github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
10,108 Commits
1,700 Branches
457 Tags
692 MiB
Commit Graph

1763 Commits (a7ded1bd8efcbc3c67978f050b6f16ec5e8a832d)

Author SHA1 Message Date
Matt Keeler afa1cc98d1
Implement data filtering of some endpoints (#5579) 
Fixes: #4222 

# Data Filtering

This PR will implement filtering for the following endpoints:

## Supported HTTP Endpoints

- `/agent/checks`
- `/agent/services`
- `/catalog/nodes`
- `/catalog/service/:service`
- `/catalog/connect/:service`
- `/catalog/node/:node`
- `/health/node/:node`
- `/health/checks/:service`
- `/health/service/:service`
- `/health/connect/:service`
- `/health/state/:state`
- `/internal/ui/nodes`
- `/internal/ui/services`

More can be added going forward and any endpoint which is used to list some data is a good candidate.

## Usage

When using the HTTP API a `filter` query parameter can be used to pass a filter expression to Consul. Filter Expressions take the general form of:

```
<selector> == <value>
<selector> != <value>
<value> in <selector>
<value> not in <selector>
<selector> contains <value>
<selector> not contains <value>
<selector> is empty
<selector> is not empty
not <other expression>
<expression 1> and <expression 2>
<expression 1> or <expression 2>
```

Normal boolean logic and precedence is supported. All of the actual filtering and evaluation logic is coming from the [go-bexpr](https://github.com/hashicorp/go-bexpr) library

## Other changes

Adding the `Internal.ServiceDump` RPC endpoint. This will allow the UI to filter services better.
 2019-04-16 12:00:15 -04:00
Freddy a03392c906
Add additional raft metrics (#5628) 
* Add documentation for new raft metrics
* Revendor raft from master
 2019-04-09 16:09:22 -06:00
Sarah Christoff 53cbaefd5d Updated Ports Documentation 2019-04-05 12:25:44 -05:00
Judith Malnick fc7a1e0175
[docs] security warning about Helm chart (#5561) 
* [docs] security warning about Helm chart

Correct security warning about helm chart to caution about default Consul install.

* clarify that k8s or consul should be secure
 2019-04-04 16:58:57 -07:00
Alvin Huang 17a6307f65
fix broken acl link (#5592) 
* fix broken acl link

* Update website/source/docs/acl/acl-migrate-tokens.html.md

Co-Authored-By: alvin-huang <alvin@hashicorp.com>
 2019-04-04 13:56:43 -04:00
kaitlincarter-hc eca219b64c
[docs] Connect in Production (#5503) 
* Updating guide to prepare for Learn migration.

* Update website/source/docs/guides/connect-production.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/connect-production.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/connect-production.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/connect-production.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-04-04 09:52:35 -05:00
tristan-weil fe938e6e28 tls: allow to add ip addresses as Subject Alternative Names when creating certificates (#5602) 2019-04-04 14:32:02 +02:00
kaitlincarter-hc cb0b9665df
[docs] New k8s reference arch guide. (#5528) 
* New k8s reference arch guide.

