luxolus/open-consul
2
0
Fork 0
Code Issues 1 Pull requests Packages Releases Wiki Activity
14509 commits 1 branch 1 tag 358 MiB
Commit graph

3580 commits

Author SHA1 Message Date
Rob Taylor 32e4a18e70
Fix typo in explanation of connect command (#9295) 
Change `Connect Connect` to `Consul Connect, which is consistent with the command output as shown on this page.
 2020-11-30 09:54:59 -06:00
Hans Hasselberg 8c5c6e77ec
fix serf_wan documentation (#9289) 
WAN config is different than LAN config, source of truth is
f72d2042a8/config.go (L315-L326)
and now the docs are correct.
 2020-11-27 20:49:43 +01:00
David Yu ab7f767445
Bump supported chart to 0.27.0 for Consul 1.9 (#9279) 
* Bump supported chart to 0.27.0 for Consul 1.9
 2020-11-25 16:33:21 -08:00
Mike Morris 67a11e4d16 Merge pull request #9270 from hashicorp/release/1.9.0 
merge: release/1.9.0 back into 1.9.x
 2020-11-24 17:36:47 -05:00
David Yu 856a6fbdc1
Consul 1.9 GA Banner (#9272) 2020-11-24 13:40:14 -08:00
David Yu 790e30259b
docs: adding Consul 1.9.x to compat matrix and link to Envoy compat matrix (#9263) 
* Adding Consul 1.9.x to compat matrix and link to Envoy compat matrix

Adding 1.9.x and link to Envoy compat matrix
 2020-11-24 10:49:53 -08:00
Daniel Nephin 685cb158cf docs: deprecate some old filter parameters 
The filtering can be done with the general purpose `filter` query parameter.
 2020-11-23 18:23:58 -05:00
Kit Patella 669783f965
Merge pull request #9261 from hashicorp/telemetry/fix-missing-and-stale-docs-2 
Telemetry/fix missing and stale docs
 2020-11-23 13:34:19 -08:00
Hans Hasselberg 25f9e232af add missing descriptions for metrics 2020-11-23 22:06:30 +01:00
Daniel Nephin 7d7cffb613 docs: mark streaming as experimental 2020-11-23 15:59:47 -05:00
Kit Patella 7a8844ccce add entries for missing fsm operations and mark duplicated metrics prefixes as deprecated 2020-11-23 12:42:51 -08:00
Sabeen Syed 64733d8a89
Update NIA architecture image (#9180) 2020-11-23 01:47:58 -06:00
Kit Patella 3ea27d75e4
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs 
Telemetry/fix missing and stale docs
 2020-11-20 12:54:29 -08:00
freddygv dbbc08e9af Update latest version 2020-11-19 16:45:54 -07:00
Kit Patella 4ad076207e add telemetry and definition help entries for missing catalog and acl metrics 2020-11-19 13:29:44 -08:00
R.B. Boyer 7bcbc59dea
command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint (#9229) 
Fixes #9215
 2020-11-19 15:27:31 -06:00
Kit Patella 46205bbf27 remove stale entries and rename/define acl.resolveToken 2020-11-19 13:06:28 -08:00
Freddy e4e306210a
Require operator:write to get Connect CA config (#9240) 
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.

--

This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
 2020-11-19 10:14:48 -07:00
Kit Patella c5af73c4f1
Merge pull request #9091 from scellef/correct-upgrade-guide 
Correcting text on when default was changed in Consul
 2020-11-18 16:54:48 -08:00
Nitya Dhanushkodi 866628b6e8
Add docs for envoyExtraArgs (#9206) 2020-11-18 15:40:39 -08:00
Matt Keeler 4bca029be9
Refactor to call non-voting servers read replicas (#9191) 
Co-authored-by: Kit Patella <kit@jepsen.io>
 2020-11-17 10:53:57 -05:00
Matt Keeler a7d945e7b9
[docs] Change links to the DNS information to the right place (#8675) 
The redirects were working in many situations but some (INTERNALS.md) was not. This just flips everything over to using the real link.
 2020-11-17 10:03:00 -05:00
Luke Kysow 292058c569
Docs for upgrading to CRDs (#9176) 
* Add Upgrading to CRDs docs
 2020-11-13 15:19:21 -08:00
Kent 'picat' Gruber 4ffa3e66d9
Merge pull request #9106 from hashicorp/security-model-docs-revamp 
Revamp Security Model Documentation
 2020-11-13 17:30:24 -05:00
Mike Morris 4902e42ca4 Merge pull request #9155 from hashicorp/release/1.9.0-beta3 
merge: 1.9.0-beta3
 2020-11-13 16:45:50 -05:00
Iryna Shustava 41dddba967
docs: add link to the OpenShift platform guide to k8s docs (#9177) 2020-11-12 15:06:25 -08:00
Kyle Schochenmaier 2504ddc9f1
Docs: for consul-k8s health checks (#8819) 
* docs for consul-k8s health checks

Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
 2020-11-12 16:55:44 -06:00
Nitya Dhanushkodi 1bd1f44bf2
Update compatibility matrix 
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
 2020-11-12 14:43:33 -08:00
R.B. Boyer a5bd1ba323
agent: return the default ACL policy to callers as a header (#9101) 
Header is: X-Consul-Default-ACL-Policy=<allow|deny>

This is of particular utility when fetching matching intentions, as the
fallthrough for a request that doesn't match any intentions is to
enforce using the default acl policy.
 2020-11-12 10:38:32 -06:00
Paul Banks 990134371b
Update ui-visualization.mdx 2020-11-12 15:52:24 +00:00
Matt Keeler 58f98db227
Add a CLI command for retrieving the autopilot configuration. (#9142) 2020-11-11 13:19:02 -05:00
Joel Watson 4b9034b976
Merge pull request #9098 from hashicorp/watsonian/kv-size-breakdown 
Add detailed key size breakdown to snapshot inspect
 2020-11-11 11:34:45 -06:00
Joel Watson 1dd5362620 docs: add warning in 0.9.0 upgrade notes 2020-11-11 09:23:43 -05:00
Joel Watson a88177fbf9 Missed a spot with old params in docs 2020-11-10 11:22:45 -06:00
Joel Watson aa21a32ca5 Rename params to better reflect their purpose 2020-11-10 10:44:09 -06:00
Joel Watson 4298a0f7e1 Make docs for params clearer 2020-11-10 10:35:24 -06:00
Matt Keeler 114521af25
Add some autopilot docs and update the changelog (#9139) 2020-11-09 14:14:19 -05:00
Matt Keeler 755fb72994
Switch to using the external autopilot module 2020-11-09 09:22:11 -05:00
Mike Morris 9ccb340893
chore: upgrade to gopsutil/v3 (#9118) 
* deps: update golang.org/x/sys

* deps: update imports to gopsutil/v3

* chore: make update-vendor
 2020-11-06 20:48:38 -05:00
Mike Morris 4ac5e4638c
website: update callout to 1.9.0-beta2 (#9131) 2020-11-06 20:39:25 -05:00
Kent 'picat' Gruber aa46893717 Adjust the ACLs requirement section wording and add link to ACL docs 
It's better to avoid the ambiguous Vault statement that was not clarified and drop the loaded "roles" term in favor of "capabilities" since the ACL system is described as capability-based in previous ACL documentation.
 2020-11-06 16:25:21 -05:00
Paul Banks 1757ed6326
UI Metrics documentation (#9048) 
* UI Metrics documentation

* Update website/pages/docs/connect/observability/ui-visualization.mdx

* Fix some review comments

* Fix review comments

* Apply suggestions from code review

Co-authored-by: R.B. Boyer <rb@hashicorp.com>

Co-authored-by: R.B. Boyer <rb@hashicorp.com>
 2020-11-06 20:32:28 +00:00
Kent 'picat' Gruber 7d692f0b13 Use the EnterpriseAlert inline widget 2020-11-06 10:47:22 -05:00
Kent 'picat' Gruber 9e1054097b Add mention of auto_encrypt to mTLS requirements 2020-11-06 10:15:26 -05:00
Kent 'picat' Gruber c3aa90fe27 Fix sublist format for client agent threats 2020-11-05 16:41:15 -05:00
Kent 'picat' Gruber e0735f6fe0 Add link to the keygen command 2020-11-05 16:34:32 -05:00
Kent 'picat' Gruber 0fa4a13233 Use short link to keyring command 2020-11-05 16:33:04 -05:00
Kent 'picat' Gruber 8e1b9cb177 Add link to default_policy with code format to ACLs requirement section 2020-11-05 16:30:00 -05:00
Kent 'picat' Gruber 845cd6d1da Cleanup verify_server_hostname mTLS requirement 2020-11-05 16:27:23 -05:00
Kent 'picat' Gruber 99906ad09d Add extra clarification around verify_incoming_https for localhost 
In many cases access to localhost is restricted to trusted/privellged actors only
 2020-11-05 16:20:41 -05:00
Kent 'picat' Gruber f2c124702c Fix inline links + format in mTLS requirements section 2020-11-05 16:09:07 -05:00
Kent 'picat' Gruber e39c20c715 Capitalize enterprise and add link to enerprise docs 2020-11-05 16:03:14 -05:00
Kent 'picat' Gruber 6688fc7e5c Soften language by replacing utilize with use 2020-11-05 15:59:53 -05:00
Kim Ngo 43f3a42a11
Fix NIA doc links (#9110) 
fix config link and anchor
 2020-11-05 13:35:57 -06:00
Jimmy Merritello eda072a280
Bump HSM version (#9102) 2020-11-05 11:48:12 -06:00
Joel Watson 4ae01f349a Update docs with new flags 2020-11-05 10:31:36 -06:00
Kent 'picat' Gruber 2c62e82143 Actually fix spelling of recommendations 
I obviously have no idea how to spell this word
 2020-11-05 11:13:14 -05:00
Kent 'picat' Gruber ef4c2f40d7 Fix spelling of recomendations 
Thank you @rboyer!
 2020-11-04 17:44:51 -05:00
Kent 'picat' Gruber 9f802dffc2 Revamp security model documentation 2020-11-04 17:05:44 -05:00
Sean Ellefson 7180f9e114 Correcting text on when default was changed in Consul 2020-11-02 15:10:34 -08:00
Alvin Huang d6652b0bc9
use hashicorp docker mirror to prevent rate limit (#9070) 2020-10-30 17:59:13 -04:00
s-christoff ee3eb03f50
cli: Add JSON and Pretty Print formatting for consul snapshot inspect (#9006) 2020-10-29 11:31:14 -05:00
Kim Ngo 1b0efbfd27
docs: Add links in CTS docs for the community to get involved (#9060) 2020-10-29 10:07:20 -05:00
Daniel Nephin cfe0ffde15
Merge pull request #9026 from hashicorp/dnephin/streaming-without-cache-query-param 
streaming: rename config and remove requirement for cache=1
 2020-10-28 12:33:25 -04:00
Daniel Nephin aaca3610ff docs: Add the new metrics to telemetry.mdx 2020-10-27 16:49:50 -04:00
Kevin Pruett 7589b0f265
Merge pull request #9021 from hashicorp/pruett.alertbanner-exp 
Expose `expirationDate` prop in <AlertBanner/>
 2020-10-26 16:08:23 -04:00
Mike Morris 593946449e
website: update version.js (#9034) 2020-10-26 10:58:25 -04:00
Kim Ngo bb4d43ae50
NIA: add Terraform version compatibility (#9023) 2020-10-26 09:46:34 -05:00
Daniel Nephin 1dcbfd17c3 health: change the name of UseStreamingBackend config 
Remove it from the cache section, and update the docs.
 2020-10-23 17:47:01 -04:00
Kevin Pruett 895110ef11
Expose expirationDate prop in <AlertBanner/> 2020-10-23 11:19:41 -04:00
James Light 728b025d5d
Update managed-deprecated.mdx (#9016) 
fix typo / spell checker replacing w/ wrong word
 2020-10-23 10:54:16 -04:00
R.B. Boyer 2183842f0e
connect: add support for envoy 1.16.0, drop support for 1.12.x, and bump point releases as well (#8944) 
Supported versions will be: "1.16.0", "1.15.2", "1.14.5", "1.13.6"
 2020-10-22 13:46:19 -05:00
Kim Ngo e65934a549
NIA: document daemon exiting on task errors (#8985) 2020-10-22 13:22:55 -05:00
Blake Covarrubias 00f4ac9f6c
Add extraEnvironmentVars and client.affinity to Helm values (#8997) 
Document client.extraEnvironmentVars, server.extraEnvironmentVars, and
client.affinity Helm chart values.

Remove deprecated connectInject.imageEnvoy and meshGateway.imageEnvoy
values.
 2020-10-21 23:28:39 -07:00
Blake Covarrubias e4f72840ab docs: Remove sentence about pluggable CAs 
Consul's Connect CA documentation mentions future releases will
support a pluggable CA system. This sentence has existed in the docs
for over two years, however there are currently no plans to develop
this feature on the near-term roadmap.

