2963 Commits (2ecf62da705a06047966e28e178ebaa33b5846fd)

Author	SHA1	Message	Date
Freddy	9412f3fed2	Exposing paths isn't an upstream configuration (#7515)	5 years ago
Freddy	18d356899c	Enable CLI to register terminating gateways (#7500) ... * Enable CLI to register terminating gateways * Centralize gateway proxy configuration	5 years ago
Artur Mullakhmetov	0396340e2c	Add acl commands -format option to doc.	5 years ago
Cody De Arkland	4e6d8bef15	updating enterprise documentation with additional clarity ... Update website/source/docs/enterprise/backups/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/backups/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/backups/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/backups/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/backups/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/backups/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/namespaces/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/backups/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/namespaces/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/network-segments/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/read-scale/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/upgrades/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/upgrades/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/redundancy/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/redundancy/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/redundancy/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/redundancy/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/redundancy/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/network-segments/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/read-scale/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/read-scale/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/read-scale/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/redundancy/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/read-scale/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Update website/source/docs/enterprise/redundancy/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> updating capitalization of namespaces	5 years ago
Iryna Shustava	77c52ac2a8	Add missing Helm docs (#7492)	5 years ago
Daniel Nephin	9519223127	docs: Update config reference for log-file	5 years ago
Daniel Nephin	1ff9b748ae	Merge pull request #7458 from hashicorp/dnephin/small-doc-improvements ... website/docs: small doc improvements to CLI reference	5 years ago
Hans Hasselberg	bf6a91af94	docs: fix filenames (#7453)	5 years ago
Kim Ngo	bef693df9c	agent/xds: Update mesh gateway to use service router timeout (#7444) ... * website/connect/proxy/envoy: specify timeout precedence for services behind mesh gateway	5 years ago
Daniel Nephin	fdbc3d82f6	website/docs: small doc improvements to CLI reference ... Small improvements to the join docs. The help text for `lock` says -try is deprecated and replaced with -timeout. Update the docs to match.	5 years ago
Hans Hasselberg	316d14f86e	docs: update website version (#7456)	5 years ago
Matt Keeler	8c43f199fd	Update namespace docs for some new CLI commands (#7435) ... Co-Authored-By: Hans Hasselberg <me@hans.io>	5 years ago
Charlie Jones	5d734a85d6	docs: fix typo in consul-template tutorial (#7454)	5 years ago
Daniel Nephin	5ed53754ab	docs: fix some errors in upgrade-specific ... Fix 2 broken links Fix some gramatical errors	5 years ago
Matt Keeler	e62e862df9	Update intention precedence table in the docs (#7421) ... * Update intention precedence table in the docs Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	5 years ago
Hans Hasselberg	6a49a42e98	connect: support for envoy 1.13.1 and 1.12.3 (#7380) ... * setup new envoy versions for CI * bump version on the website too.	5 years ago
R.B. Boyer	6adad71125	wan federation via mesh gateways (#6884) ... This is like a Möbius strip of code due to the fact that low-level components (serf/memberlist) are connected to high-level components (the catalog and mesh-gateways) in a twisty maze of references which make it hard to dive into. With that in mind here's a high level summary of what you'll find in the patch: There are several distinct chunks of code that are affected: * new flags and config options for the server * retry join WAN is slightly different * retry join code is shared to discover primary mesh gateways from secondary datacenters * because retry join logic runs in the *agent* and the results of that operation for primary mesh gateways are needed in the *server* there are some methods like `RefreshPrimaryGatewayFallbackAddresses` that must occur at multiple layers of abstraction just to pass the data down to the right layer. * new cache type `FederationStateListMeshGatewaysName` for use in `proxycfg/xds` layers * the function signature for RPC dialing picked up a new required field (the node name of the destination) * several new RPCs for manipulating a FederationState object: `FederationState:{Apply,Get,List,ListMeshGateways}` * 3 read-only internal APIs for debugging use to invoke those RPCs from curl * raft and fsm changes to persist these FederationStates * replication for FederationStates as they are canonically stored in the Primary and replicated to the Secondaries. * a special derivative of anti-entropy that runs in secondaries to snapshot their local mesh gateway `CheckServiceNodes` and sync them into their upstream FederationState in the primary (this works in conjunction with the replication to distribute addresses for all mesh gateways in all DCs to all other DCs) * a "gateway locator" convenience object to make use of this data to choose the addresses of gateways to use for any given RPC or gossip operation to a remote DC. This gets data from the "retry join" logic in the agent and also directly calls into the FSM. * RPC (`:8300`) on the server sniffs the first byte of a new connection to determine if it's actually doing native TLS. If so it checks the ALPN header for protocol determination (just like how the existing system uses the type-byte marker). * 2 new kinds of protocols are exclusively decoded via this native TLS mechanism: one for ferrying "packet" operations (udp-like) from the gossip layer and one for "stream" operations (tcp-like). The packet operations re-use sockets (using length-prefixing) to cut down on TLS re-negotiation overhead. * the server instances specially wrap the `memberlist.NetTransport` when running with gateway federation enabled (in a `wanfed.Transport`). The general gist is that if it tries to dial a node in the SAME datacenter (deduced by looking at the suffix of the node name) there is no change. If dialing a DIFFERENT datacenter it is wrapped up in a TLS+ALPN blob and sent through some mesh gateways to eventually end up in a server's :8300 port. * a new flag when launching a mesh gateway via `consul connect envoy` to indicate that the servers are to be exposed. This sets a special service meta when registering the gateway into the catalog. * `proxycfg/xds` notice this metadata blob to activate additional watches for the FederationState objects as well as the location of all of the consul servers in that datacenter. * `xds:` if the extra metadata is in place additional clusters are defined in a DC to bulk sink all traffic to another DC's gateways. For the current datacenter we listen on a wildcard name (`server.<dc>.consul`) that load balances all servers as well as one mini-cluster per node (`<node>.server.<dc>.consul`) * the `consul tls cert create` command got a new flag (`-node`) to help create an additional SAN in certs that can be used with this flavor of federation.	5 years ago
Freddy	602aa742d8	Update namespace docs for config entries (#7420)	5 years ago
Dane Harrigan	382d33bb7e	Update envoy.html.md.erb (#7394) ... Minor typo	5 years ago
Noel Quiles	ba9849bdf8	website:update middleman-hashicorp to 0.3.44 (#7382)	5 years ago
Hans Hasselberg	c46e2ae59b	docs: add docs for kv_max_value_size (#7405) ... Apart from the added docs, the error messages are similar now and are pointing to the corresponding options. Fixes #6708.	5 years ago
Kim Ngo	a8f4123d37	agent/txn_endpoint: configure max txn request length (#7388) ... configure max transaction size separately from kv limit	5 years ago
Freddy	ee24f4dcc1	1.7 upgrade note (#7397) ... The Session API in Consul 1.7.0 and 1.7.1 is incompatible with prior versions of Consul. This PR adds a note to our version-specific upgrade guide to guard against users upgrading before the fix in 1.7.2 is released.	5 years ago
John Cowen	4befec8f0c	docs: Add that `response_headers` also affects the UI (#7376)	5 years ago
Alvin Huang	a24e431c0e	update envoy doc notes (#7389)	5 years ago
steven jacobs	ca6e866232	docs:add documentation for Linode cloud auto-join (#6719) ... The go-discover library supports Linode. This adds support for discovering other Consul agents running on Linode. Consul has supported this since [66b8c20][1] was merged, so this commit just updates the documentation to match current features. [1]: 66b8c20990	5 years ago
Blake Covarrubias	ab20785210	Update Consul version on website to 1.7.1	5 years ago
Luke Kysow	ca6ba769ff	Merge pull request #7207 from hashicorp/namespace-k8s-docs ... Docs for consul-k8s namespaces support	5 years ago
Luke Kysow	01e30289d2	Docs for Consul namespaces in kube	5 years ago
Jono Sosulska	f5920e4832	Merge pull request #7304 from hashicorp/docs/anti-entropy ... Added links to Anti-entropy guide + catalog	5 years ago
Hans Hasselberg	e05ac57e8f	tls: support tls 1.3 (#7325)	5 years ago
kaitlincarter-hc	707e06e3fe	docs: adding new guide for namespaces and service discovery (#6788)	5 years ago
kaitlincarter-hc	e8bbd00c38	docs: setup secure namespaces (#6789) ... * Adding new guide for namespaces and ACLs * Update website/source/docs/guides/secure-namespaces.html.md Co-Authored-By: Blake Covarrubias <bcovarrubias@hashicorp.com> Co-authored-by: Hans Hasselberg <me@hans.io> Co-authored-by: Blake Covarrubias <blake.covarrubias@gmail.com>	5 years ago
Mishin Nickolay	b519cc73b5	docs: add note bout change case in config files to specific version upgrade notes (#6870) (#6878)	5 years ago
Tom Downes	0cf11ec744	docs: add documentation for enabling reverse DNS lookup with systemd-resolved (#6731) ... * Remove trailing whitespace in DNS forwarding guide. * Add example for enabling reverse lookup of IP addrseses to .consul domain on systemd-resolved platforms	5 years ago
Mr.gao	bc664159ea	docs: update libraries-and-sdks.html.md (#6745) ... python-consul maintainer gone, this is my version you want to add to the recommended	5 years ago
Aleksey Stepanenko	95db3971da	docs: update connection for the openstack provider (#6776) ... The option `username` does not work. Need to use user_name with underscore > Authentication failed: Exactly one of Username and UserID must be provided for password authentication The option `user_name` works, however, it's need to use `region`, `domain_name` in additional.	5 years ago
jsosulska	42fbbd5d15	Added links to Anti-entropy guide + catalog	5 years ago
Hans Hasselberg	4fb41ba9c0	website: put a note on the website re vault with 1.7.0 and 1.6.3 (#7295)	5 years ago
Christoph Puhl	c8466fad8c	Adjust formula for quorum size (#7286) ... Current formula for quorum size does not match numbers in table below.	5 years ago
Hans Hasselberg	cb0f94487c	config: increase http_max_conns_per_client default to 200 (#7289)	5 years ago
Hans Hasselberg	3a15fb9dde	docs: correct envoy versions (#7266)	5 years ago
David Yu	fd8a1d0b3a	Merge pull request #7263 from hashicorp/david-yu-patch-2 ... 1.7.0 Namespaces Learn Guides	5 years ago
Judith Malnick	1814e56bd6	docs: add f5 guide text (#6493)	5 years ago
Judith Malnick	c3ccfd37fc	docs: add splitting guide (#6597) ... * add splitting guide, originially adapted from nic's blog and drafted on learn	5 years ago
David Yu	c828495a24	1.7.0 Namespaces Learn Guides ... Attaching learn guides associated with Namespaces release	5 years ago
Matt Keeler	f523469529	Merge branch 'master' of github.com:hashicorp/consul	5 years ago
hashicorp-ci	95fb95bfe6	Release v1.7.0	5 years ago
Nuno Adrego	de62daf386	docs: changed the return value from null to empty JSON list, when a session does not exist (#7232)	5 years ago
Nicole Forrester	1cd85ab243	website: bump middleman version (#7254)	5 years ago
Blake Covarrubias	895a8a43b2	docs: document format for TTL values in Consul config (#6693)	5 years ago
kaitlincarter-hc	be35f68ec5	docs: adding note to ACL rules page for intentions. (#6569)	5 years ago
Blake Covarrubias	4ea2685a7c	Fix broken link to consul-aws guide on Learn	5 years ago
Hans Hasselberg	9cb7adb304	add envoy version 1.12.2 and 1.13.0 to the matrix (#7240) ... * add 1.12.2 * add envoy 1.13.0 * Introduce -envoy-version to get 1.10.0 passing. * update old version and fix consul-exec case * add envoy_version and fix check * Update Envoy CLI tests to account for the 1.13 compatibility changes. Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com>	5 years ago
Matt Keeler	0b1902f03f	Remove the 1.7.0 beta banner on downloads page (#7253)	5 years ago
Kit Patella	55f19a9eb2	rpc: measure blocking queries (#7224) ... * agent: measure blocking queries * agent.rpc: update docs to mention we only record blocking queries * agent.rpc: make go fmt happy * agent.rpc: fix non-atomic read and decrement with bitwise xor of uint64 0 * agent.rpc: clarify review question * agent.rpc: today I learned that one must declare all variables before interacting with goto labels * Update agent/consul/server.go agent.rpc: more precise comment on `Server.queriesBlocking` Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/agent/telemetry.html.md agent.rpc: improve queries_blocking description Co-Authored-By: Paul Banks <banks@banksco.de> * agent.rpc: fix some bugs found in review * add a note about the updated counter behavior to telemetry.md * docs: add upgrade-specific note on consul.rpc.quer{y,ies_blocking} behavior Co-authored-by: Paul Banks <banks@banksco.de>	5 years ago
Akshay Ganeshen	8beb716414	feat: support sending body in HTTP checks (#6602)	5 years ago
danielehc	20600403b2	Adding upgrade-legacy doc (#7212) ... Addresses #7071	5 years ago
Kyle Havlovitz	88ae18a2b2	Update config entry docs for namespaces	5 years ago
Blake Covarrubias	91245622db	docs: Indent secretName and secretKey under aclSyncToken ... These are sub-parameters under aclSyncToken. Fix indentation so that they are properly displayed under that top-level key.	5 years ago
Fredrik Hoem Grelland	d364a64f9a	docs: namespaces has erroneous HCL example (#7228)	5 years ago
Freddy	cb77fc6d01	Add managed service provider token (#7218) ... Stubs for enterprise-only ACL token to be used by managed service providers.	5 years ago
Luke Kysow	2169a79a7d	Helm ref docs for consul-k8s namespaces support	5 years ago
Paschalis Tsilias	a335aa57c5	Expose Envoy's /stats for statsd agents (#7173) ... * Expose Envoy /stats for statsd agents; Add testcases * Remove merge conflict leftover * Add support for prefix instead of path; Fix docstring to mirror these changes * Add new config field to docs; Add testcases to check that /stats/prometheus is exposed as well * Parametrize matchType (prefix or path) and value * Update website/source/docs/connect/proxies/envoy.md Co-Authored-By: Paul Banks <banks@banksco.de> Co-authored-by: Paul Banks <banks@banksco.de>	5 years ago
Anudeep Reddy	b5b4226d4f	[docs] Enabling connect requires server restarts (#6904)	5 years ago
Mohammad Gufran	47cc162ca3	docs: add Flightpath to the list of community tools (#7176)	5 years ago
Stuart Williams	3eb76691df	docs: rate limiting applies to Consul agents in server mode (#6932)	5 years ago
Chris Arcand	d40b9f3501	docs: update available Sentinel imports (#6920)	5 years ago
Michael Hofer	4ab3af0ede	docs: add missing Autopilot -min-quorum documentation (#7192)	5 years ago
Blake Covarrubias	e158922615	Fix org name in Helm chart's imageEnvoy description ... Update the description for the Helm chart's connectInject.imageEnvoy parameter to reflect the correct organization name for images published by EnvoyProxy.io.	5 years ago
Alexandru Matei	5a6e602b86	docs: add detailed documentation about Health Checking specific service using the gRPC method (#6574)	5 years ago
Anthony Scalisi	1565351a5c	docs: fix typos, IDs are UUIDs, /acl/token endpoints manage ACL tokens (#5736)	5 years ago
Hans Hasselberg	5531678e9e	Security fixes (#7182) ... * Mitigate HTTP/RPC Services Allow Unbounded Resource Usage Fixes #7159. Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com> Co-authored-by: Paul Banks <banks@banksco.de>	5 years ago
Sarah Christoff	fbb9120894	[docs] Clarify retry-join (#7078)	5 years ago
Matt Keeler	6855a778c2	Updates to the Txn API for namespaces (#7172) ... * Updates to the Txn API for namespaces * Update agent/consul/txn_endpoint.go Co-Authored-By: R.B. Boyer <rb@hashicorp.com> Co-authored-by: R.B. Boyer <public@richardboyer.net>	5 years ago
Iryna Shustava	7b549b0b5e	docs: clarify that clients and servers need to talk over LAN if outside k8s (#7156)	5 years ago
Iryna Shustava	22872b03a6	docs: Clarify the use of kustomize or ship with the Helm chart (#7154)	5 years ago
Chris Piraino	401221de58	Allow users to configure either unstructured or JSON logging (#7130) ... * hclog Allow users to choose between unstructured and JSON logging	5 years ago
Iryna Shustava	14369f03ce	docs: update ACL perms for the /connect/ca/roots endpoint (#7155)	5 years ago
Blake Covarrubias	08909661c2	docs: Fix success/passing health check definition ... This commit changes the health check example shown for the success/failures_before_passing option to correctly show that the value of `checks` is an array of objects, not an object. Added text clarifying these check parameters are available in Consul 1.7.0 and later. Expanded the health check to provide a more complete configuration example. Resolves #7114.	5 years ago
Matt Keeler	bbc2eb1951	Add the v1/catalog/node-services/:node endpoint (#7115) ... The backing RPC already existed but the endpoint will be useful for other service syncing processes such as consul-k8s as this endpoint can return all services registered with a node regardless of namespacing.	5 years ago
Blake Covarrubias	b3cf47c861	Redirect /docs/guides/outage.html to Learn ... Resolves: #6953	5 years ago
Alexey Miasoedov	b71630b752	fix Unix socket path in docs	5 years ago
David Yu	ee329db79a	Merge pull request #7104 from hashicorp/david-yu-patch-4 ... Small change to TLS connection wording	5 years ago
Kit Ewbank	7b17f789d3	docs: add Helm chart 'dns.clusterIP' value. (#5845)	5 years ago
Hans Hasselberg	11a571de95	agent: setup grpc server with auto_encrypt certs and add -https-port (#7086) ... * setup grpc server with TLS config used across consul. * add -https-port flag	5 years ago
Iryna Shustava	a33154ac9b	Add docs about rolling out TLS on k8s (#7096) ... * Add docs about gradually rolling out TLS on k8s Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>	5 years ago
David Yu	26a0ea1c39	Small change to wording ... Removing automatic connection wording for applications for the time being. From @blake > They can automatically establish TLS connections without being aware that TLS is happening. They are aware that they’re routed through the Connect proxy, the app has to configure itself to use the local upstream port.	5 years ago
Luke Kysow	c9dbcc31ec	Merge pull request #6970 from hashicorp/k8s-docs-refactor ... Kubernetes docs reorganization	5 years ago
Luke Kysow	e0aff262cf	Reorg kube docs	5 years ago
Hans Hasselberg	804eb17094	connect: check if intermediate cert needs to be renewed. (#6835) ... Currently when using the built-in CA provider for Connect, root certificates are valid for 10 years, however secondary DCs get intermediates that are valid for only 1 year. There is no mechanism currently short of rotating the root in the primary that will cause the secondary DCs to renew their intermediates. This PR adds a check that renews the cert if it is half way through its validity period. In order to be able to test these changes, a new configuration option was added: IntermediateCertTTL which is set extremely low in the tests.	5 years ago
Hans Hasselberg	87f32c8ba6	auto_encrypt: set dns and ip san for k8s and provide configuration (#6944) ... * Add CreateCSRWithSAN * Use CreateCSRWithSAN in auto_encrypt and cache * Copy DNSNames and IPAddresses to cert * Verify auto_encrypt.sign returns cert with SAN * provide configuration options for auto_encrypt dnssan and ipsan * rename CreateCSRWithSAN to CreateCSR	5 years ago
Matej Urbas	ce023359fe	agent: configurable MaxQueryTime and DefaultQueryTime. (#3777)	5 years ago
John Cowen	bc86002be9	docs: Add note about using valid DNS labels for service names (#7035) ... Add note about using valid DNS labels for service names	5 years ago
Kit Patella	8be67b777a	Small improvements to Connect docs (#6910) ... * docs/connect add link to intentions and minor phrasing change * docs/connect pluralize 'applications' * Update website/source/docs/connect/connect-internals.html.md Co-Authored-By: Paul Banks <banks@banksco.de>	5 years ago
Freddy	e635b24215	Update force-leave ACL requirement to operator:write (#7033)	5 years ago
Matt Keeler	663cf1e9a8	AuthMethod updates to support alternate namespace logins (#7029)	5 years ago
Matt Keeler	8bd34e126f	Intentions ACL enforcement updates (#7028) ... * Renamed structs.IntentionWildcard to structs.WildcardSpecifier * Refactor ACL Config Get rid of remnants of enterprise only renaming. Add a WildcardName field for specifying what string should be used to indicate a wildcard. * Add wildcard support in the ACL package For read operations they can call anyAllowed to determine if any read access to the given resource would be granted. For write operations they can call allAllowed to ensure that write access is granted to everything. * Make v1/agent/connect/authorize namespace aware * Update intention ACL enforcement This also changes how intention:read is granted. Before the Intention.List RPC would allow viewing an intention if the token had intention:read on the destination. However Intention.Match allowed viewing if access was allowed for either the source or dest side. Now Intention.List and Intention.Get fall in line with Intention.Matches previous behavior. Due to this being done a few different places ACL enforcement for a singular intention is now done with the CanRead and CanWrite methods on the intention itself. * Refactor Intention.Apply to make things easier to follow.	5 years ago
danielehc	6ae75f6063	added disclaimer about network segments due to Serf limitations (#7004) ... * added disclaimer about network segments due to Serf limitations using work made at https://github.com/hashicorp/consul/pull/6558 by @thepomeranian * Lowercasing functionality name * Update website/source/docs/enterprise/network-segments/index.html.md Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> Co-authored-by: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	5 years ago
danielehc	a207f1a147	Update docs to point to new learn guide (#7003) ... * Changed the link to point to new guide * Removed querystring from link	5 years ago
DevOps Rob	0785bcc8df	Azure MSI for cloud auto-join (#7000) ... * Azure MSI documentation Adding in note about support for Azure MSI authentication method for Cloud auto-join * fixing text formatting fixing text formatting * missing word missing word - variable * Update website/source/docs/agent/cloud-auto-join.html.md Language change to be specific about where the security risk mitigation is concerned Co-Authored-By: Jack Pearkes <jackpearkes@gmail.com> Co-authored-by: Jack Pearkes <jackpearkes@gmail.com>	5 years ago
kaitlincarter-hc	15f070231a	updating the ent docs to mention GCP (#7001)	5 years ago
tehmoon	43ab78fe5a	docs: Fix extraVolumes mount paths in helm.html.md (#7008)	5 years ago
Rémi Lapeyre	ec591a5b77	docs: fix typo in ACL legacy documentation (#7006)	5 years ago
kaitlincarter-hc	6e2ae79552	[docs] Managing ACL Policies (#6573) ... * New Acl policy guide * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> * Update website/source/docs/guides/managing-acl-policies.html.md Co-Authored-By: Paul Banks <banks@banksco.de> Co-authored-by: Paul Banks <banks@banksco.de>	5 years ago
kaitlincarter-hc	2e1a8acb45	[docs] New Replication Guide (#5823) ... * new replication guide * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * fixing list * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * fixing another list * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Matt Keeler <mkeeler@users.noreply.github.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: R.B. Boyer <public@richardboyer.net> * fixing formating * Updating based on feedback. * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Matt Keeler <mkeeler@users.noreply.github.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * updating introduction based on feedback * Update website/source/docs/guides/acl-replication.md * updating intro based on feedback * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * updating based on feedback * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Update website/source/docs/guides/acl-replication.md Co-Authored-By: Judith Malnick <judith@hashicorp.com> * Additional note about servers Co-authored-by: R.B. Boyer <public@richardboyer.net> Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com> Co-authored-by: Judith Malnick <judith@hashicorp.com>	5 years ago
kaitlincarter-hc	88a4950a78	New Connect guide for new users (#6749)	5 years ago
Blake Covarrubias	b52ce19e8f	Move bootstrapACLs under global key in Helm docs ... The global.bootstrapACLs key in the Helm chart docs was inadvertently moved to a top-level key in commit 12e6ef8, which is incorrect. This commit reverts that error.	5 years ago
Matt Keeler	c276e2a634	Revert "Remove docs refs to NS inference from ACL token" (#6976) ... This reverts commit 3a8426de9c. # Conflicts: # command/flags/http.go # website/source/api/acl/binding-rules.html.md # website/source/api/acl/policies.html.md # website/source/api/acl/roles.html.md # website/source/api/acl/tokens.html.md # website/source/api/kv.html.md # website/source/api/session.html.md # website/source/docs/commands/_http_api_namespace_options.html.md	5 years ago
Blake Covarrubias	e94db0178c	Add 'kind = connect-proxy' to mesh_gateway.html	5 years ago
Hans Hasselberg	937a414fd0	log: handle discard all logfiles properly (#6945) ... * Handle discard all logfiles properly Fixes https://github.com/hashicorp/consul/issues/6892. The [docs](https://www.consul.io/docs/agent/options.html#_log_rotate_max_files) are stating: > -log-rotate-max-files - to specify the maximum number of older log > file archives to keep. Defaults to 0 (no files are ever deleted). Set to > -1 to disable rotation and discard all log files. But the `-1` case was not implemented and led to a panic when being used. Co-Authored-By: Freddy <freddygv@users.noreply.github.com>	5 years ago
Kyle MacDonald	3628de6de5	website: embed yt videos on intro pages (#6871) ... - website: embed yt videos on intro pages - for /docs/connect - for /intro - css to handle iframe responding at smaller viewports - Update consul connect video with introductory description. Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> - Update consul connect intro with introductory description. Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	5 years ago
Matt Keeler	34e6e23d43	Change how namespaces are specified for the CLI (#6960)	5 years ago
Blake Covarrubias	87679a7a4f	Clarify -retry-join can be provided multiple times ... Update -retry-join documentation to explicitly state the option can be specified multiple times. Add corresponding config example showing multiple join addresses.	5 years ago
Paul Banks	fd99486794	Fix formatting and add version info (#6926)	5 years ago
Luke Kysow	12e6ef8424	Update Helm docs to match repo	5 years ago
ychuzevi	bae8a8a6cc	docs: Fix documentation for kv store create endpoint (#6940)	5 years ago
Luke Kysow	9003f8be9c	Document that env vars can't be used for config (#6912) ... * Document that env vars can't be used for config Environment variables are not read for config values when starting the Consul agent. Document this.	5 years ago
Nate Dobbs	53574c4204	docs: Fixed typo for 'consul members' link (#6918) ... Quick fix on a small typo I noticed while reading the docs on this command.	5 years ago
Alvin Huang	de42b8db8e	correct website download version to 1.6.2 (#6927)	5 years ago
Mike Morris	8baf94d94f	website: add 1.7.0 Beta announcement to Downloads page (#6911) ... * website: add 1.7.0 Beta announcement to Downloads page * Update downloads.html.erb	5 years ago
freddygv	03aa0ee1c5	Fix typos and add expand wildcard ns docs	5 years ago
freddygv	3a8426de9c	Remove docs refs to NS inference from ACL token	5 years ago
Matt Keeler	5934f803bf	Sync of OSS changes to support namespaces (#6909)	5 years ago
Iryna Shustava	1f3f9a7847	Merge pull request #6902 from hashicorp/k8s-auto-join-min-perms ... Clarify the minimum permissions required for k8s auto-join	5 years ago
Iryna Shustava	1694f95e4a	Clarify minimum perms required for k8s auto-join	5 years ago
Hans Hasselberg	9ff69194a2	tls: auto_encrypt and verify_incoming (#6811) (#6899) ... * relax requirements for auto_encrypt on server * better error message when auto_encrypt and verify_incoming on * docs: explain verify_incoming on Consul clients.	5 years ago
Luke Kysow	86cb454bb1	Link directly to reset	5 years ago
Matt Keeler	a704ebe639	Add Namespace support to the API module and the CLI commands (#6874) ... Also update the Docs and fixup the HTTP API to return proper errors when someone attempts to use Namespaces with an OSS agent. Add Namespace HTTP API docs Make all API endpoints disallow unknown fields	5 years ago
Blake Covarrubias	1d21635a6b	docs: Fix expose path HTTP listener ports ... The listener ports specified in the headings for the HTTP and HTTP2 examples do not match the ports in the corresponding service registration configurations. This commit changes the port specified in the heading for the HTTP listener to match the port used in the service registration example. In addition, the listener_port specified for the HTTP2 listener is modified to match the port number specified in the heading.	5 years ago
Li Kexian	a8b3be0491	add tencentcloud auto join docs (#6818)	5 years ago
Luke Kysow	5412ba9dad	Reorg helm chart docs ... - Remove duplicate install instructions from the Helm Chart page and kept them in Running Consul - Renamed Helm Chart to Helm Chart Reference because that's mostly what it contains (along with some examples) - Renamed Running Consul to Installing Consul - Changed instructions to be for installing using Helm 3 and added notes if using Helm 2 - Used release name "hashicorp" so subsequent instructions can be more concise and pastable, e.g. "port forward to svc/hashicorp-consul-server" vs. "port forward to svc/<your release name>-consul-server" - Use config.yaml as the name for the override values file since it differentiates from the default values.yaml file and its the name of the file used in the helm docs (https://helm.sh/docs/intro/using_helm/#customizing-the-chart-before-installing)	5 years ago
Chris Piraino	f3b54fa535	Allow configuration of upstream connection limits in Envoy (#6829) ... * Adds 'limits' field to the upstream configuration of a connect proxy This allows a user to configure the envoy connect proxy with 'max_connections', 'max_queued_requests', and 'max_concurrent_requests'. These values are defined in the local proxy on a per-service instance basis and should thus NOT be thought of as a global-level or even service-level value.	5 years ago
Tyler Ryan	0a7e0279e7	Docs/consul k8s existing pvc (#6872) ... Update docs for using pre-existing PVCs with helm	5 years ago
Luke Kysow	d24f58a1b2	Merge pull request #6855 from hashicorp/opaque-config-examples ... Document how to json encode envoy config	5 years ago
Luke Kysow	585f3ccf29	Merge pull request #6798 from hashicorp/namespace-selector-docs ... Fix documentation for namespaceSelector	5 years ago
Blake Covarrubias	e42ff8dd76	docs: Rename TTL to Timeout in Script/TCP checks ... TTL and Interval options were made mutually exclusive in https://github.com/hashicorp/consul/pull/3560. Change to Timeout, which is a correct parameter for HTTP, Script, and TCP checks. Resolves #6343	5 years ago
Luke Kysow	eaefa80362	Fix documentation for namespaceSelector ... Also remove the example for using namespace selector because it requires labelling a namespace which is harder to explain.	5 years ago
Luke Kysow	cb459a7289	Document how to json encode envoy config ... It wasn't clear how users should encode their config.	5 years ago
Luke Kysow	7b9f63af15	Fix helm docs bug ... If the ServiceAccount isn't applied first, we get an error since the Pod references a non-existing ServiceAccount	5 years ago
Luke Kysow	9cb841adc4	Merge pull request #6722 from hashicorp/jump-to-section ... Add "jump to section" dropdown	5 years ago
Luke Kysow	e358db5610	Add "jump to section" dropdown	5 years ago
Matt Keeler	b069d6777b	OSS KV Modifications to Support Namespaces	5 years ago
Matt Keeler	7b471f6bf8	OSS Modifications necessary for sessions namespacing	5 years ago
rerorero	40df8bea57	docs: Fix links to K8s L7 observability guide (#6834)	5 years ago
Blake Covarrubias	5ac8a21f93	docs: Fix links to Sentinel docs for Consul ... Current URL returns a 404 error. Correct links to point to the proper URL.	5 years ago
kaitlincarter-hc	99e088107f	removed kubecon banner (#6827)	5 years ago
Paul Banks	cd1b613352	connect: Add AWS PCA provider (#6795) ... * Update AWS SDK to use PCA features. * Add AWS PCA provider * Add plumbing for config, config validation tests, add test for inheriting existing CA resources created by user * Unparallel the tests so we don't exhaust PCA limits * Merge updates * More aggressive polling; rate limit pass through on sign; Timeout on Sign and CA create * Add AWS PCA docs * Fix Vault doc typo too * Doc typo * Apply suggestions from code review Co-Authored-By: R.B. Boyer <rb@hashicorp.com> Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com> * Doc fixes; tests for erroring if State is modified via API * More review cleanup * Uncomment tests! * Minor suggested clean ups	5 years ago
