1218 Commits (CSLC-91-egress-connect-proxy)

Author	SHA1	Message	Date
Karl Cardenas	142c0ac419	Apply suggestions from code review ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff Apple	3415647c6d	Update website/content/docs/release-notes/consul/v1_9_x.mdx ... Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
Jeff Apple	2a1a12fbb9	Update website/content/docs/release-notes/consul/v1_10_x.mdx ... Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
Jeff Apple	33b5e58aa9	Update website/content/docs/release-notes/consul/v1_11_x.mdx ... Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
Jeff Apple	d2463fd431	Update website/content/docs/release-notes/consul-ecs/v0_2_x.mdx ... Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
Jeff Apple	4f5ec017d6	Update website/content/docs/release-notes/consul-ecs/v0_3_x.mdx ... Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
Jeff Apple	9a228d2e62	Update website/content/docs/release-notes/consul-ecs/v0_4_x.mdx ... Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
Jeff Apple	f9a695286e	Merge branch 'main' into japple-rel-notes-reorg	3 years ago
Jeff-Apple	d56a695be7	Docs: Release Notes reorg - adding ECS and NIA	3 years ago
Luke Kysow	0ae269637a	Update annotations-and-labels.mdx (#12768)	3 years ago
Karl Cardenas	e0e2b7b547	docs: updated connect docs and re-deploying missed changes	3 years ago
Jeff Apple	132a54ba14	Update v0_4_x.mdx	3 years ago
Jeff-Apple	b3126e1190	Adding Rel Notes for ECS and moved CTS one.	3 years ago
Jeff Boruszak	1bfaf7a7d9	Update to sentinel.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Jeff Boruszak	5c7c333f6a	Update to redundancy.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Jeff Boruszak	c1aaa8ac35	Update to read-scale.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Jeff Boruszak	7ed98f23fa	Update to network-segments.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Jeff Boruszak	6256a7a468	Update to namespaces.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Jeff Boruszak	bd134d0d60	Update to federation.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Jeff Boruszak	6b062ed7ad	Update to audit-logging.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Jeff Boruszak	84bf170ca3	Update to admin-partitions.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Andrew Stucki	d12b16a5fd	Add doc for proposed annotation (#12716)	3 years ago
Jeff-Apple	280b8bddf9	Add template for consul-k8s release notes.	3 years ago
David Yu	406b7e12b7	docs: small spelling typo on consul k8s compat matrix (#12840)	3 years ago
Kyle Schochenmaier	636ecf7eed	docs: update acl token generation with uuidgen (#12821) ... * update acl token generation with uuidgen	3 years ago
David Yu	5016ccb51e	docs: Update Consul K8s compatibility matrix (#12829) ... * docs: Update Consul K8s compatibility matrix Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
John Murret	cffddab0f4	Adding documentation for WAN Federation with Vault as a secrets backend (#12802) ... * Adding documentation for WAN Federation with Vault as a secrets backend * Reformatting systems integration * fixing spacing and typos * Fixing link to createFederactionSecret helm chart value * More revisions in the Systems Integration section * Systems Integration - fixing brok shell-session and adding paragraph. * More formatting in data integration section * Formatting consul config sections * Fixing verbiage near helm installations. * Changing refence to dc1 and dc2 to be primary datacenter(dc1) and secondary dataceneter (dc2) * Apply suggestions from code review Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com> Co-authored-by: David Yu <dyu@hashicorp.com> * fixing missing s in Kubernetes * Providing reason in Usage section as to why someone would look at the Systems and Data Integration sections of the vault docs * fixing highlighted linenumbers that got through off by deleting the comment line at the beginning. * fixing indentation within order lists * Add a validation step to the next steps section. * making the data integration sections for dc1 and dc2 symmetrical * PR Feedback * Adding images * Remove confusing references to Systems Integration and Data Integration pages. * Updating images to be centered * Removed confusing reference to federation secret. Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com> Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