This commit removes this sentence to avoid giving the impression that
this feature will be available in an upcoming release.
 2020-10-20 11:51:22 -07:00
Jasmine W d7bff12ebb
Merge pull request #8959 from hashicorp/docs-update-api-cli 
Update docs-navigation.js
 2020-10-20 11:45:33 -04:00
Sabeen Syed aabd0130a9
Update links (#8949) 2020-10-19 14:38:10 -05:00
Sabeen Syed cc520e13fa
Add A10 and Checkpoint TF modules (#8950) 2020-10-15 16:11:09 -05:00
Luke Kysow b4897cca6e
Update to CRD docs (#8956) 
* Update to CRD docs

* Update website/pages/docs/k8s/crds.mdx

* Modify proxy default and service default protocols

Carry over from previous PR that I forgot to submit a review/suggestion to, TCP and HTTP are not valid protocols for Proxy Defaults and Service Defaults

kubectl apply -f sdefault.yml
Error from server: error when creating "sdefault.yml": admission webhook "mutate-servicedefaults.consul.hashicorp.com" denied the request: servicedefaults.consul.hashicorp.com "your-service-name" is invalid: spec.expose.paths[0].protocol: Invalid value: "tcp": must be one of "http", "http2"


kubectl apply -f sdefault.yml
Error from server: error when creating "sdefault.yml": admission webhook "mutate-servicedefaults.consul.hashicorp.com" denied the request: servicedefaults.consul.hashicorp.com "your-service-name" is invalid: spec.expose.paths[0].protocol: Invalid value: "tcp": must be one of "http", "http2"

Co-authored-by: David Yu <dyu@hashicorp.com>
 2020-10-15 10:35:26 -07:00
Jimmy Merritello 718380cebe
Update HSM version w/ Waypoint (#8971) 2020-10-15 12:07:33 -05:00
Brandon Romano 1acfa2ede7 Update banner for Consul 1.9 2020-10-14 16:31:58 -07:00
Kit Patella 5825f5f6be truncate jepsen.mdx log for length 2020-10-14 13:13:38 -07:00
Jimmy Merritello 7ccba40ebb
[Website] Bump HSM version (#8957) 
* Bump HSM version

* New pkg
 2020-10-14 13:25:16 -05:00
Jasmine W 63280ae289 Update docs-navigation.js 
Added links for API and CLI docs to sidebar
 2020-10-14 14:12:50 -04:00
R.B. Boyer 7093b2ea43
docs: all intention documentation updates (#8869) 2020-10-14 10:23:05 -05:00
Preetha e7cc973c7c
Merge pull request #8920 from hashicorp/crd-docs 
CRD Docs
 2020-10-14 09:42:45 -05:00
Luke Kysow 1d5fc07248
CRD docs 2020-10-13 17:00:24 -07:00
Luke Kysow 4cdb2ca066
Recommend using vault token auto-renew in 1.8.5 (#8945) 2020-10-13 16:18:19 -07:00
Peter M 2a2670ea39
Add files via upload 
updating logo grid image
 2020-10-13 15:16:34 -07:00
Kyle Havlovitz d1402b5386
Merge pull request #8943 from hashicorp/vault-renew-docs 
docs: Add a note about auto-renewing the Vault token
 2020-10-13 14:36:44 -07:00
Mike Morris 6ebfd29658
website: add v1.9.0-beta1 download callout (#8939) 2020-10-13 17:33:49 -04:00
Kyle Havlovitz 37f95e6e79 docs: Add a note about auto-renewing the Vault token 2020-10-13 14:25:42 -07:00
Paul Banks 25956c58dd
Add ui metrics config docs (#8921) 
* Add ui metrics docs

* Update website/pages/docs/agent/options.mdx

Co-authored-by: R.B. Boyer <rb@hashicorp.com>

Co-authored-by: R.B. Boyer <rb@hashicorp.com>
 2020-10-13 22:11:12 +01:00
Sabeen Syed 2491177d37
Remove email address (#8931) 2020-10-13 13:16:06 -05:00
Kim Ngo 30993a7495
Add docs on what activates task execution (#8936) 2020-10-13 11:47:30 -05:00
Lorna Song 38989b9c77 Update Requirements doc: Terraform module links 
Update "Using Terraform Modules" with latest module links from partners
 2020-10-13 09:26:39 -06:00
Brandon Romano 8d475e5e3b Plugs in proper links for NIA page 2020-10-12 20:39:34 -07:00
Brandon Romano 51ac5c31b5 Fix failed build 2020-10-12 19:38:43 -07:00
Peter M 0df5077d99 Update network-infrastructure-automation.jsx 2020-10-12 19:20:48 -07:00
pcmccarron bb7f305a99 updating use case pages 2020-10-12 19:20:48 -07:00
pcmccarron d3f74c4227 updating NIA use case page 2020-10-12 19:20:48 -07:00
Iryna Shustava 713c50ef7b
Update compatibility matrix (#8928) 2020-10-12 18:03:54 -07:00
Iryna Shustava 72ac873857
docs: add Helm docs for openshift; also add other missing Helm docs (#8833) 2020-10-12 16:35:20 -07:00
Sabeen Syed 518a138df4
Update a link and reword some sentences (#8925) 
Update PANOS link
Update sentences
 2020-10-12 17:40:01 -05:00
Mike Morris fbd3e4e777
Update version.js 2020-10-12 17:55:47 -04:00
Ricardo Oliveira 30fc50397a
Update service-defaults.mdx (#8780) 2020-10-09 13:43:52 -07:00
s-christoff a62705101f
Enhance the output of consul snapshot inspect (#8787) 2020-10-09 14:57:29 -05:00
Ashwin Venkatesh 251e468ec4 Initial docs commit 2020-10-09 15:54:15 -04:00
Kit Patella 0419efe9e1
Merge pull request #8913 from hashicorp/mkcp/docs/add-missing-options 
adds missing options.mdx entry for telemetry {disable_compat_1.9}
 2020-10-09 12:35:46 -07:00
Kit Patella 333e23984e adds missing options.mdx entry for telemetry {disable_compat_1.9} 2020-10-09 12:29:40 -07:00
Blake Covarrubias 4d8393d8cb
doc: Update acl-method command example (#8845) 
* Update acl-method command example

* add tailing backtick
 2020-10-09 12:26:14 -07:00
Kim Ngo fe8f4c5169
Minor updates to NIA partner docs (#8912) 
* Renames Terraform module registry to its new name Terraform Registry
 2020-10-09 14:16:45 -05:00
Sabeen Syed ef2b6f848e
Docs: Nia/docs tech preview (#8908) 
* Add outline and basic content for Tech Preview docs
* Add Tech Preview tag
* Add auto-labler for Consul Terrform Sync
* Add Consul Terraform Sync config docs (#8837)
* CLI Docs for Consul Terraform Sync
* Task Docs for Consul Terraform Sync
* Add docs for NIA Terraform driver (#8871)
* Update Installation Docs for Consul Terraform Sync
* Initial high level architecture overview (#8872)
* Docs: compatible Terraform modules for Consul-Terraform-Sync (#8887)
* Update Requirements Docs for Consul Terraform Sync
* Remove empty partner module sections
 2020-10-09 13:37:20 -05:00
Daniel Nephin dd0e8d42c4
Merge pull request #8825 from hashicorp/streaming/add-config 
streaming: add config and docs
 2020-10-09 14:33:58 -04:00
Sabeen Syed 64eefe7e7e
Docs: Nia/docs partner integration (#8907) 
* Add NIA Integration Program page
* Update name to Consul-Terraform-Sync and add Tech Preview tags
* Update diagram to include sequence numbers
* Remove Tech Preview tags and Update Images
* Add TF module naming convention, update image and links
* Add a note, update PANW link, and working updates
* Update URLs to local path
 2020-10-09 13:22:18 -05:00
Daniel Nephin 195511140f config: add field for enabling streaming in the client 
agent: register the new streaming cache-type
 2020-10-09 14:11:34 -04:00
Jimmy Merritello 245079a217
[Website] Add HashiStackMenu to website (#8854) 
* Add new HashiStackMenu