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md

* Update website/source/docs/guides/kubernetes-reference.html.md

* Update website/source/docs/guides/kubernetes-reference.html.md

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md

* Update website/source/docs/guides/kubernetes-reference.html.md

* Update website/source/docs/guides/kubernetes-reference.html.md

* Update website/source/docs/guides/kubernetes-reference.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kubernetes-reference.html.md
 2019-04-03 17:29:21 -05:00
kaitlincarter 1b9802a14b Updates based on feedback 2019-04-03 16:36:02 -05:00
Alvin Huang 9d6e507616
rename refs to areas guide to advanced-federation (#5603) 2019-04-03 17:20:58 -04:00
kaitlincarter-hc 23ec040205
Update website/source/docs/guides/kubernetes-reference.html.md 2019-04-03 15:08:11 -05:00
Paul Banks f079c5ea57
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-04-03 14:48:19 -05:00
kaitlincarter-hc 22202683e7
Update website/source/docs/guides/kubernetes-reference.html.md 2019-04-03 14:47:11 -05:00
kaitlincarter-hc edd7d89484
Update website/source/docs/guides/kubernetes-reference.html.md 2019-04-03 14:39:36 -05:00
kaitlincarter-hc fe8c04b51d
Update website/source/docs/guides/kubernetes-reference.html.md 2019-04-03 13:41:09 -05:00
Paul Banks a7b7c4d11f
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-04-03 13:36:24 -05:00
Paul Banks 98e9bda52a
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-04-03 13:33:01 -05:00
kaitlincarter-hc 90b7d51006
Update website/source/docs/guides/kubernetes-reference.html.md 2019-04-03 13:31:51 -05:00
Rebecca Zanzig 9ac4933f3e
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-04-03 13:30:46 -05:00
Rebecca Zanzig c3b8693c17
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-04-03 13:27:42 -05:00
Paul Banks 4d5ca8bf39
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-04-03 10:59:12 -05:00
kaitlincarter-hc ecc8850751
Update website/source/docs/guides/kubernetes-reference.html.md 2019-04-03 10:58:55 -05:00
kaitlincarter-hc 3cb70ca541
Update website/source/docs/guides/kubernetes-reference.html.md 2019-04-03 10:56:51 -05:00
kaitlincarter-hc ee03aedab8
Update website/source/docs/guides/kubernetes-reference.html.md 2019-04-03 10:56:25 -05:00
Paul Banks b05a52f66f
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-04-03 10:55:00 -05:00
Paul Banks 348fd0f9ba
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-04-03 10:54:20 -05:00
kaitlincarter-hc 2d870b9297
[docs] Basic Federation (#5537) 
* Adding headers and example output.

* Update website/source/docs/guides/datacenters.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/datacenters.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/datacenters.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/datacenters.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/datacenters.html.md

* Update website/source/docs/guides/datacenters.html.md
 2019-04-03 10:45:54 -05:00
Nathan Valentine 4d57b4adf8 EA has validated this content as working with Consul 1.4 (#5541) 2019-04-03 08:37:09 -07:00
Nathan Valentine c1ba15d3af EA has validated that this content works with Consul 1.4 (#5542) 2019-04-03 08:36:59 -07:00
Judith Malnick 1f67b0aee9
[docs] reimplement changes from PR #5505 (#5591) 2019-04-01 13:34:48 -07:00
Alvin Huang ee6a8e54f2
Fix broken links (#5552) 
* fix network segments broken urls

* fix iptables broken link

* fix acl broken link

* fix acl-rules broken link

* fix acl migrate broken link

* fix clone token link
 2019-04-01 16:01:00 -04:00
Judith Malnick ac722f0fe1
Revert "[docs] Connect with Envoy Guide" (#5589) 2019-04-01 12:31:23 -07:00
Rebecca Zanzig e035db0e8d
Merge pull request #5515 from tryan225/docs/helm-extra-volumes-example 
[docs] Adding an example of extraVolumes with the Helm chart
 2019-04-01 09:53:02 -07:00
Judith Malnick 16eb3cf687
[docs] Connect with Envoy Guide (#5505) 
* Updating the intro.

* Update website/source/docs/guides/connect-envoy.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/connect-envoy.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-03-26 15:04:26 -07:00
kaitlincarter-hc f66f46cb1e [docs] Advanced Federation (#5538) 
* renaming guide and changing format.

* Adding headers, updating output.

* Update website/source/docs/guides/advanced-federation.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/advanced-federation.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/advanced-federation.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/advanced-federation.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/advanced-federation.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/advanced-federation.html.md

* Update website/source/docs/guides/advanced-federation.html.md
 2019-03-26 12:24:12 -07:00
kaitlincarter-hc c7166ba58b [docs] Semaphore (#5524) 
* Updating and adding headings.