Karl Cardenas	0b14c17c16	docs: fixed broken url	3 years ago
David Yu	d08b5a1832	docs: remove 1.9.x row in Envoy compatibility matrix (#12828)	3 years ago
Dan Stough	76c03872b7	Fix spelling for secrurity/acl mdx.	3 years ago
Jared Kirschner	1da37d87b2	docs: use correct previous name of recovery token	3 years ago
Paul Glass	90b2cb6128	Docs: IAM auth method (#12779) ... * Docs: IAM auth method Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
Evan Culver	000d0621b4	connect: Add Envoy 1.22 to integration tests, remove Envoy 1.18 (#12805) ... Co-authored-by: R.B. Boyer <rb@hashicorp.com>	3 years ago
Jeff-Apple	d2c07a3dd3	Rename and re-title docs page for installing Consul API Gateway	3 years ago
Jeff-Apple	bc9bb1c5ce	Initial changes for reoranizing the Release Notes	3 years ago
Evan Culver	881e17fae1	connect: Add Envoy 1.21.1 to support matrix, remove 1.17.4 (#12777)	3 years ago
Karl Cardenas	43b548d4c1	Merge pull request #12562 from hashicorp/docs/blake-agent-config ... docs: Agent configuration hierarchy reorganization	3 years ago
FFMMM	59c25cf891	add docs for new labels (#12757)	3 years ago
John Murret	1006c8a94b	Correcting an uncapitalized word setup at the beginning of titles to be capitalized in vault section. (#12759)	3 years ago
Natalie Smith	0a51e145c1	docs: simplify agent docs slugs	3 years ago
Natalie Smith	0fcdddcd46	docs: pr feedback	3 years ago
Natalie Smith	1d8e89425e	chore: rebase updates	3 years ago
Natalie Smith	ddae7d18a2	docs: fix external links to agent config pages	3 years ago
Natalie Smith	83f9879b2d	docs: fix agent config links	3 years ago
Natalie Smith	4d4c760190	docs: arrange agent configuration file parameters into logical groups	3 years ago
Blake Covarrubias	f4c03d2340	docs: move configuration files content from agent/config/index to agent/config/agent-config-files	3 years ago
Blake Covarrubias	c5220fd184	docs: move cli content from agent/config/index to agent/config/agent-config-cli ... And add sections for logical groupings of options	3 years ago
Blake Covarrubias	caf34daa39	docs: move agent/options.mdx into agent/config/index.mdx and add placeholder .mdx files for cli/files ... Also update nav data	3 years ago
David Yu	140e4f5578	docs: Upgrade Consul K8s update link to combat matrix (#12744)	3 years ago
R.B. Boyer	25ba9c147a	xds: ensure that all connect timeout configs can apply equally to tproxy direct dial connections (#12711) ... Just like standard upstreams the order of applicability in descending precedence: 1. caller's `service-defaults` upstream override for destination 2. caller's `service-defaults` upstream defaults 3. destination's `service-resolver` ConnectTimeout 4. system default of 5s Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
John Murret	62476e25fb	docs: Updating Gossip EncryptionKey Rotation page with Vault use case (#12720) ... * docs: Updating Gossip EncryptionKey Rotation page with Vault use case * Adding a note to the vault instructions linking to the gossip key encryption using Vault page. * Correcting Vault guide for storing the rotated gossip key. * adding $ to shell sessions where it is missing on the gossip rotation page * adding $ to more shell sessions where it is missing on the gossip rotation page	3 years ago
Chris Thain	1502936c12	Consul on ECS 0.4.0 (#12694) ... Update website docs for Consul on ECS 0.4.0	3 years ago
Kyle Havlovitz	9780b672da	Merge pull request #12685 from hashicorp/http-check-redirect-option ... Add a field to disable following redirects on http checks	3 years ago
