Commit Graph

1367 Commits

Author SHA1 Message Date
James Phillips fcaa889116 Bumps default Raft protocol to version 3. (#3477)
* Changes default Raft protocol to 3.

* Changes numPeers() to report only voters.

This should have been there before, but it's more obvious that this
is incorrect now that we default the Raft protocol to 3, which puts
new servers in a read-only state while Autopilot waits for them to
become healthy.

* Fixes TestLeader_RollRaftServer.

* Fixes TestOperator_RaftRemovePeerByAddress.

* Fixes TestServer_*.

Relaxed the check for a given number of voter peers and instead do
a thorough check that all servers see each other in their Raft
configurations.

* Fixes TestACL_*.

These now just check for Raft replication to be set up, and don't
care about the number of voter peers.

* Fixes TestOperator_Raft_ListPeers.

* Fixes TestAutopilot_CleanupDeadServerPeriodic.

* Fixes TestCatalog_ListNodes_ConsistentRead_Fail.

* Fixes TestLeader_ChangeServerID and adjusts the conn pool to throw away
sockets when it sees io.EOF.

* Changes version to 1.0.0 in the options doc.

* Makes metrics test more deterministic with autopilot metrics possible.
2017-09-25 15:27:04 -07:00
Frank Schröder 69a088ca85 New config parser, HCL support, multiple bind addrs (#3480)
* new config parser for agent

This patch implements a new config parser for the consul agent which
makes the following changes to the previous implementation:

 * add HCL support
 * all configuration fragments in tests and for default config are
   expressed as HCL fragments
 * HCL fragments can be provided on the command line so that they
   can eventually replace the command line flags.
 * HCL/JSON fragments are parsed into a temporary Config structure
   which can be merged using reflection (all values are pointers).
   The existing merge logic of overwrite for values and append
   for slices has been preserved.
 * A single builder process generates a typed runtime configuration
   for the agent.

The new implementation is more strict and fails in the builder process
if no valid runtime configuration can be generated. Therefore,
additional validations in other parts of the code should be removed.

The builder also pre-computes all required network addresses so that no
address/port magic should be required where the configuration is used
and should therefore be removed.

* Upgrade github.com/hashicorp/hcl to support int64

* improve error messages

* fix directory permission test

* Fix rtt test

* Fix ForceLeave test

* Skip performance test for now until we know what to do

* Update github.com/hashicorp/memberlist to update log prefix

* Make memberlist use the default logger

* improve config error handling

* do not fail on non-existing data-dir

* experiment with non-uniform timeouts to get a handle on stalled leader elections

* Run tests for packages separately to eliminate the spurious port conflicts

* refactor private address detection and unify approach for ipv4 and ipv6.

Fixes #2825

* do not allow unix sockets for DNS

* improve bind and advertise addr error handling

* go through builder using test coverage

* minimal update to the docs

* more coverage tests fixed

* more tests

* fix makefile

* cleanup

* fix port conflicts with external port server 'porter'

* stop test server on error

* do not run api test that change global ENV concurrently with the other tests

* Run remaining api tests concurrently

* no need for retry with the port number service

* monkey patch race condition in go-sockaddr until we understand why that fails

* monkey patch hcl decoder race condidtion until we understand why that fails

* monkey patch spurious errors in strings.EqualFold from here

* add test for hcl decoder race condition. Run with go test -parallel 128

* Increase timeout again

* cleanup

* don't log port allocations by default

* use base command arg parsing to format help output properly

* handle -dc deprecation case in Build

* switch autopilot.max_trailing_logs to int

* remove duplicate test case

* remove unused methods

* remove comments about flag/config value inconsistencies

* switch got and want around since the error message was misleading.

* Removes a stray debug log.

* Removes a stray newline in imports.

* Fixes TestACL_Version8.

* Runs go fmt.

* Adds a default case for unknown address types.

* Reoders and reformats some imports.

* Adds some comments and fixes typos.

* Reorders imports.

* add unix socket support for dns later

* drop all deprecated flags and arguments

* fix wrong field name

* remove stray node-id file

* drop unnecessary patch section in test

* drop duplicate test

* add test for LeaveOnTerm and SkipLeaveOnInt in client mode

* drop "bla" and add clarifying comment for the test

* split up tests to support enterprise/non-enterprise tests

* drop raft multiplier and derive values during build phase

* sanitize runtime config reflectively and add test

* detect invalid config fields

* fix tests with invalid config fields

* use different values for wan sanitiziation test

* drop recursor in favor of recursors

* allow dns_config.udp_answer_limit to be zero

* make sure tests run on machines with multiple ips

* Fix failing tests in a few more places by providing a bind address in the test

* Gets rid of skipped TestAgent_CheckPerformanceSettings and adds case for builder.

* Add porter to server_test.go to make tests there less flaky

* go fmt
2017-09-25 11:40:42 -07:00
Frank Schroeder 78ce956385
Update docs for addr_type option for AWS Cloud auto-join (#3471)
Fixes #3471
2017-09-25 09:54:58 +02:00
Frank Schroeder bcfe1190d4
Fix Azure cloud auto-join docs (#3466)
Fixes #3466
2017-09-25 02:44:04 +02:00
Michael Stewart 1040dbb2d4 Fix docs/guides/segements sidebar selection. 2017-09-19 16:45:39 -05:00
Preetha Appan df742843a4
Adds documentation for Sentinel integration in Consul Enterprise. 2017-09-19 09:02:53 -05:00
James Phillips 1906462eec Merge pull request #3456 from hashicorp/gossip-fix
Adds gossip keys to network segment memberlist configs.
2017-09-07 12:27:34 -07:00
James Phillips 02a3f3f27b
Shows the segment name in the keyring API and command output. 2017-09-07 12:17:39 -07:00
James Phillips 402ebe53ef Update outage.html.md 2017-09-06 21:19:46 -07:00
James Phillips 87eeec254f Update segments.html.markdown.erb 2017-09-06 16:42:13 -07:00
Kevin Fishner e70b8cc820 add newtork segments overview page 2017-09-04 15:44:13 -07:00
James Phillips f8a5476a3c Update options.html.md 2017-09-01 22:25:28 -07:00
James Phillips 76cd7963e5 Update maint.html.markdown.erb 2017-09-01 17:51:02 -07:00
phanidileep df4e77e179 Updating maint.html to remove node maint (#3354)
* Updating maint.html to remove node maint

as discussed in #3268 maint mode does not have any affect on the node health.