* Update website/source/docs/guides/semaphore.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/semaphore.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-03-26 11:44:20 -07:00
Alvin Huang e0a4d872af
missed a broken link (#5545) 2019-03-25 18:46:10 -04:00
kaitlincarter-hc 114b42b448
[docs] ACL Side Navigation Added (#5526) 
* Adding new ACL menu item with guides and documentation.

* removing sidebar stuff from under agent, some documenting
 2019-03-25 16:20:40 -05:00
kaitlincarter-hc 89cd3a3a3e
[Docs] Launching K8s getting started path on Learn (#5511) 
* Moving Minikube guide.

* Update website/source/layouts/docs.erb

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/index.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-03-25 12:12:07 -05:00
Judith Malnick 3454491c60
Update website/source/docs/guides/connect-envoy.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-03-25 09:28:03 -05:00
Judith Malnick 8fadc2d314
Update website/source/docs/guides/connect-envoy.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-03-25 09:27:52 -05:00
kaitlincarter-hc 24633c8334
Updated for migration. (#5512) 2019-03-25 09:24:28 -05:00
kaitlincarter-hc 3e79219c49
Fixing smart quotes (#5522) 2019-03-25 09:22:27 -05:00
Alvin Huang dc3c131836 fix broken link 2019-03-22 19:20:48 -04:00
Judith Malnick 6a78e2ae55
[docs] improve telegraf guide with objectives, summary, formatting (#5527) 2019-03-22 09:40:38 -07:00
Jud White 462a73fa28 docs: update 'sc' usage in windows-guide.html.md (#5501) 
- the space after `=` is significant in sc parameters (binPath= "<path> <args>, start= auto)
- given the text "the service automatically starts up during/after boot", added `start= auto` to
  the example,  otherwise the service will be set to Manual start mode.
 2019-03-21 12:51:04 -05:00
Todd Radel 77bd53269d [docs] New doc on integration with Ambassador Proxy (#5497) 
* New doc on integration with Ambassador Proxy

* Remove reference to "step 1"

* Added link to docs for `consul intention check`

* Update website/source/docs/platform/k8s/ambassador.html.md

Co-Authored-By: tradel <todd@radel.us>

* Update website/source/docs/platform/k8s/ambassador.html.md

Co-Authored-By: tradel <todd@radel.us>

* Update website/source/docs/platform/k8s/ambassador.html.md

Co-Authored-By: tradel <todd@radel.us>

* Added links to install guide and Connect guide
 2019-03-21 11:00:39 -05:00
Judith Malnick 96857df8d8
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-03-21 09:51:37 -05:00
Judith Malnick 0f52a3ec80
Update website/source/docs/guides/kubernetes-reference.html.md 
Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-03-21 09:50:25 -05:00
kaitlincarter-hc 197031bb68
Updating network segments guide (#5529) 2019-03-21 09:35:49 -05:00
Rebecca Zanzig fb521c6094 Add dns configuration info for CoreDNS users 2019-03-20 23:02:04 -07:00
kaitlincarter 3f230aeb48 New k8s reference arch guide. 2019-03-20 19:20:05 -05:00
tryan225 8f9b93448f Adding an example of extraVolumes with the Helm chart 2019-03-19 14:31:11 -07:00
Erik DeLamarter e37c402c9e [Docs] Added a note to GCE auto-join credentials option (#5391) 
* Added a note to GCE auto-join credentials option

Simply added a note to remind users that putting a json file in the config-dir will make consul parse it as a config file.
Hope to help someone else avoid wasting a day because of these errors:
==> Error parsing /etc/consul.d/credentials.json: 10 error(s) occurred: * invalid config key private_key

* Updated according to style guidelines

Co-Authored-By: delamart <erik@delamarter.ch>
 2019-03-19 09:40:12 -05:00
kaitlincarter-hc 49511f979e Updating the intro. 2019-03-18 14:52:17 -05:00
John Cowen 69ac5d0b04 [Docs] Connect Sidecar Proxies: Fixes 'must may' typo and adds formatting to follow other docs (#5397) 
* Fixes 'must may' typo and adds formatting to follow other docs

* Reverts local_service_port docs to state its optional
 2019-03-18 11:48:56 -07:00
Todd Radel c5bd1a79da [docs] Added section on using Helm chart to deploy Enterprise binaries (#5454) 
* Added section on using Helm chart to deploy Enterprise binaries

* Update website/source/docs/platform/k8s/helm.html.md

Switch to active voice.