John Murret	fd08b6aaf6	Update k8s docs for Vault as a Secrets Backend (#12691) ... * Updating k8s Vault as a Secrets Backend docs * Moving files in data-integration folder * Updating routes to moved files * Removing known limitations since we have delivered them. * Revise overview page to point towards the System Integration and Data Integration pages. * Updating Systems Overview page * Making corrections to Overview and Systems Integration page * Updating Data Integration page * Gossip page * Enterprise Licensepage * Bootstrap Token * Replication Token * Revisions to bootrap, replication, and enterprise license * snapshot agent page. revisiions to other data integration pages * Consul Service Mesh TLS Provider page * ServerTLS page * Spelling, grammar errors * Update website/content/docs/k8s/installation/vault/index.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/index.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/server-tls.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/connect-ca.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/gossip.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/snapshot-agent-config.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/bootstrap-token.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/connect-ca.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/enterprise-license.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/replication-token.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/replication-token.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Updating data center to datacenter * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * interim changes * more formatting changes * adding additional formatting changes * more formatting on systems integration page * remove TODO * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/index.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/index.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Adding partition token * removing dangling word * Adding missing navlink for partitions page * Adding VAULT_TOKEN documentation and a note to VAULT_ADDR about https and the possible need for the VAULT_CACERT. * Fixing broken links and ordering lists * Fixing broken links. Changing pre-requisites to prerequisites. Co-authored-by: David Yu <dyu@hashicorp.com> Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>	3 years ago
Matt Keeler	a553982506	Enable running autopilot state updates on all servers (#12617) ... * Fixes a lint warning about t.Errorf not supporting %w * Enable running autopilot on all servers On the non-leader servers all they do is update the state and do not attempt any modifications. * Fix the RPC conn limiting tests Technically they were relying on racey behavior before. Now they should be reliable.	3 years ago
John Murret	25c32be517	k8s docs - ACLs refactor - Updating terminating gateway documentation to call out updating the role rather than the token with the policy (#12612) ... * k8s docs - ACLs refactor - Updating terminating gateway documentation to call out updating the role rather than the token with the policy * Modifying role and policy names based on naming convention change.	3 years ago
Kyle Havlovitz	3b44343276	Add a field to disable following redirects on http checks	3 years ago
Kyle Havlovitz	6cf22a5cef	Merge pull request #12672 from hashicorp/tgate-san-validation ... Respect SNI with terminating gateways and log a warning if it isn't set alongside TLS	3 years ago
Bryce Kalow	82d3418642	website: fix usages of img tag (#12696)	3 years ago
David Yu	d49ea7930a	docs: rename Connect Service Mesh Kubernetes to Consul Service Mesh on Kubernetes (#12690) ... * docs:rename Connect Service Mesh Kubernetes to Consul Service Mesh on Kubernetes	3 years ago
Thomas Eckert	f51c02a923	Update Helm docs to reflect 0.42.0 release (#12689) ... * Update Helm docs to reflect 0.42.0 release Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> Co-authored-by: David Yu <dyu@hashicorp.com> Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Blake Covarrubias	79144dbac6	docs: Update links to K8s service mesh annotations (#12652) ... The list of supported annotations for Consul service mesh were moved from /docs/k8s/connect to /docs/k8s/annotations-and-labels in PR #12323. This commit updates various across the site to point to the new URL for these annotations.	3 years ago
mrspanishviking	13fba7567f	Merge pull request #12687 from hashicorp/acl-fix ... docs: fixes broken url in acl overview page	3 years ago
