Update intentions.mdx (#17619)

Make behaviour of L7 intentions clearer
pull/17625/head
Luke Kysow 1 year ago committed by GitHub
parent 17f4689379
commit 85982889a1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -536,9 +536,7 @@ This endpoint evaluates the intentions for a specific source and destination
and returns whether the connection would be authorized or not given the current
Consul configuration and set of intentions.
-> **Note:** This endpoint will always evaluate intentions with `Permissions`
defined as _deny_ intentions during. This endpoint is only suited for
networking layer 4 (e.g. TCP) integration.
-> **Note:** This endpoint will always evaluate matching intentions with L7 `Permissions` defined as _deny_ intentions because there is no request to check against.
For performance and reliability reasons it is desirable to implement intention
enforcement by listing [intentions that match the

Loading…
Cancel
Save