Co-Authored-By: tradel <todd@radel.us>

* Update website/source/docs/platform/k8s/helm.html.md

Co-Authored-By: tradel <todd@radel.us>

* Update website/source/docs/platform/k8s/helm.html.md

* Update website/source/docs/platform/k8s/helm.html.md

Co-Authored-By: tradel <todd@radel.us>
 2019-03-18 11:21:40 -07:00
Steve Burns 34c70d2475 Add log_file attribute to agent configuration documentation (#5492) 2019-03-18 10:24:49 -07:00
Alex Mayer 585978ab94 Docs Proofing (#5424) 
* Docs: Remove default_policy From Code Example

It is not needed according to:
https://www.consul.io/docs/agent/acl-system.html#configuring-acls

* Docs: Cleanup Commands And Their Output On ACL Guide Page

Remove extra spaces and newlines
Ensure rules match input rules

* Docs: Remove Incomplete "Added In Version" Statement

Version added is specified on parent option

* Docs: Fix Broken Links

* Docs: Minor Sentence Tweaks
 2019-03-15 09:35:33 -05:00
kaitlincarter-hc aec25fde59
[docs] Deploying Consul with Kubernetes (#5471) 
* Adding new K8s guide.

* Update website/source/docs/guides/kuberenetes-deployment.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/kuberenetes-deployment.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* updating based on feedback.

* Couple updates based on feedback.

* Update website/source/docs/guides/kuberenetes-deployment.html.md

* updating value file.
 2019-03-13 16:56:00 -05:00
Rebecca Zanzig 34e9eab0d6 Add docs for using Helm `--set` to create extraConfig variables (#5474) 
* Add docs for using Helm `--set` to create extraConfig variables

Based on info provided for `consul-helm` issue 74.

* fixing formatting
 2019-03-13 16:25:09 -05:00
kaitlincarter-hc 51acd28d3b
[docs] Move Sentinel documentation (#5478) 
* Moving sentinel doc

* updating links, fixing headings.

* Update website/source/docs/agent/acl-rules.html.md
 2019-03-13 12:47:25 -05:00
kaitlincarter-hc 1333bfe324
[docs] Bootstrapping Guide -> Install docs (#5473) 
* moved the bootstrapping guide to the docs.

* More edits for consistency.

* Added arch link
 2019-03-13 10:12:52 -05:00
Hans Hasselberg 7e11dd82aa
agent: enable reloading of tls config (#5419) 
This PR introduces reloading tls configuration. Consul will now be able to reload the TLS configuration which previously required a restart. It is not yet possible to turn TLS ON or OFF with these changes. Only when TLS is already turned on, the configuration can be reloaded. Most importantly the certificates and CAs.
 2019-03-13 10:29:06 +01:00
Reid Beels cd1aa9b426 Remove misleading encrypt param documentation (#5452) 
According to https://www.consul.io/docs/agent/options.html#_encrypt, the `encrypt` param specifies the 16-byte key to use, not the path to a config file containing the key.
 2019-03-12 10:26:40 -05:00
Alvin Huang 21fcfcad7f
Merge pull request #5451 from hashicorp/update_go_discover_for_azure 
Update go-discover vendor
 2019-03-11 16:39:39 -04:00
Lowe Schmidt e293045751 Typo fix (segement > segment) (#5469) 2019-03-11 16:25:19 +01:00
Masato Yamazaki 23bc8636c1 website: delete duplication of "are" (#5464) 2019-03-11 10:42:15 +01:00
petems a505e6e9da Update go-discover vendor 
* Adds note about use of ENV variables for auto-join on Azure
 2019-03-08 22:57:48 +00:00
Rebecca Zanzig 8d98032ed9
Merge pull request #5445 from hashicorp/docs/helm-annotations 
Add docs for new Helm `annotations` options
 2019-03-08 12:11:30 -08:00
kaitlincarter-hc 4699423a18
[Docs] ACL Bootstrap Guide (#5399) 
* Adding updates for consul reload of token config.

