158 Commits (27073a4abb81f7d3f64448004bbf783f36762c4f)

Author	SHA1	Message	Date
Jeff Boruszak	e56fd9a45a	docs: Additional feedback from PR #12971 ... This commit incorporates additional feedback received related to PR #12971.	2 years ago
Austin Workman	b6f2b6c94f	Add support for S3 path based addressing	2 years ago
Jared Kirschner	08fcdad0f6	Merge pull request #13917 from hashicorp/docs/show-cli-cmd-options-before-general-options-2 ... docs: show CLI cmd-specific opts before general opts	2 years ago
Jared Kirschner	95c72164a4	docs: show CLI cmd-specific opts before general opts ... Applied to all remaining CLI commands.	2 years ago
Jared Kirschner	cd562564ba	docs: show CLI cmd-specific opts before general opts ... Applied to a single command (acl auth-method create).	2 years ago
Jared Kirschner	51f0a64b6b	docs: remove unnecessary partition CLI cmd info	2 years ago
Jared Kirschner	6add1039b3	docs: adjust HTTP API/CLI characteristics tables	2 years ago
Jared Kirschner	903c71618a	docs: remove partition subcommand usage headings	2 years ago
Jared Kirschner	bfe79b7b34	docs: add partition command characteristics ... Characteristics include: - Required ACL permissions - Corresponding HTTP API endpoint - (Lack of) support for blocking queries and agent caching	2 years ago
cskh	cf6b6dddaf	feat(cli): enable to delete config entry from an input file (#13677) ... * feat(cli): enable to delete config entry from an input file - A new flag to config delete to delete a config entry in a valid config file, e.g., config delete -filename intention-allow.hcl - Updated flag validation; -filename and -kind can't be set at the same time - Move decode config entry method from config_write.go to helpers.go for reusing ParseConfigEntry() - add changelog Co-authored-by: Dan Upton <daniel@floppy.co>	2 years ago
Kyle Havlovitz	340a234361	Update docs for prometheus TLS options	2 years ago
David Yu	d870928197	docs: Use "error" to use standard log level value (#13507) ... * docs: Use "error" to use standard log level value	2 years ago
Blake Covarrubias	4c0f840c89	docs: Clarify version restriction for snapshot restore ... Clarify that Consul snapshots must be restored into clusters running the same version as the cluster from where the snapshot was taken.	3 years ago
Jared Kirschner	05d1f59720	Merge pull request #12366 from hashicorp/docs/uri-decode-resource-names-for-http-api ... Document API ability to URL-decode resource names	3 years ago
Jared Kirschner	a5354b50fb	Document API ability to URL-decode resource names ... All Consul HTTP API endpoints now URL-decode resource names specified in the path, enabling resource names containing URL-invalid characters to be used in HTTP API requests if URL-encoded into the path. Functionality implemented in Github Pull Requests: - #11335 - #11957 - #12103 - #12190 - #12297 Also documents CLI accepting URL-invalid resource names. All Consul HTTP API endpoints now URL-decode resource names specified in the path, enabling resource names containing URL-invalid characters to be used in HTTP API requests if URL-encoded into the path. The Consul HTTP API always supported URL-decoding of query parameters. The CLI automatically URL-encodes arguments which are inserted as resource names in the URL path, enabling the CLI to also interact with resource names that contain URL-invalid characters.	3 years ago
Blake Covarrubias	a78015c5fd	docs: Redirect /docs/security/acl/acl-system (#12975) ... /docs/security/acl/acl-system was renamed in e9a42df from PR #12460 to /docs/security/acl. A corresponding redirect was not added for this page, resulting in a 404 being returned when accessing the old URL path. This commit redirects the former URL path to the new location, and also updates all links on the site to point to the new location.	3 years ago
Jared Kirschner	1da37d87b2	docs: use correct previous name of recovery token	3 years ago
Natalie Smith	0a51e145c1	docs: simplify agent docs slugs	3 years ago
Natalie Smith	ddae7d18a2	docs: fix external links to agent config pages	3 years ago
Kyle Havlovitz	763f728df4	Add doc examples for expanded token read CLI and API	3 years ago
Bryce Kalow	6bf67b7ef4	website: redirect /api to /api-docs (#12660)	3 years ago
mrspanishviking	7180c99960	Revert "[Docs] Agent configuration hierarchy "	3 years ago
