Update intentions.mdx (#17619)

Make behaviour of L7 intentions clearer
pull/17625/head
Luke Kysow 2 years ago committed by GitHub
parent 17f4689379
commit 85982889a1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -536,9 +536,7 @@ This endpoint evaluates the intentions for a specific source and destination
and returns whether the connection would be authorized or not given the current and returns whether the connection would be authorized or not given the current
Consul configuration and set of intentions. Consul configuration and set of intentions.
-> **Note:** This endpoint will always evaluate intentions with `Permissions` -> **Note:** This endpoint will always evaluate matching intentions with L7 `Permissions` defined as _deny_ intentions because there is no request to check against.
defined as _deny_ intentions during. This endpoint is only suited for
networking layer 4 (e.g. TCP) integration.
For performance and reliability reasons it is desirable to implement intention For performance and reliability reasons it is desirable to implement intention
enforcement by listing [intentions that match the enforcement by listing [intentions that match the

Loading…
Cancel
Save