John Murret	2bc11a5db6	Updating helm docs with additionalVault and ACLs refactor functionality. (#12669) ... * Updating helm docs with additionalVault and ACLs refactor funtionality. * PR Feedback corrections. - Fix indentation. - Fix description of secretName and secretKey to be consistent - Change description of manageACLsRole to be more clear. - Make the added vault role field descriptions consistent * PR Feedback - correcting description for adminPartitionsRole * Fixing broken shell sessions * Fixing broken shell sessions by changing shell-session tobecloser tocomment marker	3 years ago
Karl Cardenas	1db1905cb5	docs: fixes broken url in acl overview page	3 years ago
Dhia Ayachi	319fe48561	documentation for config auto reload feature (#12548) ... * add config watcher to the config package * add logging to watcher * add test and refactor to add WatcherEvent. * add all API calls and fix a bug with recreated files * add tests for watcher * remove the unnecessary use of context * Add debug log and a test for file rename * use inode to detect if the file is recreated/replaced and only listen to create events. * tidy ups (#1535) * tidy ups * Add tests for inode reconcile * fix linux vs windows syscall * fix linux vs windows syscall * fix windows compile error * increase timeout * use ctime ID * remove remove/creation test as it's a use case that fail in linux * fix linux/windows to use Ino/CreationTime * fix the watcher to only overwrite current file id * fix linter error * fix remove/create test * set reconcile loop to 200 Milliseconds * fix watcher to not trigger event on remove, add more tests * on a remove event try to add the file back to the watcher and trigger the handler if success * fix race condition * fix flaky test * fix race conditions * set level to info * fix when file is removed and get an event for it after * fix to trigger handler when we get a remove but re-add fail * fix error message * add tests for directory watch and fixes * detect if a file is a symlink and return an error on Add * rename Watcher to FileWatcher and remove symlink deref * add fsnotify@v1.5.1 * fix go mod * do not reset timer on errors, rename OS specific files * rename New func * events trigger on write and rename * add missing test * fix flaking tests * fix flaky test * check reconcile when removed * delete invalid file * fix test to create files with different mod time. * back date file instead of sleeping * add watching file in agent command. * fix watcher call to use new API * add configuration and stop watcher when server stop * add certs as watched files * move FileWatcher to the agent start instead of the command code * stop watcher before replacing it * save watched files in agent * add add and remove interfaces to the file watcher * fix remove to not return an error * use `Add` and `Remove` to update certs files * fix tests * close events channel on the file watcher even when the context is done * extract `NotAutoReloadableRuntimeConfig` is a separate struct * fix linter errors * add Ca configs and outgoing verify to the not auto reloadable config * add some logs and fix to use background context * add tests to auto-config reload * remove stale test * add tests to changes to config files * add check to see if old cert files still trigger updates * rename `NotAutoReloadableRuntimeConfig` to `StaticRuntimeConfig` * fix to re add both key and cert file. Add test to cover this case. * review suggestion Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * add check to static runtime config changes * fix test * add changelog file * fix review comments * Apply suggestions from code review Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * update flag description Co-authored-by: FFMMM <FFMMM@users.noreply.github.com> * fix compilation error * add static runtime config support * fix test * fix review comments * fix log test * Update .changelog/12329.txt Co-authored-by: Dan Upton <daniel@floppy.co> * transfer tests to runtime_test.go * fix filewatcher Replace to not deadlock. * avoid having lingering