189 Commits (24a94023908fbcdfa8ee6769d6d4f9529ef9f0b2)

Author	SHA1	Message	Date
Paul Banks	8233328e48	Fix doc note since we switched authorization mechanism in 1.9 (#10266)	4 years ago
Dhia Ayachi	7dc78b39c9	docs: update register check docs (closes #6635) (#10261) ... Update register check documentation clarify that Id returns as CheckId in the response Co-Authored-By: Shaker Islam <shaqq@users.noreply.github.com> Co-authored-by: Shaker Islam <shaqq@users.noreply.github.com>	4 years ago
Karl Cardenas	498a698ffa	Merge branch 'master' of github.com:hashicorp/consul into consul-documentation-update	4 years ago
R.B. Boyer	ede14b7c54	xds: emit a labeled gauge of connected xDS streams by version (#10243) ... Fixes #10099	4 years ago
Luke Kysow	83a6579299	Update k8s fed docs to clarify role of acl token (#10233)	4 years ago
R.B. Boyer	3b50a55533	connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231)	4 years ago
mrspanishviking	c59c0b05dd	docs: updated the standard upgrade process ... Added a cross-reference link in the upgrade guides. This resource https://www.consul.io/docs/upgrading/instructions/general-process including specific-version guides for breaking changes and a more detailed upgrade process, but it's not mentioned in the https://www.consul.io/docs/upgrading#standard-upgrade overview page.	4 years ago
Daniel Nephin	f6580400dc	docs: document the current state of built-in and native	4 years ago
Joel Watson	a1db512e90	Flesh out Raft Protocol Support note	4 years ago
Kim Ngo	5c17bf3d78	docs/nia: simplify api and cli url paths (#10199)	4 years ago
Daniel Nephin	7b5d432121	Merge pull request #10064 from hashicorp/docs-fix-namespace-api-descriptions ... docs: fix api-docs namespace descriptions	4 years ago
Andy Assareh	99617a70af	K8s docs: Manual join: add note that kubeconfig not required (#9998) ... Per Consul PM, kubeconfig is not required for manual join. I believe this should be clarified in the docs as the current wording refers to the auto join steps above which state kubeconfig is required.	4 years ago
Seth Hoenig	60af6a13ff	docs: fix api-docs namespace descriptions ... Looks like some copy/paste from ACL docs.	4 years ago
Daniel Nephin	2628974692	Update website/content/commands/config/delete.mdx ... Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>	4 years ago
Daniel Nephin	583850e9d4	docs: remove name field from Mesh config entry ... Also document the name of these config entries in the API docs, so that users know how to query for them. And fix the name of mesh on the index page.	4 years ago
Paul Banks	3ad754ca7b	Make Raft trailing logs and snapshot timing reloadable (#10129) ... * WIP reloadable raft config * Pre-define new raft gauges * Update go-metrics to change gauge reset behaviour * Update raft to pull in new metric and reloadable config * Add snapshot persistance timing and installSnapshot to our 'protected' list as they can be infrequent but are important * Update telemetry docs * Update config and telemetry docs * Add note to oldestLogAge on when it is visible * Add changelog entry * Update website/content/docs/agent/options.mdx Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com> Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com>	4 years ago
Freddy	2ca3f481f8	Only consider virtual IPs for transparent proxies (#10162) ... Initially we were loading every potential upstream address into Envoy and then routing traffic to the logical upstream service. The downside of this behavior is that traffic meant to go to a specific instance would be load balanced across ALL instances. Traffic to specific instance IPs should be forwarded to the original destination and if it's a destination in the mesh then we should ensure the appropriate certificates are used. This PR makes transparent proxying a Kubernetes-only feature for now since support for other environments requires generating virtual IPs, and Consul does not do that at the moment.	4 years ago
Frederic Hemberger	9a5a0ba209	docs(discovery/service): Clarify multiple service definitions ... Be more explicit that the definition of multiple services only works in config files, not using the HTTP API. Ref: https://discuss.hashicorp.com/t/register-multiple-services-via-put-request/	4 years ago
