backport of commit ef688704aa (#17623)

Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
release/1.16.0-rc1
hc-github-team-consul-core 2023-06-09 12:29:04 -04:00 committed by GitHub
parent 228f7cfb87
commit 9f0c8b2d21
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 3 deletions

View File

@ -536,9 +536,7 @@ This endpoint evaluates the intentions for a specific source and destination
and returns whether the connection would be authorized or not given the current
Consul configuration and set of intentions.
-> **Note:** This endpoint will always evaluate intentions with `Permissions`
defined as _deny_ intentions during. This endpoint is only suited for
networking layer 4 (e.g. TCP) integration.
-> **Note:** This endpoint will always evaluate matching intentions with L7 `Permissions` defined as _deny_ intentions because there is no request to check against.
For performance and reliability reasons it is desirable to implement intention
enforcement by listing [intentions that match the