locks Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * split ReloadConfig func * fix warning message Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * convert `FileWatcher` into an interface * fix compilation errors * fix tests * extract func for adding and removing files * add a coalesceTimer with a very small timer * extract coaelsce Timer and add a shim for testing * add tests to coalesceTimer fix to send remaining events * set `coalesceTimer` to 1 Second * support symlink, fix a nil deref. * fix compile error * fix compile error * refactor file watcher rate limiting to be a Watcher implementation * fix linter issue * fix runtime config * fix runtime test * fix flaky tests * fix compile error * Apply suggestions from code review Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * fix agent New to return an error if File watcher New return an error * add a coalesceTimer with a very small timer * extract coaelsce Timer and add a shim for testing * set `coalesceTimer` to 1 Second * add flag description to agent command docs * fix link * add Static runtime config docs * fix links and alignment * fix typo * Revert "add a coalesceTimer with a very small timer" This reverts commit d9db2fcb82. * Revert "extract coaelsce Timer and add a shim for testing" This reverts commit 0ab86012a4. * Apply suggestions from code review Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> Co-authored-by: FFMMM <FFMMM@users.noreply.github.com> Co-authored-by: Daniel Upton <daniel@floppy.co> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
FFMMM	973d2d0f9a	mark disable_compat_1.9 to deprecate in 1.13, change default to true (#12675) ... Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>	3 years ago
Eric Haberkorn	a7d5aa94a3	Merge pull request #12680 from hashicorp/fix-k8s-dns-service-name ... Fix the Kubernetes service name for DNS	3 years ago
Eric	d7b4ed1597	Fix the Kubernetes service name for DNS	3 years ago
Kyle Havlovitz	763f728df4	Add doc examples for expanded token read CLI and API	3 years ago
Kyle Havlovitz	1a3b885027	Use the GatewayService SNI field for upstream SAN validation	3 years ago
FFMMM	64e35777e0	docs: new rpc metric (#12608)	3 years ago
Kyle Havlovitz	51527907ab	Recommend SNI with TLS in the terminating gateway docs	3 years ago
Bryce Kalow	6bf67b7ef4	website: redirect /api to /api-docs (#12660)	3 years ago
Mike Morris	7cb9bfdfa9	website(api-gateway): add common errors page (#12643) ... * Adding common errors page for API Gateway * website(api-gateway): add missing CRDs common error message * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> * Update website/content/docs/api-gateway/common-errors.mdx * Additional page editing instructions and formating * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Apply suggestions from code review Co-authored-by: Jeff-Apple <79924108+Jeff-Apple@users.noreply.github.com> Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
R.B. Boyer	e79ce8ab03	xds: adding control of the mesh-wide min/max TLS versions and cipher suites from the mesh config entry (#12601) ... - `tls.incoming`: applies to the inbound mTLS targeting the public listener on `connect-proxy` and `terminating-gateway` envoy instances - `tls.outgoing`: applies to the outbound mTLS dialing upstreams from `connect-proxy` and `ingress-gateway` envoy instances Fixes #11966	3 years ago
Matt Keeler	15ddbbc686	Update raft-boltdb to pull in new writeCapacity metric (#12646)	3 years ago
R.B. Boyer	ac5bea862a	server: ensure that service-defaults meta is incorporated into the discovery chain response (#12511) ... Also add a new "Default" field to the discovery chain response to clients	3 years ago
Mike Morris	885edde8c1	website(api-gateway): add consul namespace to helm install (#12644) ... * website: api-gateway helm install consul namespace To mirror instructions at https://learn.hashicorp.com/tutorials/consul/kubernetes-api-gateway * website(api-gateway): add notes on where to find available versions * website(api-gateway): fixup link to more clearly indicate Consul Helm chart releases * Update website/content/docs/api-gateway/api-gateway-usage.mdx	3 years ago
