consul

Commit Graph

Author	SHA1	Message	Date
Iryna Shustava	22872b03a6	docs: Clarify the use of kustomize or ship with the Helm chart (#7154 )	5 years ago
Chris Piraino	401221de58	Allow users to configure either unstructured or JSON logging (#7130 ) * hclog Allow users to choose between unstructured and JSON logging	5 years ago
Iryna Shustava	14369f03ce	docs: update ACL perms for the /connect/ca/roots endpoint (#7155 )	5 years ago
Blake Covarrubias	08909661c2	docs: Fix success/passing health check definition This commit changes the health check example shown for the success/failures_before_passing option to correctly show that the value of `checks` is an array of objects, not an object. Added text clarifying these check parameters are available in Consul 1.7.0 and later. Expanded the health check to provide a more complete configuration example. Resolves #7114.	5 years ago
Matt Keeler	bbc2eb1951	Add the v1/catalog/node-services/:node endpoint (#7115 ) The backing RPC already existed but the endpoint will be useful for other service syncing processes such as consul-k8s as this endpoint can return all services registered with a node regardless of namespacing.	5 years ago
Blake Covarrubias	b3cf47c861	Redirect /docs/guides/outage.html to Learn Resolves: #6953	5 years ago
Alexey Miasoedov	b71630b752	fix Unix socket path in docs	5 years ago
David Yu	ee329db79a	Merge pull request #7104 from hashicorp/david-yu-patch-4 Small change to TLS connection wording	5 years ago
Kit Ewbank	7b17f789d3	docs: add Helm chart 'dns.clusterIP' value. (#5845 )	5 years ago
Hans Hasselberg	11a571de95	agent: setup grpc server with auto_encrypt certs and add -https-port (#7086 ) * setup grpc server with TLS config used across consul. * add -https-port flag	5 years ago
Iryna Shustava	a33154ac9b	Add docs about rolling out TLS on k8s (#7096 ) * Add docs about gradually rolling out TLS on k8s Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>	5 years ago
David Yu	26a0ea1c39	Small change to wording Removing automatic connection wording for applications for the time being. From @blake > They can automatically establish TLS connections without being aware that TLS is happening. They are aware that they’re routed through the Connect proxy, the app has to configure itself to use the local upstream port.	5 years ago
Luke Kysow	c9dbcc31ec	Merge pull request #6970 from hashicorp/k8s-docs-refactor Kubernetes docs reorganization	5 years ago
Luke Kysow	e0aff262cf	Reorg kube docs	5 years ago
Hans Hasselberg	804eb17094	connect: check if intermediate cert needs to be renewed. (#6835 ) Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates. This PR adds a check that renews the cert if it is half way through its validity period. In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.	5 years ago
Hans Hasselberg	87f32c8ba6	auto_encrypt: set dns and ip san for k8s and provide configuration (#6944 ) * Add CreateCSRWithSAN * Use CreateCSRWithSAN in auto_encrypt and cache * Copy DNSNames and IPAddresses to cert * Verify auto_encrypt.sign returns cert with SAN * provide configuration options for auto_encrypt dnssan and ipsan * rename CreateCSRWithSAN to CreateCSR	5 years ago
Matej Urbas	ce023359fe	agent: configurable MaxQueryTime and DefaultQueryTime. (#3777 )	5 years ago
John Cowen	bc86002be9	docs: Add note about using valid DNS labels for service names (#7035 ) Add note about using valid DNS labels for service names	5 years ago
Kit Patella	8be67b777a	Small improvements to Connect docs (#6910 ) * docs/connect add link to intentions and minor phrasing change * docs/connect pluralize 'applications' * Update website/source/docs/connect/connect-internals.html.md Co-Authored-By: Paul Banks <banks@banksco.de>	5 years ago
Freddy	e635b24215	Update force-leave ACL requirement to operator:write (#7033 )	5 years ago
Matt Keeler	663cf1e9a8	AuthMethod updates to support alternate namespace logins (#7029 )	5 years ago
Matt Keeler	8bd34e126f	Intentions ACL enforcement updates (#7028 ) * Renamed structs.IntentionWildcard to structs.WildcardSpecifier * Refactor ACL Config Get rid of remnants of enterprise only renaming. Add a WildcardName field for specifying what string should be used to indicate a wildcard. * Add wildcard support in the ACL package For read operations they can call anyAllowed to determine if any read access to the given resource would be granted. For write operations they can call allAllowed to ensure that write access is granted to everything. * Make v1/agent/connect/authorize namespace aware * Update intention ACL enforcement This also changes how intention:read is granted. Before the Intention.List RPC would allow viewing an intention if the token had intention:read on the destination. However Intention.Match allowed viewing if access was allowed for either the source or dest side. Now Intention.List and Intention.Get fall in line with Intention.Matches previous behavior. Due to this being done a few different places ACL enforcement for a singular intention is now done with the CanRead and CanWrite methods on the intention itself. * Refactor Intention.Apply to make things easier to follow.	5 years ago
danielehc	6ae75f6063	added disclaimer about network segments due to Serf limitations (#7004 ) * added disclaimer about network segments due to Serf limitations using work made at https://github.com/hashicorp/consul/pull/6558 by @thepomeranian * Lowercasing functionality name * Update website/source/docs/enterprise/network-segments/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Co-authored-by: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	5 years ago
danielehc	a207f1a147	Update docs to point to new learn guide (#7003 ) * Changed the link to point to new guide * Removed querystring from link	5 years ago