* Update maint.html.markdown.erb
2017-09-01 17:49:51 -07:00
James Phillips 1a64583c98 Fixes a bad link. 2017-09-01 15:07:18 -07:00
James Phillips bc9780baad Adds simple rate limiting for client agent RPC calls to Consul servers. (#3440)
* Added rate limiting for agent RPC calls.
* Initializes the rate limiter based on the config.
* Adds the rate limiter into the snapshot RPC path.
* Adds unit tests for the RPC rate limiter.
* Groups the RPC limit parameters under "limits" in the config.
* Adds some documentation about the RPC limiter.
* Sends a 429 response when the rate limiter kicks in.
* Adds docs for new telemetry.
* Makes snapshot telemetry look like RPC telemetry and cleans up comments.
2017-09-01 15:02:50 -07:00
James Phillips 20fcfe866e
Tweaks network segments guide. 2017-09-01 11:19:39 -07:00
Kyle Havlovitz 334e082848 Merge pull request #3431 from hashicorp/network-segments-oss 2017-09-01 10:24:58 -07:00
Kyle Havlovitz 5605d735a1
Update segment docs 2017-08-31 17:39:57 -07:00
Kyle Havlovitz 02c35fe0ba
Add doc sections for network segments 2017-08-31 11:19:08 -07:00
David Terry 5d891ba7e1 docs: add quotes around example invocation for google cloud retry join 2017-08-30 23:05:45 +02:00
Frank Schroeder 2190a4fb71
doc: document that retry-join values are URL encoded
Fixes #3417
2017-08-26 15:19:43 +02:00
Frank Schroeder b7c3c8756d
doc: fix parameter name for aws retry-join
Fixes #3417
2017-08-26 15:19:34 +02:00
Frank Schroeder 0e246054ef doc: document cloud auto-joining for retry-join-wan 2017-08-23 21:23:34 +02:00
Kevin Bidwell 8a53f556f9 Added configuration instructions for forwarding DNS queries from Unbound to consul. 2017-08-18 08:45:43 -06:00
Frank Schröder fd4bf4070e doc: retry_join is a string array (#3388) 2017-08-10 09:58:26 +02:00
James Phillips 48b1afeb26 Removes partial details in the retry_join config file section. (#3386) 2017-08-09 21:27:17 -07:00
Seth Vargo b6f4df4b03 Document the new auto-join in the config and CLI (#3381)
* Document the new auto-join in the config and CLI
* Mention and example DNS
2017-08-09 21:14:56 -07:00
Preetha Appan 00a5eb9071 Add note about configuring recursors to be able to resolve external services. 2017-08-09 11:13:30 -05:00
Kyle Havlovitz 160395d3c7
Add doc links for metrics endpoint 2017-08-08 13:05:38 -07:00
Kyle Havlovitz 975ded2714
Add support for labels/filters from go-metrics 2017-08-08 01:45:10 -07:00
Nicolae Vlădescu 8be48291da Add a more elegant alternative to the reap option
Add a more elegant alternative to the reap option using the native built-in docker init process
2017-08-07 11:49:40 +03:00
James Phillips 31676bba76
Adds a note about not replicating data to FAQ and federation-related spots. 2017-08-04 16:14:39 -07:00
James Phillips cdd2c75df6
Fixes a bunch of borken list nesting in the options doc. 2017-08-03 17:13:22 -07:00
James Phillips 803ed9a245 Adds secure introduction for the ACL replication token. (#3357)
Adds secure introduction for the ACL replication token, as well as a separate enable config for ACL replication.
2017-08-03 15:39:31 -07:00
Preetha Appan 4c0c912a52 Fix incorrect punctuation 2017-08-03 16:40:22 -05:00
Frank Schroeder d18141eb4b
doc: add retry-join docs for Softlayer 2017-08-03 21:35:30 +02:00
James Phillips c31b56a03e Adds a new /v1/acl/bootstrap API (#3349) 2017-08-02 17:05:18 -07:00
preetapan f6e0f5dc4b Merge pull request #3347 from hashicorp/containers_guide
Adds a containers guide to the documentation section.
2017-08-01 16:43:41 -05:00
Preetha Appan a708123164 Minor tweaks, fixed spacing issue with docker run examples 2017-08-01 16:38:34 -05:00
Preetha Appan ff4009bed2 Address more review comments 2017-08-01 15:25:13 -05:00
Preetha Appan bde197e161 Added links to new containers guide to navbar and index pages 2017-08-01 11:48:25 -05:00
Preetha Appan b5fc169e2c Added a section on configuration 2017-08-01 11:36:34 -05:00
Preetha Appan ec52d0036a More tweaks and grammar corrections 2017-08-01 11:13:24 -05:00
Preetha Appan d152b31364 More review feedback 2017-08-01 10:38:43 -05:00
Frank Schroeder 68e8f3d0f7 agent: use github.com/hashicorp/go-discover
Replace the provider specific node discovery code
with go-discover to support AWS, Azure and GCE.

Fixes #3282
2017-08-01 11:41:43 +02:00
Preetha Appan 7ab4255231 Addressed review comments 2017-07-31 19:56:42 -05:00
Preetha Appan a12cfe8918 Capitalize Consul and Docker throughout 2017-07-31 17:54:03 -05:00
Preetha Appan e4de25367d First pass at a consul containers guide 2017-07-31 17:19:15 -05:00
James Phillips 9b70009ab8 command/lock: Add -child-exitcode, return 2 on child error (#3329)
* Exit 2 if -child-exit-code and the child returned with an error.
* There is no platform independent way to check the exact return code of
* the child, so on error always return 2.
* Closes #947
* Closes #1503
2017-07-26 22:09:19 -07:00
James Phillips 005c9ad12a Update geo-failover.html.md 2017-07-26 16:42:35 -07:00
James Phillips cafe110669 Update geo-failover.html.md 2017-07-26 15:44:17 -07:00
James Phillips fe0f0285a9 Adds a geo failover guide using prepared queries. (#3328) 2017-07-26 15:40:01 -07:00
James Phillips 6e794ea1b3 Adds support for agent-side ACL token management via API instead of config files. (#3324)
* Adds token store and removes all runtime use of config for ACL tokens.
* Adds a new API for changing agent tokens on the fly.
2017-07-26 11:03:43 -07:00
James Phillips 923119a7d8 Update options.html.md 2017-07-24 22:37:12 -07:00
Jon Benson 623d4203c7 Fix spelling (#3311) 2017-07-20 14:48:45 -07:00
James Phillips 6e251d39b5 Updates consul exec docs to mention ACLs. (#3308)
* Update documentation for consul exec to mention all permissions it needs.