Michele Degges	535edfa247	[RelAPI Onboarding] Add release API metadata file (#12591)	3 years ago
mrspanishviking	7da80ddbb4	Merge pull request #12595 from hashicorp/k8s-cli-install ... docs: add link to k8s cli install page	3 years ago
Luke Kysow	c8cdebd9cc	Update consul-enterprise.mdx (#12622)	3 years ago
Mike Morris	f8a2ae2606	agent: convert listener config to TLS types (#12522) ... * tlsutil: initial implementation of types/TLSVersion tlsutil: add test for parsing deprecated agent TLS version strings tlsutil: return TLSVersionInvalid with error tlsutil: start moving tlsutil cipher suite lookups over to types/tls tlsutil: rename tlsLookup to ParseTLSVersion, add cipherSuiteLookup agent: attempt to use types in runtime config agent: implement b.tlsVersion validation in config builder agent: fix tlsVersion nil check in builder tlsutil: update to renamed ParseTLSVersion and goTLSVersions tlsutil: fixup TestConfigurator_CommonTLSConfigTLSMinVersion tlsutil: disable invalid config parsing tests tlsutil: update tests auto_config: lookup old config strings from base.TLSMinVersion auto_config: update endpoint tests to use TLS types agent: update runtime_test to use TLS types agent: update TestRuntimeCinfig_Sanitize.golden agent: update config runtime tests to expect TLS types * website: update Consul agent tls_min_version values * agent: fixup TLS parsing and compilation errors * test: fixup lint issues in agent/config_runtime_test and tlsutil/config_test * tlsutil: add CHACHA20_POLY1305 cipher suites to goTLSCipherSuites * test: revert autoconfig tls min version fixtures to old format * types: add TLSVersions public function * agent: add warning for deprecated TLS version strings * agent: move agent config specific logic from tlsutil.ParseTLSVersion into agent config builder * tlsutil(BREAKING): change default TLS min version to TLS 1.2 * agent: move ParseCiphers logic from tlsutil into agent config builder * tlsutil: remove unused CipherString function * agent: fixup import for types package * Revert "tlsutil: remove unused CipherString function" This reverts commit 6ca7f6f58d. * agent: fixup config builder and runtime tests * tlsutil: fixup one remaining ListenerConfig -> ProtocolConfig * test: move TLS cipher suites parsing test from tlsutil into agent config builder tests * agent: remove parseCiphers helper from auto_config_endpoint_test * test: remove unused imports from tlsutil * agent: remove resolved FIXME comment * tlsutil: remove TODO and FIXME in cipher suite validation * agent: prevent setting inherited cipher suite config when TLS 1.3 is specified * changelog: add entry for converting agent config to TLS types * agent: remove FIXME in runtime test, this is covered in builder tests with invalid tls9 value now * tlsutil: remove config tests for values checked at agent config builder boundary * tlsutil: remove tls version check from loadProtocolConfig * tlsutil: remove tests and TODOs for logic checked in TestBuilder_tlsVersion and TestBuilder_tlsCipherSuites * website: update search link for supported Consul agent cipher suites * website: apply review suggestions for tls_min_version description * website: attempt to clean up markdown list formatting for tls_min_version * website: moar linebreaks to fix tls_min_version formatting * Revert "website: moar linebreaks to fix tls_min_version formatting" This reverts commit 3858592742. * autoconfig: translate old values for TLSMinVersion * agent: rename var for translated value of deprecated TLS version value * Update agent/config/deprecated.go Co-authored-by: Dan Upton <daniel@floppy.co> * agent: fix lint issue * agent: fixup deprecated config test assertions for updated warning Co-authored-by: Dan Upton <daniel@floppy.co>	3 years ago
Jared Kirschner	9db69653e4	Merge pull request #12602 from hashicorp/jkirschner-hashicorp-patch-1 ... docs: make gossip threat model more visible	3 years ago
Luke Kysow	f1745c25c5	Lkysow/docs updates 2 (#12604) ... * Document intermediate_cert_ttl	3 years ago
Jared Kirschner	74b181018b	docs: make gossip threat model more visible	3 years ago
