diff --git a/website/content/docs/connect/proxies/integrate.mdx b/website/content/docs/connect/proxies/integrate.mdx index 73e8306d21..7a6e0574d2 100644 --- a/website/content/docs/connect/proxies/integrate.mdx +++ b/website/content/docs/connect/proxies/integrate.mdx @@ -32,20 +32,24 @@ The proxy must accept TLS connections on some port to accept inbound connections Call the [`/v1/agent/connect/ca/leaf/`] API endpoint to obtain the client certificate, e.g.: -```shell-session - -curl http://:8500/v1/agent/connect/ca/leaf/ + +```shell +$ curl http://:8500/v1/agent/connect/ca/leaf/ ``` -The client certificate from the inbound connection must be validated against the Connect CA root certificates. Call the [`/v1/agent/connect/ca/roots`] endpoint to obtain the root certificates from the Connect CA, e.g.: + -```shell-session +The client certificate from the inbound connection must be validated against the Connect CA root certificates. Call the [`/v1/agent/connect/ca/roots`] endpoint to obtain the root certificates from the Connect CA, e.g.: -curl http://:8500/v1/agent/connect/ca/roots + +```shell +$ curl http://:8500/v1/agent/connect/ca/roots ``` + + ### Authorizing the connection After validating the client certificate from the caller, the proxy can authorize the entire connection (L4) or each request (L7). Depending upon the [protocol] of the proxied service, authorization is performed either on a per-connection (L4) or per-request (L7) basis. Authentication is based on "service identity" (TLS), and is implemented at the @@ -176,7 +180,7 @@ Alternatively, you may also use the flags `-token` or `-token-file` to provide t ```shell - consul connect envoy -sidecar-for "web" -token-file=/etc/consul.d/consul.token +$ consul connect envoy -sidecar-for "web" -token-file=/etc/consul.d/consul.token ``` @@ -184,7 +188,7 @@ Alternatively, you may also use the flags `-token` or `-token-file` to provide t ```shell - $ consul connect proxy -sidecar-for "web" -token-file=/etc/consul.d/consul.token +$ consul connect proxy -sidecar-for "web" -token-file=/etc/consul.d/consul.token ```