing-and-stale-docs-2
...
Telemetry/fix missing and stale docs
2020-11-23 13:34:19 -08:00
Hans Hasselberg
25f9e232af
add missing descriptions for metrics
2020-11-23 22:06:30 +01:00
Daniel Nephin
7d7cffb613
docs: mark streaming as experimental
2020-11-23 15:59:47 -05:00
Kit Patella
7a8844ccce
add entries for missing fsm operations and mark duplicated metrics prefixes as deprecated
2020-11-23 12:42:51 -08:00
Sabeen Syed
64733d8a89
Update NIA architecture image ( #9180 )
2020-11-23 01:47:58 -06:00
Kit Patella
3ea27d75e4
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs
...
Telemetry/fix missing and stale docs
2020-11-20 12:54:29 -08:00
freddygv
dbbc08e9af
Update latest version
2020-11-19 16:45:54 -07:00
Kit Patella
4ad076207e
add telemetry and definition help entries for missing catalog and acl metrics
2020-11-19 13:29:44 -08:00
R.B. Boyer
7bcbc59dea
command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint ( #9229 )
...
Fixes #9215
2020-11-19 15:27:31 -06:00
Kit Patella
46205bbf27
remove stale entries and rename/define acl.resolveToken
2020-11-19 13:06:28 -08:00
Freddy
e4e306210a
Require operator:write to get Connect CA config ( #9240 )
...
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.
--
This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
2020-11-19 10:14:48 -07:00
Kit Patella
c5af73c4f1
Merge pull request #9091 from scellef/correct-upgrade-guide
...
Correcting text on when default was changed in Consul
2020-11-18 16:54:48 -08:00
Nitya Dhanushkodi
866628b6e8
Add docs for envoyExtraArgs ( #9206 )
2020-11-18 15:40:39 -08:00
Matt Keeler
4bca029be9
Refactor to call non-voting servers read replicas ( #9191 )
...
Co-authored-by: Kit Patella <kit@jepsen.io>
2020-11-17 10:53:57 -05:00
Matt Keeler
a7d945e7b9
[docs] Change links to the DNS information to the right place ( #8675 )
...
The redirects were working in many situations but some (INTERNALS.md) was not. This just flips everything over to using the real link.
2020-11-17 10:03:00 -05:00
Luke Kysow
292058c569
Docs for upgrading to CRDs ( #9176 )
...
* Add Upgrading to CRDs docs
2020-11-13 15:19:21 -08:00
Kent 'picat' Gruber
4ffa3e66d9
Merge pull request #9106 from hashicorp/security-model-docs-revamp
...
Revamp Security Model Documentation
2020-11-13 17:30:24 -05:00
Mike Morris
4902e42ca4
Merge pull request #9155 from hashicorp/release/1.9.0-beta3
...
merge: 1.9.0-beta3
2020-11-13 16:45:50 -05:00
Iryna Shustava
41dddba967
docs: add link to the OpenShift platform guide to k8s docs ( #9177 )
2020-11-12 15:06:25 -08:00
Kyle Schochenmaier
2504ddc9f1
Docs: for consul-k8s health checks ( #8819 )
...
* docs for consul-k8s health checks
Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2020-11-12 16:55:44 -06:00
Nitya Dhanushkodi
1bd1f44bf2
Update compatibility matrix
...
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
2020-11-12 14:43:33 -08:00
R.B. Boyer
a5bd1ba323
agent: return the default ACL policy to callers as a header ( #9101 )
...
Header is: X-Consul-Default-ACL-Policy=<allow|deny>
This is of particular utility when fetching matching intentions, as the
fallthrough for a request that doesn't match any intentions is to
enforce using the default acl policy.
2020-11-12 10:38:32 -06:00
Paul Banks
990134371b
Update ui-visualization.mdx
2020-11-12 15:52:24 +00:00
Matt Keeler
58f98db227
Add a CLI command for retrieving the autopilot configuration. ( #9142 )
2020-11-11 13:19:02 -05:00
Joel Watson
4b9034b976
Merge pull request #9098 from hashicorp/watsonian/kv-size-breakdown
...