Karl Cardenas	d6778f4e63	docs: removed the word page	3 years ago
Karl Cardenas	b17b6a462a	docs: add link to k8s cli install page	3 years ago
Jared Kirschner	4f1bfeaf33	Merge pull request #12523 from Petenerd/patch-1 ... Update install.mdx	3 years ago
Michael Wilkerson	8178c38d9b	updated docs	3 years ago
Jared Kirschner	ca2afce5d6	docs: mention filtered by ACLs in affected APIs	3 years ago
Jared Kirschner	bea07bd6e7	Merge pull request #12489 from hashicorp/docs/results-filtered-by-acl-awareness-coordinate ... docs: mention filtered by ACLs in coordinate API	3 years ago
Jared Kirschner	1f9ca248e1	docs: add filtered by ACLs header curl example	3 years ago
Jared Kirschner	109ffcda26	docs: mention filtered by ACLs in coordinate API	3 years ago
David Yu	15a2204fe4	docs: Correction on rotating gossip key order per DC (#12579) ... * docs: Correction on rotating gossip key order per DC	3 years ago
David Yu	a1110845df	docs: consul-k8s Change "Consul Connect Service Mesh" to "Consul Service Mesh" (#12577)	3 years ago
David Yu	55e864d125	docs: Consul K8s Overview update (#12575) ... * docs: Consul K8s Overview update Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
David Yu	858e05e7d7	docs: Consul Service Mesh overview - rename of title and K8s getting started (#12574) ... * Consul Service Mesh overview - rename of title and K8s getting started * reformat lines	3 years ago
Dan Upton	b36d4e16b6	Support per-listener TLS configuration ⚙️ (#12504) ... Introduces the capability to configure TLS differently for Consul's listeners/ports (i.e. HTTPS, gRPC, and the internal multiplexed RPC port) which is useful in scenarios where you may want the HTTPS or gRPC interfaces to present a certificate signed by a well-known/public CA, rather than the certificate used for internal communication which must have a SAN in the form `server.<dc>.consul`.	3 years ago
Paul Glass	9140d3d1e9	Fix broken link in ECS docs	3 years ago
Jacob	ee78b5a380	Update ui-visualization.mdx	3 years ago
mrspanishviking	7180c99960	Revert "[Docs] Agent configuration hierarchy "	3 years ago
trujillo-adam	4151dc097a	fixing merge conflicts part 3	3 years ago
trujillo-adam	9cc9122be8	fixed merge conflicts pt2	3 years ago
trujillo-adam	76d55ac2b4	merging new hierarchy for agent configuration	3 years ago
Ashlee M Boyer	b9a5e10aea	Merge pull request #12484 from hashicorp/docs-amb-fix-prometheus-link ... docs: Fixing Prometheus link in docs/agent/telemetry	3 years ago
Ashlee M Boyer	70ab6215f5	Fixing Prometheus link in docs/agent/telemetry	3 years ago
Karl Cardenas	7d4ee3efae	docs: cleaned up code blocks and added two sentences to the intro	3 years ago
Kyle Schochenmaier	d6792f14a3	update docs (#12543)	3 years ago
trujillo-adam	c46bdbd600	Merge pull request #12460 from hashicorp/docs-day-acl-improvements ... Docs day acl improvements	3 years ago
trujillo-adam	b5745c1ac6	few more tweaks	3 years ago
trujillo-adam	4083ce71af	Apply suggestions from code review ... Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
trujillo-adam	4f76c72c58	Apply suggestions from code review ... Co-authored-by: Chris S. Kim <ckim@hashicorp.com>	3 years ago
Petenerd	053990097a	Update install.mdx ... missing a quote escape	3 years ago
Karl Cardenas	99a50b9ca1	docs: replaced ceiling with the word max	3 years ago
Karl Cardenas	1de64468d9	docs: updated the text based on feedback from PM	3 years ago
Karl Cardenas	c8badedbf7	docs: adding text for maximum number of admin partitions	3 years ago
Blake Covarrubias	9a0c2dee60	docs: Update Kubernetes YAML examples in UI visualization (#12419) ... * Update Kubernetes related YAML config examples to document supported syntax in the latest version of the Helm chart. * Fix syntax in JSON example configs. Resolves #12403 Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Blake Covarrubias	96b47aee79	docs: Clarify configuration options apply to agent ... Recently there have been a handful of GitHub issues and Discuss posts where users have expected the `consul` CLI to make use of config options defined in the agent configuration files, and are confused when it does not honor those config options. This change clarifies that command-line and configuration file options documented on the /agent/options page only apply to the Consul agent, instead of the Consul CLI.	3 years ago