* Update website/source/docs/guides/acl.html.md
 2019-03-08 13:12:16 -06:00
kaitlincarter-hc f4c7b84500
[doc] New Ports Documentation (#5442) 
* Adding a ports table.

* Updating layout based on feedback.
 2019-03-08 13:10:35 -06:00
Rebecca Zanzig 3ac9e57efe Add docs for new Helm `annotations` options 2019-03-08 10:10:25 -08:00
Rebecca Zanzig 6c7245ce84 Add docs about new Helm `priorityClassName` options 2019-03-08 09:42:53 -08:00
Rebecca Zanzig 3dbd73ee23 Move aclSyncToken docs under `syncCatalog` 
Additionally updates the anchors to follow the established convention.
 2019-03-07 16:54:11 -08:00
Rebecca Zanzig f1864b128e
Merge pull request #5431 from hashicorp/docs/helm-extraConfig 
[docs] Add examples for the `extraConfig` options in the Helm chart
 2019-03-06 14:25:25 -08:00
Rebecca Zanzig c07b7cc154 Add examples for the `extraConfig` options in the Helm chart 2019-03-06 13:01:17 -08:00
kaitlincarter-hc 9b1bc8d96d
[Docs] Production Guide for ACLs (#5385) 
* New guide for ACLs

* Fixing some formatting issues.

* Update website/source/docs/guides/production-acls.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/production-acls.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/production-acls.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Resolving PR comments.

* Closing the rest of the PR comments

* Updates for persistence.

* Updating commands.

* Update website/source/docs/guides/production-acls.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/production-acls.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-03-06 10:46:07 -06:00
R.B. Boyer a99f7aaa25 website: fix broken links 2019-03-05 14:24:33 -06:00
Hans Hasselberg d35824b1fa default to tls 1.2 as promised. (#5340) 2019-03-04 09:42:04 -05:00
Aestek 02f991843f Fix race condition in DNS when using cache (#5398) 
* Fix race condition in DNS when using cache

The healty node filtering was modifying the result from the cache, which
caused a crash when multiple queries were made to the same service
simultaneously.
We now copy the node slice before filtering to ensure we do not modify
the data stored in the cache.

* Fix wording in dns cache config doc

s/dns_max_age/cache_max_age/
 2019-03-04 09:22:01 -05:00
Hans Hasselberg e64c5c5899 typo (#5407) 2019-03-01 08:51:37 -06:00
Matt Keeler 118adbb123
ACL Token Persistence and Reloading (#5328) 
This PR adds two features which will be useful for operators when ACLs are in use.

1. Tokens set in configuration files are now reloadable.
2. If `acl.enable_token_persistence` is set to `true` in the configuration, tokens set via the `v1/agent/token` endpoint are now persisted to disk and loaded when the agent starts (or during configuration reload)

Note that token persistence is opt-in so our users who do not want tokens on the local disk will see no change.

Some other secondary changes:

* Refactored a bunch of places where the replication token is retrieved from the token store. This token isn't just for replicating ACLs and now it is named accordingly.
* Allowed better paths in the `v1/agent/token/` API. Instead of paths like: `v1/agent/token/acl_replication_token` the path can now be just `v1/agent/token/replication`. The old paths remain to be valid. 
* Added a couple new API functions to set tokens via the new paths. Deprecated the old ones and pointed to the new names. The names are also generally better and don't imply that what you are setting is for ACLs but rather are setting ACL tokens. There is a minor semantic difference there especially for the replication token as again, its no longer used only for ACL token/policy replication. The new functions will detect 404s and fallback to using the older token paths when talking to pre-1.4.3 agents.
* Docs updated to reflect the API additions and to show using the new endpoints.
* Updated the ACL CLI set-agent-tokens command to use the non-deprecated APIs.
 2019-02-27 14:28:31 -05:00
Aestek f1cdfbe40e Allow DNS interface to use agent cache (#5300) 
Adds two new configuration parameters "dns_config.use_cache" and
"dns_config.cache_max_age" controlling how DNS requests use the agent
cache when querying servers.
 2019-02-25 14:06:01 -05:00
R.B. Boyer 00aa50cfa2 website: fix errant mention of 'snapshot save' on docs for 'snapshot restore' 2019-02-21 13:48:20 -06:00
kaitlincarter-hc 193c0b727b
[Docs] Helm Chart (#5350) 
* Updating the Helm chart to include ACL parameter and examples.