kaitlincarter-hc	58db6b5d22	fixing link (#6817)	5 years ago
kaitlincarter-hc	50af948044	Replacing updgrade jtbd with k8s (#6813)	5 years ago
RJ Spiker	f75b47d3a9	website - add -moz-osx-font-smoothing for smooth firefox osx fonts (#6755)	5 years ago
Chris Piraino	cf69630620	Improve session API documentation ... - Remove incorrect statement that `LockDelay` must be greater than 0 - Add sentence to the top of the page pointing to the internal document describing the sessions mechanism for more context	5 years ago
kaitlincarter-hc	9c0e1a5b08	[WIP] Kubernetes Docs (#6770) ... * adding cloud providers for k8s * adding links * added utm parameters * Updating descriptions * fix sidenav * renaming page minikube	5 years ago
Jack Pearkes	3b173b8cd2	website: alert for kubecon (#6806) ... * website: alert for kubecon * Update website/source/index.html.erb	5 years ago
Chris Piraino	0687e2fe93	docs: add sentence linking to available service-resolver filters ... Resolves #6434	5 years ago
Blake Covarrubias	8572ac135c	Add missing docs for checks Watch type (#5188) ... Add configuration examples for specifying watch checks by health check state or service, and corresponding CLI examples. Resolves: #5188	5 years ago
Alvin Huang	e4dcd8ea6c	add arm download notes (#6785)	5 years ago
kaitlincarter-hc	f982290d9f	fixing buttons (#6772)	5 years ago
Paul Banks	b621910618	Support Connect CAs that can't cross sign (#6726) ... * Support Connect CAs that can't cross sign * revert spurios mod changes from make tools * Add log warning when forcing CA rotation * Fixup SupportsCrossSigning to report errors and work with Plugin interface (fixes tests) * Fix failing snake_case test * Remove misleading comment * Revert "Remove misleading comment" This reverts commit bc4db9cabed8ad5d0e39b30e1fe79196d248349c. * Remove misleading comment * Regen proto files messed up by rebase	5 years ago
kaitlincarter-hc	51278ff46e	[Website] Add JTBD - WIP (#6673) ... * updating the landing page with jtbd * changed the buttons to pink * updating CSS based on John's help * updating a use case * updating the language and rearranging the guides * adding icons * fixed image width * fixing buttons and updating traffic splitting language.	5 years ago
John Cowen	8a89e1a62f	docs: Add link to config entries	5 years ago
rogerwelin	47eff3475f	Adds crystal-consul to libraries & sdk docs	5 years ago
Tramale Turner	d6c910fe2f	Update proxies.html.md (#6754) ... Missing preposition.	5 years ago
Mr.gao	653096973d	docs: Fix delete config entry description (#6593) ... Fix the documentation to correctly state the HTTP DELETE method will remove the specified config entry.	5 years ago
RJ Spiker	2bb994ace4	website - font and brand updates (#6716) ... * website - font and brand updates * sidebar font-size adjustments and scss cleanup * adjust nav and inline code styles	5 years ago
Blake Covarrubias	0aa025df1c	docs: Miscellaneous docs cleanup (#6742) ... Fix spelling errors, API doc inconsistencies, and formatting issues. * Fix several spelling errors. * Prepend / to v1/event/list path in Watches. * Rename script handlers to match Watch type. * Remove /v1 path prefix on service health API endpoints. Makes request path consistent with the rest of the HTTP API documentation which does not include the /v1 prefix. * Fix bracket formatting issue on Telemetry page. The HTML codes used for brackets inside of the code block are not interpolated, and are shown as literal strings. Replace the numeric HTML codes with the intended character value to fix display formatting. Also placed variable reference on agent/options.html inside code block for consistency with the presentation of other options on the page. * Add missing word to Coordinate.Node docstring. Resolves #6014	5 years ago
Thibault Gilles	f7f1c3fa54	Fix docs for replace-existing-checks parameter	5 years ago
Robert Hencke	d908f2c420	[docs] Fix sentence order for GCE Cloud Auto-Join	5 years ago
Rémi Lapeyre	7190af29ac	Fix typo in config HTTP API documentation	5 years ago
Yahya	0604934e13	[Docs] Fix typo (#6523)	5 years ago
Charlie Voiselle	f1786211e1	Merge pull request #6710 from hashicorp/docs/connect-nomad ... [docs] Updating Nomad Consul Connect info	5 years ago
R.B. Boyer	dc4b3e3444	docs: fix hcl use on production acls guide (#6739) ... Also clean up some general whitespace formatting.	5 years ago
Paul Banks	87699eca2f	Fix support for RSA CA keys in Connect. (#6638) ... * Allow RSA CA certs for consul and vault providers to correctly sign EC leaf certs. * Ensure key type ad bits are populated from CA cert and clean up tests * Add integration test and fix error when initializing secondary CA with RSA key. * Add more tests, fix review feedback * Update docs with key type config and output * Apply suggestions from code review Co-Authored-By: R.B. Boyer <rb@hashicorp.com>	5 years ago
R.B. Boyer	5ff8fa9918	docs: mention that all logging flags also work in the config file (#6705)	5 years ago
Luke Kysow	c496fd80c2	Merge pull request #6583 from hashicorp/connect-annotations ... Document new annotations for Connect injections	5 years ago
Alexandra Freeman	00f5fde869	Update mediums on main community page (#6699) ... Updating all .io Community sites to direct practitioners to the Forum as the first medium for communicating with other users and HashiCorp employees. Deleted Gitter link and Google Group link, as these will be phased out over the next few months. Updated what appeared to be a typo on the page description. Chatted with Nic Jackson before submitting PR.	5 years ago
kaitlincarter-hc	bac8edb7df	removed the term easy and updated the formatting	5 years ago
Charlie Voiselle	c646089c84	Updating Nomad Consul Connect info	5 years ago
Sarah Christoff	5e1c6e907b	Set MinQuorum variable in Autopilot (#6654) ... * Add MinQuorum to Autopilot	5 years ago
Sarah Christoff	64d099c020	Update -protocol doc (#6681) ... * Update -protocol to have more clear version wording Co-Authored-By: Judith Malnick <judith.patudith@gmail.com>	5 years ago
Luke Kysow	b5cd6f83a3	Merge pull request #6683 from hashicorp/service-account-connect-inject-docs ... Document service account name requirements	5 years ago
Luke Kysow	3524ee0478	Document service account name requirements ... If ACLs are enabled, service account name must match the name of the service in Consul. Fixes https://github.com/hashicorp/consul-helm/issues/202	5 years ago
kaitlincarter-hc	749915ce0f	missed UTM parameter (#6679)	5 years ago
kaitlincarter-hc	73832ed80b	fixing ACL reset links (#6678)	5 years ago
Alvin Huang	3361bab1bc	modify netlify-cli installation (#6674) ... * modify netlify CLI installation * bump middleman-hashicorp to 0.3.40 to include ssh	5 years ago
kaitlincarter-hc	30ae048f85	Top Navigation change (#6630) ... * Changed Guides to Learn in the top nav and added utm parameters to the guide index page * Update website/source/docs/guides/index.html.md * Update website/source/docs/guides/index.html.md * Update website/source/layouts/layout.erb	5 years ago
kaitlincarter-hc	4f9e639d49	updating broken link (#6633)	5 years ago
PHBourquin	039615641e	Checks to passing/critical only after reaching a consecutive success/failure threshold (#5739) ... A check may be set to become passing/critical only if a specified number of successive checks return passing/critical in a row. Status will stay identical as before until the threshold is reached. This feature is available for HTTP, TCP, gRPC, Docker & Monitor checks.	5 years ago
kaitlincarter-hc	b0310364c6	[docs] Adding Links to Learn (#6611) ... * adding links to Learn * fixing a couple typos * adding utm paramaters * Update website/source/docs/connect/registration/sidecar-service.md * Update website/source/docs/connect/registration/sidecar-service.md * Update website/source/docs/acl/acl-system.html.md * Update website/source/docs/acl/acl-system.html.md * Update website/source/docs/agent/encryption.html.md Co-Authored-By: Judith Malnick <judith.patudith@gmail.com> * Update website/source/docs/connect/proxies/built-in.md Co-Authored-By: Judith Malnick <judith.patudith@gmail.com> * Update website/source/docs/connect/registration/sidecar-service.md Co-Authored-By: Judith Malnick <judith.patudith@gmail.com> * Update website/source/docs/install/index.html.md Co-Authored-By: Judith Malnick <judith.patudith@gmail.com> * Update website/source/docs/agent/kv.html.md * Update website/source/docs/connect/security.html.md * Update website/source/docs/connect/security.html.md * Update website/source/docs/internals/architecture.html.md	5 years ago
Blake Covarrubias	97953454c4	Add Consul's L7 features to Istio comparison ... Add text listing Consul's L7 features (via Envoy). Re-organize text to flow similarly to Istio section. Co-Authored-By: Judith Malnick <judith.patudith@gmail.com>	5 years ago
Luke Kysow	17990aabf3	Document new annotations for Connect injections	5 years ago
Sarah Christoff	5e26971864	Prune Unhealthy Agents (#6571) ... * Add -prune flag to ForceLeave	5 years ago
Freddy	2eaece10a7	Update Force Leave docs (#6550) ... Fixes #2742 Previously the docs didn't clarify that if a server restarts as a client then force-leave won't lead to removing the node from the raft config. This is because the node, which is alive after a restart, will refute messages about it having left . These messages about members leaving are in turn what trigger Consul's leader to remove a server from raft.	5 years ago
Mike Morris	6bf75d201d	docs: add managed proxy removal note to specific version upgrade notes (#6557)	5 years ago
Judith Malnick	fd41003138	Specify that mesh gateways require Envoy (#6506) ... * Specify that mesh gateways must operate on L7 * Add feedback from Matt * clarify gateway requirements	5 years ago
Freddy	fdd10dd8b8	Expose HTTP-based paths through Connect proxy (#6446) ... Fixes: #5396 This PR adds a proxy configuration stanza called expose. These flags register listeners in Connect sidecar proxies to allow requests to specific HTTP paths from outside of the node. This allows services to protect themselves by only listening on the loopback interface, while still accepting traffic from non Connect-enabled services. Under expose there is a boolean checks flag that would automatically expose all registered HTTP and gRPC check paths. This stanza also accepts a paths list to expose individual paths. The primary use case for this functionality would be to expose paths for third parties like Prometheus or the kubelet. Listeners for requests to exposed paths are be configured dynamically at run time. Any time a proxy, or check can be registered, a listener can also be created. In this initial implementation requests to these paths are not authenticated/encrypted.	5 years ago
Alvin Huang	f6b928043f	remove alert bar on homepage (#6544)	5 years ago
R.B. Boyer	af01d397a5	connect: don't colon-hex-encode the AuthorityKeyId and SubjectKeyId fields in connect certs (#6492) ... The fields in the certs are meant to hold the original binary representation of this data, not some ascii-encoded version. The only time we should be colon-hex-encoding fields is for display purposes or marshaling through non-TLS mediums (like RPC).	5 years ago
Jack Pearkes	5b41903bd0	website: update alert bar on homepage (#6518) ... Per @changli0617	5 years ago
Luke Kysow	9f4ecdbf3e	Merge pull request #6511 from hashicorp/code-highlighting ... Give code blocks coloured background	5 years ago