2663 Commits (7e61148f866d2933d4090dc5213f522acc47bccd)

Author	SHA1	Message	Date
trujillo-adam	2d9d9dbe7a	docs: fixed instance of incorrect grammar usage	3 years ago
David Yu	7962dd82f1	docs - Adding Mesh as CRD in Consul K8s (#10459) ... * docs - Adding Mesh as CRD in Consul K8s * Removing extra left brace in ServiceDefaults	3 years ago
Luke Kysow	1dcdd2516c	Update config entry docs for CRDs (#10407) ... * Update mesh, proxy-defaults and service-defaults docs to properly document Kubernetes YAML. Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
Ashwin Venkatesh	17dc691c61	update docs (#10405) ... Consul 1.10 GA for Consul K8s	3 years ago
Nitya Dhanushkodi	b72ad40286	docs: upgrading to tproxy (/docs/upgrades/upgrade-specific) (#10416) ... * docs: update tproxy docs Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
Iryna Shustava	1fea51fbb5	docs: update docs/k8s/connect to for tproxy GA. (#10408) ... * Assume tproxy is enabled by default and connect to upstreams with kube DNS. * Update docs for missing annotations.	3 years ago
Nitya Dhanushkodi	7494b25c1e	docs: update tproxy docs (/docs/connect/transparent-proxy) (#10415) ... * docs: update tproxy docs * add examples * links	3 years ago
David Yu	32179b9867	docs: Update Consul K8s Compat Matrix for Consul 1.10 (#10456)	3 years ago
Blake Covarrubias	fbd7acc754	Remove beta release callout on downloads page	3 years ago
Blake Covarrubias	d9add7c2c3	docs: Remove beta tag for 1.10 features ... Remove beta tag for 1.10 features which are now GA.	3 years ago
trujillo-adam	82d362f79d	docs: fixed some grammar errors and suggested some language improvments in the 'upgrading to 1.10.0' page	3 years ago
trujillo-adam	c1bbd7f0aa	Merge pull request #10434 from hashicorp/faq-license-update ... docs: updated FAQ to accommodate new requirements prior to upgrading	3 years ago
David Yu	b45ad10299	docs: Remove Grafana from Observability section (#10454) ... * Remove Grafana from Observability section Reference Grafana Config in the learn guide Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
Karl Cardenas	e34ebdbb1e	docs: removed reduntant information from the client agent question	3 years ago
Karl Cardenas	56da24799f	docs: removed npm file changes and re-submitted content	3 years ago
mrspanishviking	4715e8ca0e	Apply suggestions from code review ... Adding suggestion Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
Matt Keeler	76857dd682	Update 1.10 enterprise upgrade docs. (#10446) ... Co-authored-by: Paul Banks <banks@banksco.de> Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>	3 years ago
trujillo-adam	5137479816	docs: linked license faq to new section about upgrading to 1.10.x; also removed upgrade req details and table in faq	3 years ago
lornasong	edc41c9e47	nia/docs 0.2.0 ... * docs/nia: Add section on upgrading Terraform in CTS * docs/nia: Add service filter configuration, deprecate tag * docs/nia: Add version to deprecated note, use path to reference * docs/nia: catalog-services condition Co-authored-by: Melissa Kam <mkam@hashicorp.com> Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com>	3 years ago
trujillo-adam	30ae32b8bf	Update website/content/docs/enterprise/license/faq.mdx ... docs: Replaced absolute path to Consul docs with relative path in the license FAQ. Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
R.B. Boyer	24a9402390	docs: mention that service defaults upstream config sections should not contain wildcards (#10451)	3 years ago
trujillo-adam	2c9b8e067f	docs: applied feedback about licensing FAQ and upgrade paths	3 years ago
trujillo-adam	e0740d2019	docs: updated licensing FAQ to include upgrade paths based on Consul server and client version	3 years ago
Kyle Schochenmaier	de558108af	Update health checks docs for tproxy (#10419) ... * Update health checks docs for tproxy Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>	3 years ago
R.B. Boyer	339e050163	website: this 1.10.0 upgrade table omitted two versions of envoy (#10443)	3 years ago
Christopher Lai	4b53e3767d	Link to Reverse Proxy from Load Balancer	3 years ago
trujillo-adam	9d6d4a6444	docs: updated FAQ to accommodate new requirements prior to upgrading	3 years ago
Daniel Nephin	d81f527be8	Merge pull request #9924 from hashicorp/dnephin/cert-expiration-metric ... connect: emit a metric for the seconds until root CA expiry	3 years ago
Luke Kysow	a7e7c15adf	Fix links to ECS module (#10430)	3 years ago
mrspanishviking	552ed646d2	Merge pull request #10373 from hashicorp/license-faq-docs ... docs: adding a faq document in preparation for Consul Enterprise 1.10.0	3 years ago
mrspanishviking	0fcf928999	Update website/content/docs/enterprise/license/overview.mdx ... Merged Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
mrspanishviking	5435f2309a	Update website/content/docs/enterprise/license/faq.mdx ... Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>	3 years ago
Karl Cardenas	1daf923563	docs: added question pertaining to Consul Kubernetes and Helm chart	3 years ago
Ashwin Venkatesh	325b18ad07	Update k8s license docs to account for license autoload	3 years ago
Karl Cardenas	737f48f723	docs: adding new content for review	3 years ago
Blake Covarrubias	64d122b0a2	docs: Add example of escaping tracing JSON using jq	4 years ago
Blake Covarrubias	26b8e8904b	docs: Add note about configurable KV size in FAQ	4 years ago
Daniel Nephin	aec7e798b0	Update metric name ... and handle the case where there is no active root CA.	4 years ago
Daniel Nephin	1c980e4700	connect: emit a metric for the number of seconds until root CA expiration	4 years ago