DevOps Rob	0785bcc8df	Azure MSI for cloud auto-join (#7000 ) * Azure MSI documentation Adding in note about support for Azure MSI authentication method for Cloud auto-join * fixing text formatting fixing text formatting * missing word missing word - variable * Update website/source/docs/agent/cloud-auto-join.html.md Language change to be specific about where the security risk mitigation is concerned Co-Authored-By: Jack Pearkes <jackpearkes@gmail.com> Co-authored-by: Jack Pearkes <jackpearkes@gmail.com>	5 years ago
kaitlincarter-hc	15f070231a	updating the ent docs to mention GCP (#7001 )	5 years ago
tehmoon	43ab78fe5a	docs: Fix extraVolumes mount paths in helm.html.md (#7008 )	5 years ago
Rémi Lapeyre	ec591a5b77	docs: fix typo in ACL legacy documentation (#7006 )	5 years ago
kaitlincarter-hc	6e2ae79552	[docs] Managing ACL Policies (#6573 ) * New Acl policy guide * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> Co-authored-by: Paul Banks <banks@banksco.de>	5 years ago
kaitlincarter-hc	2e1a8acb45	[docs] New Replication Guide (#5823 ) * new replication guide * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * fixing list * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * fixing another list * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Matt Keeler <mkeeler@users.noreply.github.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * fixing formating * Updating based on feedback. * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Matt Keeler <mkeeler@users.noreply.github.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * updating introduction based on feedback * Update website/source/docs/guides/acl-replication.md * updating intro based on feedback * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * updating based on feedback * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Additional note about servers Co-authored-by: R.B. Boyer <public@richardboyer.net> Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com> Co-authored-by: Judith Malnick <judith@hashicorp.com>	5 years ago
kaitlincarter-hc	88a4950a78	New Connect guide for new users (#6749 )	5 years ago
Blake Covarrubias	b52ce19e8f	Move bootstrapACLs under global key in Helm docs The global.bootstrapACLs key in the Helm chart docs was inadvertently moved to a top-level key in commit `12e6ef8`, which is incorrect. This commit reverts that error.	5 years ago
Matt Keeler	c276e2a634	Revert "Remove docs refs to NS inference from ACL token" (#6976 ) This reverts commit `3a8426de9c`. # Conflicts: # command/flags/http.go # website/source/api/acl/binding-rules.html.md # website/source/api/acl/policies.html.md # website/source/api/acl/roles.html.md # website/source/api/acl/tokens.html.md # website/source/api/kv.html.md # website/source/api/session.html.md # website/source/docs/commands/_http_api_namespace_options.html.md	5 years ago
Blake Covarrubias	e94db0178c	Add 'kind = connect-proxy' to mesh_gateway.html	5 years ago
Hans Hasselberg	937a414fd0	log: handle discard all logfiles properly (#6945 ) * Handle discard all logfiles properly Fixes https://github.com/hashicorp/consul/issues/6892. The [docs](https://www.consul.io/docs/agent/options.html#_log_rotate_max_files) are stating: > -log-rotate-max-files - to specify the maximum number of older log > file archives to keep. Defaults to 0 (no files are ever deleted). Set to > -1 to disable rotation and discard all log files. But the `-1` case was not implemented and led to a panic when being used. Co-Authored-By: Freddy <freddygv@users.noreply.github.com>	5 years ago
Kyle MacDonald	3628de6de5	website: embed yt videos on intro pages (#6871 ) - website: embed yt videos on intro pages - for /docs/connect - for /intro - css to handle iframe responding at smaller viewports - Update consul connect video with introductory description. Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> - Update consul connect intro with introductory description. Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	5 years ago
Matt Keeler	34e6e23d43	Change how namespaces are specified for the CLI (#6960 )	5 years ago
Blake Covarrubias	87679a7a4f	Clarify -retry-join can be provided multiple times Update -retry-join documentation to explicitly state the option can be specified multiple times. Add corresponding config example showing multiple join addresses.	5 years ago
Paul Banks	fd99486794	Fix formatting and add version info (#6926 )	5 years ago
Luke Kysow	12e6ef8424	Update Helm docs to match repo	5 years ago
ychuzevi	bae8a8a6cc	docs: Fix documentation for kv store create endpoint (#6940 )	5 years ago
Luke Kysow	9003f8be9c	Document that env vars can't be used for config (#6912 ) * Document that env vars can't be used for config Environment variables are not read for config values when starting the Consul agent. Document this.	5 years ago
Nate Dobbs	53574c4204	docs: Fixed typo for 'consul members' link (#6918 ) Quick fix on a small typo I noticed while reading the docs on this command.	5 years ago
Mike Morris	8baf94d94f	website: add 1.7.0 Beta announcement to Downloads page (#6911 ) * website: add 1.7.0 Beta announcement to Downloads page * Update downloads.html.erb	5 years ago
freddygv	03aa0ee1c5	Fix typos and add expand wildcard ns docs	5 years ago
freddygv	3a8426de9c	Remove docs refs to NS inference from ACL token	5 years ago
Matt Keeler	5934f803bf	Sync of OSS changes to support namespaces (#6909 )	5 years ago
Iryna Shustava	1f3f9a7847	Merge pull request #6902 from hashicorp/k8s-auto-join-min-perms Clarify the minimum permissions required for k8s auto-join	5 years ago
Iryna Shustava	1694f95e4a	Clarify minimum perms required for k8s auto-join	5 years ago
Hans Hasselberg	9ff69194a2	tls: auto_encrypt and verify_incoming (#6811 ) (#6899 ) * relax requirements for auto_encrypt on server * better error message when auto_encrypt and verify_incoming on * docs: explain verify_incoming on Consul clients.	5 years ago

1 2 3 4 5 ...

2575 Commits (22872b03a6985cad1f1b1d642b30bf673663b622)