ed502252c7
* converted intentions conf entry to ref CT format * set up intentions nav * add page for intentions usage * final intentions usage page * final intentions overview page * fixed old relative links * updated diagram for overview * updated links to intentions content * fixed typo in updated links * rename intentions overview page file to index * rollback link updates to intentions overview * fixed nav * Updated custom HTML in API and CLI pages to MD * applied suggestions from review to index page * moved conf examples from usage to conf ref * missed custom HTML section * applied additional feedback * Apply suggestions from code review Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> * updated headings in usage page * renamed files and udpated nav * updated links to new file names * added redirects and final tweaks * typo --------- Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
58 lines
2 KiB
Plaintext
58 lines
2 KiB
Plaintext
---
|
|
layout: commands
|
|
page_title: 'Commands: Intention Get'
|
|
description: >-
|
|
The `consul intention get` command returns information about a single L4 service intention that authorizes services to communicate. It was deprecated in Consul v1.9.0; use `consul config` instead.
|
|
---
|
|
|
|
# Consul Intention Get
|
|
|
|
Command: `consul intention get`
|
|
|
|
Corresponding HTTP API Endpoints: [\[GET\] /v1/connect/intentions/exact](/consul/api-docs/connect/intentions#read-specific-intention-by-name), [\[GET\] /v1/connect/intentions/:uuid](/consul/api-docs/connect/intentions#read-specific-intention-by-id)
|
|
|
|
The `intention get` command shows a single intention.
|
|
|
|
-> **Deprecated** - The one argument form of this command is deprecated in
|
|
Consul 1.9.0. Intentions no longer need IDs when represented as
|
|
[`service-intentions`](/consul/docs/connect/config-entries/service-intentions) config
|
|
entries.
|
|
|
|
The table below shows this command's [required ACLs](/consul/api-docs/api-structure#authentication). Configuration of
|
|
[blocking queries](/consul/api-docs/features/blocking) and [agent caching](/consul/api-docs/features/caching)
|
|
are not supported from commands, but may be from the corresponding HTTP endpoint.
|
|
|
|
| ACL Required |
|
|
| ----------------------------- |
|
|
| `intentions:read`<p> Define intention rules in the `service` policy. Refer to [ACL requirements for intentions](/consul/docs/connect/intentions/create-manage-intentions#acl-requirements) for additional information.</p> |
|
|
|
|
## Usage
|
|
|
|
Usage:
|
|
|
|
- `consul intention get [options] SRC DST`
|
|
- `consul intention get [options] ID`
|
|
|
|
`SRC` and `DST` can both take [several forms](/consul/commands/intention#source-and-destination-naming).
|
|
|
|
#### Enterprise Options
|
|
|
|
@include 'http_api_partition_options.mdx'
|
|
|
|
@include 'http_api_namespace_options.mdx'
|
|
|
|
#### API Options
|
|
|
|
@include 'http_api_options_client.mdx'
|
|
|
|
## Examples
|
|
|
|
```shell-session
|
|
$ consul intention get web db
|
|
Source: web
|
|
Destination: db
|
|
Action: deny
|
|
ID: 20edfa56-9cd4-51db-8c22-db09fdec61ef
|
|
Created At: Thursday, 24-May-18 17:07:49 PDT
|
|
```
|