Add detailed key size breakdown to snapshot inspect
2020-11-11 11:34:45 -06:00
Joel Watson
1dd5362620
docs: add warning in 0.9.0 upgrade notes
2020-11-11 09:23:43 -05:00
Joel Watson
a88177fbf9
Missed a spot with old params in docs
2020-11-10 11:22:45 -06:00
Joel Watson
aa21a32ca5
Rename params to better reflect their purpose
2020-11-10 10:44:09 -06:00
Joel Watson
4298a0f7e1
Make docs for params clearer
2020-11-10 10:35:24 -06:00
Matt Keeler
114521af25
Add some autopilot docs and update the changelog ( #9139 )
2020-11-09 14:14:19 -05:00
Matt Keeler
755fb72994
Switch to using the external autopilot module
2020-11-09 09:22:11 -05:00
Mike Morris
9ccb340893
chore: upgrade to gopsutil/v3 ( #9118 )
...
* deps: update golang.org/x/sys
* deps: update imports to gopsutil/v3
* chore: make update-vendor
2020-11-06 20:48:38 -05:00
Mike Morris
4ac5e4638c
website: update callout to 1.9.0-beta2 ( #9131 )
2020-11-06 20:39:25 -05:00
Kent 'picat' Gruber
aa46893717
Adjust the ACLs requirement section wording and add link to ACL docs
...
It's better to avoid the ambiguous Vault statement that was not clarified and drop the loaded "roles" term in favor of "capabilities" since the ACL system is described as capability-based in previous ACL documentation.
2020-11-06 16:25:21 -05:00
Paul Banks
1757ed6326
UI Metrics documentation ( #9048 )
...
* UI Metrics documentation
* Update website/pages/docs/connect/observability/ui-visualization.mdx
* Fix some review comments
* Fix review comments
* Apply suggestions from code review
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
2020-11-06 20:32:28 +00:00
Kent 'picat' Gruber
7d692f0b13
Use the EnterpriseAlert inline widget
2020-11-06 10:47:22 -05:00
Kent 'picat' Gruber
9e1054097b
Add mention of auto_encrypt to mTLS requirements
2020-11-06 10:15:26 -05:00
Kent 'picat' Gruber
c3aa90fe27
Fix sublist format for client agent threats
2020-11-05 16:41:15 -05:00
Kent 'picat' Gruber
e0735f6fe0
Add link to the keygen command
2020-11-05 16:34:32 -05:00
Kent 'picat' Gruber
0fa4a13233
Use short link to keyring command
2020-11-05 16:33:04 -05:00
Kent 'picat' Gruber
8e1b9cb177
Add link to default_policy with code format to ACLs requirement section
2020-11-05 16:30:00 -05:00
Kent 'picat' Gruber
845cd6d1da
Cleanup verify_server_hostname mTLS requirement
2020-11-05 16:27:23 -05:00
Kent 'picat' Gruber
99906ad09d
Add extra clarification around verify_incoming_https for localhost
...
In many cases access to localhost is restricted to trusted/privellged actors only
2020-11-05 16:20:41 -05:00
Kent 'picat' Gruber
f2c124702c
Fix inline links + format in mTLS requirements section
2020-11-05 16:09:07 -05:00
Kent 'picat' Gruber
e39c20c715
Capitalize enterprise and add link to enerprise docs
2020-11-05 16:03:14 -05:00
Kent 'picat' Gruber
6688fc7e5c
Soften language by replacing utilize with use
2020-11-05 15:59:53 -05:00
Kim Ngo
43f3a42a11
Fix NIA doc links ( #9110 )
...
fix config link and anchor
2020-11-05 13:35:57 -06:00
Jimmy Merritello
eda072a280
Bump HSM version ( #9102 )
2020-11-05 11:48:12 -06:00
Joel Watson
4ae01f349a
Update docs with new flags
2020-11-05 10:31:36 -06:00
Kent 'picat' Gruber
2c62e82143
Actually fix spelling of recommendations
...
I obviously have no idea how to spell this word
2020-11-05 11:13:14 -05:00
Kent 'picat' Gruber
ef4c2f40d7
Fix spelling of recomendations
...
Thank you @rboyer!
2020-11-04 17:44:51 -05:00
Kent 'picat' Gruber
9f802dffc2
Revamp security model documentation
2020-11-04 17:05:44 -05:00
Sean Ellefson
7180f9e114
Correcting text on when default was changed in Consul
2020-11-02 15:10:34 -08:00
Alvin Huang
d6652b0bc9
use hashicorp docker mirror to prevent rate limit ( #9070 )
2020-10-30 17:59:13 -04:00
s-christoff
ee3eb03f50
cli: Add JSON and Pretty Print formatting for `consul snapshot inspect` ( #9006 )
2020-10-29 11:31:14 -05:00
Kim Ngo
1b0efbfd27
docs: Add links in CTS docs for the community to get involved ( #9060 )
2020-10-29 10:07:20 -05:00
Daniel Nephin
cfe0ffde15
Merge pull request #9026 from hashicorp/dnephin/streaming-without-cache-query-param
...
streaming: rename config and remove requirement for cache=1
2020-10-28 12:33:25 -04:00
Daniel Nephin
aaca3610ff
docs: Add the new metrics to telemetry.mdx
2020-10-27 16:49:50 -04:00
Kevin Pruett
7589b0f265
Merge pull request #9021 from hashicorp/pruett.alertbanner-exp
...
Expose `expirationDate` prop in <AlertBanner/>
2020-10-26 16:08:23 -04:00
Mike Morris
593946449e
website: update version.js ( #9034 )
2020-10-26 10:58:25 -04:00
Kim Ngo
bb4d43ae50
NIA: add Terraform version compatibility ( #9023 )
2020-10-26 09:46:34 -05:00
Daniel Nephin
1dcbfd17c3
health: change the name of UseStreamingBackend config
...
Remove it from the cache section, and update the docs.
2020-10-23 17:47:01 -04:00
Kevin Pruett
895110ef11
Expose `expirationDate` prop in <AlertBanner/>
2020-10-23 11:19:41 -04:00
James Light
728b025d5d
Update managed-deprecated.mdx ( #9016 )
...
fix typo / spell checker replacing w/ wrong word
2020-10-23 10:54:16 -04:00
R.B. Boyer
2183842f0e
connect: add support for envoy 1.16.0, drop support for 1.12.x, and bump point releases as well ( #8944 )
...
Supported versions will be: "1.16.0", "1.15.2", "1.14.5", "1.13.6"
2020-10-22 13:46:19 -05:00
Kim Ngo
e65934a549
NIA: document daemon exiting on task errors ( #8985 )
2020-10-22 13:22:55 -05:00
Blake Covarrubias
00f4ac9f6c
Add extraEnvironmentVars and client.affinity to Helm values ( #8997 )
...
Document client.extraEnvironmentVars, server.extraEnvironmentVars, and
client.affinity Helm chart values.
Remove deprecated connectInject.imageEnvoy and meshGateway.imageEnvoy
values.
2020-10-21 23:28:39 -07:00
Blake Covarrubias
e4f72840ab
docs: Remove sentence about pluggable CAs
...
Consul's Connect CA documentation mentions future releases will
support a pluggable CA system. This sentence has existed in the docs
for over two years, however there are currently no plans to develop
this feature on the near-term roadmap.
This commit removes this sentence to avoid giving the impression that
this feature will be available in an upcoming release.
2020-10-20 11:51:22 -07:00
Jasmine W
d7bff12ebb
Merge pull request #8959 from hashicorp/docs-update-api-cli
...
Update docs-navigation.js
2020-10-20 11:45:33 -04:00
Sabeen Syed
aabd0130a9
Update links ( #8949 )
2020-10-19 14:38:10 -05:00
Sabeen Syed
cc520e13fa
Add A10 and Checkpoint TF modules ( #8950 )
2020-10-15 16:11:09 -05:00
Luke Kysow
b4897cca6e
Update to CRD docs ( #8956 )
...
* Update to CRD docs
* Update website/pages/docs/k8s/crds.mdx
* Modify proxy default and service default protocols
Carry over from previous PR that I forgot to submit a review/suggestion to, TCP and HTTP are not valid protocols for Proxy Defaults and Service Defaults
kubectl apply -f sdefault.yml
Error from server: error when creating "sdefault.yml": admission webhook "mutate-servicedefaults.consul.hashicorp.com" denied the request: servicedefaults.consul.hashicorp.com "your-service-name" is invalid: spec.expose.paths[0].protocol: Invalid value: "tcp": must be one of "http", "http2"
kubectl apply -f sdefault.yml
Error from server: error when creating "sdefault.yml": admission webhook "mutate-servicedefaults.consul.hashicorp.com" denied the request: servicedefaults.consul.hashicorp.com "your-service-name" is invalid: spec.expose.paths[0].protocol: Invalid value: "tcp": must be one of "http", "http2"
Co-authored-by: David Yu <dyu@hashicorp.com>
2020-10-15 10:35:26 -07:00
Jimmy Merritello
718380cebe
Update HSM version w/ Waypoint ( #8971 )
2020-10-15 12:07:33 -05:00
Brandon Romano
1acfa2ede7
Update banner for Consul 1.9
2020-10-14 16:31:58 -07:00
Kit Patella
5825f5f6be
truncate jepsen.mdx log for length
2020-10-14 13:13:38 -07:00
Jimmy Merritello
7ccba40ebb
[Website] Bump HSM version ( #8957 )
...
* Bump HSM version
* New pkg
2020-10-14 13:25:16 -05:00
Jasmine W
63280ae289
Update docs-navigation.js
...
Added links for API and CLI docs to sidebar
2020-10-14 14:12:50 -04:00
R.B. Boyer
7093b2ea43
docs: all intention documentation updates ( #8869 )
2020-10-14 10:23:05 -05:00
Preetha
e7cc973c7c
Merge pull request #8920 from hashicorp/crd-docs
...
CRD Docs
2020-10-14 09:42:45 -05:00
Luke Kysow
1d5fc07248
CRD docs
2020-10-13 17:00:24 -07:00
Luke Kysow
4cdb2ca066
Recommend using vault token auto-renew in 1.8.5 ( #8945 )
2020-10-13 16:18:19 -07:00
Peter M
2a2670ea39
Add files via upload
...
updating logo grid image
2020-10-13 15:16:34 -07:00
Kyle Havlovitz
d1402b5386
Merge pull request #8943 from hashicorp/vault-renew-docs
...
docs: Add a note about auto-renewing the Vault token
2020-10-13 14:36:44 -07:00
Mike Morris
6ebfd29658
website: add v1.9.0-beta1 download callout ( #8939 )
2020-10-13 17:33:49 -04:00
Kyle Havlovitz
37f95e6e79
docs: Add a note about auto-renewing the Vault token
2020-10-13 14:25:42 -07:00
Paul Banks
25956c58dd
Add ui metrics config docs ( #8921 )
...
* Add ui metrics docs
* Update website/pages/docs/agent/options.mdx
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
2020-10-13 22:11:12 +01:00
Sabeen Syed
2491177d37
Remove email address ( #8931 )
2020-10-13 13:16:06 -05:00
Kim Ngo
30993a7495
Add docs on what activates task execution ( #8936 )
2020-10-13 11:47:30 -05:00
Lorna Song
38989b9c77
Update Requirements doc: Terraform module links
...
Update "Using Terraform Modules" with latest module links from partners
2020-10-13 09:26:39 -06:00
Brandon Romano
8d475e5e3b
Plugs in proper links for NIA page
2020-10-12 20:39:34 -07:00
Brandon Romano
51ac5c31b5
Fix failed build
2020-10-12 19:38:43 -07:00
Peter M
0df5077d99
Update network-infrastructure-automation.jsx
2020-10-12 19:20:48 -07:00
pcmccarron
bb7f305a99
updating use case pages
2020-10-12 19:20:48 -07:00