Daniel Nephin	00d3283e93	Merge pull request #10149 from hashicorp/dnephin/config-use-streaming-backend-defualt-true ... config: default UseStreamingBackend to true	4 years ago
R.B. Boyer	abc1dc0fe9	connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101) ... The only thing that needed fixing up pertained to this section of the 1.18.x release notes: > grpc_stats: the default value for stats_for_all_methods is switched from true to false, in order to avoid possible memory exhaustion due to an untrusted downstream sending a large number of unique method names. The previous default value was deprecated in version 1.14.0. This only changes the behavior when the value is not set. The previous behavior can be used by setting the value to true. This behavior change by be overridden by setting runtime feature envoy.deprecated_features.grpc_stats_filter_enable_stats_for_all_methods_by_default. For now to maintain status-quo I'm explicitly setting `stats_for_all_methods=true` in all versions to avoid relying upon the default. Additionally the naming of the emitted metrics for these gRPC requests changed slightly so the integration test assertions for `case-grpc` needed adjusting.	4 years ago
Luigi Tagliamonte	5220699696	Improve doc: add note about address validation (#10123) ... * Update website/content/docs/discovery/services.mdx with address field behavior. Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com> Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>	4 years ago
Iryna Shustava	8dffb89131	Implement traffic redirection exclusion based on proxy config and user-provided values (#10134) ... * Use proxy outbound port from TransparentProxyConfig if provided * If -proxy-id is provided to the redirect-traffic command, exclude any listener ports from inbound traffic redirection. This includes envoy_prometheus_bind_addr, envoy_stats_bind_addr, and the ListenerPort from the Expose configuration. * Allow users to provide additional inbound and outbound ports, outbound CIDRs and additional user IDs to be excluded from traffic redirection. This affects both the traffic-redirect command and the iptables SDK package.	4 years ago
Daniel Nephin	bb472111fd	config: default UseStreamingBackend to true	4 years ago
Freddy	078c40425f	Rename "cluster" config entry to "mesh" (#10127) ... This config entry is being renamed primarily because in k8s the name cluster could be confusing given that the config entry applies across federated datacenters. Additionally, this config entry will only apply to Consul as a service mesh, so the more generic "cluster" name is not needed.	4 years ago
Daniel Nephin	0558586dbd	health: use blocking queries for near query parameter	4 years ago
Matt Keeler	f7e825afe3	Update changelog and add telemetry docs (#10107)	4 years ago
Paul Banks	d717d2cdc4	CLI: Allow snapshot inspect to work on internal raft snapshots directly. (#10089) ... * CLI: Add support for reading internal raft snapshots to snapshot inspect * Add snapshot inspect test for raw state files * Add changelog entry * Update .changelog/10089.txt	4 years ago
David Yu	b7cc83fde0	docs - Adding json formatting to TProxy HCL examples (#10088) ... formatting	4 years ago
Derek Strickland	ccb2511ff3	refactor get started links to new tutorial (#10066)	4 years ago
Freddy	8b8c3c1992	Add docs for transparent proxy mode and config (#10038) ... Add docs for transparent proxy mode and config Co-authored-by: Nitya Dhanushkodi <nitya@hashicorp.com> Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>	4 years ago
Iryna Shustava	ba0bc10f09	docs: update helm ref docs and connect docs (#10032) ... All k8s connect-related docs now need to mention that we require a Kubernetes service for all Connect services	4 years ago
Joel Watson	fd9e240569	Update upgrade guide from 1.8.4 to 1.8.10	4 years ago
Kent 'picat' Gruber	493f820e9d	Add better security warning to docs about the content-type change	4 years ago
Kent 'picat' Gruber	d07f57ce67	Update KV docs to note new raw response content-type header	4 years ago
ketzacoatl	c8a6fbd994	add consul-haskell to libraries-and-sdks documentation (#9982) ... See also https://github.com/alphaHeavy/consul-haskell/issues/40.	4 years ago