* Removed node write perm, not needed for consul exec

* Converts ACL note into a table like the API docs, adds ACL guide x-ref.
2017-07-20 09:30:08 -07:00
James Phillips 2d1111479e Clarifies endpoint blocking in the docs. 2017-07-19 17:14:19 -07:00
James Phillips 31ac5c45e1 Tweaks title. 2017-07-18 14:48:38 -07:00
Kyle Havlovitz 73ec6541f6
Add UpgradeVersionTag information to docs 2017-07-18 14:01:21 -07:00
James Phillips 30316a9a54 Update acl.html.md 2017-07-18 07:44:35 -07:00
James Phillips 8058f1b234 Improves structure of ACL guide. 2017-07-18 07:41:59 -07:00
James Phillips 52c69bbf17 Removes a merge conflict marker from the ACL guide. 2017-07-18 07:35:17 -07:00
James Phillips 3984530d63 Update upgrade-specific.html.md 2017-07-18 07:14:16 -07:00
James Phillips 0c57f90fd7 Update upgrade-specific.html.md 2017-07-18 07:11:59 -07:00
James Phillips fe7a24c846 Adds a missing newline to the snapshot agent page. 2017-07-17 22:22:50 -07:00
Charlie Voiselle 1d8c78645d Removed localhost from links (#3289)
Two links were still referring to localhost. Made them relative and tested.
2017-07-17 19:59:58 -07:00
James Phillips adc991fa5a Update upgrade-specific.html.md 2017-07-17 14:11:08 -07:00
James Phillips 788dd255a1 Adds new config to make script checks opt-in, updates documentation. (#3284) 2017-07-17 11:20:35 -07:00
James Phillips f7629a4f66 Fixes a broken link. 2017-07-17 00:07:34 -07:00
James Phillips 838591c916 Changes remote exec KV read to call GetTokenForAgent(). (#3283)
* Changes remote exec KV read to call GetTokenForAgent(), which can use
the acl_agent_token instead of the acl_token.

Fixes #3160.

* Fixes remote exec unit test with ACLs.

* Adds unhappy ACL path to unit tests for remote exec.
2017-07-16 21:12:16 -07:00
James Phillips 5876b81896 Adds node read privileges to the acl_agent_master_token. (#3277)
Fixes #3113.
2017-07-16 20:08:26 -07:00
Kyle Havlovitz 6ea05706a1
Add network area TLS setting to docs 2017-07-14 17:06:33 -07:00
Seth Vargo a2ba7071e9 Add catalog CLI functions (#3204) 2017-07-14 12:45:08 -07:00
James Phillips d63bf807a8 Update acl.html.md 2017-07-13 22:40:15 -07:00
James Phillips 8572931afe Cleans up version 8 ACLs in the agent and the docs. (#3248)
* Moves magic check and service constants into shared structs package.

* Removes the "consul" service from local state.

Since this service is added by the leader, it doesn't really make sense to
also keep it in local state (which requires special ACLs to configure), and
requires a bunch of special cases in the local state logic. This requires
fewer special cases and makes ACL bootstrapping cleaner.

* Makes coordinate update ACL log message a warning, similar to other AE warnings.

* Adds much more detailed examples for bootstrapping ACLs.

This can hopefully replace https://gist.github.com/slackpad/d89ce0e1cc0802c3c4f2d84932fa3234.
2017-07-13 22:33:47 -07:00
James Phillips a66d61622a Adds a version note about block_endpoints config. 2017-07-10 13:56:02 -07:00
James Phillips 68991da95f Adds the ability to blacklist specific HTTP endpoints. (#3252) 2017-07-10 13:51:25 -07:00
James Phillips 197394b156 Update autopilot.html.md 2017-07-07 14:38:35 -07:00
Seth Rutner 781b42e583 Update autopilot.html.md (#3244) 2017-07-07 14:34:59 -07:00
Brian Shumate bb18ffab27 DOCS: Add note in Ports Used section (#3241)
- Add note about port 8302 to address #3058
2017-07-07 09:38:56 -07:00
Chris Griggs 38f92aa4e8 Update # of ports (#3238)
I counted twice.
2017-07-06 13:50:12 -07:00
James Phillips 3388daf479 Adds links to Lifeguard info. 2017-07-06 12:19:39 -07:00
Frank Schroeder 913748bcc4
Revert "agent: add allowStale option for HTTP API (#3142)"
This reverts commit 1e0fd27a74f5b18775ce91a84310430de35a4a80.
2017-06-27 07:04:55 +02:00
James Phillips a8d90ccb2c Adds missing tls_skip_verify option to HTTP check example. 2017-06-24 15:37:52 -07:00
James Phillips 884a82b61a Update options.html.md 2017-06-24 15:28:23 -07:00
James Phillips 2184136284 Changes host-based node IDs from opt-out to opt-in. (#3187) 2017-06-24 09:36:53 -07:00
wojtkiewicz f320bb9083
agent: add allowStale option for HTTP API (#3142)
This patch adds an "allowStale" option to the HTTP API
configuration which allows stale reads to provide linear
read scalability.

Fixes #3142
2017-06-22 10:31:13 +02:00
wojtkiewicz 26c8697a40
agent: add "http_config"
This patch adds an "http_config" object to the config file
and moves the "http_api_response_headers" option there.

"http_api_response_headers" is now deprecated in favor of
"http_config.response_headers"
2017-06-22 10:31:11 +02:00
Preetha Appan 5bc9edb4ec Update documentation and json examples for snapshot agent 2017-06-21 21:15:02 -05:00
Frank Schröder 04b636d1f4 agent: notify systemd after JoinLAN (#2121)
This patch adds support for notifying systemd via the
NOTIFY_SOCKET by sending 'READY=1' to the socket after
a successful JoinLAN.