* Add transpile option

* Bump version

* Bump HSM version and rm meganav styles
 2020-10-09 10:48:21 -05:00
Matt Keeler 891d05fada
Add capability for the v1/connect/ca/roots endpoint to return a PEM encoded certificate chain (#8774) 
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
 2020-10-09 10:43:33 -04:00
R.B. Boyer b286e075f8
website: re-add forgotten updates (#8890) 2020-10-08 15:33:51 -05:00
Kit Patella 40b9769b1f
Merge pull request #8877 from hashicorp/mkcp/telemetry/consul.api.http 
Add flag for disabling 1.9 metrics backwards compatibility and warnings when set to default
 2020-10-08 13:22:37 -07:00
Kit Patella 2051069082
Update telemetry.mdx 
Make `consul.http...` have an ellipsis rather than just two dots to denote that there's a lot of different metrics under that path.
 2020-10-08 13:20:43 -07:00
Matt Keeler 141eb60f06
Add per-agent reconnect timeouts (#8781) 
This allows for client agent to be run in a more stateless manner where they may be abruptly terminated and not expected to come back. If advertising a per-agent reconnect timeout using the advertise_reconnect_timeout configuration when that agent leaves, other agents will wait only that amount of time for the agent to come back before reaping it.

This has the advantageous side effect of causing servers to deregister the node/services/checks for that agent sooner than if the global reconnect_timeout was used.
 2020-10-08 15:02:19 -04:00
Daniel Nephin 05df7b18a9 config: add field for enabling streaming RPC endpoint 2020-10-08 12:11:20 -04:00
Ryan Ooi 2ce398b62a Update acl-method command example 2020-10-07 06:44:24 +08:00
Iryna Shustava 586ae3d5cb
docs: Add missing helm docs and make link anchors consistent (#8808) 2020-10-05 10:02:04 -07:00
Kit Patella 7ec49e48a4 add doc entry for new metric consul.api.http, mark consul.http.. as deprecated in 1.9 2020-10-02 14:02:52 -07:00
Kit Patella 5524a43f10
Merge pull request #8271 from coignetp/http-metrics-label 
Use method and path as labels for http metrics
 2020-10-02 13:41:48 -07:00
Luke Kysow 80dda19363
Update k8s upgrade docs (#8789) 
* Update k8s upgrade docs
 2020-10-01 14:36:15 -07:00
R.B. Boyer 4b525e5d16
agent: enable enable_central_service_config by default (#8746) 2020-10-01 09:19:14 -05:00
Chris Piraino 450540af33
docs: specify what version usage metrics were added in (#8767) 2020-09-28 16:33:02 -05:00
Kit Patella 2668983cd0
Fix typos in telemetry.mdx 2020-09-28 13:50:11 -07:00
Jeff Escalante fd246a384d
fix jepsen circular redirect (#8757) 2020-09-25 16:42:57 -04:00
Michael Hofer d8fa125002
Fix typo in Service Discovery/Services documentation 2020-09-25 10:36:32 +02:00
Petrik van der Velde 4d447e6e76
Improve the Azure cloud auto join documentation (#8530) 
* Update the Azure cloud auto join documentation with more explicit information on how to configure the infrastructure.
* Add a note regarding the length of time taken for Azure to sync the MSI permissions.
* Update references from tag_name to tag_key in the Azure examples
Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>
 2020-09-24 22:41:26 -04:00
Joel Watson 41d47ab94a
Merge pull request #8678 from hashicorp/watsonian/upgrade-docs 
docs: Add documentation for large version jump upgrades
 2020-09-24 16:49:16 -05:00
Mike Morris f306e18c1a
docs: highlight Vault service mesh CA integration (#8730) 2020-09-24 15:38:49 -04:00
Hans Hasselberg 6467eb08dd
add -list-primary to consul keyring command (#8692) 
* add -list-primary

* add docs

* use builder

* fix multiple actions
 2020-09-24 20:04:20 +02:00
danielehc c140c810f2
Add alias-node option info (#8706) 2020-09-23 18:11:09 +02:00
Prabodh 4432a39462
Update index.mdx (#8727) 
Fixed a gramatical mistake.
 2020-09-22 17:57:46 -04:00
Michael Ethridge 2f8fa3a444
Adding Vault ACL examples for Connect CA (#8536) 2020-09-22 16:02:06 -04:00
Luke Kysow cacc7a1d68
Reword docs to make k8s arch clear (#8723) 
* Reword docs to make k8s arch clear

Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
 2020-09-22 10:31:29 -07:00
Joel Watson 7b2a2d6b0b Incorporate changes from engineering review 2020-09-22 11:27:57 -05:00
Joel Watson 7097a7b92c Language changes from review 
Co-Authored-By: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
 2020-09-22 11:21:28 -05:00
Joel Watson 9ff9a8c478 Add documentation for large version jump upgrades. 2020-09-22 11:21:28 -05:00
Nicole Forrester d97fb3f35c
Add Using in Production Question (#8718) 
* website: add using in prod question

* adjust padding
 2020-09-21 20:08:44 -04:00
Daniel Kimsey fbf01fca67
Clarify consul maint enable/disable scope (#8615) 
Try to make it more clear to an operator that toggling off a node-level
maintenance is independent of toggling service level maintenance.
 2020-09-21 12:32:10 -04:00
Lowe Schmidt c4c85ee106
docs: Fix typo in tutorial URL (#8716) 2020-09-21 07:08:00 -07:00
Blake Covarrubias 684675e6b2
docs: Add go-sockaddr examples for bind_addr (#8677) 
Add examples of using a go-sockaddr template with `bind_addr` within
HCL or JSON configuration.

Resolves #8633
 2020-09-18 08:15:30 -07:00
Blake Covarrubias 305f985c70
docs: Add missing options for consul connect envoy (#8670) 
Document missing CLI options for the `consul connect envoy` command.

Resolves #8041
 2020-09-18 08:11:48 -07:00
Preetha 8e974bdf3c
Merge pull request #8638 from eckdanny/docs/clarify-kv-keys-url-safe 
docs: clarify KV url-safe key names
 2020-09-17 15:51:15 -05:00
Mike Wickett 765c1128aa website: change sku to tier 2020-09-17 12:56:31 -04:00
Mike Wickett bee9a7225f website: update alert bar for HCS prod sku 2020-09-17 12:19:26 -04:00
Sabeen Syed 238353406a Add Consul ESM to Consul Tools page 2020-09-16 09:18:15 -04:00
Blake Covarrubias 6bc5f24ed9
Add path-based routing example to Ingress docs (#8672) 
Add configuration example for HTTP path-based routing with virtual
services to Ingress gateway configuration entry documentation.