Tara Tufano	9deb52e868	add http2 ping health checks (#8431) ... * add http2 ping checks * fix test issue * add h2ping check to config resources * add new test and docs for h2ping * fix grammatical inconsistency in H2PING documentation * resolve rebase conflicts, add test for h2ping tls verification failure * api documentation for h2ping * update test config data with H2PING * add H2PING to protocol buffers and update changelog * fix typo in changelog entry	4 years ago
Iryna Shustava	5755c97bc7	cli: Add new `consul connect redirect-traffic` command for applying traffic redirection rules when Transparent Proxy is enabled. (#9910) ... * Add new consul connect redirect-traffic command for applying traffic redirection rules when Transparent Proxy is enabled. * Add new iptables package for applying traffic redirection rules with iptables.	4 years ago
Zachary Shilton	8671762474	website: implement mktg 032 (#9953) ... * website: migrate to new nav-data format * website: clean up unused intro content * website: remove deprecated sidebar_title from frontmatter * website: add react-content to fix global style import issue	4 years ago
eddie-rowe	5fe1cc48ff	cross-linking for audit logging	4 years ago
Mike Green	68b13f4c70	Docs: add enterprise upgrade link (#9934) ... * add enterprise upgrade note * Update index.mdx	4 years ago
lornasong	8431137c1a	nia/docs 0.1.0 ga (#9946) ... * docs/nia: consul compatibilty * docs/nia: remove beta callouts (#9919) Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com>	4 years ago
Sabeen Syed	1345b92c73	Add link to TF module tutorial and example TF modules (#9937) ... Add link to TF tutorial Add links to print TF module and template for TF modules	4 years ago
Sabeen Syed	c64f3600f0	Add Avi Network, AWS ALB and NS1 TF Registies and GitHub links (#9938) ... Add Avi Network GH link Add AWS ALB TF Registry and GH link Add NS1 TF Registry and GH link	4 years ago
Daniel Nephin	5d5abedb1f	Merge pull request #9917 from Ranjandas/docs/exec-cmd-acl ... Document agent token policy requirement for rexec	4 years ago
danielehc	eba632da13	Cross linking Learn tutorials (#9893) ... * Cross linking Learn tutorials * Update website/content/docs/nia/index.mdx Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com> * Cross linking Learn tutorials * Cross linking Learn tutorials * Add links to doc Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com>	4 years ago
Ranjandas	7857c5746f	Document agent token policy requirement for rexec ... The Agent token policy when using rexec should have `write` on "_rexec" key prefix. Updated the exec command documentation to explicitly state this requirement.	4 years ago
Jono Sosulska	277de5addc	Update telemetry docs (#9905) ... * Fixes #2379-Improve interval explanation in the telemetry doc * Fixes #4734-Update consul memory metrics * Fixes #4836-Removed node.deregistration as that isn't in state.go * Fixes #8986 partially-Trim redundant language * Fixes #9087-Adds helpful details to telemetry on autopilot * Fixes #9274-Addresses NaN output in autopilot	4 years ago
Kim Ngo	e6cc186d79	docs/nia: Update CTS configuration example to not confuse vault provider with vault config block (#9909)	4 years ago
Iryna Shustava	199a0b0c19	docs: Update Helm reference docs (#9904)	4 years ago
Nitya Dhanushkodi	147628859d	Add metrics documentation (#9848)	4 years ago
woz5999	ea33c390ce	update docs and add changelog	4 years ago
Christoph Puhl	11f60c46a3	Removing unnecessary comment (#9890) ... Removing unnecessary comment around CRL to avoid confusion, as discussed with @banks	4 years ago
Christopher Broglie	f0307c73e5	Add support for configuring TLS ServerName for health checks ... Some TLS servers require SNI, but the Golang HTTP client doesn't include it in the ClientHello when connecting to an IP address. This change adds a new TLSServerName field to health check definitions to optionally set it. This fixes #9473.	4 years ago
Luke Kysow	a1d5e1fb41	docs: rename SourceAddress to SourceIP (#9878) ... SourceAddress was probably renamed to SourceIP but the docs weren't updated.	4 years ago
Christoph Puhl	a11ed1570a	Add namespaces to prepared query API docs ... Add missing section on creating prepared query for namespaced services	4 years ago
