mirror of https://github.com/hashicorp/consul
backport of commit ef688704aa
(#17623)
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>release/1.16.0-rc1
parent
228f7cfb87
commit
9f0c8b2d21
|
@ -536,9 +536,7 @@ This endpoint evaluates the intentions for a specific source and destination
|
|||
and returns whether the connection would be authorized or not given the current
|
||||
Consul configuration and set of intentions.
|
||||
|
||||
-> **Note:** This endpoint will always evaluate intentions with `Permissions`
|
||||
defined as _deny_ intentions during. This endpoint is only suited for
|
||||
networking layer 4 (e.g. TCP) integration.
|
||||
-> **Note:** This endpoint will always evaluate matching intentions with L7 `Permissions` defined as _deny_ intentions because there is no request to check against.
|
||||
|
||||
For performance and reliability reasons it is desirable to implement intention
|
||||
enforcement by listing [intentions that match the
|
||||
|
|
Loading…
Reference in New Issue