Resolves #8018
 2020-09-15 15:37:47 -07:00
Hans Hasselberg 296340e13f
Update API docs for GET /operator/keyring (#8691) 
The response includes a new field: PrimaryKeys that lists the installed
primary keys.
 2020-09-15 21:35:02 +02:00
Blake Covarrubias 7ccc2bc9d0
website: Add redirects for additional pages (#8684) 
Add redirects for additional pages which have old URLs being returned
in search engine results.
 2020-09-15 11:49:34 -07:00
Jeff Escalante feca125e96
round 2 2020-09-15 12:01:47 -04:00
Jeff Escalante 6562b1cd47
redirect fix round 1 2020-09-15 11:37:59 -04:00
Blake Covarrubias 003cada619
docs: Add -node-identity option to token and role command (#8671) 
Document `-node-identity` option which was added in #7970 for
`acl token <create|update>` and `acl role <create|update>` commands.
 2020-09-14 19:02:43 -07:00
Freddy 3d8e132609
Support specifying load balancer configuration for destination services 
Load balancing policies are configured in service-resolvers. All Envoy load balancing algorithms are currently supported. Including: least_request, round_robin, random, maglev, and ring_hash.

At the moment hash-based load balancing configuration is not applied at mesh gateways since they cannot decrypt traffic to inspect HTTP attributes like headers.
 2020-09-14 12:02:26 -06:00
Derek Strickland 86bf775b69
Fixed broken install links (#8674) 2020-09-14 13:37:35 -04:00
David Yu 51f048b21c
Create compatability.mdx for Consul Kubernetes docs (#8655) 
Create Compatibility Matrix page for Consul and Consul on Kubernetes underneath Upgrade section in the Kubernetes docs.
 2020-09-14 10:24:39 -07:00
freddygv 33af8dab9a Resolve conflicts against master 2020-09-11 18:41:58 -06:00
freddygv 60cb306524 Add session flag to cookie config 2020-09-11 18:34:03 -06:00
Derek Strickland d170f17951
Added docs link to Learn tutorial for Kind. (#8610) 2020-09-11 17:03:35 -04:00
Jasmine W ee41b2f338
Merge pull request #8666 from hashicorp/update-docs-redirect 
Update _redirects
 2020-09-11 15:41:59 -05:00
kaitlincarter-hc 20e6b21f68
Website Links to Learn (#8641) 
* update links

* Update website/pages/home/index.jsx
 2020-09-11 15:33:15 -05:00
Jasmine W 36bed13002 Update _redirects 
- updating old acl redirects
- removed duplicate ones I added previously toward the bottom
 2020-09-11 14:39:49 -05:00
freddygv 5707ac9d17 Update website docs 2020-09-11 10:50:57 -06:00
Derek Strickland f64ae7adb5
Fixed broken link to Helm Chart install page. (#8662) 2020-09-11 12:48:41 -04:00
Joel Watson 5e0cd29a96
Merge pull request #8544 from hashicorp/watsonian/consul-acl-translate-rules-typo 
Fix usage typo for `consul acl translate-rules`
 2020-09-09 15:33:30 -05:00
Joel Watson 668193fada s/translate rules/translate-rules/ 
Just fixes a typo in the command's usage info.
 2020-09-09 14:16:29 -05:00
Jasmine W 38fda0b0f0 added Integration category 
- added "Integration" category
- added redirects
 2020-09-09 13:55:36 -05:00
Luke Kysow 99951dbba5
Move around k8s docs 
* k8s > ambassador integration moved to k8s > service mesh > ambassador integration
* k8s > get started > overview moved to k8s > get started > install with
helm chart
* k8s > helm chart reference renamed to helm chart configuration
 2020-09-09 09:59:51 -07:00
Jasmine W b8439e2023
Update index.mdx (#8632) 
renamed page to remain consistent
 2020-09-09 11:07:20 -04:00
Danny Eck 6ba981a8b7 docs: clarify KV url-safe key names 2020-09-08 23:04:32 -05:00
Blake Covarrubias 2f9c3b870b docs: Fix rendering of link under service config endpoint 
HTML and markdown cannot be present in the same line. Change markdown
link to HTML anchor element.
 2020-09-08 17:41:10 -07:00
Luke Kysow 0f58a22f0d
Move helm reference out 2020-09-08 12:05:55 -07:00
Luke Kysow 719067af0d
Update useSystemRoots docs for k8s 2020-09-08 11:11:48 -07:00
Kevin Pruett b0f08fe8e2 Integrate @hashicorp/react-search into layout 2020-09-08 11:32:00 -04:00
Tyler Ryan 9da56d95aa
Clarifying service definition requirements for registering a service … (#8608) 2020-09-03 14:25:54 -04:00
R.B. Boyer 23bb4bd20c
docs: forgot to change this version number when the feature was backported (#8607) 2020-09-03 11:08:59 -05:00
R.B. Boyer b0bde51e70
connect: all config entries pick up a meta field (#8596) 
Fixes #8595
 2020-09-02 14:10:25 -05:00
Chris Piraino d661197a3c docs: add new usage metrics to telemetry page 2020-09-02 10:38:29 -05:00
freddygv d7bda050e0 Restructure structs and other PR comments 2020-09-02 09:10:50 -06:00
Hans Hasselberg e3fbebda01
add docs for dual stack options (#8407) 2020-09-02 14:15:41 +02:00
Jasmine W 8ae3332165
docs: update structure (#8506) 
- moved and renamed files/folders based on new structure
- updated docs navigation based on new structure
- moved CLI to top nav (created commands.jsx and commands-navigation.js)
- updated and added redirects
- updating to be consistent with standalone categories
- changing "overview" link in top nav to lead to where intro was moved (docs/intro)
- adding redirects for intro content
- deleting old intro folders
- format all data/navigation files
- deleting old commands folder
- reverting changes to glossary page
- adjust intro navigation for removal of 'vs' paths
- add helm page redirect
- fix more redirects
- add a missing redirect
- fix broken anchor links and formatting mistakes
- deleted duplicate section, added redirect, changed link
- removed duplicate glossary page
 2020-09-01 11:14:13 -04:00
freddygv 58a018c20b Add documentation for resolver LB cfg 2020-08-28 14:46:13 -06:00
Jack 145bcdc2bb
Add http2 and grpc support to ingress gateways (#8458) 2020-08-27 15:34:08 -06:00
Nick Wales a94da1782d
Fixes table formatting (#8572) 2020-08-26 15:11:56 -04:00
Jeff Escalante 8d66456880
Merge pull request #8531 from hashicorp/je.fix-broken-links 
Docs Sidenav Update, Fix Broken Links
 2020-08-24 15:43:08 -04:00
Kyle MacDonald 8faf4a69af
website: add link to certification on /community (#7807) 2020-08-24 15:21:54 -04:00
Jeff Escalante b577dca6b6
one more 2020-08-18 19:13:40 -04:00
Jeff Escalante ef51acd428
more link fixes 2020-08-18 18:57:52 -04:00
Jeff Escalante 46a7884eb5
fix a bunch of broken links 2020-08-18 18:22:29 -04:00
danielehc 87fb6b9339
Adding warning for ACL replication data loss (#8210) 2020-08-18 17:48:37 -04:00
Jeff Escalante 14545999c6
fix more redirects 2020-08-18 16:36:40 -04:00
Jeff Escalante 3ca754dd6e
remove invalid redirects 2020-08-18 16:36:21 -04:00
Jeff Escalante ca8c9484e9
upgrade to latest docs-sidenav, fix some issues with the k8s section 2020-08-18 15:11:06 -04:00
danielehc 4a1cc8b9f9
Refactor api-docs links to learn (#8488) 2020-08-17 18:20:02 +02:00
danielehc e5d84ad45a
Refactor docs links to learn 2 (#8491) 
* Refactor docs links to learn

