42a51b1a2c
usagemetrics: add cluster members to metrics API ( #10340 )
...
This PR adds cluster members to the metrics API. The number of members per
segment are reported as well as the total number of members.
Tested by running a multi-node cluster locally and ensuring the numbers were
correct. Also added unit test coverage to add the new expected gauges to
existing test cases.
2021-06-03 08:25:53 -07:00
ca423c80b9
Add enterprise v1.10 specific upgrade notes.
2021-06-03 10:48:16 -04:00
4222242f1c
Add licensing information to snapshot agent docs.
2021-06-03 10:48:16 -04:00
aeaeec15e8
Add deprecation/removal notices regarding the APIs/CLI commands for licensing that are going away.
...
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
2021-06-03 10:48:16 -04:00
f3595f5394
Update licensing docs for 1.10 licensing
2021-06-03 10:47:33 -04:00
6b7ca99a69
Add licensing telemetry docs.
2021-06-03 10:47:33 -04:00
faf05bcb85
Fix broken link ( #10335 )
2021-06-02 09:33:12 -05:00
5f8797dad3
[Website] WIP - Update Homepage ( #10314 )
...
* Initial structure for updated homepage
* Bring back <UseCases />
* Add section stubs
* Add ecosystem section
* Add features section
* Iron out features section
* Add Learn Callout section
* Copy updates
* Better together copy
* Add updated copy & swap assets
* Remove comment & just add existing icon for now
* Copy and asset tweaks
* Remove unwanted copy
* Process the codeblock
* Add transparent img
* Swap for transparent img
* More transparent img
* Use Learn cards pattern
* Rearrange img and finishing padding touches
2021-06-02 09:22:52 -05:00
3df2cb7ea1
chore: updates alert banner — hashiconf
2021-06-01 14:28:08 -07:00
2196262eab
docs: Clarify set-agent-token token persistence behavior
...
Clarify that tokens configured via `set-agent-token` will not be
persisted if `acl.enable_token_persistence` is `false`.
2021-05-31 16:08:43 -07:00
665e052e96
docs: Fix agent token name under ACL Agent Token
...
Reference the correct name of the agent token in the ACL Agent Token
section for the ACL System docs.
2021-05-31 10:52:15 -07:00
b130f355ee
ui: Fix broken link format in ECS install page
2021-05-27 14:11:04 -07:00
8abc38658a
fix(website): update node version to latest LTS for website ( #10312 )
2021-05-27 15:35:06 -05:00
0b52545c01
Add note about new ECS ARN format to ECS docs ( #10304 )
...
* docs: Add note about ECS task ARN format to ECS docs
2021-05-27 10:59:28 -07:00
1802f47f5c
docs: Bump core downloads to beta3 ( #10309 )
...
Make 1.10beta3 available on Downloads for consul.io
2021-05-27 09:22:17 -07:00
79f03098a0
Add tech preview label ( #10300 )
2021-05-26 11:48:11 -07:00
78af667ed0
Consul ecs docs ( #10288 )
...
* ECS docs
2021-05-26 11:25:06 -07:00
835bf2640f
Update Kubernetes docs to point to install pages. ( #10293 )
...
Adds more clear indicators that the collections on the learn.hashicorp.com sites have specific instructions for single node deployments.
Co-Authored by: soonoo <qpseh2m7@gmail.com>
2021-05-25 15:36:09 -04:00
2e952324b1
docs: rename enterprise to Consul enterprise
2021-05-24 13:55:17 -07:00
bb07d1a30f
Updating Consul Glossary with more industry standard terms ( #10074 )
...
* Update glossary.mdx
1. Update header to the first section to "Consul Vocabulary" since these are the terms used in the context of Consul conversations.
2. Kept the header "Consul Glossary" since these are the terms useful for practitioners in the consul space.
3. Removed interlinking to terms on the same page.
Co-authored-by: Hans Hasselberg <me@hans.io>
Co-authored-by: Swarna Podila <swarnap@users.noreply.github.com>
2021-05-24 15:44:03 -04:00
e4aad106c9
docs: fix Amazon EKS service name ( #10280 )
2021-05-21 15:58:13 -07:00
ce958e7218
Docs: Add link for new Cisco TF module ( #10268 )
2021-05-21 08:48:58 -05:00
e527c191ae
docs: Add example ACL policy for snapshot agent
...
Co-Authored-By: Blake Covarrubias <blake@covarrubi.as>
2021-05-20 14:41:29 -04:00
8233328e48
Fix doc note since we switched authorization mechanism in 1.9 ( #10266 )
2021-05-20 16:28:38 +01:00
7dc78b39c9
docs: update register check docs ( closes #6635 ) ( #10261 )
...
Update register check documentation clarify that Id returns as CheckId in the response
Co-Authored-By: Shaker Islam <shaqq@users.noreply.github.com>
Co-authored-by: Shaker Islam <shaqq@users.noreply.github.com>
2021-05-19 20:24:54 -04:00
a003265964
chore: 'overview' nav item links to home page ( #10255 )
2021-05-18 12:48:47 -07:00
19ea60e714
Updates AlertBanner for HashiConf EU
2021-05-17 14:49:40 -07:00
498a698ffa
Merge branch 'master' of github.com:hashicorp/consul into consul-documentation-update
2021-05-17 07:20:06 -07:00
ede14b7c54
xds: emit a labeled gauge of connected xDS streams by version ( #10243 )
...
Fixes #10099
2021-05-14 13:59:13 -05:00
83a6579299
Update k8s fed docs to clarify role of acl token ( #10233 )
2021-05-13 10:20:12 -07:00
a7d96bb546
correct website documentation typo
2021-05-12 23:29:51 -07:00
3b50a55533
connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 ( #10231 )
2021-05-12 14:06:06 -05:00
c59c0b05dd
docs: updated the standard upgrade process
...
Added a cross-reference link in the upgrade guides. This resource https://www.consul.io/docs/upgrading/instructions/general-process including specific-version guides for breaking changes and a more detailed upgrade process, but it's not mentioned in the https://www.consul.io/docs/upgrading#standard-upgrade overview page.
2021-05-12 08:18:06 -07:00
edbbe59354
Merge pull request #10226 from hashicorp/pcmccarron-patch-1
...
Update network-infrastructure-automation.jsx
2021-05-11 12:49:27 -07:00
a69df96ee6
website: add /form redirect ( #10227 )
2021-05-11 14:28:03 -04:00
fc946d5284
Update network-infrastructure-automation.jsx
2021-05-11 11:13:44 -06:00
f6580400dc
docs: document the current state of built-in and native
2021-05-10 16:54:11 -04:00
a1db512e90
Flesh out Raft Protocol Support note
2021-05-10 11:21:05 -05:00
99d1a56c0a
website: bump beta callout on downloads page to 1.10.0-beta2 ( #10202 )
2021-05-07 15:03:50 -04:00
5d7a49d510
Adjust order & remove titles on HashiStack section
2021-05-06 16:40:44 -07:00
5c17bf3d78
docs/nia: simplify api and cli url paths ( #10199 )
2021-05-06 16:26:31 -05:00
d8de3ab581
Updates the homepage hero CTA ( #10192 )
...