Mike Wickett	8f72c17248	fix: syntax issue	4 years ago
Preetha	ccde7e5f8b	Small changes to gossip related telemetry docs (#9846) ... Update gossip related telemetry docs to include correct descriptions, and added missing metrics	4 years ago
Freddy	d38fa1cbcf	Merge pull request #9869 from DanielMabbett/patch-1 ... Fix typo in requirements.mdx	4 years ago
Kyle Havlovitz	1e87c7183a	Merge pull request #9672 from hashicorp/ca-force-skip-xc ... connect/ca: Allow ForceWithoutCrossSigning for all providers	4 years ago
Freddy	555961e036	Merge pull request #9770 from hashicorp/docs/fix-terminating-gateway-config-entry ... Docs: Update terminating-gateway-config-entry	4 years ago
Kyle Havlovitz	d62565f368	Merge pull request #9792 from dzeban/kv-import-prefix ... command/kv: Add prefix option to kv import command	4 years ago
Daniel Mabbett	f923a2d249	Update requirements.mdx	4 years ago
Robert Kuska	6fe45c075f	Add units and types to metrics tables (#9674) ... This commits adds units and types to key metrics tables to have consistent table views of all metrics in telemetry.mdx. Fixes: https://github.com/hashicorp/consul/issues/9069	4 years ago
Nitya Dhanushkodi	15e8b13891	Add flags to consul connect envoy for metrics merging. (#9768) ... Allows setting -prometheus-backend-port to configure the cluster envoy_prometheus_bind_addr points to. Allows setting -prometheus-scrape-path to configure which path envoy_prometheus_bind_addr exposes metrics on. -prometheus-backend-port is used by the consul-k8s metrics merging feature, to configure envoy_prometheus_bind_addr to point to the merged metrics endpoint that combines Envoy and service metrics so that one set of annotations on a Pod can scrape metrics from the service and it's Envoy sidecar. -prometheus-scrape-path is used to allow configurability of the path where prometheus metrics are exposed on envoy_prometheus_bind_addr.	4 years ago
Ranjandas	851a1b123d	Add a sample error message	4 years ago
Ranjandas	9827a02ef6	Update vms-and-kubernetes.mdx	4 years ago
Ranjandas	479d6e6862	Added references to node name	4 years ago
Ranjandas	9c74d6cc3a	Update cert creation instruction for Federation ... The Server certificates used for Federation require the node name in the form of `<node>.server.<dc>.<domain>`. Not having this would through `bad tls certificate` error. * Fixed cert create command * Added note to create a wildcard cert (like the ones on Kubernetes) * Fixed numbering	4 years ago
R.B. Boyer	398b766532	xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658) ... - Also add support for envoy 1.17.0	4 years ago
Daniel Nephin	6b95e8dfe2	Merge pull request #9188 from hashicorp/dnephin/more-streaming-tests ... Add more streaming tests	4 years ago
Daniel Nephin	566efad2e7	Merge pull request #9759 from hashicorp/dnephin/streaming-default-rpc-enabled ... streaming: default rpc.enable_streaming to true	4 years ago
Kim Ngo	b678eabbf5	nia/docs 0.1.0 beta (#9803) ... nia/docs 0.1.0-beta Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com> Co-authored-by: Lorna Song <lorna@hashicorp.com> Co-authored-by: John Eikenberry <jae@zhar.net>	4 years ago
Daniel Nephin	1156519d97	docs: fix grpc metric names	4 years ago
Daniel Nephin	3aec942b17	streaming: default rpc.enable_streaming to true ... So that all servers will start the grpc server used by streaming	4 years ago
Daniel Nephin	5b2300e63f	docs: Fix reference to dns_config.use_cache	4 years ago
Blake Covarrubias	fa77e9e1f7	docs: Fix code tag displaying on ACL binding rules ... Fix indentation of code blocks on ACL binding rules page so that code fence does not display in JSON output.	4 years ago
R.B. Boyer	3b6ffc447b	xds: remove deprecated usages of xDS (#9602) ... Note that this does NOT upgrade to xDS v3. That will come in a future PR. Additionally: - Ignored staticcheck warnings about how github.com/golang/protobuf is deprecated. - Shuffled some agent/xds imports in advance of a later xDS v3 upgrade. - Remove support for envoy 1.13.x but don't add in 1.17.x yet. We have to wait until the xDS v3 support is added in a follow-up PR. Fixes #8425	4 years ago
kaitlincarter-hc	4f9b35b2d8	fix typo and add link to Learn (#9799)	4 years ago