* Apply suggestions from code review

Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>

Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
 2020-08-17 18:19:04 +02:00
danielehc b2d87296ca
Refactor docs links to learn (#8490) 2020-08-17 18:17:51 +02:00
Derek Strickland e5e2e3c3e3
Added link to Secure Consul on K8S Tutorial (#8402) 2020-08-14 14:27:34 -04:00
Iryna Shustava 12ee36abd9
docs: add docs to use Connect CA providers with Helm (#8464) 2020-08-13 14:29:59 -07:00
Derek Strickland d373be125e
Learn/link updates derek (#8487) 
* Updated Learn url paths.

Co-authored-by: danielehc <40759828+danielehc@users.noreply.github.com>
 2020-08-13 17:02:44 -04:00
Iryna Shustava 426e8b9029
docs: consul on k8s doesn't support external servers requiring mTLS (#8484) 2020-08-13 12:04:34 -07:00
Luke Kysow 02c2f023f5
Update k8s sync docs (#8452) 
* Update k8s sync docs

- remove docs that said for nodeport service we register each instance
on a node with its same node name. We instead register each instance
onto the k8s-sync node
- add docs describing which ports and ips are used
 2020-08-12 16:34:55 -07:00
Luke Kysow 1095b93775
Document k8s sidecar resource annotations (#8455) 2020-08-12 16:34:17 -07:00
s-christoff b218692382
Update version.js to 1.8.3 (#8505) 2020-08-12 17:35:54 -05:00
Iryna Shustava c2d02e8a06
docs: update helm chart ref (#8483) 
No longer require servers to be running on k8s when
manageSystemACLs is true
 2020-08-11 14:39:44 -07:00
Mike Morris d9ef146d82
changelog: Update for 1.8.2, 1.7.6, 1.7.5 and 1.6.7 (#8462) 
* update bindata_assetfs.go

* Release v1.8.2

* Putting source back into Dev Mode

* changelog: add entries for 1.7.6, 1.7.5 and 1.6.7

Co-authored-by: hashicorp-ci <hashicorp-ci@users.noreply.github.com>
 2020-08-07 18:58:09 -04:00
Jack fc280a7305
Specify allowed ingress gateway protocols in docs (#8454) 
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
 2020-08-07 13:25:23 -06:00
Hans Hasselberg fdceb24323
auto_config implies connect (#8433) 2020-08-07 12:02:02 +02:00
Rebecca Zanzig eb934a2979
Merge pull request #8426 from hashicorp/docs/k8s-resources 
Add lifecycle sidecar and init container resource settings docs
 2020-08-06 15:28:11 -07:00
Rebecca Zanzig 41a3a27ff2 Add lifecycle sidecar and init container resource settings docs 2020-08-06 15:11:54 -07:00
Blake Covarrubias 5e13ef68a8 website: Redirect /mesh to new URL 
Redirect service mesh use case page to point to new URL.
 2020-08-06 09:25:08 -07:00
Mike Morris ce162270b2
Update version.js to 1.8.1 (#8439) 2020-08-05 16:56:38 -04:00
R.B. Boyer 8ea4c482b3
xds: add support for envoy 1.15.0 and drop support for 1.11.x (#8424) 
Related changes:

- hard-fail the xDS connection attempt if the envoy version is known to be too old to be supported
- remove the RouterMatchSafeRegex proxy feature since all supported envoy versions have it
- stop using --max-obj-name-len (due to: envoyproxy/envoy#11740)
 2020-07-31 15:52:49 -05:00
Matt Keeler 2e19a52b1b
Add some auto-config docs (#8410) 
We will probably want a tutorial about this in the future but for now at least we document it a little.
 2020-07-30 12:10:25 -04:00
Blake Covarrubias 985fd245eb docs: Fix typo in -pid file description 
Fix typo in `-pid` file option description. This change restores text
which was erroneously deleted in PR #736 with commit f41dce9.

Fixes #8388
 2020-07-28 10:21:28 -07:00
Pierre Souchay 947d8eb039
Added ratelimit to handle throtling cache (#8226) 
This implements a solution for #7863

It does:

    Add a new config cache.entry_fetch_rate to limit the number of calls/s for a given cache entry, default value = rate.Inf
    Add cache.entry_fetch_max_burst size of rate limit (default value = 2)

The new configuration now supports the following syntax for instance to allow 1 query every 3s:

    command line HCL: -hcl 'cache = { entry_fetch_rate = 0.333}'
    in JSON

{
  "cache": {
    "entry_fetch_rate": 0.333
  }
}
 2020-07-27 23:11:11 +02:00
Blake Covarrubias ec612d7744 docs: Modify website redirects for gateways 
Modify the HTTP redirects for the gateway documentation to point to
the updated URL locations. Missed in PR #8195.
 2020-07-27 09:27:56 -07:00
Blake Covarrubias 38b41a7a11 docs: Modify network segments limitation callout 
Change the callout on the Network Segments page to specify the
limitation applies to versions of Consul prior to version 1.7.3.
 2020-07-27 09:10:27 -07:00
Blake Covarrubias 8aa4dc9c16 docs: Add redirect for /docs/k8s/connect.html 
Redirect /docs/k8s/connect.html to /docs/k8s/connect/overview.
 2020-07-24 16:15:47 -07:00
Freddy 642afcd364
Gateway tasks and overview (#8195) 
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
 2020-07-24 15:07:36 -06:00
Luke Kysow ebcc925e18
Merge pull request #8368 from hashicorp/lkysow-patch-1 
Update terminating-gateways.mdx
 2020-07-23 09:45:20 -07:00
Brandon Romano c7c3d7597d Update alert banner to HCS GA 2020-07-23 09:35:41 -07:00
Luke Kysow 41003caadc
Update terminating-gateways.mdx 
* fix formatting issue
* use a command that will work with any pod id
 2020-07-23 09:19:33 -07:00
Brandon Romano 2b602bbba7 Adds cloud offerings section to website 2020-07-23 01:21:15 -07:00
Kyle Schochenmaier 3c75847ee2
terminating gw docs (#8300) 
* terminating gw docs
Co-authored-by: Rebecca Zanzig <16315901+adilyse@users.noreply.github.com>
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
 2020-07-22 16:02:47 -05:00
Geoffrey Grosenbach 68d6a08481
Restore link to /intro docs in main menu (#8356) 
The "Overview" link previously went to a summary of Consul features and a
comparison to other products. This commit restores that destination at the
request of Consul PMs.