trujillo-adam	4151dc097a	fixing merge conflicts part 3	3 years ago
trujillo-adam	9cc9122be8	fixed merge conflicts pt2	3 years ago
trujillo-adam	76d55ac2b4	merging new hierarchy for agent configuration	3 years ago
trujillo-adam	7e98a0dc7b	fixing merge conflicts	3 years ago
Daniel Nephin	53ae4b3e2c	debug: update CLI docs ... To clarify how trace is captured. Also remove the minimum seconds check, because that is already done in prepare()	3 years ago
mrspanishviking	ed586ade37	Update website/content/commands/connect/redirect-traffic.mdx ... Co-authored-by: Blake Covarrubias <blake.covarrubias@gmail.com>	3 years ago
Ricardo Oliveira	c4ea922958	Update website/content/commands/connect/redirect-traffic.mdx ... Co-authored-by: mrspanishviking <cardenas88karl@gmail.com>	3 years ago
Ricardo Oliveira	db9c6acf04	Update redirect-traffic.mdx	3 years ago
Blake Covarrubias	2f291df412	docs: Clarify docs for providing multiple join addresses ... Rephrase the comment about specifying multiple join addresses to clarify that it pertains to joining a single cluster by attempting to contact one or more nodes.	3 years ago
Blake Covarrubias	f09aea524f	Fix spelling errors	3 years ago
Blake Covarrubias	59394e4aa2	docs: Avoid redirects by pointing links to new URLs ... Avoid HTTP redirects for internal site links by updating old URLs to point to the new location for the target content.	3 years ago
Blake Covarrubias	82b88dbc6e	docs: Link to supported config kinds in `config write` ... Remove statement about service-defaults and proxy-defaults being the only supported configuration entry types. Update the sentence to point to the configuration entry documentation for a list of supported types.	3 years ago
Blake Covarrubias	f273cfdc67	docs: Use long form of CLI flags (#12030) ... Use long form of CLI flags in all example commands. Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
Matt Siegel	f8bb804d36	Merge branch 'main' into msiege2/docs-day	3 years ago
Matt Siegel	565bfce4ac	Added some missing ACL info, updated details around some permissions, added missing HTTP API refs	3 years ago
Matt Siegel	f7b1208fc3	Fixed absolute links to HTTP apis.	3 years ago
Natalie Smith	24c67f2dfa	docs: simplify agent docs slugs	3 years ago
Natalie Smith	00c2444cfc	docs: fix external links to agent config pages	3 years ago
Daniel Nephin	3b74497040	docs: move the ACL 'Authorization' section ... This section was actually about authentication (not authorization). We already have sections in our api and cli docs. This commit removes the section and replaces it with a short paragraph in the Tokens section which links to the existing docs.	3 years ago
Matt Siegel	33933f8a33	Added ACL requirements for CLI commands	3 years ago
Matt Siegel	bfb88306f6	Added Corresponding HTTP API Endpoints for every CLI command	3 years ago
Daniel Upton	0e5c1c349c	Incorporate feedback from @jkirschner-hashicorp and @karl-cardenas-coding	3 years ago
Daniel Upton	021537c837	docs: call out `kv export` and the transaction API	3 years ago
Daniel Upton	2dc05b4017	docs: improve kv get examples ... - Split examples into sections with headers - Hide the clipboard on examples as the copied text isn't useful - Format inline flags as code using backticks	3 years ago
Daniel Upton	ce55cb70b8	docs: call out `kv import` and the transaction API	3 years ago
Daniel Upton	8630f03130	docs: improve read/scanability of kv put examples ... - Split examples into sections with headers - Hide the clipboard on examples as the copied text isn't useful - Add an example of supplying data in a heredoc - Move the flags section to the bottom to clearly separate it from CAS which also mentions "flags" of a different kind - Slight re-wording for clarity	3 years ago
Daniel Upton	c9c34d0e76	docs: fix placement of warning in kv put example	3 years ago
Blake Covarrubias	e898cf1d41	cli: Show node identities in acl token list output (#11926) ... Fix the pretty CLI output of `consul acl token list` so that it properly displays node identities that are associated with a token.	3 years ago
Blake Covarrubias	09cc3338d4	Document /v1/agent/force-leave prune and wan params (#11886) ... Document prune parameter added in #6571 and wan parameter added in #11722. Co-authored-by: Freddy <freddygv@users.noreply.github.com>	3 years ago
