40c7f73629
[NET-1151 NET-11046] docs: clarify request normalization and L7 headers feature availability ( #21855 )
...
docs: clarify request normalization and L7 headers feature availability
- Add notes on feature availability tied to specific fix versions
- Add missing 1.20 upgrade entry
- Remove erroneous 1.17 upgrade entry (version DNE)
- Add missing HCL variant for service intentions config
2024-10-28 11:06:28 -06:00
d9206fc7e2
[NET-1151 NET-11228] security: Add request normalization and header match options to prevent L7 intentions bypass ( #21816 )
...
mesh: add options for HTTP incoming request normalization
Expose global mesh configuration to enforce inbound HTTP request
normalization on mesh traffic via Envoy xDS config.
mesh: enable inbound URL path normalization by default
mesh: add support for L7 header match contains and ignore_case
Enable partial string and case-insensitive matching in L7 intentions
header match rules.
ui: support L7 header match contains and ignore_case
Co-authored-by: Phil Renaud <phil@riotindustries.com>
test: add request normalization integration bats tests
Add both "positive" and "negative" test suites, showing normalization in
action as well as expected results when it is not enabled, for the same
set of test cases.
Also add some alternative service container test helpers for verifying
raw HTTP request paths, which is difficult to do with Fortio.
docs: update security and reference docs for L7 intentions bypass prevention
- Update security docs with best practices for service intentions
configuration
- Update configuration entry references for mesh and intentions to
reflect new values and add guidance on usage
2024-10-16 12:23:33 -04:00
970353419c
docs: File System Certificates ( #21259 )
...
* Reference page updates
* Inline certificate config entry updates
* API Gateway configuration page
* K8s page updates
* Apply suggestions from code review
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: danielehc <40759828+danielehc@users.noreply.github.com>
* Daniele's suggestions
* Encrypt VMs suggestions
* Apply suggestions from code review
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
---------
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: danielehc <40759828+danielehc@users.noreply.github.com>
2024-06-11 12:58:01 -07:00
44facc2ea3
chore: remove repetitive words ( #20890 )
...
Signed-off-by: availhang <mayangang@outlook.com>
2024-03-28 16:31:55 -07:00
fbc2b93bc4
docs: Rename Consul OSS to Consul CE ( #19009 )
...
Rename references of Consul OSS to Consul Community Edition (CE).
Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>
2023-09-27 09:31:28 -07:00
eab88bf92a
docs: Fix spelling errors across various pages on the site ( #18533 )
...
This commit fixes numerous spelling errors across the site and also
removes unnecessary whitespace that was present in the edited files.
2023-08-21 16:23:27 +00:00
d565056fb0
Fix incorrect yaml in examples ( #18463 )
2023-08-15 08:04:21 -07:00
b162c51523
Fix some inconsistencies in jwt docs ( #18234 )
2023-07-24 16:36:26 +00:00
414a61da28
Fixes ( #17765 )
2023-06-15 11:24:40 -07:00
37a13dcf82
docs: minor fixes to JWT auth docs ( #17680 )
...
* Fixes
* service intentions fixes
2023-06-12 22:46:25 +00:00
66704e5cb9
docs: JWT Authorization for intentions ( #17643 )
...
* Initial page/nav creation
* configuration entry reference page
* Usage + fixes
* service intentions page
* usage
* description
* config entry updates
* formatting fixes
* Update website/content/docs/connect/config-entries/service-intentions.mdx
Co-authored-by: Paul Glass <pglass@hashicorp.com>
* service intentions review fixes
* Overview page review fixes
* Apply suggestions from code review
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
---------
Co-authored-by: Paul Glass <pglass@hashicorp.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 22:13:44 +00:00
ef77f9abd4
docs: Sameness Groups ( #17628 )
...
* port from enterprise branch
* Apply suggestions from code review
Co-authored-by: shanafarkas <105076572+shanafarkas@users.noreply.github.com>
* Update website/content/docs/connect/cluster-peering/usage/create-sameness-groups.mdx
* next steps
* Update website/content/docs/connect/cluster-peering/usage/create-sameness-groups.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
* Update website/content/docs/k8s/connect/cluster-peering/usage/create-sameness-groups.mdx
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
---------
Co-authored-by: shanafarkas <105076572+shanafarkas@users.noreply.github.com>
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2023-06-12 20:06:57 +00:00
b74e41ecd1
Update service-intentions.mdx ( #17443 )
2023-05-24 08:48:21 -07:00
f5725b414e
added an intro statement for the SI conf entry confiration model ( #17017 )
...
* added an intro statement for the SI conf entry confiration model
* caught a few more typos
2023-04-17 11:29:32 -07:00
90bbae5d75
Docs/intentions refactor docs day 2022 ( #16758 )
...
* converted intentions conf entry to ref CT format
* set up intentions nav
* add page for intentions usage
* final intentions usage page
* final intentions overview page
* fixed old relative links
* updated diagram for overview
* updated links to intentions content
* fixed typo in updated links
* rename intentions overview page file to index
* rollback link updates to intentions overview
* fixed nav
* Updated custom HTML in API and CLI pages to MD
* applied suggestions from review to index page
* moved conf examples from usage to conf ref
* missed custom HTML section
* applied additional feedback
* Apply suggestions from code review
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
* updated headings in usage page
* renamed files and udpated nav
* updated links to new file names
* added redirects and final tweaks
* typo
---------
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
2023-03-24 15:16:06 -07:00
ce6e278d9b
Fix broken links in Consul docs ( #16640 )
...
* Fix broken links in Consul docs
* more broken link fixes
* more 404 fixes
* 404 fixes
* broken link fix
---------
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
2023-03-24 19:35:34 +00:00
cddf86f337
Docs/cluster peering 1.15 updates ( #16291 )
...
* initial commit
* initial commit
* Overview updates
* Overview page improvements
* More Overview improvements
* improvements
* Small fixes/updates
* Updates
* Overview updates
* Nav data
* More nav updates
* Fix
* updates
* Updates + tip test
* Directory test
* refining
* Create restructure w/ k8s
* Single usage page
* Technical Specification
* k8s pages
* typo
* L7 traffic management
* Manage connections
* k8s page fix
* Create page tab corrections
* link to k8s
* intentions
* corrections
* Add-on intention descriptions
* adjustments
* Missing </CodeTabs>
* Diagram improvements
* Final diagram update
* Apply suggestions from code review
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
* diagram name fix
* Fixes
* Updates to index.mdx
* Tech specs page corrections
* Tech specs page rename
* update link to tech specs
* K8s - new pages + tech specs
* k8s - manage peering connections
* k8s L7 traffic management
* Separated establish connection pages
* Directory fixes
* Usage clean up
* k8s docs edits
* Updated nav data
* CodeBlock Component fix
* filename
* CodeBlockConfig removal
* Redirects
* Update k8s filenames
* Reshuffle k8s tech specs for clarity, fmt yaml files
* Update general cluster peering docs, reorder CLI > API > UI, cross link to kubernetes
* Fix config rendering in k8s usage docs, cross link to general usage from k8s docs
* fix legacy link
* update k8s docs
* fix nested list rendering
* redirect fix
* page error
---------
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
Co-authored-by: David Yu <dyu@hashicorp.com>
Co-authored-by: Tu Nguyen <im2nguyen@gmail.com>
2023-02-23 11:58:39 -06:00
6e425f7428
docs: Migrate link formats ( #15976 )
...
* Adding check-legacy-links-format workflow
* Adding test-link-rewrites workflow
* Updating docs-content-check-legacy-links-format hash
* Migrating links to new format
Co-authored-by: Kendall Strautman <kendallstrautman@gmail.com>
2023-01-25 08:52:43 -08:00
7b3b0f469b
Updating MD links in ConfigEntryReference components ( #16038 )
2023-01-20 20:02:25 -05:00
f797d128c7
Spacing and title fixes
2022-09-16 10:28:32 -05:00
2b69d809ce
/docs/connect/config-entries
2022-09-13 16:04:13 -05:00
c66edb8af5
Update docs with Source.Peer field ( #13463 )
2022-06-16 09:30:05 -04:00
0a51e145c1
docs: simplify agent docs slugs
2022-04-11 17:38:47 -07:00
ddae7d18a2
docs: fix external links to agent config pages
2022-04-11 17:38:11 -07:00
7180c99960
Revert "[Docs] Agent configuration hierarchy "
2022-03-15 16:13:58 -07:00
76d55ac2b4
merging new hierarchy for agent configuration
2022-03-14 15:44:41 -07:00
5a25979d0b
Apply suggestions from code review
...
typos and minor corrections
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
2022-01-03 11:32:14 -08:00
85e86bd316
updated configuration entry params for admin partitions 1.11
2021-12-20 16:30:39 -08:00
020e2692da
Merge pull request #10725 from hashicorp/banks-patch-3
...
Call out the incompatibility of wildcards and L7 permissions
2021-09-28 13:51:41 +01:00
c118e51d5c
Apply suggestions from code review
...
Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
2021-09-10 21:29:43 +01:00
3363da7d35
docs: Add JSON examples to all config entries
...
This commit adds example JSON configs for several config entry
resources were missing examples in this language.
The examples have been updated to use the new CodeTabs resource
instead of the Tab component.
2021-08-10 15:34:28 -07:00
260364bb04
Call out the incompatibility of wildcards and L7 permissions
2021-07-29 11:58:21 +01:00
8671762474
website: implement mktg 032 ( #9953 )
...
* website: migrate to new nav-data format
* website: clean up unused intro content
* website: remove deprecated sidebar_title from frontmatter
* website: add react-content to fix global style import issue
2021-04-07 15:50:38 -04:00
b6d7bf1243
Move cfg entry docs to under connect from agent ( #9533 )
...
Since all config entries are currently related to service mesh it's a
much more natural place to look for them under Service Mesh than under
Agent.
2021-01-13 12:48:48 -08:00
Michael Zalimeni