Daniel Nephin	cb3adec2bf	Merge pull request #9777 from hashicorp/dnephin/remove-some-deprecation ... docs: remove a couple deprecations	4 years ago
Alex Dzyoba	098fd1797b	command/kv: Add prefix option to kv import command ... Currently when data is imported via `consul kv import` it overwrites keys under the root key. Since `consul kv export` can retrieve data for the given prefix, i.e. part of the KV tree, importing it under root may be not what users want. To mirror prefix behavior from export this PR adds prefix feature to the import command that adds prefix to all keys that are imported.	4 years ago
Ashwin Venkatesh	cd428060f6	Update helm docs for consul-helm v0.30.0 (#9779)	4 years ago
Luke Kysow	2df91c2050	Docs describing migrating to CRDs (#9562) ... * Document how users can migrate to CRDs. * Update documentation for federation with new `ProxyDefaults` requirement. * Ensure `controller.enabled: true` is set in our example configs. * Remove `connect-service-protocol` annotation docs.	4 years ago
Daniel Nephin	9bedb8b364	docs: remove a couple deprecations ... These filters can not be reproduced with bexpr just yet.	4 years ago
Paul Banks	9668832506	Add docs for MIME sniffing on metrics endpoint. (#9696) ... * Add docs for MIME sniffing on metrics endpoint. This was added in 1.7.2 last year but I realised we don't document it so it's kinda surprising Prometheus "just works" now. * Update website/content/api-docs/agent/index.mdx	4 years ago
Christoph Puhl	45a569d935	Update terminating-gateway.mdx ... fix crds support reference and adding ACL clarification for linked services.	4 years ago
Eddie Rowe	35be57fb01	nagios vs sensu updates	4 years ago
Daniel Nephin	c522f8defd	Merge pull request #9758 from hashicorp/dnephin/fix-streaming-bugs ... http: error if near is used with streaming	4 years ago
Preetha	4174bc4330	Add docs section on regenerating expired CA certificates (#9709) ... * Updated docs on regenerating built in CA * review feedback * Add sentence about expected behavior after update CA endpoint is used.	4 years ago
Daniel Nephin	b909088500	http: error if near is used with streaming	4 years ago
R.B. Boyer	6eeccc93ce	connect: update supported envoy point releases to 1.16.2, 1.15.3, 1.14.6, 1.13.7 (#9737)	4 years ago
Derek Strickland	37227f7d11	Crosslink new microservices collection. (#9704)	4 years ago
David Yu	36db3b50e6	docs: fix another broken link to upgrading k8s servers from token rotation page (#9707) ... fix another broken link to upgrading k8s servers from token rotation page	4 years ago
David Yu	94389f9619	docs: Small change to fix broken link to k8s upgrade from k8s tls certs page (#9705) ... Broken link to k8s server upgrade from tls certs page	4 years ago
Kim Ngo	6b92b778c5	docs/nia: recommend sensitive variables for module authoring (#9692)	4 years ago
Kim Ngo	e48a96eac1	docs/nia: Update verbiage around securely configuring providers (#9684) ... This reorganizes and flags where and when sensitive information may be written in plain-text	4 years ago
Mike Morris	504aa7c5fe	website: add release notes for 1.9 (#9189) ... * website: initial draft of release notes framework * website: fixup ref to 1-9-0.mdx * Update website/pages/docs/release-notes/1-9-0.mdx * Update website/pages/docs/release-notes/1-9-0.mdx * website: add draft of 1.9.0 release notes * website: move release-notes directory from /pages to /content * Update 1-9-0.mdx * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	4 years ago
Ashwin Venkatesh	3da918089d	Add docs for TLS Server Certificate rotation for K8S (#9636) ... * Add docs for TLS Server Certificate rotation for K8s	4 years ago
Kyle Havlovitz	7dac583863	connect/ca: Allow ForceWithoutCrossSigning for all providers ... This allows setting ForceWithoutCrossSigning when reconfiguring the CA for any provider, in order to forcibly move to a new root in cases where the old provider isn't reachable or able to cross-sign for whatever reason.	4 years ago
Luke Kysow	b5212fbcc6	Add operations section to k8s notes (#9625) ... * Add operations section to k8s notes * Unify faq/troubleshooting	4 years ago
Kyle Havlovitz	b2dc7f7d9b	Merge pull request #9541 from sadedil/patch-1 ... Add a CLI tool for "Client Libraries & SDKs" page	4 years ago