Freddy	77892c1fcc	Remove beta notice from cli doc (#11878)	3 years ago
Mark Anderson	9806b7c268	Website fixups for admin partitions (#11842) ... * Website fixups for admin partitions Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
Freddy	0913644141	Update stray ref to old admin-partition cmd (#11797)	3 years ago
Freddy	ff1e71efec	Merge pull request #11682 from hashicorp/ap/renames	3 years ago
Dan Upton	bf56a2c495	Rename `agent_master` ACL token in the API and CLI (#11669)	3 years ago
freddygv	7efe3d8c77	Rename partition CLI command	3 years ago
Daniel Nephin	a631378008	Merge pull request #11468 from hashicorp/dnephin/acl-docs-namespace-rules ... docs: update docs about namespace default policy/role	3 years ago
Daniel Nephin	7bfe50a914	docs: update docs about namespace default policy/role ... To include details about the permissions the ACL token must have to perform the request.	3 years ago
trujillo-adam	3ffa05495e	Merge pull request #11307 from hashicorp/docs/admin-partitions-cli-v1.11.0 ... admin partition docs part 1 - cli	3 years ago
Daniel Upton	d47b7311b8	Support Check-And-Set deletion of config entries (#11419) ... Implements #11372	3 years ago
trujillo-adam	138f9f31e6	Apply suggestions from code review ... fixed typos Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
Chris S. Kim	ff6a33511e	docs: Document datacenter limitations for admin partitions (#11425)	3 years ago
Karl Cardenas	8e1bfbae56	docs: added deprecation message to CLI command intentions overview page	3 years ago
trujillo-adam	12473899c7	applying cfeedback left in comments	3 years ago
trujillo-adam	b1d73bee0a	Apply suggestions from code review ... Applying some of the feedback from review Co-authored-by: Freddy <freddygv@users.noreply.github.com> Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
trujillo-adam	44fd6b6638	Update website/content/commands/admin-partition.mdx ... Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
trujillo-adam	d3e3d70fbd	admin partition docs part 1 - cli	3 years ago
Evan Culver	df4bc6a924	Update default version in command docs	3 years ago
Freddy	8d83d27674	connect: update envoy supported versions to latest patch release ... (#10961) Relevant advisory: https://github.com/envoyproxy/envoy/security/advisories/GHSA-6g4j-5vrw-2m8h	3 years ago
Daniel Nephin	26ef0df458	docs: update CLI reference docs for debug ... the cluster target was renamed to members.	3 years ago
Blake Covarrubias	8aa89c2c12	docs: Clarify ingress gateway's -address flag (#10810) ... Clarify the function of `-address` flag when instantiating an ingress gateway. Resolves #9849 Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Mark Anderson	d3cebbd32c	Fixup to support unix domain socket via command line (#10758) ... Missed the need to add support for unix domain socket config via api/command line. This is a variant of the problems described in it is easy to drop one. Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
Blake Covarrubias	99b1d8ed8c	docs: Update code blocks across website ... * Use CodeTabs for examples in multiple formats. * Ensure correct language on code fences. * Use CodeBlockConfig for examples with filenames, or which need highlighted content.	3 years ago
Blake Covarrubias	17e18df81e	docs: Document supported `consul connect` env vars (#10667) ... Document the ability to specify `-sidecar-for` and `-proxy-id` flags via environment variables.	3 years ago
Blake Covarrubias	26738ac65e	docs: Add version callout for `kv import -prefix` ... Add a sentence stating the version of Consul that introduced the `-prefix` option for `consul kv import`. Resolves #10172	3 years ago
Blake Covarrubias	832896ed11	docs: Fix spelling errors across website	3 years ago
Iryna Shustava	95305881ce	cli/sdk: Allow applying redirect-traffic rules in a provided Linux namespace (#10564)	3 years ago
Matt Keeler	76857dd682	Update 1.10 enterprise upgrade docs. (#10446) ... Co-authored-by: Paul Banks <banks@banksco.de> Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>	3 years ago
Dhia Ayachi	005ad9e46d	generate a single debug file for a long duration capture (#10279) ... * debug: remove the CLI check for debug_enabled The API allows collecting profiles even debug_enabled=false as long as ACLs are enabled. Remove this check from the CLI so that users do not need to set debug_enabled=true for no reason. Also: - fix the API client to return errors on non-200 status codes for debug endpoints - improve the failure messages when pprof data can not be collected Co-Authored-By: Dhia Ayachi <dhia@hashicorp.com> * remove parallel test runs parallel runs create a race condition that fail the debug tests * snapshot the timestamp at the beginning of the capture - timestamp used to create the capture sub folder is snapshot only at the beginning of the capture and reused for subsequent captures - capture append to the file if it already exist * Revert "snapshot the timestamp at the beginning of the capture" This reverts commit c2d03346 * Refactor captureDynamic to extract capture logic for each item in a different func * snapshot the timestamp at the beginning of the capture - timestamp used to create the capture sub folder is snapshot only at the beginning of the capture and reused for subsequent captures - capture append to the file if it already exist * Revert "snapshot the timestamp at the beginning of the capture" This reverts commit c2d03346 * Refactor captureDynamic to extract capture logic for each item in a different func * extract wait group outside the go routine to avoid a race condition * capture pprof in a separate go routine * perform a single capture for pprof data for the whole duration * add missing vendor dependency * add a change log and fix documentation to reflect the change * create function for timestamp dir creation and simplify error handling * use error groups and ticker to simplify interval capture loop * Logs, profile and traces are captured for the full duration. Metrics, Heap and Go routines are captured every interval * refactor Logs capture routine and add log capture specific test * improve error reporting when log test fail * change test duration to 1s * make time parsing in log line more robust * refactor log time format in a const * test on log line empty the earliest possible and return Co-authored-by: Freddy <freddygv@users.noreply.github.com> * rename function to captureShortLived * more specific changelog Co-authored-by: Paul Banks <banks@banksco.de> * update documentation to reflect current implementation * add test for behavior when invalid param is passed to the command * fix argument line in test * a more detailed description of the new behaviour Co-authored-by: Paul Banks <banks@banksco.de> * print success right after the capture is done * remove an unnecessary error check Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * upgraded github.com/google/pprof v0.0.0-20181206194817-3ea8567a2e57 => v0.0.0-20210601050228-01bbb1931b22 Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> Co-authored-by: Freddy <freddygv@users.noreply.github.com> Co-authored-by: Paul Banks <banks@banksco.de>	4 years ago
Matt Keeler	af3ffdf4c8	Add license inspect command documentation and changelog (#10351) ... Also reformatted another changelog entry.	4 years ago
Matt Keeler	c5dc729dda	Follow on to PR 10336 (#10343) ... There was some PR feedback that came in just after I merged that other PR. This addresses that feedback.	4 years ago
Matt Keeler	4222242f1c	Add licensing information to snapshot agent docs.	4 years ago
Matt Keeler	aeaeec15e8	Add deprecation/removal notices regarding the APIs/CLI commands for licensing that are going away. ... Co-authored-by: Freddy <freddygv@users.noreply.github.com>	4 years ago
Blake Covarrubias	2196262eab	docs: Clarify set-agent-token token persistence behavior ... Clarify that tokens configured via `set-agent-token` will not be persisted if `acl.enable_token_persistence` is `false`.	4 years ago
Dhia Ayachi	e527c191ae	docs: Add example ACL policy for snapshot agent ... Co-Authored-By: Blake Covarrubias <blake@covarrubi.as>	4 years ago
R.B. Boyer	3b50a55533	connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231)	4 years ago
Daniel Nephin	2628974692	Update website/content/commands/config/delete.mdx ... Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>	4 years ago
Daniel Nephin	583850e9d4	docs: remove name field from Mesh config entry ... Also document the name of these config entries in the API docs, so that users know how to query for them. And fix the name of mesh on the index page.	4 years ago
R.B. Boyer	abc1dc0fe9	connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101) ... The only thing that needed fixing up pertained to this section of the 1.18.x release notes: > grpc_stats: the default value for stats_for_all_methods is switched from true to false, in order to avoid possible memory exhaustion due to an untrusted downstream sending a large number of unique method names. The previous default value was deprecated in version 1.14.0. This only changes the behavior when the value is not set. The previous behavior can be used by setting the value to true. This behavior change by be overridden by setting runtime feature envoy.deprecated_features.grpc_stats_filter_enable_stats_for_all_methods_by_default. For now to maintain status-quo I'm explicitly setting `stats_for_all_methods=true` in all versions to avoid relying upon the default. Additionally the naming of the emitted metrics for these gRPC requests changed slightly so the integration test assertions for `case-grpc` needed adjusting.	4 years ago
Iryna Shustava	8dffb89131	Implement traffic redirection exclusion based on proxy config and user-provided values (#10134) ... * Use proxy outbound port from TransparentProxyConfig if provided * If -proxy-id is provided to the redirect-traffic command, exclude any listener ports from inbound traffic redirection. This includes envoy_prometheus_bind_addr, envoy_stats_bind_addr, and the ListenerPort from the Expose configuration. * Allow users to provide additional inbound and outbound ports, outbound CIDRs and additional user IDs to be excluded from traffic redirection. This affects both the traffic-redirect command and the iptables SDK package.	4 years ago
Paul Banks	d717d2cdc4	CLI: Allow snapshot inspect to work on internal raft snapshots directly. (#10089) ... * CLI: Add support for reading internal raft snapshots to snapshot inspect * Add snapshot inspect test for raw state files * Add changelog entry * Update .changelog/10089.txt	4 years ago
Freddy	8b8c3c1992	Add docs for transparent proxy mode and config (#10038) ... Add docs for transparent proxy mode and config Co-authored-by: Nitya Dhanushkodi <nitya@hashicorp.com> Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>	4 years ago
Iryna Shustava	5755c97bc7	cli: Add new `consul connect redirect-traffic` command for applying traffic redirection rules when Transparent Proxy is enabled. (#9910) ... * Add new consul connect redirect-traffic command for applying traffic redirection rules when Transparent Proxy is enabled. * Add new iptables package for applying traffic redirection rules with iptables.	4 years ago
Zachary Shilton	8671762474	website: implement mktg 032 (#9953) ... * website: migrate to new nav-data format * website: clean up unused intro content * website: remove deprecated sidebar_title from frontmatter * website: add react-content to fix global style import issue	4 years ago
Ranjandas	7857c5746f	Document agent token policy requirement for rexec ... The Agent token policy when using rexec should have `write` on "_rexec" key prefix. Updated the exec command documentation to explicitly state this requirement.	4 years ago
Kyle Havlovitz	1e87c7183a	Merge pull request #9672 from hashicorp/ca-force-skip-xc ... connect/ca: Allow ForceWithoutCrossSigning for all providers	4 years ago
Kyle Havlovitz	d62565f368	Merge pull request #9792 from dzeban/kv-import-prefix ... command/kv: Add prefix option to kv import command	4 years ago
Nitya Dhanushkodi	15e8b13891	Add flags to consul connect envoy for metrics merging. (#9768) ... Allows setting -prometheus-backend-port to configure the cluster envoy_prometheus_bind_addr points to. Allows setting -prometheus-scrape-path to configure which path envoy_prometheus_bind_addr exposes metrics on. -prometheus-backend-port is used by the consul-k8s metrics merging feature, to configure envoy_prometheus_bind_addr to point to the merged metrics endpoint that combines Envoy and service metrics so that one set of annotations on a Pod can scrape metrics from the service and it's Envoy sidecar. -prometheus-scrape-path is used to allow configurability of the path where prometheus metrics are exposed on envoy_prometheus_bind_addr.	4 years ago
R.B. Boyer	398b766532	xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658) ... - Also add support for envoy 1.17.0	4 years ago