Fixes #2121
2017-06-21 06:43:55 +02:00
preetapan 9e527836be Merge pull request #3154 from hashicorp/issue_2644_redux
Fix stale reads on server startup. Consistent reads will now wait for up to config.RPCHoldTimeout for the server to get past its raft log, before returning an error. Servers that are starting up will eventually catch up. 
This fixes issue #2644
2017-06-20 19:47:12 -05:00
Kyle Havlovitz d52a0b2909 Update encryption.html.md 2017-06-16 12:54:25 -07:00
Preetha Appan 42d3a3f3db Redo bug fix for stale reads on server startup, leveraging RPCHOldtimeout instead of maxQueryTime, plus tests 2017-06-15 22:41:30 -05:00
Kyle Havlovitz 5e45aec642 Add an option to disable keyring file (#3145)
Also disables keyring file in dev mode.
2017-06-15 15:24:04 -07:00
Preetha Appan 59e2592872 Added documentation for new s3 server side encryption 2017-06-08 11:39:10 -07:00
James Phillips 536915fa9a Fixes version reference in encryption docs. 2017-06-07 21:31:48 -07:00
James Phillips a50a6289bb Merge pull request #3118 from katiebayes/master
Add enterprise badges and update middleman version
2017-06-07 10:41:57 -07:00
Frank Schröder e206ab5cb6 agent: support custom header and method for http checks (#3106)
This patch adds support for custom headers and
method for HTTP checks.

Fixes #2474
Fixes #2657
Fixes #3106
2017-06-07 01:11:56 +02:00
Katie Bayes 714f46f34b add enterprise badge style alert boxes, change guides/areas.html.md to erb file 2017-06-04 01:30:21 -04:00
Kyle Havlovitz e196576c07 Add settings for upshifting to encrypted gossip (#3079) 2017-05-30 08:51:37 -07:00
Michael Leow ec81c18006
agent: add RetryJoin support for Azure
Pull #2978 from leowmjw/develop

Resolves #2978
2017-05-24 10:15:38 +02:00
Frank Schroeder 2391e8e98a
website: rename *.markdown to *.md 2017-05-17 20:25:45 +02:00
Kyle Havlovitz e4af6583f5 Add a path for transitioning to TLS on an existing cluster (#3001)
Fixes #1705
2017-05-10 14:25:48 -07:00
James Phillips 21d9d984fa
Adds prepared query API to ACLs table. 2017-05-08 21:37:52 -07:00
James Phillips 62cee1b013 Merge pull request #3008 from hashicorp/d-index-enterprise-features
Add Consul Enterprise section to Docs
2017-05-08 21:15:21 -07:00
Justin Walz bf31ca68bf Fixup ACL docs 2017-05-06 17:21:13 -07:00
Rob Genova ed8e2a05bc use relative links; remove extra spaces between words 2017-05-06 20:26:30 +00:00
James Phillips d087748e2d Merge pull request #3012 from hashicorp/jbs-2944
DOCS: Minor clarification to address #2944
2017-05-05 09:01:32 -07:00
Brian Shumate a4f1f9ef40
DOCS: Minor clarification to address #2944 2017-05-05 11:56:12 -04:00
Brian Shumate a1850b789d
DOCS: minor clarification to address #2950 2017-05-05 11:51:46 -04:00
Frank Schroeder 927335c045
Fix imports on website 2017-05-05 17:07:02 +02:00
Rob Genova 3ecaa4e499 Eliminated 'consul' from all paths; misc. edits; wrap text at 80 characters 2017-05-05 05:24:04 +00:00
Rob Genova 270391b4b3 Add Consul Enterprise section to Docs 2017-05-04 22:30:11 +00:00
James Phillips d567a9b53d
Adds support for new-style peers.json recovery for newer Raft protocol versions. 2017-05-04 14:15:59 -07:00
Seth Vargo b162410b36 Merge pull request #2976 from jk563/master
Rearranged into alphabetical order
2017-05-01 14:55:35 -07:00
Kyle Havlovitz b5ed2ba536 Add separate option for verifying incoming HTTPS traffic (#2974)
* Add separate option for verifying incoming HTTPS traffic
2017-04-28 16:15:55 -07:00
Jamie Kelly 8831a8a4c7 Rearranged into alphabetical order
Swapped a couple of the guides around in the index page so that
they are in alphabetical order and match the navigation order.
2017-04-28 07:04:38 +01:00
rcgenova 63842b1e09 Merge pull request #2964 from hashicorp/d-remove-atlas-references
Remove references to the deprecated Consul/Atlas integration
2017-04-27 08:32:09 -07:00
Kyle Havlovitz 42cf797ad9 Add TLS cipher suite options and CA path support (#2963)
This patch adds options to configure the available
TLS cipher suites and adds support for a path
for multiple CA certificates.