Freddy	ffb13f35f1	Rename CatalogDestinationsOnly (#10397) ... CatalogDestinationsOnly is a passthrough that would enable dialing addresses outside of Consul's catalog. However, when this flag is set to true only _connect_ endpoints for services can be dialed. This flag is being renamed to signal that non-Connect endpoints can't be dialed by transparent proxies when the value is set to true.	4 years ago
Luke Kysow	ac384e2a1f	Update k8s term gateway docs to make address clear (#10389) ... Previously if you were to follow these docs and register two external services, you would set the Address field on the node. The second registered service would change the address of the node for the first service. Now the docs explain the address key and how to register more than one external service.	4 years ago
Karl Cardenas	be72c5f851	docs: updated content in the overview page and faq	4 years ago
mrspanishviking	7688e9e257	Apply suggestions from code review ... Applying suggestions Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>	4 years ago
Karl Cardenas	c3e23c1ec9	docs: added more questions and marking ready for review	4 years ago
Nick Wales	119960211d	Aligns audit log code example (#10371)	4 years ago
R.B. Boyer	dbca996c3c	docs: update envoy docs for changes related to xDS v2->v3 and SoTW->Incremental (#10166) ... Fixes #10098	4 years ago
Karl Cardenas	97bcee3be6	docs: adding an faq in preperation for Consul Enterprise 1.10.0	4 years ago
Freddy	429f9d8bb8	Add flag for transparent proxies to dial individual instances (#10329)	4 years ago
Daniel Nephin	8b9ec040c3	docs: move streaming docs to blocking query page	4 years ago
Daniel Nephin	c19d5d831b	docs: try to improve health api doc terminology	4 years ago
Daniel Nephin	61423fbd28	Document streaming on service health endpoint	4 years ago
Daniel Nephin	e93e7d0152	docs: Add streaming to api features	4 years ago
Dhia Ayachi	005ad9e46d	generate a single debug file for a long duration capture (#10279) ... * debug: remove the CLI check for debug_enabled The API allows collecting profiles even debug_enabled=false as long as ACLs are enabled. Remove this check from the CLI so that users do not need to set debug_enabled=true for no reason. Also: - fix the API client to return errors on non-200 status codes for debug endpoints - improve the failure messages when pprof data can not be collected Co-Authored-By: Dhia Ayachi <dhia@hashicorp.com> * remove parallel test runs parallel runs create a race condition that fail the debug tests * snapshot the timestamp at the beginning of the capture - timestamp used to create the capture sub folder is snapshot only at the beginning of the capture and reused for subsequent captures - capture append to the file if it already exist * Revert "snapshot the timestamp at the beginning of the capture" This reverts commit c2d03346 * Refactor captureDynamic to extract capture logic for each item in a different func * snapshot the timestamp at the beginning of the capture - timestamp used to create the capture sub folder is snapshot only at the beginning of the capture and reused for subsequent captures - capture append to the file if it already exist * Revert "snapshot the timestamp at the beginning of the capture" This reverts commit c2d03346 * Refactor captureDynamic to extract capture logic for each item in a different func * extract wait group outside the go routine to avoid a race condition * capture pprof in a separate go routine * perform a single capture for pprof data for the whole duration * add missing vendor dependency * add a change log and fix documentation to reflect the change * create function for timestamp dir creation and simplify error handling * use error groups and ticker to simplify interval capture loop * Logs, profile and traces are captured for the full duration. Metrics, Heap and Go routines are captured every interval * refactor Logs capture routine and add log capture specific test * improve error reporting when log test fail * change test duration to 1s * make time parsing in log line more robust * refactor log time format in a const * test on log line empty the earliest possible and return Co-authored-by: Freddy <freddygv@users.noreply.github.com> * rename function to captureShortLived * more specific changelog Co-authored-by: Paul Banks <banks@banksco.de> * update documentation to reflect current implementation * add test for behavior when invalid param is passed to the command * fix argument line in test * a more detailed description of the new behaviour Co-authored-by: Paul Banks <banks@banksco.de> * print success right after the capture is done * remove an unnecessary error check Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * upgraded github.com/google/pprof v0.0.0-20181206194817-3ea8567a2e57 => v0.0.0-20210601050228-01bbb1931b22 Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> Co-authored-by: Freddy <freddygv@users.noreply.github.com> Co-authored-by: Paul Banks <banks@banksco.de>	4 years ago
allisaurus	6dbfec50ce	docs: Improve ECS routing example nesting (#10316)	4 years ago
