913 Commits (0eac8265737b5b9091d88e5b1949e859466b4d73)

Author	SHA1	Message	Date
James Phillips	77ad084229	Fixes JSON in wildcard query example.	9 years ago
James Phillips	e60a095207	Merge pull request #1839 from foxel/patch-1 ... Clarification for advertise_addrs.rpc	9 years ago
Sean Chittenden	f33b2722d8	Update the docs slightly re: only_passing ... Signed-off by: @slackpad	9 years ago
Sayalic	bb9ddee4a0	add inline code segment to enableTagOverride	9 years ago
Wim	b5d45322b4	Allow [::] as a bind address (binds to first public IPv6 address)	9 years ago
James Phillips	6b2ace6f6b	Fixes a few bugs in the prepared query doc.	9 years ago
James Phillips	6711662676	Adds a note about template query ACLs.	9 years ago
James Phillips	580cfc3831	Updates website to version 0.6.4.	9 years ago
Andrey Kupreychik	f4cc8e7620	Clarification for advertise_addrs.rpc ... Clarification for advertise_addrs.rpc as it sets the server RPC port (default 8300)	9 years ago
James Phillips	adea7cda81	Merge pull request #1803 from tylert/doc-enc-update ... Update agent encryption doc example	9 years ago
Alexandr Burdiyan	39b8dd934f	Update Consul Tools links ... Docker Consul and Registrator projects were moved to another repositories.	9 years ago
James Phillips	01ae1e7dfe	Merge pull request #1820 from hashicorp/f-port-docs ... Adds a reference to the network ports from the security guide.	9 years ago
James Phillips	c1de5b7a13	Adds a reference to the network ports from the security page.	9 years ago
James Phillips	89c5fcabf7	Adds a reference to the health endpoint in the intro. ... Fixes #1739.	9 years ago
Igor Dubinskiy	bc7b65452c	Fix doc typo	9 years ago
Tyler Tidman	43312b4a69	Update agent encryption doc example	9 years ago
James Phillips	e944b18d8b	Merge pull request #1813 from hashicorp/f-dns-trim ... Makes sure UDP DNS responses aren't larger than allowed.	9 years ago
captainill	542b04558f	refactor to encapsulate all side affects of displaying announcement bnr in one file	9 years ago
captainill	af0edc9d9c	fix header on subpages when displaying annoucement bnr	9 years ago
Igor Dubinskiy	3a25860270	Make sure UDP DNS responses aren't larger than allowed	9 years ago
James Phillips	aa8cd2619d	Fixes broken example JSON.	9 years ago
James Phillips	eb7004f2b8	Renames "debug" endpoint and structures to "explain".	9 years ago
James Phillips	d7288e3a5e	Adds a prepared query debug endpoint.	9 years ago
James Phillips	fbd8e40cd5	Adds basic docs for prepared query templates.	9 years ago
vishalnayak	680b6ffc21	minor docs fix	9 years ago
James Phillips	b16f2e7392	Merge pull request #1789 from hashicorp/jt-enterprise-bnr ... add announcement banner for Consul Enterprise	9 years ago
James Phillips	cce0ace53a	Fixes name of new query ACL.	9 years ago
Kevin Fishner	272c9fae1c	fix UTMs	9 years ago
Kevin Fishner	b71b0e7d0b	update copyedit to add the word build	9 years ago
captainill	293aba329f	add announcement banner for Consul Enterprise launch	9 years ago
James Phillips	7ebad899da	Adds a new PUT-based TTL check update endpoint.	9 years ago
James Phillips	ef1a588b7a	Merge pull request #1777 from hashicorp/b-port-docfix ... TLS example and correcting error	9 years ago
James Phillips	b92243d8d0	Tweaks the address and advertise docs.	9 years ago
James Phillips	dca480e284	Cleans up the documents.	9 years ago
James Phillips	7d392118d2	Adds a check for users re-submitting the redacted token.	9 years ago
James Phillips	483898abe5	Renames "prepared_query" ACL policy to "query".	9 years ago
James Phillips	b64f19bb08	Adds an upgrade note about the new ACL behavior.	9 years ago
James Phillips	880cd21667	Refactors docs into a more complete state for prepared query ACLs.	9 years ago
James Phillips	67de77482e	Creates new "prepared-query" ACL type and new token capture behavior. ... Prior to this change, prepared queries had the following behavior for ACLs, which will need to change to support templates: 1. A management token, or a token with read access to the service being queried needed to be provided in order to create a prepared query. 2. The token used to create the prepared query was stored with the query in the state store and used to execute the query. 3. A management token, or the token used to create the query needed to be supplied to perform and CRUD operations on an existing prepared query. This was pretty subtle and complicated behavior, and won't work for templates since the service name is computed at execution time. To solve this, we introduce a new "prepared-query" ACL type, where the prefix applies to the query name for static prepared query types and to the prefix for template prepared query types. With this change, the new behavior is: 1. A management token, or a token with "prepared-query" write access to the query name or (soon) the given template prefix is required to do any CRUD operations on a prepared query, or to list prepared queries (the list is filtered by this ACL). 2. You will no longer need a management token to list prepared queries, but you will only be able to see prepared queries that you have access to (you get an empty list instead of permission denied). 3. When listing or getting a query, because it was easy to capture management tokens given the past behavior, this will always blank out the "Token" field (replacing the contents as <hidden>) for all tokens unless a management token is supplied. Going forward, we should discourage people from binding tokens for execution unless strictly necessary. 4. No token will be captured by default when a prepared query is created. If the user wishes to supply an execution token then can pass it in via the "Token" field in the prepared query definition. Otherwise, this field will default to empty. 5. At execution time, we will use the captured token if it exists with the prepared query definition, otherwise we will use the token that's passed in with the request, just like we do for other RPCs (or you can use the agent's configured token for DNS). 6. Prepared queries with no name (accessible only by ID) will not require ACLs to create or modify (execution time will depend on the service ACL configuration). Our argument here is that these are designed to be ephemeral and the IDs are as good as an ACL. Management tokens will be able to list all of these. These changes enable templates, but also enable delegation of authority to manage the prepared query namespace.	9 years ago
csawyerYumaed	5026a40ec1	Update documentation - add Network Ports. ... Update security.html.markdown add section on Network Port usage. TODO: add Atlas port usage.	9 years ago
Michael Crilly	4c8725ef63	TLS example and correcting error ... The example configuration file omits TLS support in the HTTP API. This is fine, but a second example demonstrating how to enable TLS over the HTTP API is harmless and, in fact, should be default practice. Using the format `ip:port` in the "addresses" block will cause Consul to crash on reload/start. See issue (#1727)[https://github.com/hashicorp/consul/issues/1727#issuecomment-184980751]	9 years ago
Kim Toms	7e8e11aea3	Update leader-election.html.markdown ... Remove duplicate 'leader'	9 years ago
James Phillips	03602779c6	Fixes a typo.	9 years ago
Michael de Jong	b99824330d	Added a reference to Consultant in the Community Tools section.	9 years ago
James Phillips	d2cc2801fa	Merge pull request #1698 from hashicorp/pr-1547-slackpad ... Implements WAN address translation.	9 years ago
James Phillips	590ab94d8d	Adds documentation for WAN address translation.	9 years ago
James Phillips	eb8ee9fce0	Merge pull request #1609 from kevinsimper/patch-1 ... Updating dns forwarding	9 years ago
James Phillips	d2d6b51fe4	Tweaks the telemetry docs.	9 years ago
James Phillips	d60be51f01	Merge pull request #1284 from nbrownus/telemetry ... Option to disable hostnames from telemetry	9 years ago
James Phillips	64ec6d7d73	Adds a warning about DoS-ing the cluster with consul exec.	9 years ago