Fixes #2959
2017-04-27 01:29:39 -07:00
Rob Genova c640ef11c4 add link to Consul Enterprise page 2017-04-26 22:45:12 +00:00
Rob Genova cb285879bf Remove references to the deprecated Consul/Atlas integration 2017-04-26 22:24:24 +00:00
Kristiyan Nikolov c30ac1c14d Docs: fix typo (#2951) 2017-04-25 07:08:46 -07:00
Kyle Havlovitz 72ee7c2501 Show raft protocol in list-peers command (#2929) 2017-04-19 15:01:40 -07:00
Nic Jackson 90e3ef7b86
Updated autopilot guide to correct synax issue with example config 2017-04-19 17:15:12 +01:00
Kyle Havlovitz f09713f16c
Add a config example to autopilot guide 2017-04-18 14:40:20 -07:00
mckennajones 703bb52369
Updating documentation regarding webui flags 2017-04-17 17:29:14 -07:00
Borys Pierov 74444bca8e ACL guide fixes 2017-04-17 17:59:03 -04:00
Kyle Havlovitz cdd8b5b880
Add tls client options to api/cli 2017-04-14 13:37:29 -07:00
James Phillips a24228d34a
Fixes broken link to network areas API. 2017-04-13 19:19:42 -07:00
James Phillips a55e074a33 Merge pull request #2910 from hashicorp/jbs-2867
Docs: update bootstrapping and config, fixes #2867
2017-04-13 12:26:27 -07:00
Brian Shumate a9d9c43110
Put back manual process steps 2017-04-13 15:20:02 -04:00
Brian Shumate 35f16d888f
Docs: update bootstrapping and config, fixes #2867
- Add various join options to bootstrapping guide
- Add note about Atlas deprecation to bootstrapping guide
- Add notes about -retry-join and retry_join to -join option
- Add notes about -retry-join and retry_join to start_join option
2017-04-13 13:03:26 -04:00
James Phillips 20bf47d2b4
Adds a new -disable-host-node-id option to help when testing with containers.
Fixes #2877.
2017-04-12 22:07:18 -07:00
James Phillips 37dcc0ac22 Adds a note about upgrading the current leader last. 2017-04-11 10:50:56 -07:00
James Phillips 03328e59d6 Merge pull request #2887 from devopsrebels/master
Fix wrong option name in options.html.markdown
2017-04-11 09:40:16 -07:00
Brian Shumate b9f048614b
Address link issues / add GCE 2017-04-11 12:34:40 -04:00
Brian Shumate cbff0c0250
add new FAQ details 2017-04-11 12:06:18 -04:00
Brian Shumate 09f7bc4036
Docs updates:
- Add a FAQ for per-key value size limitation in the KV
- Update Atlas FAQ with post-deprecation recommendations
2017-04-11 11:45:29 -04:00
Cihat Genc 13037fc139 Fix wrong option name in options.html.markdown 2017-04-11 14:58:15 +02:00
Cameron Stokes af1d22135a [docs] Autopilot guide: clarify left status 2017-04-10 11:18:54 -07:00
James Phillips 5fa71eda84
Cleans up some typos in the ACL Guide. 2017-04-06 08:05:17 -07:00
James Phillips 72b9ae96f5
Fixes deep link on ACL bounce page. 2017-04-06 07:55:23 -07:00
James Phillips 593d495624 Merge pull request #2876 from hashicorp/enterprise-links
update all links to enterprise to avoid redirect
2017-04-05 13:02:29 -07:00
captainill 9d2c13341b update all links to enterprise to avoid redirect 2017-04-05 12:13:23 -07:00
James Phillips 8967fad448
Removed RPC link from the sidebar. 2017-04-05 11:51:52 -07:00
James Phillips 3a81726023
Fixes a broken link. 2017-04-05 10:50:35 -07:00
James Phillips ac6bf5dbf0
Cleans up some doc typos. 2017-04-05 10:40:30 -07:00
James Phillips 217d304619
Does a complete rework of the ACL guide. 2017-04-05 10:36:19 -07:00
James Phillips 686ddd8c83
Deprecates the ACLs internals doc in favor of a guide. 2017-04-04 18:56:42 -07:00
James Phillips 649cb4f385
Removes guide link for Atlas integration. 2017-04-04 18:55:09 -07:00
James Phillips ed7a6526e9 Merge pull request #2865 from moofish32/doc/v8-compatibility
Raft Protocol vs Consul Protocol Doc Clarification
2017-04-04 12:44:36 -07:00
James Phillips 13e0ecda3f Update upgrade-specific.html.markdown 2017-04-04 12:43:24 -07:00
Seth Vargo b3cd9acdae
Link to new api 2017-04-04 12:52:00 -04:00
Seth Vargo bb080541a6
Rename sidebar link items 2017-04-04 12:40:53 -04:00
Seth Vargo b0bb01d5da
Update API docs 2017-04-04 12:33:35 -04:00
Mike Cowgill 75fdad1e54 Raft version in 0.8 is 3 2017-04-04 00:20:29 -07:00
Mike Cowgill 3c6ad0e430 compatibility table update and note about Raft version being separate 2017-04-04 00:17:49 -07:00
James Phillips e9c53e6b89
Changes title to Server Read Scaling. 2017-04-03 12:51:00 -07:00
James Phillips 3dac92cc97 Adds top-level guide links that were missing. 2017-03-31 09:06:24 -07:00
James Phillips 10fc02d362 Merge pull request #2862 from wjimenez5271/wjimenez5271-docs
clarify when acl_default_policy takes effect
2017-03-31 08:49:23 -07:00
Brian Shumate 77dc61ace9
docs: Clarify force-remove limited to same DC, fixes #1264 2017-03-30 14:44:10 -04:00
Brian Shumate ca68cdb572
docs: Configuration precedence clarification, fixes #1203 2017-03-30 14:13:50 -04:00
Brian Shumate 6d5c61921e
docs: add user resource limits FAQ, fixes #1628 2017-03-30 13:56:03 -04:00
James Phillips c7f7e969d7 Merge pull request #2854 from hashicorp/remote-exec
Changes `disable_remote_exec` default to true so remote exec is opt-in.
2017-03-30 10:29:09 -07:00
Kyle Havlovitz 074b8576a5 Merge pull request #2847 from hashicorp/remove-peer-by-id
Add CLI/API endpoints for removing peer by ID
2017-03-30 10:13:56 -07:00
Kyle Havlovitz a2058d23ef
Add CLI/API endpoints for removing peer by ID 2017-03-30 10:13:32 -07:00
James Phillips ac90110396
Changes `disable_remote_exec` default to true so remote exec is opt-in. 2017-03-30 09:43:32 -07:00
James Phillips c4e6655757
Adds a link from the autopilot CLI page to the guide. 2017-03-29 21:14:26 -07:00
James Phillips f93e758650
Updates change log and upgrade guide with details about #2844. 2017-03-29 13:05:57 -07:00
James Phillips 4259ecd8bc
Disables agent-level enforcement on Consul agents unless acl_datacenter is set. 2017-03-29 12:24:42 -07:00
James Phillips 75b8ff44e3
Capitalizes title. 2017-03-29 11:32:56 -07:00
James Phillips 44b6d36995
Adds which DC each command runs in and a DNS example to the areas guide. 2017-03-29 11:30:05 -07:00
Kyle Havlovitz 15b60b07f0 Merge pull request #2840 from hashicorp/f-advanced-autopilot-guide
Add section on advanced autopilot features to the guide
2017-03-28 12:06:51 -07:00
James Phillips bbaa3f29d5 Merge pull request #2839 from hashicorp/network-area-docs
Adds network area docs.
2017-03-28 11:57:57 -07:00
James Phillips 42c8907fa6
Adds network areas guide. 2017-03-28 11:56:55 -07:00
Kyle Havlovitz 4f9a57cda3
Add section on advanced autopilot features to the guide 2017-03-28 11:56:21 -07:00
James Phillips 36aface2e2
Adds network area CLI documentation. 2017-03-28 10:31:56 -07:00
James Phillips 12e20ddfa9
Adds basic operator area HTTP documentation. 2017-03-28 01:09:20 -07:00
Thomas Viaud 6cb9269fb5 Update autopilot.html.markdown 2017-03-28 09:54:36 +02:00
James Phillips 086912d800
Breaks the operator HTTP doc into sections. 2017-03-27 23:28:08 -07:00
VEBER Arnaud d4a7e75246
docs(agent/options): remove atlas_endpoint dup 2017-03-25 13:25:54 +01:00
James Phillips b0352bb3d1 Update upgrade-specific.html.markdown 2017-03-24 17:45:24 -07:00
James Phillips 7c2509f407
Adds node metadata to the reload list. 2017-03-24 10:29:39 -07:00
James Phillips 7be075f1f1
Adds a note about the deprecated RPC ports. 2017-03-24 10:23:45 -07:00
James Phillips 8b5cc2de81 Merge pull request #2826 from hashicorp/acl-cleanup
Cleans up reconcile issues with ACLs and reverting node information.
2017-03-23 15:56:14 -07:00
James Phillips 16a9f6d671
Modifies server reconcile path to not use the server's token for internal operations. 2017-03-23 13:34:30 -07:00
Brian Shumate 8163a480cb
docs: Point of clarifcation about cluster leadership for #2782 2017-03-23 13:00:23 -04:00
Kyle Havlovitz 37ea20cb44
Add advanced autopilot features 2017-03-22 15:25:16 -07:00
James Phillips 28f8aa5559
Removes remoteConsuls in favor of the new router.
This has the next wave of RTT integration with the router and also
factors some common RTT-related helpers out to lib. While we were
in here we also got rid of the coordinate disable config so we don't
need to deal with the complexity in the router (there was never a
user-visible way to disable coordinates).
2017-03-16 16:42:19 -07:00
James Phillips 82b6fbd844
Adds router into RPC paths with work in progress on coordinates. 2017-03-16 16:42:18 -07:00
Kyle Havlovitz 006c6b93b3 Merge pull request #2802 from hashicorp/f-autopilot-improvements
Fix an issue with changing server ID when re-joining
2017-03-15 20:26:16 -07:00
Kyle Havlovitz bc0494e396
Reorganized cluster health check loop and logic 2017-03-15 18:27:17 -07:00
Kyle Havlovitz c40279e012
Fix an issue with changing server IDs and add a few UX enhancements around autopilot features 2017-03-15 16:09:55 -07:00
Nic Jackson 414ac8bf7b Updated documentation to add information that bootstrap overrides server mode 2017-03-14 17:56:33 -07:00
Kyle Havlovitz f5050cce58
Adjust autopilot sections based on feedback 2017-03-10 15:22:20 -08:00
Kyle Havlovitz 3c6bece859
Add autopilot guide to the docs 2017-03-10 14:55:18 -08:00
Kyle Havlovitz 4807215fa1 Merge pull request #2788 from hashicorp/f-autopilot-2
Autopilot server health monitoring
2017-03-10 12:29:45 -08:00
Kyle Havlovitz 8130f9b1c1
Cleaned up and reorganized some autopilot-related code 2017-03-09 18:21:40 -08:00
James Phillips 0cb637927c
Adds back the RPC page with a deprecation notice.
Fixes #2794.
2017-03-09 11:09:11 -08:00
James Phillips 61ea6faf6c Fixes a typo in the snapshot docs. 2017-03-08 19:49:07 -08:00
Kyle Havlovitz 0606133b75
Merge branch 'master' into f-autopilot-2 2017-03-06 16:02:19 -08:00
Kyle Havlovitz 8bcab6c6d7
Add autopilot server health tracking
This adds two goroutines to perform autopilot tasks on the leader - one
to monitor the health of servers and another to periodically clean up
dead servers with a limit on removal count. Also adds a new http endpoint,
`/v1/operator/autopilot/health`, for querying this information through an
operator RPC endpoint.
2017-03-06 16:00:10 -08:00
Sean Chittenden c6feba6ab7 Revert "Change `ClientAddr` to default to `BindAddr` when not present." 2017-03-06 13:32:43 -08:00
Sean Chittenden 17ccae59f4
Note the default value prior to 0.8 for `-client` was `127.0.0.1`. 2017-03-06 12:26:35 -08:00
Sean Chittenden e1ced1de30
Change `ClientAddr` to default to `BindAddr` when not present.
With this change, it is now possible to only specify the `-bind` or
`bind_addr` attributes and get a functioning consul agent.
2017-03-04 20:52:52 -08:00
James Phillips 233795704c Moves raft_protocol config out into its own top-level item. 2017-03-04 09:20:23 -08:00
James Phillips aba567273e Merge pull request #2690 from zeroae/f-simple-rfc2782
RFC 2782 support with optional .service tag
2017-03-02 14:49:36 -08:00
Kyle Havlovitz 44f0b08db7 Merge pull request #2771 from hashicorp/f-autopilot
Autopilot dead server cleanup, config, and raft version compatibility
2017-02-28 15:04:16 -08:00
Kyle Havlovitz 23c492a74e
Rename DeadServerCleanup and make wording adjustments 2017-02-28 14:45:21 -08:00
Kyle Havlovitz 3b67c50c1d
Remove the RPC client interface and update docs 2017-02-28 13:41:09 -08:00
Kyle Havlovitz 308f5c4782
Add CLI RPC deprecation notice to docs 2017-02-24 18:10:46 -08:00
Kyle Havlovitz f7b6d776f4
Add cli docs and minor test/comment tweaks 2017-02-24 16:55:44 -08:00
Kyle Havlovitz 7d514a7ef6
Add docs and api client methods for autopilot config 2017-02-23 21:00:15 -08:00
Kyle Havlovitz af1bc4fa27
Add config section to docs for autopilot 2017-02-22 13:11:01 -08:00
Ellery Addington-White 17b9f3346d Adds missing double quote 2017-02-16 13:38:55 -08:00
Kyle Havlovitz 3f05576cc8
Condense raft subcommand into one doc page 2017-02-16 11:44:14 -08:00
Kyle Havlovitz 2b12a43840
Split operator raft command into subcommands 2017-02-15 13:53:34 -08:00
Kyle Havlovitz 0262f009dd Merge pull request #2732 from hashicorp/f-validate-command
Deprecate configtest and add validate command
2017-02-10 20:34:09 -05:00
Kyle Havlovitz 35d99a81ac
Update docs and give better error for unknown client scheme 2017-02-10 19:55:54 -05:00
Kyle Havlovitz 27ee6f974d
Update website docs for validate command 2017-02-10 19:38:38 -05:00
Kyle Havlovitz 5be21e3e24 Merge pull request #2726 from hashicorp/f-cli-rework-3
Centralize command-line parsing part 3
2017-02-10 13:42:01 -05:00
James Phillips b88a7eee95 Adds clarifying note about the wakeup jitter.
Closes #2727.
2017-02-09 20:28:38 -08:00
Kyle Havlovitz 955d1b983d
Merge branch 'master' into f-cli-rework-3 2017-02-09 21:24:27 -05:00
Kyle Havlovitz 65ad17a27d
Convert watch command to use base.Command 2017-02-09 20:36:01 -05:00
Kyle Havlovitz 1767a4dcb0
Add missing doc page for version command 2017-02-09 20:08:25 -05:00
Kyle Havlovitz 50f6c6a2bb
Convert snapshot command to use base.Command 2017-02-09 20:00:38 -05:00
Kyle Havlovitz bcdbc9175c
Convert rtt command to use base.Command 2017-02-09 19:38:06 -05:00
Kyle Havlovitz 520edc2e49
Convert reload command to use base.Command 2017-02-09 19:32:22 -05:00
Kyle Havlovitz 1a26907d01
Convert operator command to use base.Command 2017-02-09 18:19:34 -05:00
Kyle Havlovitz c78f62b83d
Convert monitor command to use base.Command 2017-02-09 17:31:52 -05:00
Kyle Havlovitz 7d72864531
Convert members command to use base.Command 2017-02-09 17:12:47 -05:00
Kyle Havlovitz 4be635d3a1
Convert maint command to use base.Command 2017-02-09 17:06:19 -05:00
Kyle Havlovitz e385af8eeb
Convert leave command to use base.Command 2017-02-09 16:48:12 -05:00
Kyle Havlovitz d3b24d2d12
Convert keyring command to use base.Command 2017-02-08 18:25:47 -05:00
Kyle Havlovitz 9e156286c7
Convert join command to use base.Command 2017-02-08 17:14:02 -05:00
Kyle Havlovitz a69f2a0faf
Convert info command to use base.Command 2017-02-08 16:58:04 -05:00
Kyle Havlovitz 89771b6075
Convert exec command to use base.Command 2017-02-08 16:57:46 -05:00
Kyle Havlovitz 6cc2299123
Convert event command to use base.Command 2017-02-08 16:56:58 -05:00
James Phillips 511b135131 Merge pull request #2669 from legendtkl/master
Fix consul kv example with flag separator
2017-02-07 20:17:42 -08:00
James Phillips 723391b22d Removes broken WriteRequest ACL reference for catalog endpoints.
Fixes #1034.
2017-02-07 19:02:18 -08:00
Kyle Havlovitz 9e38fc1c84
Move command Meta to base.Command and split http options 2017-02-07 19:16:41 -05:00
Andrey Upadyshev f2b5a6439c Fix `acquire` parameter nesting 2017-02-03 00:20:35 +01:00
Kyle Havlovitz fbcd43e95c Merge pull request #2704 from hashicorp/f-relay-query-responses
Add relay-factor arg to keyring operations
2017-02-02 12:15:19 -05:00
James Phillips a973ed9570 Merge pull request #2572 from hashicorp/jbs-2535
Notes about memory usage (helps with #2535)
2017-02-02 09:08:58 -08:00
Kyle Havlovitz 4fc3bd3abf
Added -relay-factor param to keyring operations 2017-02-01 21:53:29 -05:00
Kyle Havlovitz f48cd78bc5 Merge pull request #2699 from hashicorp/f-tls-min-version
Add TLSMinVersion to config options
2017-02-01 16:31:53 -05:00
Kyle Havlovitz 086975ac0a
Add TLSMinVersion to config options 2017-02-01 16:20:33 -05:00
James Phillips d593771d3c Merge pull request #2692 from Toady00/patch-1
Specify PUT for agent maintenance endpoint
2017-02-01 06:58:20 -08:00
James Phillips cbaf7ee81e Merge pull request #2666 from hashicorp/sethvargo-patch-1
Say which ec2 perms to use
2017-02-01 06:57:07 -08:00
Brandon Dennis fe8e7238e5 Specify PUT for agent maintenance endpoint
Through most of the documentation if the method isn't specified it should be a `GET` request, but here it should be a `PUT`.
2017-01-31 16:00:27 -05:00
Patrick Sodré 5b68178dc1 Simple RFC 2782 support with optional .service tag
Add support for SRV queries of names matching:
_<service>._<protocol>.[.service][.datacenter]<.domain>
2017-01-30 19:46:02 -05:00
Andrey Upadyshev 0523eaf1f3 Fix missing query parameters formatting in HTTP API documentation 2017-01-25 14:34:56 +01:00
legendtkl b9ce8f6e4f Fix consul kv example with flag separator
1. fix consul kv example with flag separator
2017-01-24 17:03:12 +08:00
Kyle Havlovitz cc271aa436
Merge branch 'master' into f-prepared-query-nodemeta 2017-01-23 20:17:48 -05:00
Kyle Havlovitz 3cd054e81f
Add tests for node meta in prepared queries and update docs 2017-01-23 19:17:30 -05:00
Seth Vargo 222ade1f84 Say which ec2 perms to use 2017-01-20 17:13:28 -05:00
Cameron Stokes 5fc1913c3c Typo in docs/upgrade-specific page. 2017-01-19 12:28:30 -08:00
James Phillips 2e67edb2f2 Fixes a paste-o in the docs. 2017-01-18 16:02:04 -08:00
James Phillips 55cd1d975c
Adds catalog support for node IDs. 2017-01-18 14:26:42 -08:00
James Phillips 96bff003b7
Adds basic support for node IDs. 2017-01-17 22:47:59 -08:00
Mikhail Zholobov d54630ed79
website: Fix nesting for "raft_multiplier" option 2017-01-17 14:59:18 +02:00
Kyle Havlovitz 9080006a37
Add support for multiple metadata filters to remaining endpoints
Enabled multiple meta filters for /v1/catalog/nodes and /v1/catalog/services
2017-01-13 20:49:13 -05:00
Kyle Havlovitz e37f25dc02
Add node metadata filtering to remaining health/catalog endpoints 2017-01-13 20:08:43 -05:00
needkane 9258df0f5b occasionally->occasionally 2017-01-13 15:34:44 +08:00
Kyle Havlovitz dfe62af34a Merge pull request #2570 from vancluever/f-gce-discovery
command/agent: Google Compute Engine host discovery
2017-01-12 18:27:36 -05:00
Ben Abrams e148b1bb98
fixing typo in documentaion 2017-01-11 21:08:20 -08:00
Kyle Havlovitz 2139dbb029
Merge branch 'master' into f-gce-discovery 2017-01-11 22:57:07 -05:00
Kyle Havlovitz 84b157eade
Condense gce discovery logging a bit 2017-01-11 22:37:22 -05:00
Kyle Havlovitz 821735d175 Merge pull request #2643 from hashicorp/f-node-metadata
Node metadata
2017-01-11 20:29:24 -05:00
Kyle Havlovitz 15f008b3e3
Update client api and docs for node metadata 2017-01-11 19:28:58 -05:00
Kyle Havlovitz 561d6c71e0
Update website docs for node metadata 2017-01-11 17:52:31 -05:00
Brian Shumate f81d8c0754
DOCS: update environment variables
- Move environment variables to section of CLI page
- Remove environment variables page
- Remove environment variables nagivation menu entry
2017-01-09 12:02:06 -05:00
Brian Shumate d5bdc4c98b
DOCS: update environment variables page
- Relocate Environment Variables page to Agent section
- Correct front matter newlines issue
2017-01-06 09:42:49 -05:00
James Phillips d29cd8f4c8 Merge pull request #2573 from hashicorp/jbs-envvars
Add a page for CLI environment variables
2017-01-05 12:42:29 -08:00
James Phillips 5647e37ef2 Merge pull request #2611 from amiryal/patch-1
Correct heading level in encryption documentation
2017-01-05 12:13:13 -08:00
James Phillips 00ba30956d Merge pull request #2615 from ruslansennov/master
update `/v1/agent/service/register` endpoint doc
2017-01-05 12:08:50 -08:00
James Nugent 3b1f523b85 cli: Add KV `export` and `import`
This commit adds two new commands to the Consul KV CLI, which export and
import a JSON formatted representation of the Consul KV tree. It is
useful to migrate parts of the KV tree between unrelated Consul
clusters, and could also be used for initial data population of the KV
store.
2017-01-05 07:57:38 -06:00
James Nugent c32fe92eee cli: Add -base64 option to `consul kv put`
This commit adds a -base64 option to the consul kv put command, which
base 64 decodeds the data prior to writing it. This can be used in
conjunction with `consul kv get -base64 key`.
2017-01-04 16:12:21 -06:00
James Nugent a24e5041ac Merge pull request #2631 from hashicorp/kv-get-base64
cli: Add -base64 option to `consul kv get`
2017-01-04 16:00:27 -06:00
James Nugent 2bb6121e54 cli: Add -base64 option to `consul kv get`
This commit adds a `-base64` option to the `consul kv get` command,
which base 64 encodes the output such that it can be processed by
terminal tools in the event that the data is binary. The flag defaults
to false.
2017-01-04 15:41:40 -06:00
Ruslan Sennov e81502babb update `/v1/agent/service/register` endpoint doc 2016-12-26 23:32:20 +03:00
Amir Yalon 58ee61c3c7 Correct heading level in encryption documentation
The ‘RPC Encryption’ heading is semantically at the same level as ‘Gossip Encryption’.
2016-12-22 10:51:20 +02:00
Bradley Falzon 5acd28c506 Fix typo in command/kv/put doc 2016-12-21 14:02:26 +10:30
James Phillips 8a64bb6445 Adds session policy example to ACL internals doc. 2016-12-14 21:31:59 -08:00
James Phillips fe07574220
Fixes a typo in the agent options docs. 2016-12-14 21:03:16 -08:00
James Phillips b617e54ff0 Merge pull request #2594 from hashicorp/acl-complete
Adds complete ACL support for /v1/agent endpoints.
2016-12-14 20:49:00 -08:00
James Phillips 90cd498ea6
Adds some basic documentation about the new ACL changes. 2016-12-14 20:32:44 -08:00
Kyle Havlovitz 398f4a04ef
Add a notice about deprecation of atlas features 2016-12-14 15:13:51 -05:00
James Phillips 927aa3789a
Adds ACL management support to the agent. 2016-12-14 07:07:41 -08:00
James Phillips 67f1fe8d0b
Adds support for a new "acl_agent_token" which is used for internal
catalog operations.
2016-12-12 14:52:27 -08:00
James Phillips 4bb56b83ea Merge pull request #2590 from hashicorp/acl-complete-catalog
Adds new node ACL policy and applies it to catalog endpoints.
2016-12-12 14:52:10 -08:00
Chris Marchesi 1b4e26d005 command/agent: Google Compute Engine host discovery
This commit adds several command-line and config options that facilitate
host discovery through Google Compute Engine (GCE), much like the
recently added EC2 host discovery options. This should assist with
bootstrapping and joining servers within GCE when non-static addresses
are used, such as when using managed instance groups.

Documentation has also been added. It should be noted that if running
from within a GCE instance, the only option that should be necessary is
-retry-join-gce-tag-value.
2016-12-06 17:46:40 -08:00
Brian Shumate 5a26a906cd
Overlooked saving a couple changes 2016-12-06 18:01:43 -05:00
Brian Shumate c5b68467c6
updates based on feedback 2016-12-06 14:46:26 -05:00
Brian Shumate c509815493
Address feedback 2016-12-06 14:12:05 -05:00
James Phillips eb07e77c1c
Adds an opt-in for new ACL policies and features coming in Consul 0.8. 2016-12-06 11:06:14 -08:00
Bradley Falzon de851480c5 Link to consensus.html#deployment-table not #toc_4 2016-12-06 15:40:40 +10:30
James Phillips c5ca72c5a5
Fixes broken link in options doc. 2016-12-05 18:53:51 -08:00
James Phillips 7c0f6bd742 Clarifies ACL replication token. 2016-12-05 18:43:05 -08:00