Mark Anderson	1bf3dc5a5f	Docs for Unix Domain Sockets (#10252) ... * Docs for Unix Domain Sockets There are a number of cases where a user might wish to either 1) expose a service through a Unix Domain Socket in the filesystem ('downstream') or 2) connect to an upstream service by a local unix domain socket (upstream). As of Consul (1.10-beta2) we've added new syntax and support to configure the Envoy proxy to support this To connect to a service via local Unix Domain Socket instead of a port, add local_bind_socket_path and optionally local_bind_socket_mode to the upstream config for a service: upstreams = [ { destination_name = "service-1" local_bind_socket_path = "/tmp/socket_service_1" local_bind_socket_mode = "0700" ... } ... ] This will cause Envoy to create a socket with the path and mode provided, and connect that to service-1 The mode field is optional, and if omitted will use the default mode for Envoy. This is not applicable for abstract sockets. See https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/core/v3/address.proto#envoy-v3-api-msg-config-core-v3-pipe for details NOTE: These options conflict the local_bind_socket_port and local_bind_socket_address options. We can bind to an port or we can bind to a socket, but not both. To expose a service listening on a Unix Domain socket to the service mesh use either the 'socket_path' field in the service definition or the 'local_service_socket_path' field in the proxy definition. These fields are analogous to the 'port' and 'service_port' fields in their respective locations. services { name = "service-2" socket_path = "/tmp/socket_service_2" ... } OR proxy { local_service_socket_path = "/tmp/socket_service_2" ... } There is no mode field since the service is expected to create the socket it is listening on, not the Envoy proxy. Again, the socket_path and local_service_socket_path fields conflict with address/port and local_service_address/local_service_port configuration entries. Set up a simple service mesh with dummy services: socat -d UNIX-LISTEN:/tmp/downstream.sock,fork UNIX-CONNECT:/tmp/upstream.sock socat -v tcp-l:4444,fork exec:/bin/cat services { name = "sock_forwarder" id = "sock_forwarder.1" socket_path = "/tmp/downstream.sock" connect { sidecar_service { proxy { upstreams = [ { destination_name = "echo-service" local_bind_socket_path = "/tmp/upstream.sock" config { passive_health_check { interval = "10s" max_failures = 42 } } } ] } } } } services { name = "echo-service" port = 4444 connect = { sidecar_service {} } Kind = "ingress-gateway" Name = "ingress-service" Listeners = [ { Port = 8080 Protocol = "tcp" Services = [ { Name = "sock_forwarder" } ] } ] consul agent -dev -enable-script-checks -config-dir=./consul.d consul connect envoy -sidecar-for sock_forwarder.1 consul connect envoy -sidecar-for echo-service -admin-bind localhost:19001 consul config write ingress-gateway.hcl consul connect envoy -gateway=ingress -register -service ingress-service -address '{{ GetInterfaceIP "eth0" }}:8888' -admin-bind localhost:19002 netcat 127.0.0.1 4444 netcat 127.0.0.1 8080 Signed-off-by: Mark Anderson <manderson@hashicorp.com> * fixup Unix capitalization Signed-off-by: Mark Anderson <manderson@hashicorp.com> * Update website/content/docs/connect/registration/service-registration.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Provide examples in hcl and json Signed-off-by: Mark Anderson <manderson@hashicorp.com> * Apply suggestions from code review Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * One more fixup for docs Signed-off-by: Mark Anderson <manderson@hashicorp.com> Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	4 years ago
Matt Keeler	af3ffdf4c8	Add license inspect command documentation and changelog (#10351) ... Also reformatted another changelog entry.	4 years ago
Matt Keeler	c5dc729dda	Follow on to PR 10336 (#10343) ... There was some PR feedback that came in just after I merged that other PR. This addresses that feedback.	4 years ago
Paul Ewing	42a51b1a2c	usagemetrics: add cluster members to metrics API (#10340) ... This PR adds cluster members to the metrics API. The number of members per segment are reported as well as the total number of members. Tested by running a multi-node cluster locally and ensuring the numbers were correct. Also added unit test coverage to add the new expected gauges to existing test cases.	4 years ago
Matt Keeler	ca423c80b9	Add enterprise v1.10 specific upgrade notes.	4 years ago
Matt Keeler	4222242f1c	Add licensing information to snapshot agent docs.	4 years ago
Matt Keeler	aeaeec15e8	Add deprecation/removal notices regarding the APIs/CLI commands for licensing that are going away. ... Co-authored-by: Freddy <freddygv@users.noreply.github.com>	4 years ago
Matt Keeler	f3595f5394	Update licensing docs for 1.10 licensing	4 years ago
Matt Keeler	6b7ca99a69	Add licensing telemetry docs.	4 years ago
Blake Covarrubias	2196262eab	docs: Clarify set-agent-token token persistence behavior ... Clarify that tokens configured via `set-agent-token` will not be persisted if `acl.enable_token_persistence` is `false`.	4 years ago
Blake Covarrubias	665e052e96	docs: Fix agent token name under ACL Agent Token ... Reference the correct name of the agent token in the ACL Agent Token section for the ACL System docs.	4 years ago
Stanko	b130f355ee	ui: Fix broken link format in ECS install page	4 years ago
allisaurus	0b52545c01	Add note about new ECS ARN format to ECS docs (#10304) ... * docs: Add note about ECS task ARN format to ECS docs	4 years ago
Luke Kysow	78af667ed0	Consul ecs docs (#10288) ... * ECS docs	4 years ago
Jono Sosulska	835bf2640f	Update Kubernetes docs to point to install pages. (#10293) ... Adds more clear indicators that the collections on the learn.hashicorp.com sites have specific instructions for single node deployments. Co-Authored by: soonoo <qpseh2m7@gmail.com>	4 years ago
Karl Cardenas	2e952324b1	docs: rename enterprise to Consul enterprise	4 years ago
Jono Sosulska	bb07d1a30f	Updating Consul Glossary with more industry standard terms (#10074) ... * Update glossary.mdx 1. Update header to the first section to "Consul Vocabulary" since these are the terms used in the context of Consul conversations. 2. Kept the header "Consul Glossary" since these are the terms useful for practitioners in the consul space. 3. Removed interlinking to terms on the same page. Co-authored-by: Hans Hasselberg <me@hans.io> Co-authored-by: Swarna Podila <swarnap@users.noreply.github.com>	4 years ago
allisaurus	e4aad106c9	docs: fix Amazon EKS service name (#10280)	4 years ago
Sabeen Syed	ce958e7218	Docs: Add link for new Cisco TF module (#10268)	4 years ago
Dhia Ayachi	e527c191ae	docs: Add example ACL policy for snapshot agent ... Co-Authored-By: Blake Covarrubias <blake@covarrubi.as>	4 years ago
Paul Banks	8233328e48	Fix doc note since we switched authorization mechanism in 1.9 (#10266)	4 years ago
Dhia Ayachi	7dc78b39c9	docs: update register check docs (closes #6635) (#10261) ... Update register check documentation clarify that Id returns as CheckId in the response Co-Authored-By: Shaker Islam <shaqq@users.noreply.github.com> Co-authored-by: Shaker Islam <shaqq@users.noreply.github.com>	4 years ago
Karl Cardenas	498a698ffa	Merge branch 'master' of github.com:hashicorp/consul into consul-documentation-update	4 years ago
R.B. Boyer	ede14b7c54	xds: emit a labeled gauge of connected xDS streams by version (#10243) ... Fixes #10099	4 years ago
Luke Kysow	83a6579299	Update k8s fed docs to clarify role of acl token (#10233)	4 years ago
R.B. Boyer	3b50a55533	connect: update supported envoy versions to 1.18.3, 1.17.3, 1.16.4, and 1.15.5 (#10231)	4 years ago
mrspanishviking	c59c0b05dd	docs: updated the standard upgrade process ... Added a cross-reference link in the upgrade guides. This resource https://www.consul.io/docs/upgrading/instructions/general-process including specific-version guides for breaking changes and a more detailed upgrade process, but it's not mentioned in the https://www.consul.io/docs/upgrading#standard-upgrade overview page.	4 years ago
Daniel Nephin	f6580400dc	docs: document the current state of built-in and native	4 years ago
Joel Watson	a1db512e90	Flesh out Raft Protocol Support note	4 years ago
Kim Ngo	5c17bf3d78	docs/nia: simplify api and cli url paths (#10199)	4 years ago
Daniel Nephin	7b5d432121	Merge pull request #10064 from hashicorp/docs-fix-namespace-api-descriptions ... docs: fix api-docs namespace descriptions	4 years ago
Andy Assareh	99617a70af	K8s docs: Manual join: add note that kubeconfig not required (#9998) ... Per Consul PM, kubeconfig is not required for manual join. I believe this should be clarified in the docs as the current wording refers to the auto join steps above which state kubeconfig is required.	4 years ago
Seth Hoenig	60af6a13ff	docs: fix api-docs namespace descriptions ... Looks like some copy/paste from ACL docs.	4 years ago
Daniel Nephin	2628974692	Update website/content/commands/config/delete.mdx ... Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>	4 years ago
Daniel Nephin	583850e9d4	docs: remove name field from Mesh config entry ... Also document the name of these config entries in the API docs, so that users know how to query for them. And fix the name of mesh on the index page.	4 years ago
Paul Banks	3ad754ca7b	Make Raft trailing logs and snapshot timing reloadable (#10129) ... * WIP reloadable raft config * Pre-define new raft gauges * Update go-metrics to change gauge reset behaviour * Update raft to pull in new metric and reloadable config * Add snapshot persistance timing and installSnapshot to our 'protected' list as they can be infrequent but are important * Update telemetry docs * Update config and telemetry docs * Add note to oldestLogAge on when it is visible * Add changelog entry * Update website/content/docs/agent/options.mdx Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com> Co-authored-by: Matt Keeler <mkeeler@users.noreply.github.com>	4 years ago
Freddy	2ca3f481f8	Only consider virtual IPs for transparent proxies (#10162) ... Initially we were loading every potential upstream address into Envoy and then routing traffic to the logical upstream service. The downside of this behavior is that traffic meant to go to a specific instance would be load balanced across ALL instances. Traffic to specific instance IPs should be forwarded to the original destination and if it's a destination in the mesh then we should ensure the appropriate certificates are used. This PR makes transparent proxying a Kubernetes-only feature for now since support for other environments requires generating virtual IPs, and Consul does not do that at the moment.	4 years ago
Frederic Hemberger	9a5a0ba209	docs(discovery/service): Clarify multiple service definitions ... Be more explicit that the definition of multiple services only works in config files, not using the HTTP API. Ref: https://discuss.hashicorp.com/t/register-multiple-services-via-put-request/	4 years ago
Daniel Nephin	00d3283e93	Merge pull request #10149 from hashicorp/dnephin/config-use-streaming-backend-defualt-true ... config: default UseStreamingBackend to true	4 years ago
R.B. Boyer	abc1dc0fe9	connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, and 1.15.4 (#10101) ... The only thing that needed fixing up pertained to this section of the 1.18.x release notes: > grpc_stats: the default value for stats_for_all_methods is switched from true to false, in order to avoid possible memory exhaustion due to an untrusted downstream sending a large number of unique method names. The previous default value was deprecated in version 1.14.0. This only changes the behavior when the value is not set. The previous behavior can be used by setting the value to true. This behavior change by be overridden by setting runtime feature envoy.deprecated_features.grpc_stats_filter_enable_stats_for_all_methods_by_default. For now to maintain status-quo I'm explicitly setting `stats_for_all_methods=true` in all versions to avoid relying upon the default. Additionally the naming of the emitted metrics for these gRPC requests changed slightly so the integration test assertions for `case-grpc` needed adjusting.	4 years ago
Luigi Tagliamonte	5220699696	Improve doc: add note about address validation (#10123) ... * Update website/content/docs/discovery/services.mdx with address field behavior. Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com> Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>	4 years ago
Iryna Shustava	8dffb89131	Implement traffic redirection exclusion based on proxy config and user-provided values (#10134) ... * Use proxy outbound port from TransparentProxyConfig if provided * If -proxy-id is provided to the redirect-traffic command, exclude any listener ports from inbound traffic redirection. This includes envoy_prometheus_bind_addr, envoy_stats_bind_addr, and the ListenerPort from the Expose configuration. * Allow users to provide additional inbound and outbound ports, outbound CIDRs and additional user IDs to be excluded from traffic redirection. This affects both the traffic-redirect command and the iptables SDK package.	4 years ago
Daniel Nephin	bb472111fd	config: default UseStreamingBackend to true	4 years ago
Freddy	078c40425f	Rename "cluster" config entry to "mesh" (#10127) ... This config entry is being renamed primarily because in k8s the name cluster could be confusing given that the config entry applies across federated datacenters. Additionally, this config entry will only apply to Consul as a service mesh, so the more generic "cluster" name is not needed.	4 years ago
Daniel Nephin	0558586dbd	health: use blocking queries for near query parameter	4 years ago
Matt Keeler	f7e825afe3	Update changelog and add telemetry docs (#10107)	4 years ago
Paul Banks	d717d2cdc4	CLI: Allow snapshot inspect to work on internal raft snapshots directly. (#10089) ... * CLI: Add support for reading internal raft snapshots to snapshot inspect * Add snapshot inspect test for raw state files * Add changelog entry * Update .changelog/10089.txt	4 years ago
David Yu	b7cc83fde0	docs - Adding json formatting to TProxy HCL examples (#10088) ... formatting	4 years ago
Derek Strickland	ccb2511ff3	refactor get started links to new tutorial (#10066)	4 years ago
Freddy	8b8c3c1992	Add docs for transparent proxy mode and config (#10038) ... Add docs for transparent proxy mode and config Co-authored-by: Nitya Dhanushkodi <nitya@hashicorp.com> Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>	4 years ago
Iryna Shustava	ba0bc10f09	docs: update helm ref docs and connect docs (#10032) ... All k8s connect-related docs now need to mention that we require a Kubernetes service for all Connect services	4 years ago
Joel Watson	fd9e240569	Update upgrade guide from 1.8.4 to 1.8.10	4 years ago
Kent 'picat' Gruber	493f820e9d	Add better security warning to docs about the content-type change	4 years ago
Kent 'picat' Gruber	d07f57ce67	Update KV docs to note new raw response content-type header	4 years ago
ketzacoatl	c8a6fbd994	add consul-haskell to libraries-and-sdks documentation (#9982) ... See also https://github.com/alphaHeavy/consul-haskell/issues/40.	4 years ago
Tara Tufano	9deb52e868	add http2 ping health checks (#8431) ... * add http2 ping checks * fix test issue * add h2ping check to config resources * add new test and docs for h2ping * fix grammatical inconsistency in H2PING documentation * resolve rebase conflicts, add test for h2ping tls verification failure * api documentation for h2ping * update test config data with H2PING * add H2PING to protocol buffers and update changelog * fix typo in changelog entry	4 years ago
Iryna Shustava	5755c97bc7	cli: Add new `consul connect redirect-traffic` command for applying traffic redirection rules when Transparent Proxy is enabled. (#9910) ... * Add new consul connect redirect-traffic command for applying traffic redirection rules when Transparent Proxy is enabled. * Add new iptables package for applying traffic redirection rules with iptables.	4 years ago
Zachary Shilton	8671762474	website: implement mktg 032 (#9953) ... * website: migrate to new nav-data format * website: clean up unused intro content * website: remove deprecated sidebar_title from frontmatter * website: add react-content to fix global style import issue	4 years ago
eddie-rowe	5fe1cc48ff	cross-linking for audit logging	4 years ago
Mike Green	68b13f4c70	Docs: add enterprise upgrade link (#9934) ... * add enterprise upgrade note * Update index.mdx	4 years ago
lornasong	8431137c1a	nia/docs 0.1.0 ga (#9946) ... * docs/nia: consul compatibilty * docs/nia: remove beta callouts (#9919) Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com>	4 years ago
Sabeen Syed	1345b92c73	Add link to TF module tutorial and example TF modules (#9937) ... Add link to TF tutorial Add links to print TF module and template for TF modules	4 years ago
Sabeen Syed	c64f3600f0	Add Avi Network, AWS ALB and NS1 TF Registies and GitHub links (#9938) ... Add Avi Network GH link Add AWS ALB TF Registry and GH link Add NS1 TF Registry and GH link	4 years ago
Daniel Nephin	5d5abedb1f	Merge pull request #9917 from Ranjandas/docs/exec-cmd-acl ... Document agent token policy requirement for rexec	4 years ago
danielehc	eba632da13	Cross linking Learn tutorials (#9893) ... * Cross linking Learn tutorials * Update website/content/docs/nia/index.mdx Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com> * Cross linking Learn tutorials * Cross linking Learn tutorials * Add links to doc Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com>	4 years ago
Ranjandas	7857c5746f	Document agent token policy requirement for rexec ... The Agent token policy when using rexec should have `write` on "_rexec" key prefix. Updated the exec command documentation to explicitly state this requirement.	4 years ago
Jono Sosulska	277de5addc	Update telemetry docs (#9905) ... * Fixes #2379-Improve interval explanation in the telemetry doc * Fixes #4734-Update consul memory metrics * Fixes #4836-Removed node.deregistration as that isn't in state.go * Fixes #8986 partially-Trim redundant language * Fixes #9087-Adds helpful details to telemetry on autopilot * Fixes #9274-Addresses NaN output in autopilot	4 years ago
Kim Ngo	e6cc186d79	docs/nia: Update CTS configuration example to not confuse vault provider with vault config block (#9909)	4 years ago
Iryna Shustava	199a0b0c19	docs: Update Helm reference docs (#9904)	4 years ago
Nitya Dhanushkodi	147628859d	Add metrics documentation (#9848)	4 years ago
woz5999	ea33c390ce	update docs and add changelog	4 years ago
Christoph Puhl	11f60c46a3	Removing unnecessary comment (#9890) ... Removing unnecessary comment around CRL to avoid confusion, as discussed with @banks	4 years ago
Christopher Broglie	f0307c73e5	Add support for configuring TLS ServerName for health checks ... Some TLS servers require SNI, but the Golang HTTP client doesn't include it in the ClientHello when connecting to an IP address. This change adds a new TLSServerName field to health check definitions to optionally set it. This fixes #9473.	4 years ago
Luke Kysow	a1d5e1fb41	docs: rename SourceAddress to SourceIP (#9878) ... SourceAddress was probably renamed to SourceIP but the docs weren't updated.	4 years ago
Christoph Puhl	a11ed1570a	Add namespaces to prepared query API docs ... Add missing section on creating prepared query for namespaced services	4 years ago
Mike Wickett	8f72c17248	fix: syntax issue	4 years ago
Preetha	ccde7e5f8b	Small changes to gossip related telemetry docs (#9846) ... Update gossip related telemetry docs to include correct descriptions, and added missing metrics	4 years ago
Freddy	d38fa1cbcf	Merge pull request #9869 from DanielMabbett/patch-1 ... Fix typo in requirements.mdx	4 years ago
Kyle Havlovitz	1e87c7183a	Merge pull request #9672 from hashicorp/ca-force-skip-xc ... connect/ca: Allow ForceWithoutCrossSigning for all providers	4 years ago
Freddy	555961e036	Merge pull request #9770 from hashicorp/docs/fix-terminating-gateway-config-entry ... Docs: Update terminating-gateway-config-entry	4 years ago
Kyle Havlovitz	d62565f368	Merge pull request #9792 from dzeban/kv-import-prefix ... command/kv: Add prefix option to kv import command	4 years ago
Daniel Mabbett	f923a2d249	Update requirements.mdx	4 years ago
Robert Kuska	6fe45c075f	Add units and types to metrics tables (#9674) ... This commits adds units and types to key metrics tables to have consistent table views of all metrics in telemetry.mdx. Fixes: https://github.com/hashicorp/consul/issues/9069	4 years ago
Nitya Dhanushkodi	15e8b13891	Add flags to consul connect envoy for metrics merging. (#9768) ... Allows setting -prometheus-backend-port to configure the cluster envoy_prometheus_bind_addr points to. Allows setting -prometheus-scrape-path to configure which path envoy_prometheus_bind_addr exposes metrics on. -prometheus-backend-port is used by the consul-k8s metrics merging feature, to configure envoy_prometheus_bind_addr to point to the merged metrics endpoint that combines Envoy and service metrics so that one set of annotations on a Pod can scrape metrics from the service and it's Envoy sidecar. -prometheus-scrape-path is used to allow configurability of the path where prometheus metrics are exposed on envoy_prometheus_bind_addr.	4 years ago
Ranjandas	851a1b123d	Add a sample error message	4 years ago
Ranjandas	9827a02ef6	Update vms-and-kubernetes.mdx	4 years ago
Ranjandas	479d6e6862	Added references to node name	4 years ago
Ranjandas	9c74d6cc3a	Update cert creation instruction for Federation ... The Server certificates used for Federation require the node name in the form of `<node>.server.<dc>.<domain>`. Not having this would through `bad tls certificate` error. * Fixed cert create command * Added note to create a wildcard cert (like the ones on Kubernetes) * Fixed numbering	4 years ago
R.B. Boyer	398b766532	xds: default to speaking xDS v3, but allow for v2 to be spoken upon request (#9658) ... - Also add support for envoy 1.17.0	4 years ago
Daniel Nephin	6b95e8dfe2	Merge pull request #9188 from hashicorp/dnephin/more-streaming-tests ... Add more streaming tests	4 years ago
Daniel Nephin	566efad2e7	Merge pull request #9759 from hashicorp/dnephin/streaming-default-rpc-enabled ... streaming: default rpc.enable_streaming to true	4 years ago
Kim Ngo	b678eabbf5	nia/docs 0.1.0 beta (#9803) ... nia/docs 0.1.0-beta Co-authored-by: Kent 'picat' Gruber <kent@hashicorp.com> Co-authored-by: Lorna Song <lorna@hashicorp.com> Co-authored-by: John Eikenberry <jae@zhar.net>	4 years ago
Daniel Nephin	1156519d97	docs: fix grpc metric names	4 years ago
Daniel Nephin	3aec942b17	streaming: default rpc.enable_streaming to true ... So that all servers will start the grpc server used by streaming	4 years ago
Daniel Nephin	5b2300e63f	docs: Fix reference to dns_config.use_cache	4 years ago
Blake Covarrubias	fa77e9e1f7	docs: Fix code tag displaying on ACL binding rules ... Fix indentation of code blocks on ACL binding rules page so that code fence does not display in JSON output.	4 years ago
R.B. Boyer	3b6ffc447b	xds: remove deprecated usages of xDS (#9602) ... Note that this does NOT upgrade to xDS v3. That will come in a future PR. Additionally: - Ignored staticcheck warnings about how github.com/golang/protobuf is deprecated. - Shuffled some agent/xds imports in advance of a later xDS v3 upgrade. - Remove support for envoy 1.13.x but don't add in 1.17.x yet. We have to wait until the xDS v3 support is added in a follow-up PR. Fixes #8425	4 years ago
kaitlincarter-hc	4f9b35b2d8	fix typo and add link to Learn (#9799)	4 years ago
Daniel Nephin	cb3adec2bf	Merge pull request #9777 from hashicorp/dnephin/remove-some-deprecation ... docs: remove a couple deprecations	4 years ago
Alex Dzyoba	098fd1797b	command/kv: Add prefix option to kv import command ... Currently when data is imported via `consul kv import` it overwrites keys under the root key. Since `consul kv export` can retrieve data for the given prefix, i.e. part of the KV tree, importing it under root may be not what users want. To mirror prefix behavior from export this PR adds prefix feature to the import command that adds prefix to all keys that are imported.	4 years ago
Ashwin Venkatesh	cd428060f6	Update helm docs for consul-helm v0.30.0 (#9779)	4 years ago
Luke Kysow	2df91c2050	Docs describing migrating to CRDs (#9562) ... * Document how users can migrate to CRDs. * Update documentation for federation with new `ProxyDefaults` requirement. * Ensure `controller.enabled: true` is set in our example configs. * Remove `connect-service-protocol` annotation docs.	4 years ago
Daniel Nephin	9bedb8b364	docs: remove a couple deprecations ... These filters can not be reproduced with bexpr just yet.	4 years ago
Paul Banks	9668832506	Add docs for MIME sniffing on metrics endpoint. (#9696) ... * Add docs for MIME sniffing on metrics endpoint. This was added in 1.7.2 last year but I realised we don't document it so it's kinda surprising Prometheus "just works" now. * Update website/content/api-docs/agent/index.mdx	4 years ago
Christoph Puhl	45a569d935	Update terminating-gateway.mdx ... fix crds support reference and adding ACL clarification for linked services.	4 years ago
Eddie Rowe	35be57fb01	nagios vs sensu updates	4 years ago
Daniel Nephin	c522f8defd	Merge pull request #9758 from hashicorp/dnephin/fix-streaming-bugs ... http: error if near is used with streaming	4 years ago
Preetha	4174bc4330	Add docs section on regenerating expired CA certificates (#9709) ... * Updated docs on regenerating built in CA * review feedback * Add sentence about expected behavior after update CA endpoint is used.	4 years ago
Daniel Nephin	b909088500	http: error if near is used with streaming	4 years ago
R.B. Boyer	6eeccc93ce	connect: update supported envoy point releases to 1.16.2, 1.15.3, 1.14.6, 1.13.7 (#9737)	4 years ago
Derek Strickland	37227f7d11	Crosslink new microservices collection. (#9704)	4 years ago
David Yu	36db3b50e6	docs: fix another broken link to upgrading k8s servers from token rotation page (#9707) ... fix another broken link to upgrading k8s servers from token rotation page	4 years ago
David Yu	94389f9619	docs: Small change to fix broken link to k8s upgrade from k8s tls certs page (#9705) ... Broken link to k8s server upgrade from tls certs page	4 years ago
Kim Ngo	6b92b778c5	docs/nia: recommend sensitive variables for module authoring (#9692)	4 years ago
Kim Ngo	e48a96eac1	docs/nia: Update verbiage around securely configuring providers (#9684) ... This reorganizes and flags where and when sensitive information may be written in plain-text	4 years ago
Mike Morris	504aa7c5fe	website: add release notes for 1.9 (#9189) ... * website: initial draft of release notes framework * website: fixup ref to 1-9-0.mdx * Update website/pages/docs/release-notes/1-9-0.mdx * Update website/pages/docs/release-notes/1-9-0.mdx * website: add draft of 1.9.0 release notes * website: move release-notes directory from /pages to /content * Update 1-9-0.mdx * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/release-notes/1-9-0.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	4 years ago
Ashwin Venkatesh	3da918089d	Add docs for TLS Server Certificate rotation for K8S (#9636) ... * Add docs for TLS Server Certificate rotation for K8s	4 years ago
Kyle Havlovitz	7dac583863	connect/ca: Allow ForceWithoutCrossSigning for all providers ... This allows setting ForceWithoutCrossSigning when reconfiguring the CA for any provider, in order to forcibly move to a new root in cases where the old provider isn't reachable or able to cross-sign for whatever reason.	4 years ago
Luke Kysow	b5212fbcc6	Add operations section to k8s notes (#9625) ... * Add operations section to k8s notes * Unify faq/troubleshooting	4 years ago
Kyle Havlovitz	b2dc7f7d9b	Merge pull request #9541 from sadedil/patch-1 ... Add a CLI tool for "Client Libraries & SDKs" page	4 years ago
David Yu	b2d00dce7a	docs: Update Compat Matrix for Consul Helm 0.29 (#9657) ... * docs: Update Compat Matrix for Consul Helm 0.29 Adding 0.29 * Update compatibility.mdx	4 years ago
Luke Kysow	9f006fdcc8	Document proxy-defaults config for prometheus (#9640)	4 years ago
Jeff Escalante	d1db0c2645	fix error in component name on autopilot page (#9638)	4 years ago
Chris Boulton	8a35df81c7	connect: add local_request_timeout_ms to configure local_app http timeouts (#9554)	4 years ago
Iryna Shustava	92b3f7d814	docs: Add k8s troubleshooting docs (hostPort vs hostNetwork) (#9464)	4 years ago
Ashwin Venkatesh	851c44cff5	Merge pull request #9612 from hashicorp/ui-ingress ... Update docs with fields for ingress support for consul UI	4 years ago
Ashwin Venkatesh	8b3bbcabbc	Update docs with fields for ingress support for consul UI	4 years ago
danielehc	283da85f78	Update index.mdx (#9618)	4 years ago
Mustafa Sadedil	d5b9abe761	Remove tool ref from the wrong page	4 years ago
Mustafa Sadedil	d5c4418a65	Add new CLI tool to Community Tools Page (kvit)	4 years ago
markblackman	eb5c0ebbb3	Note to steer consumers away from unmaintained python-consul (#9544) ... * Quick note to steer consumers away from unmaintained python-consul	4 years ago
Mark Lewis	ee368e9a00	Update options.mdx (#9578) ... MInor typo.	4 years ago
Luke Kysow	10b8090db9	Remove guides that live in learn.hashicorp.com now (#9563)	4 years ago
Chulki Lee	8be5a4b38a	Fix link markup in docs/connect/ca/vault	4 years ago
Luke Kysow	b6d7bf1243	Move cfg entry docs to under connect from agent (#9533) ... Since all config entries are currently related to service mesh it's a much more natural place to look for them under Service Mesh than under Agent.	4 years ago
Michael Hofer	3c3b67288d	cli: Add consul intention list command (based on PR #6825) (#9468) ... This PR is based on the previous work by @snuggie12 in PR #6825. It adds the command consul intention list to list all available intentions. The list functionality for intentions seems a bit overdue as it's just very handy. The web UI cannot list intentions outside of the default namespace, and using the API is sometimes not the friendliest option. ;) I cherry picked snuggie12's commits who did most of the heavy lifting (thanks again @snuggie12 for your great work!). The changes in the original commit mostly still worked on the current HEAD. On top of that I added support for namespaces and fixed the docs as they are managed differently today. Also the requested changes related to the "Connect" references in the original PRs have been addressed. Fixes #5652 Co-authored-by: Matt Hoey <mhoey05@jcu.edu>	4 years ago
Kim Ngo	c123192946	docs/nia: Fix example config block to execute properly (#9547) ... CTS running with default configuration will communicate over http unless the Consul client is configured with TLS. Having the example set the scheme to https is misleading and will result in an error: "http: server gave HTTP response to HTTPS client"	4 years ago
Mustafa Sadedil	b756ed2e42	Add a CLI tool for "Client Libraries & SDKs" page ... Hi everyone, I'm developing an open source CLI tool for easily editing Consul KV values from your favorite text editor. I've added to Client Libraries & SDKs page on website. Repository: https://github.com/sadedil/kvit Kind regards, Mustafa	4 years ago
Luke Kysow	45ea95ac28	Update k8s gateway docs for CRDs (#9538)	4 years ago
Nitya Dhanushkodi	dd81e4a1cc	Document how clients not on K8s can join a DC in K8s. (#9438)	4 years ago
Luke Kysow	4f15f83dc6	Reword redirect docs for clarity (#9504)	4 years ago
Luke Kysow	a556c0b025	Document CRDs and kube namespaces (#9502) ... * Document CRDs and kube namespaces	4 years ago
Luke Kysow	345ffb9e0a	Merge pull request #9516 from hashicorp/lkysow/config-entry-sidebar ... Use full names for cfg entries in sidebar	4 years ago
Luke Kysow	709ad9ea81	Merge pull request #9416 from hashicorp/luke-component-crd ... Document Kube CRDs alongside config entry docs	4 years ago
Luke Kysow	688d0c38ce	Use nested tabs for gateway examples	4 years ago
Luke Kysow	ff51ab236d	Use full names for cfg entries in sidebar	4 years ago
Joel Watson	ca265e1890	docs: add note about TMPDIR for snapshots	4 years ago
Kim Ngo	7d49e7d07e	Update NIA discuss link to new tag (#9500)	4 years ago
Luke Kysow	517cfa7918	Document Kube CRDs alongside config entry docs ... * Adds a new react component `ConfigEntryReference` that allows us to document config entries for both HCL and Kubernetes CRDs. * Rewrites config entry docs to use new component * Add CRD examples alongside HCL examples * Removes examples from Kube CRD doc because the examples are now in the main CRD docs	4 years ago
Michael Montgomery	e4f603dfae	Merge branch 'master' into 6074-allow-config-MaxHeaderBytes	4 years ago
Iryna Shustava	cdcfd0e4f9	Update Helm reference docs (#9463)	4 years ago
David Yu	48917f89c4	Update with 0.28 (#9450)	4 years ago
Ashwin Venkatesh	609b922b42	Merge pull request #9431 from hashicorp/gen-docs2 ... Ensure type shown for maps in k8s docs	4 years ago
Nitya Dhanushkodi	2e14bfeb28	Update helm docs for external client agents. (#9429)	4 years ago
Blake Covarrubias	1a7902e0a3	docs: Remove beta tag for 1.8 and 1.9 features ... Remove beta tag for 1.8 and 1.9 features which are now GA.	4 years ago
Luke Kysow	f96d945f77	Ensure type shown for maps in k8s docs	4 years ago
Luke Kysow	75f9d8d2b3	Use generated helm docs (#9324)	4 years ago
Jeff Escalante	ef900cdb5c	update deps, restore search	4 years ago
Jeff Escalante	582dce9d8f	maintenance complete, pending markdown-page component addition	4 years ago