This commit previously removed the link (it went to `/` instead of `/intro`).

ac612a9cdc (diff-f98b55875118725d1373dd2da36d9ee5)
 2020-07-22 10:28:09 -07:00
Nathan Lacey a1196feec3
Add certificate disclaimer for TLS encryption (#8316) 
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
 2020-07-21 10:38:03 -06:00
Joel Watson 56c4d6e98f
docs: Add raft_multiplier default clarification (#8339) 2020-07-20 15:49:46 -06:00
Blake Covarrubias 4fecce1344 docs: Fix heading for list prepared queries endpoint 2020-07-17 09:00:17 -07:00
Blake Covarrubias d17cc4044d
docs: Fix link to kv_max_value_size config option (#8322) 
The sizing recommendation link should point to the config option for
tuning kv_max_value_size.
 2020-07-16 14:13:06 -07:00
Sabeen Syed 5898692543
Merge pull request #8259 from hashicorp/enterprise_docs_update 
Consul Enterprise docs update
 2020-07-16 15:34:15 -05:00
Kyle Schochenmaier 01fdd638e3
Apply suggestions from code review 2020-07-15 18:24:55 -05:00
Kyle Schochenmaier 8804f7b322
Merge branch 'master' into k8s/gateway-setup-docs 2020-07-15 17:47:21 -05:00
Kyle Schochenmaier 08db6cfd20
ingress gw docs for k8s (#8291) 
Co-authored-by: Derek Strickland 
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
 2020-07-15 17:45:20 -05:00
Jeff Escalante 3d91a21d44
Merge pull request #8230 from hashicorp/je.pin-deps 
📌 Hard Pin Website Dependencies
 2020-07-15 18:45:19 -04:00
Kyle Schochenmaier b7c970adb0 update sidebar 2020-07-15 17:42:48 -05:00
Kyle Schochenmaier a384226876 remove term-gw until its ready to merge and update redirects 2020-07-15 17:38:23 -05:00
Hans Hasselberg 0c39b2c820
add support for envoy 1.14.4, 1.13.4, 1.12.6 (#8216) 2020-07-13 15:44:44 -05:00
Chris Piraino 51f71d43ab
docs: add section for /health/ingress/:service API (#8108) 
* docs: add section for /health/ingress/:service API

* Add documentation around consul version for API

* docs: add note about gateway-services API release version
 2020-07-10 12:36:46 -05:00
Matt Keeler c9ccbab65a
Merge pull request #8268 from hashicorp/feature/improved-version-output 
Add Revision to version CLI output and add JSON support
 2020-07-10 10:01:57 -04:00
Paul Coignet 8f373e7d6e
Keep both metrics 2020-07-10 11:27:22 +02:00
R.B. Boyer 6e3d07c995
xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8222) 
- cut down on extra node metadata transmission
- split the golden file generation to compare all envoy version
 2020-07-09 17:04:51 -05:00
Jeff Escalante 51f2a6e5b7
remove extra dependencies 2020-07-09 14:56:22 -04:00
Paul Coignet a1e698dcff
Use method and path as labels 2020-07-09 10:31:27 +02:00
Sabeen Syed 65768f6516 docs: Add Audit Logging page under Consul Enterprise 2020-07-08 18:16:12 -05:00
Jeff Escalante 7d590e62c5
update deps, format all files 2020-07-08 19:12:34 -04:00
Jeff Escalante 734beb069a
update and hard-pin dependencies 2020-07-08 18:44:34 -04:00
Matt Keeler ca169ef6ed
Add Revision to version CLI output and add JSON support 
Also add JSON format support
 2020-07-08 16:32:46 -04:00
JohnnyB d7e3156972
Added undocumented CONSUL_NAMESPACE to website. (#8264) 2020-07-08 10:41:42 -04:00
Sabeen Syed 38892f2725 docs: Update Consul Enterprise Intro 2020-07-07 16:11:30 -05:00
Daniel Nephin 72d1742bd9 docs: dns_config.cache_max_age=0 2020-07-07 15:24:26 -04:00
Jeff Escalante 3ef57a8ead learn -> tutorials in subnav 2020-07-06 18:44:30 -04:00
Seth Hoenig 4771f8df83
docs: fix link to connect authorize endpoint (#8248) 
/docs/connect/intentions has a broken link presumably meant
to go to /api-docs/agent/connect#authorize

This PR fixes the link.
 2020-07-06 16:16:09 -05:00
Kevin Pruett 959e9427df Append redirects 2020-07-06 09:39:37 -07:00
Kevin Pruett f7a56daecd
Merge pull request #8242 from hashicorp/pruett.ci-fixup 
Update Algolia CI script
 2020-07-06 11:22:54 -04:00
Kevin Pruett 4fa0efed59
Update Algolia CI script 2020-07-06 10:09:48 -04:00
Jono Sosulska 41ba3fca9c
Fix typos on commandline flags, updated config opts (#8227) 
* Fix typos on commandline flags, updated config opts

- Added anchors to https://github.com/hashicorp/consul/pull/8223
- Fix Typos

Updated to include config file options as well as CLI.
 2020-07-02 16:13:11 -04:00
Jeff Escalante eecfb2717a remove unneeded mdx provider option 2020-07-02 14:22:29 -04:00
Jeff Escalante 08a76913f8 drop out unused font 2020-07-02 14:22:29 -04:00
Jeff Escalante fc303e318e generate readme 2020-07-02 14:22:29 -04:00
Jeff Escalante 06dc0a38ca update dependencies, fapply upgrades, fix breaking changes 2020-07-02 14:22:29 -04:00
Blake Covarrubias ec35a78ffc
docs: Fix formatting issues on built-in proxy page (#8005) 
Fix markdown formatting and display issues on built-in proxy page.
 2020-07-02 12:39:50 -04:00
Rémi Lapeyre 1134e2aafc
Fix typo in configuration documentation (#7997) 2020-07-02 12:39:23 -04:00
kaitlincarter-hc 5de6302051
update landing page links to learn to specific guides (#8214) 2020-07-01 14:58:46 -05:00
André ea11156c45
Update lock.mdx (#8217) 
Remove duplicated `-timeout` value.
 2020-07-01 14:59:07 +02:00
Fatih Sarhan eafb9ffd3c docs: Fix typo on openstack cloud-auto-join 2020-06-29 13:56:01 -07:00
Kevin Pruett 333e0d3e5d
Add Algolia indexing to CI 2020-06-29 12:14:43 -04:00
Seth Hoenig c2a1322894
api/agent: enable setting SuccessBeforePassing and FailuresBeforeCritical in API (#7949) 
Fixes #7764

Until now these two fields could only be set through on-disk agent configuration.
This change adds the fields to the agent API struct definition so that they can
be set using the agent HTTP API.
 2020-06-29 14:52:35 +02:00
R.B. Boyer 72a515f5ec
connect: various changes to make namespaces for intentions work more like for other subsystems (#8194) 
Highlights:

- add new endpoint to query for intentions by exact match

- using this endpoint from the CLI instead of the dump+filter approach

- enforcing that OSS can only read/write intentions with a SourceNS or
  DestinationNS field of "default".

- preexisting OSS intentions with now-invalid namespace fields will
  delete those intentions on initial election or for wildcard namespaces
  an attempt will be made to downgrade them to "default" unless one
  exists.

- also allow the '-namespace' CLI arg on all of the intention subcommands

- update lots of docs
 2020-06-26 16:59:15 -05:00
Freddy 36a9bb4133
Update website/pages/docs/acl/auth-methods/jwt.mdx 
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
 2020-06-25 11:43:42 -06:00
freddygv 5b5210e2b7 Remove remaining beta tags 2020-06-24 16:12:24 -06:00
freddygv 2adf1df079 Remove stray instruction 2020-06-24 16:12:08 -06:00
freddygv 5f34f9954c Add docs for upstream destination's namespace 2020-06-24 16:11:44 -06:00
freddygv 1ac7e9a07d Add tabs to config entry examples 2020-06-24 16:10:46 -06:00
Rebecca Zanzig 5cf7f86091 Rearrange k8s connect docs to make space for gateways 2020-06-24 13:35:14 -07:00
Mike Morris 8a496af085
Update dev.mdx (#8090) 
Remove ref to "virtual service" to avoid confusion with L7 routing virtual services, replace with "debug service".
 2020-06-24 14:26:01 +02:00
Valery V. Vorotyntsev 0e50884525
Fix quorum formula in consensus.mdx (#8166) 
[Add & Remove Servers](https://learn.hashicorp.com/consul/day-2-operations/servers)
guide uses `(N/2)+1` quorum formula.  So does the
[Raft implementation](5927dcda05/raft.go (L909)).

Consensus Protocol document uses `(n+1)/2` formula.
This formula is not only different, it conflicts with the
[Deployment Table](https://www.consul.io/docs/internals/consensus.html#deployment_table)
in the same document; e.g., (6+1)/2 = 3, not 4.

Replace `(n+1)/2` with `(N/2)+1` in Consensus Protocol document.
 2020-06-24 14:23:36 +02:00
Chris Piraino c1f485c516
docs: Specify port in host for example (#8167) 
This example shows a TLS enabled ingress config on a non-https port.
Currently, that means we require the port to be specified in one of the
host entries to route traffic.
 2020-06-23 14:41:51 -05:00
freddygv 224f486aef Update namespaces subject-verb agreement 2020-06-23 10:57:30 -06:00
Brandon Romano 8c1ccf96e9 Update Nav 2020-06-21 19:35:34 -07:00
Preetha 0d4d807cb0
remove prerelease tag 2020-06-18 20:02:21 -05:00
Preetha 83241ec09e
update alert banner 2020-06-18 19:36:42 -05:00
Preetha 52dc72c24a
update version to 1.8.0 2020-06-18 19:32:11 -05:00
Freddy 4948cd403f
Finalize gateway documentation for 1.8.0 GA (#8121) 
Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
 2020-06-18 15:27:06 -06:00
Luke Kysow c937cbd0cf
Remove consul:beta now that 1.8 is out. 2020-06-18 11:50:25 -07:00
Rebecca Zanzig b9ec0d310f
Merge pull request #8126 from hashicorp/k8s/gateway-docs 
Add helm chart options for ingress and terminating gateways
 2020-06-18 11:30:59 -07:00
Jono Sosulska 1f1eb0cb33
Fixing multiple document updates (#8135) 
* Fixes #7663-ACL Token Reloadable#7432-Cipher Suites,#7385-KV Delete DC, raft list-peers docs

Co-authored-by: Freddy <freddygv@users.noreply.github.com>
 2020-06-18 14:10:45 -04:00
Rebecca Zanzig c1d37ddd6b Add helm chart options for ingress and terminating gateways 2020-06-18 11:04:19 -07:00
Dexter Lowe a27694d110
#8059 Improve Clarity on TTL docs (#8141) 2020-06-18 13:53:43 -04:00
Chris Piraino 03cc81ba18
Updates docs with ingress Host header clarifications (#8062) 
* Updates docs with ingress Host header changes

Clarify that a Host header is required for L7 protocols, and specify
that the default is to use the Consul DNS ingress subdomain

* Add sentence about using '*' by itself for testing

* Add optional step for using L7 routing config

* Note that port numbers may need to be added in the Hosts field
 2020-06-17 14:43:58 -05:00
Kevin Pruett 5d0bd935b0
Update @hashicorp/nextjs-scripts dep 2020-06-17 12:01:56 -04:00
wisp 9bad4aaf9a
Fixed a typo (#8132) 
Fixed a little typo 🐰
 2020-06-17 10:21:33 -04:00
David Yu 818ce2eca6
Formatting spaces between keys in Config entries (#8116) 
* Formatting spaces between keys in Config entries

* Service Router spacing

* Missing Camel Case proxy-defaults

* Remove extra spaces service-splitter

* Remove extra spsaces service-resolver

* More spaces a la hclfmt

* Nice!

* Oh joy!

* More spaces on proxy-defaults

* Update website/pages/docs/agent/config-entries/proxy-defaults.mdx

Co-authored-by: Chris Piraino <cpiraino@hashicorp.com>
 2020-06-16 11:28:21 -07:00
Matt Keeler cdc4b20afa
ACL Node Identities (#7970) 
A Node Identity is very similar to a service identity. Its main targeted use is to allow creating tokens for use by Consul agents that will grant the necessary permissions for all the typical agent operations (node registration, coordinate updates, anti-entropy).

Half of this commit is for golden file based tests of the acl token and role cli output. Another big updates was to refactor many of the tests in agent/consul/acl_endpoint_test.go to use the same style of tests and the same helpers. Besides being less boiler plate in the tests it also uses a common way of starting a test server with ACLs that should operate without any warnings regarding deprecated non-uuid master tokens etc.
 2020-06-16 12:54:27 -04:00
David Yu de65e6300e
Switching service-route, service-resolver, service-splitter examples to CamelCase (#8107) 
* Switching service-route example to CamelCase

* Switch service-resovler examples to CamelCase

* Changing service-splitter examples to CamelCase
 2020-06-15 14:14:36 -07:00