Plug in callouts content
Most styles for the callout blade
Re-export Consul Stack image
Update icons
Misc content tweaks
Optimize mobile for the consul stack icon
Better alignment
Make full CTA box clickable
2021-05-06 16:33:15 -04:00
7b5d432121
Merge pull request #10064 from hashicorp/docs-fix-namespace-api-descriptions
...
docs: fix api-docs namespace descriptions
2021-05-06 15:32:12 -04:00
99617a70af
K8s docs: Manual join: add note that kubeconfig not required ( #9998 )
...
Per Consul PM, kubeconfig is not required for manual join. I believe this should be clarified in the docs as the current wording refers to the auto join steps above which state kubeconfig is required.
2021-05-06 12:59:25 -06:00
60af6a13ff
docs: fix api-docs namespace descriptions
...
Looks like some copy/paste from ACL docs.
2021-05-06 14:58:08 -04:00
74d516dcfd
Merge pull request #10177 from hashicorp/dnephin/config-entry-remove-fields
...
docs: remove name field from Mesh config entry
2021-05-06 14:21:38 -04:00
2628974692
Update website/content/commands/config/delete.mdx
...
Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>
2021-05-06 14:04:26 -04:00
adfaf29da4
website: support hidden pages in nav-data ( #10180 )
...
* website: bump to docs-page prerelease with hidden page support
* website: replace hidden pages hot fix for /docs, /api-docs, and /commmands
* website: remove unused files for old hidden pages hotfix
* website: bump to stable docs-page, w next-mdx-remote bump
* website: bump to latest markdown-page
2021-05-06 13:33:15 -04:00
583850e9d4
docs: remove name field from Mesh config entry
...
Also document the name of these config entries in the API docs, so that
users know how to query for them.
And fix the name of mesh on the index page.
2021-05-06 13:25:32 -04:00
8be99e0cf2
refactor(downloads): source asset from mktg-logos ( #10178 )
2021-05-05 08:15:27 -07:00
3ad754ca7b
Make Raft trailing logs and snapshot timing reloadable ( #10129 )
...
* WIP reloadable raft config
* Pre-define new raft gauges
* Update go-metrics to change gauge reset behaviour
* Update raft to pull in new metric and reloadable config
* Add snapshot persistance timing and installSnapshot to our 'protected' list as they can be infrequent but are important
* Update telemetry docs
* Update config and telemetry docs
* Add note to oldestLogAge on when it is visible
* Add changelog entry
* Update website/content/docs/agent/options.mdx
Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com>
Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com>
2021-05-04 15:36:53 +01:00
2ca3f481f8
Only consider virtual IPs for transparent proxies ( #10162 )
...
Initially we were loading every potential upstream address into Envoy
and then routing traffic to the logical upstream service. The downside
of this behavior is that traffic meant to go to a specific instance
would be load balanced across ALL instances.
Traffic to specific instance IPs should be forwarded to the original
destination and if it's a destination in the mesh then we should ensure
the appropriate certificates are used.
This PR makes transparent proxying a Kubernetes-only feature for now
since support for other environments requires generating virtual IPs,
and Consul does not do that at the moment.
2021-05-03 14:15:22 -06:00
1cbea66717
[Assembly]: Website Branding Refresh ( #9884 )
...
* style: update gray brand colors
* style: update brand colors
* chore: upgrades base platform deps
* style: updates learn callouts label color
* style: icons to flat consul primary color
* style: errand link styles
* refactor(home): use react-learn-callout
* chore; adds ts config, upgrades components
* chore: upgrade deps
chore: upgrade to latest component styles
chore: upgrades nextjs-scripts
* chore: fix-router
* update deps, add new downloads page
* chore: upgrade to stable deps
chore: use npm 7
* style: home callouts body copy to gray-2
* chore: upgrade hashi-stack-menu
* style: home feature icons update
* chore: upgrade deps body copy colors
* chore: upgrades alert banner
* feat: updates favicon
* style(downloads): adds pre-release and release candidate styles
* fix(home): adds right padding to quote
* content(home): swap assets
* content(uses-cases): updates assets
* chore: removes use cases icon override
* content(use-cases): swap out svgs for pngs
* content: copies asset
* trying again with this asset
* try putting asset in public
* content(use-cases): updates mercedes case study aseset
* chore: upgrades product download page prerelease
* chore: updates product download page to stable
* chore: updates favicon path
Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
2021-05-03 12:01:36 -07:00
9a5a0ba209
docs(discovery/service): Clarify multiple service definitions
...
Be more explicit that the definition of multiple services only works in config files,
not using the HTTP API.
Ref: https://discuss.hashicorp.com/t/register-multiple-services-via-put-request/
2021-04-30 16:46:02 -07:00
00d3283e93
Merge pull request #10149 from hashicorp/dnephin/config-use-streaming-backend-defualt-true
...
config: default UseStreamingBackend to true
2021-04-30 16:29:11 -04:00
abc1dc0fe9
connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 ( #10101 )
...
The only thing that needed fixing up pertained to this section of the 1.18.x release notes:
> grpc_stats: the default value for stats_for_all_methods is switched from true to false, in order to avoid possible memory exhaustion due to an untrusted downstream sending a large number of unique method names. The previous default value was deprecated in version 1.14.0. This only changes the behavior when the value is not set. The previous behavior can be used by setting the value to true. This behavior change by be overridden by setting runtime feature envoy.deprecated_features.grpc_stats_filter_enable_stats_for_all_methods_by_default.
For now to maintain status-quo I'm explicitly setting `stats_for_all_methods=true` in all versions to avoid relying upon the default.
Additionally the naming of the emitted metrics for these gRPC requests changed slightly so the integration test assertions for `case-grpc` needed adjusting.
2021-04-29 15:22:03 -05:00
5220699696
Improve doc: add note about address validation ( #10123 )
...
* Update website/content/docs/discovery/services.mdx with address field behavior.
Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>
Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>
2021-04-29 13:37:50 -04:00
8dffb89131
Implement traffic redirection exclusion based on proxy config and user-provided values ( #10134 )
...
* Use proxy outbound port from TransparentProxyConfig if provided
* If -proxy-id is provided to the redirect-traffic command, exclude any listener ports
from inbound traffic redirection. This includes envoy_prometheus_bind_addr,
envoy_stats_bind_addr, and the ListenerPort from the Expose configuration.
* Allow users to provide additional inbound and outbound ports, outbound CIDRs
and additional user IDs to be excluded from traffic redirection.
This affects both the traffic-redirect command and the iptables SDK package.
2021-04-29 09:21:15 -07:00
bb472111fd
config: default UseStreamingBackend to true
2021-04-28 18:58:02 -04:00
078c40425f
Rename "cluster" config entry to "mesh" ( #10127 )
...
This config entry is being renamed primarily because in k8s the name
cluster could be confusing given that the config entry applies across
federated datacenters.
Additionally, this config entry will only apply to Consul as a service
mesh, so the more generic "cluster" name is not needed.
2021-04-28 16:13:29 -06:00
0558586dbd
health: use blocking queries for near query parameter
2021-04-27 19:03:16 -04:00
ec8b5a3800
website: update readme ( #10078 )
...
* website: bump to latest nextjs-scripts prerelease
* website: run generate:readme to update readme blocks
* website: revert bump to nextjs-scripts, deferred
2021-04-26 12:38:11 -04:00
f7e825afe3
Update changelog and add telemetry docs ( #10107 )
2021-04-23 16:05:00 -04:00
d717d2cdc4
CLI: Allow snapshot inspect to work on internal raft snapshots directly. ( #10089 )
...
* CLI: Add support for reading internal raft snapshots to snapshot inspect
* Add snapshot inspect test for raw state files
* Add changelog entry
* Update .changelog/10089.txt
2021-04-23 16:17:08 +01:00
2cebb550b3
website: resolve unlinked content ( #10087 )
...
* website: add back unlinked pages to match previous state
* website: add unlinked content check
* website: add hidden nav-data to unlinked content check
2021-04-23 10:51:13 -04:00
b7cc83fde0
docs - Adding json formatting to TProxy HCL examples ( #10088 )
...
formatting
2021-04-21 17:17:06 -06:00
cd7308272e
add missing sentinel page to nav ( #10082 )
2021-04-21 12:55:08 -04:00
ccb2511ff3
refactor get started links to new tutorial ( #10066 )
2021-04-20 13:17:50 -04:00
5c526eb9b8
Release v1.9.5 ( #10063 )
...
Co-authored-by: hashicorp-ci <hashicorp-ci@users.noreply.github.com>
2021-04-19 11:57:53 -04:00
07d696bd40
website: fix search indexing issue ( #10059 )
2021-04-16 20:10:10 -04:00
315584ce4d
website: add 1.10.0 beta callout ( #10058 )
2021-04-16 16:20:20 -04:00
8b8c3c1992
Add docs for transparent proxy mode and config ( #10038 )
...
Add docs for transparent proxy mode and config
Co-authored-by: Nitya Dhanushkodi <nitya@hashicorp.com>
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
2021-04-16 12:50:02 -07:00
ba0bc10f09
docs: update helm ref docs and connect docs ( #10032 )
...
All k8s connect-related docs now need to mention that we require a Kubernetes service
for all Connect services
2021-04-16 12:49:02 -07:00
a51d10628e
Also update the nav link
2021-04-15 12:12:10 -05:00
fd9e240569
Update upgrade guide from 1.8.4 to 1.8.10
2021-04-15 12:03:24 -05:00
493f820e9d
Add better security warning to docs about the content-type change
2021-04-14 16:36:40 -04:00
d07f57ce67
Update KV docs to note new raw response content-type header
2021-04-14 16:21:03 -04:00
d35bd9c00c
Merge pull request #10008 from hashicorp/mw.update-homepage-links
...
website: update why hashicorp links
2021-04-14 10:57:29 -04:00
c8a6fbd994
add consul-haskell to libraries-and-sdks documentation ( #9982 )
...
See also https://github.com/alphaHeavy/consul-haskell/issues/40 .
2021-04-13 21:06:19 -04:00
73380a0dcc
website: update why hashicorp links
2021-04-13 15:55:15 -04:00
03df6f70f2
fix(website): docs link text color ( #10001 )
2021-04-12 13:47:12 -04:00
9deb52e868
add http2 ping health checks ( #8431 )
...
* add http2 ping checks
* fix test issue
* add h2ping check to config resources
* add new test and docs for h2ping
* fix grammatical inconsistency in H2PING documentation
* resolve rebase conflicts, add test for h2ping tls verification failure
* api documentation for h2ping
* update test config data with H2PING
* add H2PING to protocol buffers and update changelog
* fix typo in changelog entry
2021-04-09 15:12:10 -04:00
5755c97bc7
cli: Add new `consul connect redirect-traffic` command for applying traffic redirection rules when Transparent Proxy is enabled. ( #9910 )
...
* Add new consul connect redirect-traffic command for applying traffic redirection rules when Transparent Proxy is enabled.
* Add new iptables package for applying traffic redirection rules with iptables.
2021-04-09 11:48:10 -07:00
8671762474
website: implement mktg 032 ( #9953 )
...
* website: migrate to new nav-data format
* website: clean up unused intro content
* website: remove deprecated sidebar_title from frontmatter
* website: add react-content to fix global style import issue
2021-04-07 15:50:38 -04:00
17406b300d
Upgrades the Stackmenu to latest
2021-04-06 11:30:35 -07:00
5fe1cc48ff
cross-linking for audit logging
2021-04-05 09:35:04 -05:00
05f1218787
website: update homepage with focus on k8s
2021-04-01 12:32:59 -04:00
68b13f4c70
Docs: add enterprise upgrade link ( #9934 )
...
* add enterprise upgrade note
* Update index.mdx
2021-03-29 20:02:42 -04:00
8431137c1a
nia/docs 0.1.0 ga ( #9946 )
...
* docs/nia: consul compatibilty
* docs/nia: remove beta callouts (#9919 )
Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com>
2021-03-29 15:23:10 -04:00
af5c8e6243
website: add should-build script ( #9896 )
2021-03-29 10:09:51 -05:00
1345b92c73
Add link to TF module tutorial and example TF modules ( #9937 )
...
Add link to TF tutorial
Add links to print TF module and template for TF modules
2021-03-28 23:19:31 -05:00
c64f3600f0
Add Avi Network, AWS ALB and NS1 TF Registies and GitHub links ( #9938 )
...
Add Avi Network GH link
Add AWS ALB TF Registry and GH link
Add NS1 TF Registry and GH link
2021-03-27 01:52:41 -05:00
5d5abedb1f
Merge pull request #9917 from Ranjandas/docs/exec-cmd-acl
...
Document agent token policy requirement for rexec
2021-03-25 17:49:47 -04:00
eba632da13
Cross linking Learn tutorials ( #9893 )
...
* Cross linking Learn tutorials
* Update website/content/docs/nia/index.mdx
Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com>
* Cross linking Learn tutorials
* Cross linking Learn tutorials
* Add links to doc
Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com>
2021-03-24 18:58:10 +01:00
7857c5746f
Document agent token policy requirement for rexec
...
The Agent token policy when using rexec should have `write` on "_rexec"
key prefix. Updated the exec command documentation to explicitly state
this requirement.
2021-03-23 15:51:56 +11:00
277de5addc
Update telemetry docs ( #9905 )
...
* Fixes #2379-Improve interval explanation in the telemetry doc
* Fixes #4734-Update consul memory metrics
* Fixes #4836-Removed node.deregistration as that isn't in state.go
* Fixes #8986 partially-Trim redundant language
* Fixes #9087-Adds helpful details to telemetry on autopilot
* Fixes #9274-Addresses NaN output in autopilot
2021-03-22 18:47:41 -04:00
e6cc186d79
docs/nia: Update CTS configuration example to not confuse vault provider with vault config block ( #9909 )
2021-03-19 16:52:32 -05:00
199a0b0c19
docs: Update Helm reference docs ( #9904 )
2021-03-19 09:12:49 -07:00
147628859d
Add metrics documentation ( #9848 )
2021-03-18 17:20:54 -07:00
ea33c390ce
update docs and add changelog
2021-03-18 19:02:34 -04:00
11f60c46a3
Removing unnecessary comment ( #9890 )
...
Removing unnecessary comment around CRL to avoid confusion, as discussed with @banks
2021-03-18 14:39:25 -04:00
f0307c73e5
Add support for configuring TLS ServerName for health checks
...
Some TLS servers require SNI, but the Golang HTTP client doesn't
include it in the ClientHello when connecting to an IP address. This
change adds a new TLSServerName field to health check definitions to
optionally set it. This fixes #9473 .
2021-03-16 18:16:44 -04:00
a1d5e1fb41
docs: rename SourceAddress to SourceIP ( #9878 )
...
SourceAddress was probably renamed to SourceIP but the docs weren't
updated.
2021-03-15 14:39:33 -07:00
a11ed1570a
Add namespaces to prepared query API docs
...
Add missing section on creating prepared query for namespaced services
2021-03-15 10:04:53 +01:00
8f72c17248
fix: syntax issue
2021-03-11 17:05:21 -05:00
ccde7e5f8b
Small changes to gossip related telemetry docs ( #9846 )
...
Update gossip related telemetry docs to include correct descriptions, and added missing metrics
2021-03-11 14:21:32 -06:00
a6fb12a8db
Merge pull request #9867 from hashicorp/mw.update-alert-banner
...
Update alert banner
2021-03-11 14:54:29 -05:00
d38fa1cbcf
Merge pull request #9869 from DanielMabbett/patch-1
...
Fix typo in requirements.mdx
2021-03-11 12:49:57 -07:00
1e87c7183a
Merge pull request #9672 from hashicorp/ca-force-skip-xc
...
connect/ca: Allow ForceWithoutCrossSigning for all providers
2021-03-11 11:49:15 -08:00
555961e036
Merge pull request #9770 from hashicorp/docs/fix-terminating-gateway-config-entry
...
Docs: Update terminating-gateway-config-entry
2021-03-11 12:42:20 -07:00
d62565f368
Merge pull request #9792 from dzeban/kv-import-prefix
...
command/kv: Add prefix option to kv import command
2021-03-11 09:47:53 -08:00
f923a2d249
Update requirements.mdx
2021-03-11 10:08:53 +00:00
6fe45c075f
Add units and types to metrics tables ( #9674 )
...
This commits adds units and types to key metrics tables to have
consistent table views of all metrics in telemetry.mdx.
Fixes: https://github.com/hashicorp/consul/issues/9069
2021-03-10 22:36:15 -05:00
db1293feea
Update alert banner
2021-03-10 20:58:10 -05:00
15e8b13891
Add flags to consul connect envoy for metrics merging. ( #9768 )
...
Allows setting -prometheus-backend-port to configure the cluster
envoy_prometheus_bind_addr points to.
Allows setting -prometheus-scrape-path to configure which path
envoy_prometheus_bind_addr exposes metrics on.
-prometheus-backend-port is used by the consul-k8s metrics merging feature, to
configure envoy_prometheus_bind_addr to point to the merged metrics
endpoint that combines Envoy and service metrics so that one set of
annotations on a Pod can scrape metrics from the service and it's Envoy
sidecar.
-prometheus-scrape-path is used to allow configurability of the path
where prometheus metrics are exposed on envoy_prometheus_bind_addr.
2021-03-04 16:15:47 -06:00
851a1b123d
Add a sample error message
2021-03-02 12:48:03 +11:00
9827a02ef6
Update vms-and-kubernetes.mdx
2021-03-02 10:20:24 +11:00
479d6e6862
Added references to node name
2021-03-02 09:44:35 +11:00
9c74d6cc3a
Update cert creation instruction for Federation
...
The Server certificates used for Federation require the node name in the form of `<node>.server.<dc>.<domain>`. Not having this would through `bad tls certificate` error.
* Fixed cert create command
* Added note to create a wildcard cert (like the ones on Kubernetes)
* Fixed numbering
2021-03-02 09:39:46 +11:00
398b766532
xds: default to speaking xDS v3, but allow for v2 to be spoken upon request ( #9658 )
...
- Also add support for envoy 1.17.0
2021-02-26 16:23:15 -06:00
6b95e8dfe2
Merge pull request #9188 from hashicorp/dnephin/more-streaming-tests
...
Add more streaming tests
2021-02-26 12:36:55 -05:00
566efad2e7
Merge pull request #9759 from hashicorp/dnephin/streaming-default-rpc-enabled
...
streaming: default rpc.enable_streaming to true
2021-02-26 12:08:00 -05:00
b678eabbf5
nia/docs 0.1.0 beta ( #9803 )
...
nia/docs 0.1.0-beta
Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com>
Co-authored-by: Lorna Song <lorna@hashicorp.com>
Co-authored-by: John Eikenberry <jae@zhar.net>
2021-02-25 16:48:24 -06:00
1156519d97
docs: fix grpc metric names
2021-02-25 14:30:39 -05:00
3aec942b17
streaming: default rpc.enable_streaming to true
...
So that all servers will start the grpc server used by streaming
2021-02-25 14:06:04 -05:00
5b2300e63f
docs: Fix reference to dns_config.use_cache
2021-02-25 13:52:09 -05:00
fa77e9e1f7
docs: Fix code tag displaying on ACL binding rules
...
Fix indentation of code blocks on ACL binding rules page so that code
fence does not display in JSON output.
2021-02-22 15:18:08 -08:00
3b6ffc447b
xds: remove deprecated usages of xDS ( #9602 )
...
Note that this does NOT upgrade to xDS v3. That will come in a future PR.
Additionally:
- Ignored staticcheck warnings about how github.com/golang/protobuf is deprecated.
- Shuffled some agent/xds imports in advance of a later xDS v3 upgrade.
- Remove support for envoy 1.13.x but don't add in 1.17.x yet. We have to wait until the xDS v3 support is added in a follow-up PR.
Fixes #8425
2021-02-22 15:00:15 -06:00
4f9b35b2d8
fix typo and add link to Learn ( #9799 )
2021-02-22 08:32:07 -08:00
8ef19e74c5
[Website] Use new logo for Mercedes use case ( #9717 )
...
* Use new logo for Mercedes use case
* Fix home logo
2021-02-22 11:16:36 -05:00
cb3adec2bf
Merge pull request #9777 from hashicorp/dnephin/remove-some-deprecation
...
docs: remove a couple deprecations
2021-02-19 13:31:20 -05:00
098fd1797b
command/kv: Add prefix option to kv import command
...
Currently when data is imported via `consul kv import` it overwrites
keys under the root key. Since `consul kv export` can retrieve data for
the given prefix, i.e. part of the KV tree, importing it under root may
be not what users want.
To mirror prefix behavior from export this PR adds prefix feature to the
import command that adds prefix to all keys that are imported.
2021-02-19 14:07:25 +03:00
e27f6a367f
rotate homepage tutorials ( #9787 )
2021-02-18 14:02:08 -08:00
cd428060f6
Update helm docs for consul-helm v0.30.0 ( #9779 )
2021-02-17 14:08:35 -05:00
2df91c2050
Docs describing migrating to CRDs ( #9562 )
...
* Document how users can migrate to CRDs.
* Update documentation for federation with new `ProxyDefaults`
requirement.
* Ensure `controller.enabled: true` is set in our example configs.
* Remove `connect-service-protocol` annotation docs.
2021-02-17 14:01:52 -05:00
9bedb8b364
docs: remove a couple deprecations
...
These filters can not be reproduced with bexpr just yet.
2021-02-17 13:10:05 -05:00
531854ba7d
Bump components to remove client-side md processing ( #9773 )
2021-02-17 10:22:12 -05:00
9668832506
Add docs for MIME sniffing on metrics endpoint. ( #9696 )
...
* Add docs for MIME sniffing on metrics endpoint.
This was added in 1.7.2 last year but I realised we don't document it so it's kinda surprising Prometheus "just works" now.
* Update website/content/api-docs/agent/index.mdx
2021-02-17 10:39:08 +00:00
45a569d935
Update terminating-gateway.mdx
...
fix crds support reference and adding ACL clarification for linked services.
2021-02-15 14:54:40 +01:00
35be57fb01
nagios vs sensu updates
2021-02-12 10:44:41 -06:00
c522f8defd
Merge pull request #9758 from hashicorp/dnephin/fix-streaming-bugs
...
http: error if near is used with streaming
2021-02-12 10:37:29 -05:00
4174bc4330
Add docs section on regenerating expired CA certificates ( #9709 )
...
* Updated docs on regenerating built in CA
* review feedback
* Add sentence about expected behavior after update CA endpoint is used.
2021-02-11 15:38:12 -06:00
b909088500
http: error if near is used with streaming
2021-02-11 14:10:38 -05:00
6eeccc93ce
connect: update supported envoy point releases to 1.16.2, 1.15.3, 1.14.6, 1.13.7 ( #9737 )
2021-02-10 13:11:15 -06:00
7ef8b1c2b7
website: update next and nextjs-scripts ( #9698 )
...
Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com>
2021-02-09 09:26:17 -06:00
37227f7d11
Crosslink new microservices collection. ( #9704 )
2021-02-08 13:27:20 -05:00
36db3b50e6
docs: fix another broken link to upgrading k8s servers from token rotation page ( #9707 )
...
fix another broken link to upgrading k8s servers from token rotation page
2021-02-04 09:44:04 -08:00
94389f9619
docs: Small change to fix broken link to k8s upgrade from k8s tls certs page ( #9705 )
...
Broken link to k8s server upgrade from tls certs page
2021-02-04 09:13:32 -08:00
6b92b778c5
docs/nia: recommend sensitive variables for module authoring ( #9692 )
2021-02-02 14:57:46 -06:00
e48a96eac1
docs/nia: Update verbiage around securely configuring providers ( #9684 )
...
This reorganizes and flags where and when sensitive information may
be written in plain-text
2021-02-02 13:24:25 -06:00
d9bbf3d922
website: add utm params for all cloud.hashi links
2021-02-02 09:09:16 -05:00
132e27436f
Website updates for HCP (2/2)
...
website: prep hcp ctas
Add in updated HCP section
Fix broken link
website: remove superflous heading
website: add new try cloud cta to nav
website: adjust homepage hero CTAs
Update HCP description to match latest
Clean up Hero CTAs
Updates banner
2021-02-01 19:09:38 -08:00
f4dcb094a5
Release 1.9.3 ( #9680 )
2021-02-01 13:34:44 -05:00
504aa7c5fe
website: add release notes for 1.9 ( #9189 )
...
* website: initial draft of release notes framework
* website: fixup ref to 1-9-0.mdx
* Update website/pages/docs/release-notes/1-9-0.mdx
* Update website/pages/docs/release-notes/1-9-0.mdx
* website: add draft of 1.9.0 release notes
* website: move release-notes directory from /pages to /content
* Update 1-9-0.mdx
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Update website/content/docs/release-notes/1-9-0.mdx
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
2021-01-29 18:00:32 -05:00
3da918089d
Add docs for TLS Server Certificate rotation for K8S ( #9636 )
...
* Add docs for TLS Server Certificate rotation for K8s
2021-01-29 17:13:28 -05:00
7dac583863
connect/ca: Allow ForceWithoutCrossSigning for all providers
...
This allows setting ForceWithoutCrossSigning when reconfiguring the CA
for any provider, in order to forcibly move to a new root in cases where
the old provider isn't reachable or able to cross-sign for whatever
reason.
2021-01-29 13:38:11 -08:00
b5212fbcc6
Add operations section to k8s notes ( #9625 )
...
* Add operations section to k8s notes
* Unify faq/troubleshooting
2021-01-29 11:15:40 -08:00
b2dc7f7d9b
Merge pull request #9541 from sadedil/patch-1
...
Add a CLI tool for "Client Libraries & SDKs" page
2021-01-28 10:18:41 -08:00
b2d00dce7a
docs: Update Compat Matrix for Consul Helm 0.29 ( #9657 )
...
* docs: Update Compat Matrix for Consul Helm 0.29
Adding 0.29
* Update compatibility.mdx
2021-01-27 14:39:03 -08:00
9f006fdcc8
Document proxy-defaults config for prometheus ( #9640 )
2021-01-26 17:19:30 -08:00
d1db0c2645
fix error in component name on autopilot page ( #9638 )
2021-01-25 20:00:28 -05:00
8a35df81c7
connect: add local_request_timeout_ms to configure local_app http timeouts ( #9554 )
2021-01-25 13:50:00 -06:00
0af93a5dfc
changing HCP Consul to reflect GA
...
currently still pointing at private beta link, need to fix for GA.
2021-01-22 17:02:28 -08:00
92b3f7d814
docs: Add k8s troubleshooting docs (hostPort vs hostNetwork) ( #9464 )
2021-01-22 16:31:37 -08:00
851c44cff5
Merge pull request #9612 from hashicorp/ui-ingress
...
Update docs with fields for ingress support for consul UI
2021-01-22 15:17:40 -05:00
8b3bbcabbc
Update docs with fields for ingress support for consul UI
2021-01-22 12:19:43 -05:00
283da85f78
Update index.mdx ( #9618 )
2021-01-22 18:07:23 +01:00
d5b9abe761
Remove tool ref from the wrong page
2021-01-21 23:04:50 +03:00
d5c4418a65
Add new CLI tool to Community Tools Page (kvit)
2021-01-21 23:03:36 +03:00
eb5c0ebbb3
Note to steer consumers away from unmaintained python-consul ( #9544 )
...
* Quick note to steer consumers away from unmaintained python-consul
2021-01-21 11:38:29 -08:00
fec93c0152
Fix link color on home page ( #9611 )
...
* Fix learn-callout theming
* Fix link color in cloud-offerings-list
2021-01-21 13:15:42 -05:00
6216eed571
website: remove netlify artifacts and port missing redirects over to new format ( #9601 )
...
* website: port existing new redirects old format
* website: remove netlify specific artifacts
2021-01-21 10:16:17 -05:00
204936b666
Release 1.9.2
2021-01-20 17:28:35 -07:00
ee368e9a00
Update options.mdx ( #9578 )
...
MInor typo.
2021-01-18 15:31:39 +00:00
6bf49d74ef
Merge pull request #9558 from hashicorp/br.stack-menu
...
[Website] StackMenu updates for 1/14
2021-01-14 09:28:24 -08:00
10b8090db9
Remove guides that live in learn.hashicorp.com now ( #9563 )
2021-01-14 08:46:55 -08:00
8be5a4b38a
Fix link markup in docs/connect/ca/vault
2021-01-13 19:20:00 -08:00
b6d7bf1243
Move cfg entry docs to under connect from agent ( #9533 )
...
Since all config entries are currently related to service mesh it's a
much more natural place to look for them under Service Mesh than under
Agent.
2021-01-13 12:48:48 -08:00
05123e8fc2
Website StackMenu updates for 1/14
2021-01-13 10:06:15 -08:00
cb848760c6
Docs Website: prepare for move to vercel hosting ( #9427 )
...
* prepare for move to vercel hosting
* add html extension redirect handling
* temporarily add back netlify files for hosting transition
2021-01-12 20:09:23 -05:00
3c3b67288d
cli: Add consul intention list command (based on PR #6825 ) ( #9468 )
...
This PR is based on the previous work by @snuggie12 in PR #6825 . It adds the command consul intention list to list all available intentions. The list functionality for intentions seems a bit overdue as it's just very handy. The web UI cannot list intentions outside of the default namespace, and using the API is sometimes not the friendliest option. ;)
I cherry picked snuggie12's commits who did most of the heavy lifting (thanks again @snuggie12 for your great work!). The changes in the original commit mostly still worked on the current HEAD. On top of that I added support for namespaces and fixed the docs as they are managed differently today. Also the requested changes related to the "Connect" references in the original PRs have been addressed.
Fixes #5652
Co-authored-by: Matt Hoey <mhoey05@jcu.edu>
2021-01-12 21:14:31 +01:00
c123192946
docs/nia: Fix example config block to execute properly ( #9547 )
...
CTS running with default configuration will communicate over http
unless the Consul client is configured with TLS. Having the example
set the scheme to https is misleading and will result in an error:
"http: server gave HTTP response to HTTPS client"
2021-01-11 10:27:33 -06:00
f2347dd4bc
website: update alert banner to promote webinar
2021-01-11 09:28:22 -05:00
b756ed2e42
Add a CLI tool for "Client Libraries & SDKs" page
...
Hi everyone,
I'm developing an open source CLI tool for easily editing Consul KV values from your favorite text editor. I've added to Client Libraries & SDKs page on website.
Repository: https://github.com/sadedil/kvit
Kind regards,
Mustafa
2021-01-10 23:07:18 +03:00
45ea95ac28
Update k8s gateway docs for CRDs ( #9538 )
2021-01-08 14:30:41 -08:00
dd81e4a1cc
Document how clients not on K8s can join a DC in K8s. ( #9438 )
2021-01-07 16:14:07 -08:00
4f15f83dc6
Reword redirect docs for clarity ( #9504 )
2021-01-07 11:40:59 -08:00
a556c0b025
Document CRDs and kube namespaces ( #9502 )
...
* Document CRDs and kube namespaces
2021-01-07 11:22:06 -08:00
345ffb9e0a
Merge pull request #9516 from hashicorp/lkysow/config-entry-sidebar
...
Use full names for cfg entries in sidebar
2021-01-07 11:21:18 -08:00
709ad9ea81
Merge pull request #9416 from hashicorp/luke-component-crd
...
Document Kube CRDs alongside config entry docs
2021-01-07 11:20:46 -08:00
c32b0db50c
Add note about code duplication
2021-01-07 11:15:11 -08:00
1c4352fd5a
update start script, remove extra tabs code
2021-01-07 14:05:00 -05:00
24554d7672
update to latest deps
2021-01-07 14:00:43 -05:00
688d0c38ce
Use nested tabs for gateway examples
2021-01-06 16:45:35 -08:00
ff51ab236d
Use full names for cfg entries in sidebar
2021-01-06 11:01:01 -08:00
ca265e1890
docs: add note about TMPDIR for snapshots
2021-01-06 12:56:40 -06:00
5c72b8059c
Clean up JS for ConfigEntryReference component
2021-01-06 10:33:52 -08:00
7d49e7d07e
Update NIA discuss link to new tag ( #9500 )
2021-01-05 12:06:09 -06:00
517cfa7918
Document Kube CRDs alongside config entry docs
...
* Adds a new react component `ConfigEntryReference` that allows us to
document config entries for both HCL and Kubernetes CRDs.
* Rewrites config entry docs to use new component
* Add CRD examples alongside HCL examples
* Removes examples from Kube CRD doc because the examples are now in the
main CRD docs
2021-01-05 09:40:43 -08:00
e4f603dfae
Merge branch 'master' into 6074-allow-config-MaxHeaderBytes
2020-12-30 14:14:05 -06:00
817903b925
Fixed failing tests
...
Removed use of `NewTestAgent`, per review comment
Removed CLI flag, per review comment
Updated website documentation
Added changelog entry
2020-12-30 14:09:50 -06:00
cdcfd0e4f9
Update Helm reference docs ( #9463 )
2020-12-23 11:42:36 -08:00
48917f89c4
Update with 0.28 ( #9450 )
2020-12-21 13:24:33 -08:00
609b922b42
Merge pull request #9431 from hashicorp/gen-docs2
...
Ensure type shown for maps in k8s docs
2020-12-18 15:07:14 -05:00
2e14bfeb28
Update helm docs for external client agents. ( #9429 )
2020-12-18 09:18:17 -08:00
1a7902e0a3
docs: Remove beta tag for 1.8 and 1.9 features
...
Remove beta tag for 1.8 and 1.9 features which are now GA.
2020-12-17 16:51:35 -08:00
f96d945f77
Ensure type shown for maps in k8s docs
2020-12-17 16:27:02 -08:00
75f9d8d2b3
Use generated helm docs ( #9324 )
2020-12-17 10:47:54 -08:00
9d898b301c
add markdown page component
2020-12-16 16:55:27 -05:00
ef900cdb5c
update deps, restore search
2020-12-16 16:55:27 -05:00
582dce9d8f
maintenance complete, pending markdown-page component addition
2020-12-16 16:55:23 -05:00
30167c9b4c
nia/docs 0.1.0-techpreview2 ( #9405 )
...
Co-authored-by: Lorna Song <lorna@hashicorp.com>
2020-12-16 14:47:15 -06:00
2d366b1f38
update comment to correctly reflect type of data in the oidc auth method config ( #9364 )
2020-12-15 16:25:31 -06:00
c5b74fcdaa
Merge pull request #9262 from hashicorp/dnephin/docs-deprecate-old-filters
...
docs: deprecate some old filter parameters
2020-12-15 17:11:41 -05:00
b22a2f56ac
Rotate Learn tutorials ( #9404 )
...
* update Learn tutorials on landing page
* add Vault image
2020-12-15 12:25:11 -08:00
2965021f29
update example for tag_name ( #9226 )
...
* update example for tag_name
In the example for azure the "tag_name" field is wrong cause say "tag_key" and not "tag_name"
* change tag_key by tag_name in the description of azure
2020-12-15 15:09:16 -05:00
eda404de81
Fixed mesh gateway config instructions ( #9396 )
...
Added missing words to mesh gateway config instructions, and corrected punctuation a paragraph above. Please review for technical accuracy.
2020-12-15 14:07:53 -05:00
bc6138e144
docs: call out intentions upgrade issue for 1.9.0+ ( #9386 )
2020-12-14 09:57:02 -06:00
6a4dd3554f
fix 'agent/check/pass/my-check-id' curl example in documentation ( #9372 )
2020-12-11 13:23:05 +01:00
7ea383fce6
Filter API Docs ( #9202 )
...
* reorganize for clarity and update for value syntax
* fix quotes around value
* Apply suggestions from code review
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
* Apply suggestions from code review
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
2020-12-09 15:03:44 -08:00
3d06dfc871
[Website] Update alert banner ( #9361 )
...
* Update alert banner
* Update expiration date for banner
2020-12-09 16:13:55 -05:00
27f6899ec8
Create consul version metric with version label ( #9350 )
...
* create consul version metric with version label
* agent/agent.go: add pre-release Version as well as label
Co-Authored-By: Radha13 <kumari.radha3@gmail.com>
* verion and pre-release version labels.
* hyphen/- breaks prometheus
* Add Prometheus gauge defintion for version metric
* Add new metric to telemetry docs
Co-authored-by: Radha Kumari <kumari.radha3@gmail.com>
Co-authored-by: Aestek <thib.gilles@gmail.com>
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
2020-12-09 09:16:53 -05:00
babd22c905
Update the NIA integration program diagram ( #9349 )
2020-12-08 18:03:39 -06:00
e92ae681c6
docs: Fix broken URLs in Helm docs
...
- Fix anchors for client.extraEnvironmentVars and
server.extraEnvironmentVars.
- Change extraEnvironmentVars data type to `map`.
- Fix external link to kubernetes.io under
connectInject.namespaceSelector.
2020-12-08 11:13:29 -08:00
1a3dd325ee
docs: reword lack of additional required files
2020-12-05 16:47:41 -08:00
92465e67a7
Merge pull request #9273 from hashicorp/merge/release-1.9.0
...
merge: release/1.9.0
2020-12-02 17:34:10 -05:00
0f2c396334
docs: fix mispelling in connect upstream docs ( #9297 )
2020-11-30 08:26:08 -08:00
0178a4d0f1
Fix typo in explanation of connect command ( #9295 )
...
Change `Connect Connect` to `Consul Connect, which is consistent with the command output as shown on this page.
2020-11-30 09:54:59 -06:00
44674bcdf8
fix serf_wan documentation ( #9289 )
...
WAN config is different than LAN config, source of truth is
f72d2042a8/config.go (L315-L326)
2020-11-27 20:49:43 +01:00
6e0f51cd5f
Bump supported chart to 0.27.0 for Consul 1.9 ( #9279 )
...
* Bump supported chart to 0.27.0 for Consul 1.9
2020-11-25 16:33:21 -08:00
ab927d5480
Merge pull request #9270 from hashicorp/release/1.9.0
...
merge: release/1.9.0 back into 1.9.x
2020-11-24 17:36:47 -05:00
347d759343
Consul 1.9 GA Banner ( #9272 )
2020-11-24 13:40:14 -08:00
fc4e115380
docs: adding Consul 1.9.x to compat matrix and link to Envoy compat matrix ( #9263 )
...
* Adding Consul 1.9.x to compat matrix and link to Envoy compat matrix
Adding 1.9.x and link to Envoy compat matrix
2020-11-24 10:49:53 -08:00
341552198e
docs: deprecate some old filter parameters
...
The filtering can be done with the general purpose `filter` query parameter.
2020-11-23 18:23:58 -05:00
0ba7f4ce39
Merge pull request #9261 from hashicorp/telemetry/fix-missing-and-stale-docs-2
...
Telemetry/fix missing and stale docs
2020-11-23 13:34:19 -08:00
57701695c3
add missing descriptions for metrics
2020-11-23 22:06:30 +01:00
6751d51aa3
docs: mark streaming as experimental
2020-11-23 15:59:47 -05:00
fcec25de40
add entries for missing fsm operations and mark duplicated metrics prefixes as deprecated
2020-11-23 12:42:51 -08:00
cfbefc45f0
Update NIA architecture image ( #9180 )
2020-11-23 01:47:58 -06:00
c6b29a8bba
Merge pull request #9245 from hashicorp/telemetry/fix-missing-and-stale-docs
...
Telemetry/fix missing and stale docs
2020-11-20 12:54:29 -08:00
b4ab1e11b9
Update latest version
2020-11-19 16:45:54 -07:00
5c09dc322e
add telemetry and definition help entries for missing catalog and acl metrics
2020-11-19 13:29:44 -08:00
7c7a3e5165
command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint ( #9229 )
...
Fixes #9215
2020-11-19 15:27:31 -06:00
9e54e897d7
remove stale entries and rename/define acl.resolveToken
2020-11-19 13:06:28 -08:00
fd5928fa4e
Require operator:write to get Connect CA config ( #9240 )
...
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.
--
This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
2020-11-19 10:14:48 -07:00
0cc8d8e0a1
Merge pull request #9091 from scellef/correct-upgrade-guide
...
Correcting text on when default was changed in Consul
2020-11-18 16:54:48 -08:00
d24be614e5
Add docs for envoyExtraArgs ( #9206 )
2020-11-18 15:40:39 -08:00
66fd23d67f
Refactor to call non-voting servers read replicas ( #9191 )
...
Co-authored-by: Kit Patella <kit@jepsen.io>
2020-11-17 10:53:57 -05:00
946cc0b82a
[docs] Change links to the DNS information to the right place ( #8675 )
...
The redirects were working in many situations but some (INTERNALS.md) was not. This just flips everything over to using the real link.
2020-11-17 10:03:00 -05:00
11db2b37c3
Docs for upgrading to CRDs ( #9176 )
...
* Add Upgrading to CRDs docs
2020-11-13 15:19:21 -08:00
53e0683ae6
Merge pull request #9106 from hashicorp/security-model-docs-revamp
...
Revamp Security Model Documentation
2020-11-13 17:30:24 -05:00
96df6a7bf5
Merge pull request #9155 from hashicorp/release/1.9.0-beta3
...
merge: 1.9.0-beta3
2020-11-13 16:45:50 -05:00
491a1ab877
docs: add link to the OpenShift platform guide to k8s docs ( #9177 )
2020-11-12 15:06:25 -08:00
a3653a7ae2
Docs: for consul-k8s health checks ( #8819 )
...
* docs for consul-k8s health checks
Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2020-11-12 16:55:44 -06:00
5d31e2d766
Update compatibility matrix
...
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
2020-11-12 14:43:33 -08:00
61eac21f1a
agent: return the default ACL policy to callers as a header ( #9101 )
...
Header is: X-Consul-Default-ACL-Policy=<allow|deny>
This is of particular utility when fetching matching intentions, as the
fallthrough for a request that doesn't match any intentions is to
enforce using the default acl policy.
2020-11-12 10:38:32 -06:00
3f37a3132e
Update ui-visualization.mdx
2020-11-12 15:52:24 +00:00
7ef9b04f90
Add a CLI command for retrieving the autopilot configuration. ( #9142 )
2020-11-11 13:19:02 -05:00
81fb937e4f
Merge pull request #9098 from hashicorp/watsonian/kv-size-breakdown
...
Add detailed key size breakdown to snapshot inspect
2020-11-11 11:34:45 -06:00
2e654a1759
docs: add warning in 0.9.0 upgrade notes
2020-11-11 09:23:43 -05:00
6957056911
Missed a spot with old params in docs
2020-11-10 11:22:45 -06:00
1ef259b093
Rename params to better reflect their purpose
2020-11-10 10:44:09 -06:00
5ad0db73c8
Make docs for params clearer
2020-11-10 10:35:24 -06:00
361fe3ad20
Add some autopilot docs and update the changelog ( #9139 )
2020-11-09 14:14:19 -05:00
c048e86bb2
Switch to using the external autopilot module
2020-11-09 09:22:11 -05:00
75019baadd
chore: upgrade to gopsutil/v3 ( #9118 )
...
* deps: update golang.org/x/sys
* deps: update imports to gopsutil/v3
* chore: make update-vendor
2020-11-06 20:48:38 -05:00
9875846509
website: update callout to 1.9.0-beta2 ( #9131 )
2020-11-06 20:39:25 -05:00
81efada5c3
Adjust the ACLs requirement section wording and add link to ACL docs
...
It's better to avoid the ambiguous Vault statement that was not clarified and drop the loaded "roles" term in favor of "capabilities" since the ACL system is described as capability-based in previous ACL documentation.
2020-11-06 16:25:21 -05:00
b5dbeff784
UI Metrics documentation ( #9048 )
...
* UI Metrics documentation
* Update website/pages/docs/connect/observability/ui-visualization.mdx
* Fix some review comments
* Fix review comments
* Apply suggestions from code review
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
2020-11-06 20:32:28 +00:00
facd48b486
Use the EnterpriseAlert inline widget
2020-11-06 10:47:22 -05:00
fd29187499
Add mention of auto_encrypt to mTLS requirements
2020-11-06 10:15:26 -05:00
c7c151f789
Fix sublist format for client agent threats
2020-11-05 16:41:15 -05:00
05b34a3cf0
Add link to the keygen command
2020-11-05 16:34:32 -05:00
a06768f582
Use short link to keyring command
2020-11-05 16:33:04 -05:00
d0e4e7a6ff
Add link to default_policy with code format to ACLs requirement section
2020-11-05 16:30:00 -05:00
cc58a73716
Cleanup verify_server_hostname mTLS requirement
2020-11-05 16:27:23 -05:00
e0a9e329e5
Add extra clarification around verify_incoming_https for localhost
...
In many cases access to localhost is restricted to trusted/privellged actors only
2020-11-05 16:20:41 -05:00
84a345324c
Fix inline links + format in mTLS requirements section
2020-11-05 16:09:07 -05:00
7a7f0425a1
Capitalize enterprise and add link to enerprise docs
2020-11-05 16:03:14 -05:00
e51dbbf529
Soften language by replacing utilize with use
2020-11-05 15:59:53 -05:00
52f3714c7a
Fix NIA doc links ( #9110 )
...
fix config link and anchor
2020-11-05 13:35:57 -06:00
80c9f54bbc
Bump HSM version ( #9102 )
2020-11-05 11:48:12 -06:00
52ea53f95e
Update docs with new flags
2020-11-05 10:31:36 -06:00
8c2f2ca806
Actually fix spelling of recommendations
...
I obviously have no idea how to spell this word
2020-11-05 11:13:14 -05:00
2d0be0c7a0
Fix spelling of recomendations
...
Thank you @rboyer!
2020-11-04 17:44:51 -05:00
961f475de2
Revamp security model documentation
2020-11-04 17:05:44 -05:00
acc6cfaaf6
Correcting text on when default was changed in Consul
2020-11-02 15:10:34 -08:00
ea88956c9c
use hashicorp docker mirror to prevent rate limit ( #9070 )
2020-10-30 17:59:13 -04:00
79ce24e9fc
cli: Add JSON and Pretty Print formatting for `consul snapshot inspect` ( #9006 )
2020-10-29 11:31:14 -05:00
a670f7a098
docs: Add links in CTS docs for the community to get involved ( #9060 )
2020-10-29 10:07:20 -05:00
7b9ee25956
Merge pull request #9026 from hashicorp/dnephin/streaming-without-cache-query-param
...
streaming: rename config and remove requirement for cache=1
2020-10-28 12:33:25 -04:00
62c9124011
docs: Add the new metrics to telemetry.mdx
2020-10-27 16:49:50 -04:00
5637683f5d
Merge pull request #9021 from hashicorp/pruett.alertbanner-exp
...
Expose `expirationDate` prop in <AlertBanner/>
2020-10-26 16:08:23 -04:00
bc6fcfaf75
website: update version.js ( #9034 )
2020-10-26 10:58:25 -04:00
47009930a2
NIA: add Terraform version compatibility ( #9023 )
2020-10-26 09:46:34 -05:00
853667e7d8
health: change the name of UseStreamingBackend config
...
Remove it from the cache section, and update the docs.
2020-10-23 17:47:01 -04:00
6a946ec6e4
Expose `expirationDate` prop in <AlertBanner/>
2020-10-23 11:19:41 -04:00
5b10046418
Update managed-deprecated.mdx ( #9016 )
...
fix typo / spell checker replacing w/ wrong word
2020-10-23 10:54:16 -04:00
a2c50d3303
connect: add support for envoy 1.16.0, drop support for 1.12.x, and bump point releases as well ( #8944 )
...
Supported versions will be: "1.16.0", "1.15.2", "1.14.5", "1.13.6"
2020-10-22 13:46:19 -05:00
8ffebeb793
NIA: document daemon exiting on task errors ( #8985 )
2020-10-22 13:22:55 -05:00
Paul Ewing