David Yu	e6e168b3e6	docs: Envoy 'compatibility' typo (#12513)	3 years ago
David Yu	fb18aa5529	docs: bump Envoy for 1.10.x (#12472) ... * docs: bump Envoy for 1.10.x * update security notes and remove previous versions older than n-2 Envoy 1.9.0 and older have last vulnerability. * Update envoy.mdx * Update envoy.mdx * Update envoy.mdx * Update envoy.mdx * formatting * Update website/content/docs/connect/proxies/envoy.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/connect/proxies/envoy.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
Petenerd	165089eab2	Update install.mdx ... missing comma	3 years ago
David Yu	c8865be799	docs: consul-k8s service mesh overview - move verification section (#12500)	3 years ago
Luke Kysow	16085d7eee	Update exported-services.mdx (#12499)	3 years ago
trujillo-adam	ed4f66b4d7	added some ACL example use cases to policy section	3 years ago
Eddie Rowe	28c78c52a2	Remove deprecated built-in proxy tutorial reference	3 years ago
trujillo-adam	e9a42df7c7	renamed acl-overview to index, fixed formatting, reworded node/service ID intros	3 years ago
trujillo-adam	4331a29f95	Apply suggestions from code review ... Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
trujillo-adam	7e98a0dc7b	fixing merge conflicts	3 years ago
Jared Kirschner	9c74f14061	Merge pull request #12455 from hashicorp/docs/enterprise-license-faq-improvements ... Enterprise license FAQ improvements	3 years ago
Jared Kirschner	728b04427c	docs: clarify trial license FAQ ... Also use consistent language throughout to refer to the non-production license (just "trial" license, not both "trial" and "evaluation").	3 years ago
Kyle Schochenmaier	4e24143b89	update helm docs for release 0.41.1 (#12465) ... * update helm docs for release 0.41.1 * apply escape on <ip>:<port> Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
Jared Kirschner	fb228cbeae	docs: add FAQ for obtaining copy of license ... For existing enterprise customers who need access to the license.	3 years ago
Jared Kirschner	9d64dab443	docs: add license renewal FAQ	3 years ago
Jared Kirschner	e8cb3a8156	docs: clarify license expiration behavior ... Also corrects the grace period between expiration and termination (10 years, not 24 hours).	3 years ago
Evan Culver	522676ed8d	connect: Update supported Envoy versions to include 1.19.3 and 1.18.6	3 years ago
Evan Culver	b95f010ac0	connect: Upgrade Envoy 1.20 to 1.20.2 (#12443)	3 years ago
Jeff-Apple	263357f7d5	Merge pull request #12416 from hashicorp/api-gateway-ga-docs ... website: update API Gateway docs for v0.1.0 GA release	3 years ago
Jeff-Apple	eea07af17a	Update website/content/docs/api-gateway/index.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	31e6ec62f0	Update website/content/docs/api-gateway/api-gateway-usage.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	6f80f9c4a7	Update website/content/docs/api-gateway/api-gateway-usage.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	7e515eef97	Update website/content/docs/api-gateway/index.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	f56981baf5	Update website/content/docs/api-gateway/api-gateway-usage.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	ba36bdc2e5	Update website/content/docs/api-gateway/api-gateway-usage.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
mrspanishviking	1f6651fac5	Merge pull request #12441 from hashicorp/retry-docs ... docs: added example for service-router retry	3 years ago
Jeff-Apple	5bc1e75e8f	Updated helm chart version number and a minor edit	3 years ago
Karl Cardenas	48c60946f9	docs: added example for service-router retry	3 years ago
Jeff-Apple	cc00e5e403	Minor edits and additions to the API Gateway docs.	3 years ago
David Yu	705f193f3f	docs: set tproxy annotation to false for multi-port (#12431)	3 years ago
Nitya Dhanushkodi	00c7f4f834	add multiport docs for K8s (#12428) ... * add multiport docs for K8s * add formatting Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago