Commit Graph

1142 Commits (0075421b1ab97a663ccf8dd3cb796ad44dcec133)

Author SHA1 Message Date
James Phillips 0881e46111 Cleans up version 8 ACLs in the agent and the docs. (#3248)
* Moves magic check and service constants into shared structs package.

* Removes the "consul" service from local state.

Since this service is added by the leader, it doesn't really make sense to
also keep it in local state (which requires special ACLs to configure), and
requires a bunch of special cases in the local state logic. This requires
fewer special cases and makes ACL bootstrapping cleaner.

* Makes coordinate update ACL log message a warning, similar to other AE warnings.

* Adds much more detailed examples for bootstrapping ACLs.

This can hopefully replace https://gist.github.com/slackpad/d89ce0e1cc0802c3c4f2d84932fa3234.
2017-07-13 22:33:47 -07:00
James Phillips 947cc0d5e9 Adds a version note about block_endpoints config. 2017-07-10 13:56:02 -07:00
James Phillips 66edec5dfd Adds the ability to blacklist specific HTTP endpoints. (#3252) 2017-07-10 13:51:25 -07:00
James Phillips da0408c241 Update autopilot.html.md 2017-07-07 14:38:35 -07:00
Seth Rutner 5cef512fa7 Update autopilot.html.md (#3244) 2017-07-07 14:34:59 -07:00
Brian Shumate 7ae25f6c7e DOCS: Add note in Ports Used section (#3241)
- Add note about port 8302 to address #3058
2017-07-07 09:38:56 -07:00
Chris Griggs bd03f8a8ed Update # of ports (#3238)
I counted twice.
2017-07-06 13:50:12 -07:00
James Phillips 224f9dd2c1 Adds links to Lifeguard info. 2017-07-06 12:19:39 -07:00
Frank Schroeder 6dd68f7ad7
Revert "agent: add allowStale option for HTTP API (#3142)"
This reverts commit 1e0fd27a74.
2017-06-27 07:04:55 +02:00
James Phillips a6987c1812 Adds missing tls_skip_verify option to HTTP check example. 2017-06-24 15:37:52 -07:00
James Phillips 6e1ee02689 Update options.html.md 2017-06-24 15:28:23 -07:00
James Phillips 380c8b957d Changes host-based node IDs from opt-out to opt-in. (#3187) 2017-06-24 09:36:53 -07:00
wojtkiewicz 1e0fd27a74
agent: add allowStale option for HTTP API (#3142)
This patch adds an "allowStale" option to the HTTP API
configuration which allows stale reads to provide linear
read scalability.

Fixes #3142
2017-06-22 10:31:13 +02:00
wojtkiewicz 37785028be
agent: add "http_config"
This patch adds an "http_config" object to the config file
and moves the "http_api_response_headers" option there.

"http_api_response_headers" is now deprecated in favor of
"http_config.response_headers"
2017-06-22 10:31:11 +02:00
Preetha Appan c7f35ef2f9 Update documentation and json examples for snapshot agent 2017-06-21 21:15:02 -05:00
Frank Schröder 31a310f551 agent: notify systemd after JoinLAN (#2121)
This patch adds support for notifying systemd via the
NOTIFY_SOCKET by sending 'READY=1' to the socket after
a successful JoinLAN.

Fixes #2121
2017-06-21 06:43:55 +02:00
preetapan 0c2a83e1ec Merge pull request #3154 from hashicorp/issue_2644_redux
Fix stale reads on server startup. Consistent reads will now wait for up to config.RPCHoldTimeout for the server to get past its raft log, before returning an error. Servers that are starting up will eventually catch up. 
This fixes issue #2644
2017-06-20 19:47:12 -05:00
Kyle Havlovitz 5473255f98 Update encryption.html.md 2017-06-16 12:54:25 -07:00
Preetha Appan 72af7b9bc4 Redo bug fix for stale reads on server startup, leveraging RPCHOldtimeout instead of maxQueryTime, plus tests 2017-06-15 22:41:30 -05:00
Kyle Havlovitz 5d99ee80ca Add an option to disable keyring file (#3145)
Also disables keyring file in dev mode.
2017-06-15 15:24:04 -07:00
Preetha Appan ec0cfae5ab Added documentation for new s3 server side encryption 2017-06-08 11:39:10 -07:00
James Phillips bc3b68ba80 Fixes version reference in encryption docs. 2017-06-07 21:31:48 -07:00
James Phillips 8ffa0e730f Merge pull request #3118 from katiebayes/master
Add enterprise badges and update middleman version
2017-06-07 10:41:57 -07:00
Frank Schröder 825f72f5ef agent: support custom header and method for http checks (#3106)
This patch adds support for custom headers and
method for HTTP checks.

Fixes #2474
Fixes #2657
Fixes #3106
2017-06-07 01:11:56 +02:00
Katie Bayes 5648e5e5a8 add enterprise badge style alert boxes, change guides/areas.html.md to erb file 2017-06-04 01:30:21 -04:00
Kyle Havlovitz 62f72f104c Add settings for upshifting to encrypted gossip (#3079) 2017-05-30 08:51:37 -07:00
Michael Leow deb206b7d7
agent: add RetryJoin support for Azure
Pull #2978 from leowmjw/develop

Resolves #2978
2017-05-24 10:15:38 +02:00
Frank Schroeder df91388b7b
website: rename *.markdown to *.md 2017-05-17 20:25:45 +02:00
Kyle Havlovitz 5bab68b9bb Add a path for transitioning to TLS on an existing cluster (#3001)
Fixes #1705
2017-05-10 14:25:48 -07:00
James Phillips 66e1bb5c3e
Adds prepared query API to ACLs table. 2017-05-08 21:37:52 -07:00
James Phillips 792dba4ffa Merge pull request #3008 from hashicorp/d-index-enterprise-features
Add Consul Enterprise section to Docs
2017-05-08 21:15:21 -07:00
Justin Walz c5c7882e1b Fixup ACL docs 2017-05-06 17:21:13 -07:00
Rob Genova 1277096b41 use relative links; remove extra spaces between words 2017-05-06 20:26:30 +00:00
James Phillips 1979f40cf1 Merge pull request #3012 from hashicorp/jbs-2944
DOCS: Minor clarification to address #2944
2017-05-05 09:01:32 -07:00
Brian Shumate 5974927993
DOCS: Minor clarification to address #2944 2017-05-05 11:56:12 -04:00
Brian Shumate e90804304a
DOCS: minor clarification to address #2950 2017-05-05 11:51:46 -04:00
Frank Schroeder f0d847572d
Fix imports on website 2017-05-05 17:07:02 +02:00
Rob Genova ff7db062ba Eliminated 'consul' from all paths; misc. edits; wrap text at 80 characters 2017-05-05 05:24:04 +00:00
Rob Genova f20aad8983 Add Consul Enterprise section to Docs 2017-05-04 22:30:11 +00:00
James Phillips 5d37086506
Adds support for new-style peers.json recovery for newer Raft protocol versions. 2017-05-04 14:15:59 -07:00
Seth Vargo aad6ecdc5f Merge pull request #2976 from jk563/master
Rearranged into alphabetical order
2017-05-01 14:55:35 -07:00
Kyle Havlovitz cd56a5ebdd Add separate option for verifying incoming HTTPS traffic (#2974)
* Add separate option for verifying incoming HTTPS traffic
2017-04-28 16:15:55 -07:00
Jamie Kelly abd138f196 Rearranged into alphabetical order
Swapped a couple of the guides around in the index page so that
they are in alphabetical order and match the navigation order.
2017-04-28 07:04:38 +01:00
rcgenova 8fbf731781 Merge pull request #2964 from hashicorp/d-remove-atlas-references
Remove references to the deprecated Consul/Atlas integration
2017-04-27 08:32:09 -07:00
Kyle Havlovitz b70e419aeb Add TLS cipher suite options and CA path support (#2963)
This patch adds options to configure the available
TLS cipher suites and adds support for a path
for multiple CA certificates.

Fixes #2959
2017-04-27 01:29:39 -07:00
Rob Genova 7a7655b6d4 add link to Consul Enterprise page 2017-04-26 22:45:12 +00:00
Rob Genova 49f23fc068 Remove references to the deprecated Consul/Atlas integration 2017-04-26 22:24:24 +00:00
Kristiyan Nikolov 5ae2829e17 Docs: fix typo (#2951) 2017-04-25 07:08:46 -07:00
Kyle Havlovitz f25cac4c8f Show raft protocol in list-peers command (#2929) 2017-04-19 15:01:40 -07:00
Nic Jackson 8c9b635765
Updated autopilot guide to correct synax issue with example config 2017-04-19 17:15:12 +01:00
Kyle Havlovitz 37dad53c8a
Add a config example to autopilot guide 2017-04-18 14:40:20 -07:00
mckennajones d4058b1576
Updating documentation regarding webui flags 2017-04-17 17:29:14 -07:00
Borys Pierov 20582f1c44 ACL guide fixes 2017-04-17 17:59:03 -04:00
Kyle Havlovitz ae6bf56ee1
Add tls client options to api/cli 2017-04-14 13:37:29 -07:00
James Phillips 0124f9117b
Fixes broken link to network areas API. 2017-04-13 19:19:42 -07:00
James Phillips ef6a42ade2 Merge pull request #2910 from hashicorp/jbs-2867
Docs: update bootstrapping and config, fixes #2867
2017-04-13 12:26:27 -07:00
Brian Shumate d0fdc39bf9
Put back manual process steps 2017-04-13 15:20:02 -04:00
Brian Shumate 626d5264a8
Docs: update bootstrapping and config, fixes #2867
- Add various join options to bootstrapping guide
- Add note about Atlas deprecation to bootstrapping guide
- Add notes about -retry-join and retry_join to -join option
- Add notes about -retry-join and retry_join to start_join option
2017-04-13 13:03:26 -04:00
James Phillips fa04c24978
Adds a new -disable-host-node-id option to help when testing with containers.
Fixes #2877.
2017-04-12 22:07:18 -07:00
James Phillips 5dd9040416 Adds a note about upgrading the current leader last. 2017-04-11 10:50:56 -07:00
James Phillips f408f2222b Merge pull request #2887 from devopsrebels/master
Fix wrong option name in options.html.markdown
2017-04-11 09:40:16 -07:00
Brian Shumate 970de8b520
Address link issues / add GCE 2017-04-11 12:34:40 -04:00
Brian Shumate 156a35703e
add new FAQ details 2017-04-11 12:06:18 -04:00
Brian Shumate 6c9a355bab
Docs updates:
- Add a FAQ for per-key value size limitation in the KV
- Update Atlas FAQ with post-deprecation recommendations
2017-04-11 11:45:29 -04:00
Cihat Genc 1acdafcb47 Fix wrong option name in options.html.markdown 2017-04-11 14:58:15 +02:00
Cameron Stokes 3f92cc70e8 [docs] Autopilot guide: clarify left status 2017-04-10 11:18:54 -07:00
James Phillips 5fad527956
Cleans up some typos in the ACL Guide. 2017-04-06 08:05:17 -07:00
James Phillips 80ecaa573d
Fixes deep link on ACL bounce page. 2017-04-06 07:55:23 -07:00
James Phillips 497b6b522c Merge pull request #2876 from hashicorp/enterprise-links
update all links to enterprise to avoid redirect
2017-04-05 13:02:29 -07:00
captainill 1e898158fc update all links to enterprise to avoid redirect 2017-04-05 12:13:23 -07:00
James Phillips 93ddd46ffa
Removed RPC link from the sidebar. 2017-04-05 11:51:52 -07:00
James Phillips 312a6a6136
Fixes a broken link. 2017-04-05 10:50:35 -07:00
James Phillips 21deacb5d6
Cleans up some doc typos. 2017-04-05 10:40:30 -07:00
James Phillips 9c3e643d4f
Does a complete rework of the ACL guide. 2017-04-05 10:36:19 -07:00
James Phillips 5ab7ea6f53
Deprecates the ACLs internals doc in favor of a guide. 2017-04-04 18:56:42 -07:00
James Phillips d621958e94
Removes guide link for Atlas integration. 2017-04-04 18:55:09 -07:00
James Phillips 8471360c9e Merge pull request #2865 from moofish32/doc/v8-compatibility
Raft Protocol vs Consul Protocol Doc Clarification
2017-04-04 12:44:36 -07:00
James Phillips ef177a5106 Update upgrade-specific.html.markdown 2017-04-04 12:43:24 -07:00
Seth Vargo 7779c5942c
Link to new api 2017-04-04 12:52:00 -04:00
Seth Vargo 61d814e69c
Rename sidebar link items 2017-04-04 12:40:53 -04:00
Seth Vargo 99c3592064
Update API docs 2017-04-04 12:33:35 -04:00
Mike Cowgill aabfd357ff Raft version in 0.8 is 3 2017-04-04 00:20:29 -07:00
Mike Cowgill b7851b23be compatibility table update and note about Raft version being separate 2017-04-04 00:17:49 -07:00
James Phillips 3b1f40c274
Changes title to Server Read Scaling. 2017-04-03 12:51:00 -07:00
James Phillips f288c0e8eb Adds top-level guide links that were missing. 2017-03-31 09:06:24 -07:00
James Phillips fea3c62399 Merge pull request #2862 from wjimenez5271/wjimenez5271-docs
clarify when acl_default_policy takes effect
2017-03-31 08:49:23 -07:00
Brian Shumate b2d7b11c44
docs: Clarify force-remove limited to same DC, fixes #1264 2017-03-30 14:44:10 -04:00
Brian Shumate 6f17af8453
docs: Configuration precedence clarification, fixes #1203 2017-03-30 14:13:50 -04:00
Brian Shumate dc5b148313
docs: add user resource limits FAQ, fixes #1628 2017-03-30 13:56:03 -04:00
James Phillips 86870ae51d Merge pull request #2854 from hashicorp/remote-exec
Changes `disable_remote_exec` default to true so remote exec is opt-in.
2017-03-30 10:29:09 -07:00
Kyle Havlovitz 9ff4322dda Merge pull request #2847 from hashicorp/remove-peer-by-id
Add CLI/API endpoints for removing peer by ID
2017-03-30 10:13:56 -07:00
Kyle Havlovitz da9c825592
Add CLI/API endpoints for removing peer by ID 2017-03-30 10:13:32 -07:00
James Phillips 7e2dcb61bf
Changes `disable_remote_exec` default to true so remote exec is opt-in. 2017-03-30 09:43:32 -07:00
James Phillips 8552575e3d
Adds a link from the autopilot CLI page to the guide. 2017-03-29 21:14:26 -07:00
James Phillips e34559a257
Updates change log and upgrade guide with details about #2844. 2017-03-29 13:05:57 -07:00
James Phillips 11ee9a9e72
Disables agent-level enforcement on Consul agents unless acl_datacenter is set. 2017-03-29 12:24:42 -07:00
James Phillips 33ab068c28
Capitalizes title. 2017-03-29 11:32:56 -07:00
James Phillips 78bf520e84
Adds which DC each command runs in and a DNS example to the areas guide. 2017-03-29 11:30:05 -07:00
Kyle Havlovitz e081b39014 Merge pull request #2840 from hashicorp/f-advanced-autopilot-guide
Add section on advanced autopilot features to the guide
2017-03-28 12:06:51 -07:00
James Phillips 15a183c5a0 Merge pull request #2839 from hashicorp/network-area-docs
Adds network area docs.
2017-03-28 11:57:57 -07:00
James Phillips dac716641e
Adds network areas guide. 2017-03-28 11:56:55 -07:00
Kyle Havlovitz 038b07ea1c
Add section on advanced autopilot features to the guide 2017-03-28 11:56:21 -07:00
James Phillips 0b0eba8e97
Adds network area CLI documentation. 2017-03-28 10:31:56 -07:00
James Phillips 1296e40ad5
Adds basic operator area HTTP documentation. 2017-03-28 01:09:20 -07:00
Thomas Viaud 7f8eafeeaa Update autopilot.html.markdown 2017-03-28 09:54:36 +02:00
James Phillips f8a4a873cf
Breaks the operator HTTP doc into sections. 2017-03-27 23:28:08 -07:00
VEBER Arnaud 86607b32d1
docs(agent/options): remove atlas_endpoint dup 2017-03-25 13:25:54 +01:00
James Phillips b9bb29c8bc Update upgrade-specific.html.markdown 2017-03-24 17:45:24 -07:00
James Phillips fae78dcd0a
Adds node metadata to the reload list. 2017-03-24 10:29:39 -07:00
James Phillips f0b89edb0c
Adds a note about the deprecated RPC ports. 2017-03-24 10:23:45 -07:00
James Phillips 6f4180b4fd Merge pull request #2826 from hashicorp/acl-cleanup
Cleans up reconcile issues with ACLs and reverting node information.
2017-03-23 15:56:14 -07:00
James Phillips d428bc63c1
Modifies server reconcile path to not use the server's token for internal operations. 2017-03-23 13:34:30 -07:00
Brian Shumate f83c7f8a42
docs: Point of clarifcation about cluster leadership for #2782 2017-03-23 13:00:23 -04:00
Kyle Havlovitz 390f41d8d5
Add advanced autopilot features 2017-03-22 15:25:16 -07:00
James Phillips 1091c7314e
Removes remoteConsuls in favor of the new router.
This has the next wave of RTT integration with the router and also
factors some common RTT-related helpers out to lib. While we were
in here we also got rid of the coordinate disable config so we don't
need to deal with the complexity in the router (there was never a
user-visible way to disable coordinates).
2017-03-16 16:42:19 -07:00
James Phillips 472f1bd63e
Adds router into RPC paths with work in progress on coordinates. 2017-03-16 16:42:18 -07:00
Kyle Havlovitz 09e2663d10 Merge pull request #2802 from hashicorp/f-autopilot-improvements
Fix an issue with changing server ID when re-joining
2017-03-15 20:26:16 -07:00
Kyle Havlovitz 5353221666
Reorganized cluster health check loop and logic 2017-03-15 18:27:17 -07:00
Kyle Havlovitz 51b11cd344
Fix an issue with changing server IDs and add a few UX enhancements around autopilot features 2017-03-15 16:09:55 -07:00
Nic Jackson 217bb02a43 Updated documentation to add information that bootstrap overrides server mode 2017-03-14 17:56:33 -07:00
Kyle Havlovitz 92da3d08ff
Adjust autopilot sections based on feedback 2017-03-10 15:22:20 -08:00
Kyle Havlovitz c936fe38da
Add autopilot guide to the docs 2017-03-10 14:55:18 -08:00
Kyle Havlovitz e119240fdf Merge pull request #2788 from hashicorp/f-autopilot-2
Autopilot server health monitoring
2017-03-10 12:29:45 -08:00
Kyle Havlovitz 9b4497de09
Cleaned up and reorganized some autopilot-related code 2017-03-09 18:21:40 -08:00
James Phillips 22986fbfe8
Adds back the RPC page with a deprecation notice.
Fixes #2794.
2017-03-09 11:09:11 -08:00
James Phillips bdffcbfbe8 Fixes a typo in the snapshot docs. 2017-03-08 19:49:07 -08:00
Kyle Havlovitz fb259e3d04
Merge branch 'master' into f-autopilot-2 2017-03-06 16:02:19 -08:00
Kyle Havlovitz 2eefe3ca5b
Add autopilot server health tracking
This adds two goroutines to perform autopilot tasks on the leader - one
to monitor the health of servers and another to periodically clean up
dead servers with a limit on removal count. Also adds a new http endpoint,
`/v1/operator/autopilot/health`, for querying this information through an
operator RPC endpoint.
2017-03-06 16:00:10 -08:00
Sean Chittenden a791de3ecf Revert "Change `ClientAddr` to default to `BindAddr` when not present." 2017-03-06 13:32:43 -08:00
Sean Chittenden df50950600
Note the default value prior to 0.8 for `-client` was `127.0.0.1`. 2017-03-06 12:26:35 -08:00
Sean Chittenden beae5c6bba
Change `ClientAddr` to default to `BindAddr` when not present.
With this change, it is now possible to only specify the `-bind` or
`bind_addr` attributes and get a functioning consul agent.
2017-03-04 20:52:52 -08:00
James Phillips ed2e700ab9 Moves raft_protocol config out into its own top-level item. 2017-03-04 09:20:23 -08:00
James Phillips 3103f7f673 Merge pull request #2690 from zeroae/f-simple-rfc2782
RFC 2782 support with optional .service tag
2017-03-02 14:49:36 -08:00
Kyle Havlovitz ab6c49ab4c Merge pull request #2771 from hashicorp/f-autopilot
Autopilot dead server cleanup, config, and raft version compatibility
2017-02-28 15:04:16 -08:00
Kyle Havlovitz 92c8b9c3a0
Rename DeadServerCleanup and make wording adjustments 2017-02-28 14:45:21 -08:00
Kyle Havlovitz 9221aed856
Remove the RPC client interface and update docs 2017-02-28 13:41:09 -08:00
Kyle Havlovitz 1eef639403
Add CLI RPC deprecation notice to docs 2017-02-24 18:10:46 -08:00
Kyle Havlovitz 5429e8ce66
Add cli docs and minor test/comment tweaks 2017-02-24 16:55:44 -08:00
Kyle Havlovitz 1c24c5d8d6
Add docs and api client methods for autopilot config 2017-02-23 21:00:15 -08:00
Kyle Havlovitz 0023454ccc
Add config section to docs for autopilot 2017-02-22 13:11:01 -08:00
Ellery Addington-White 47ee5edefc Adds missing double quote 2017-02-16 13:38:55 -08:00
Kyle Havlovitz c8d0273f1b
Condense raft subcommand into one doc page 2017-02-16 11:44:14 -08:00
Kyle Havlovitz e85b401eb9
Split operator raft command into subcommands 2017-02-15 13:53:34 -08:00
Kyle Havlovitz 466e39d27a Merge pull request #2732 from hashicorp/f-validate-command
Deprecate configtest and add validate command
2017-02-10 20:34:09 -05:00
Kyle Havlovitz c9abafab92
Update docs and give better error for unknown client scheme 2017-02-10 19:55:54 -05:00
Kyle Havlovitz eee5eb3fb8
Update website docs for validate command 2017-02-10 19:38:38 -05:00
Kyle Havlovitz 93853340f0 Merge pull request #2726 from hashicorp/f-cli-rework-3
Centralize command-line parsing part 3
2017-02-10 13:42:01 -05:00
James Phillips 7e52e95c47 Adds clarifying note about the wakeup jitter.
Closes #2727.
2017-02-09 20:28:38 -08:00
Kyle Havlovitz 55ee1b0aed
Merge branch 'master' into f-cli-rework-3 2017-02-09 21:24:27 -05:00
Kyle Havlovitz ea66375063
Convert watch command to use base.Command 2017-02-09 20:36:01 -05:00