* Updates based on feedback.

* Update website/source/docs/platform/k8s/helm.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-02-20 18:27:28 -06:00
kaitlincarter-hc a093af320c
[docs] ACL reset procedure (#5334) 
* Adding reset instructions.

* Added link to the boostrapping guide for the reset procedure.

* Update website/source/docs/guides/acl.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/acl.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/acl.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
 2019-02-19 10:45:23 -06:00
kaitlincarter-hc 7598b32d1d
[Docs] New KV documentation (#5315) 
* Adding new KV doc

* fixing the metadata

* Update website/source/docs/agent/kv.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/agent/kv.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/agent/kv.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/agent/kv.html.md
 2019-02-14 10:25:17 -06:00
R.B. Boyer 397e9cd459
Merge pull request #5343 from hashicorp/fixes-grab-bag 
various small fixes
 2019-02-13 13:26:20 -06:00
R.B. Boyer adbe8ed370 correct some typos 2019-02-13 13:02:12 -06:00
Dan Brown b24b3a56d0 Docs EA update RA and DG (#5336) 
* Confirm RA against Consul 1.3

Change product_version frontmatter to ea_version and increase to 1.3

* Confirm DG against Consul 1.3

Change product_version frontmatter to ea_version and increase to 1.3
 2019-02-13 12:53:21 -06:00
petems 5020f97911 Adds newline for bullets 
* Formatting was previously broken
 2019-02-13 00:54:51 +00:00
petems dad2b24b82 Adds note about secret value 
* For future traveler, this literally ate up an entire day of debugging, so hopefully it helped you! 💃
 2019-02-13 00:54:27 +00:00
petems 371cac266d Update specific perms for Azure 
* `listAll` is not valid
 2019-02-13 00:53:51 +00:00
petems 8acadd364a Add note about equals signs 2019-02-12 23:47:19 +00:00
adawalli d7e4151fcb website: Update UI Policy recommendations from Guide (#5321) 
The guide currently uses node, service, and service for the UI Policy.
This will cause a practically useless UI. This patch uses the _prefix
variants instead which will have the intended behavior.
 2019-02-08 14:39:28 -06:00
Rebecca Zanzig fc1d9e5d78
Merge pull request #5302 from hashicorp/docs/k8s-acl 
Update k8s ACL documentation
 2019-02-07 13:46:44 -08:00
Rebecca Zanzig 1ef6bf3902 Add additional clarification to the ACL token wording 2019-02-07 13:26:17 -08:00
kaitlincarter-hc 5a98953c43
Apply suggestions from code review 
Co-Authored-By: adilyse <rebecca@hashicorp.com>
 2019-02-07 13:08:04 -08:00
Nick Gunia fb0fc6e459 Remove invalid option -name from ACL token read documentation (#5324) 
It appears that the `read` command for ACL policies was used to template the `read` command for ACL tokens, and an invalid option was not dropped from the docs.
 2019-02-07 13:05:12 -05:00
Matt Keeler acfd87c673
Improve Connect with Prepared Queries (#5291) 
Given a query like:

```
{
   "Name": "tagged-connect-query",
   "Service": {
      "Service": "foo",
      "Tags": ["tag"],
      "Connect": true
   }
}
```

And a Consul configuration like:

```
{
   "services": [
      "name": "foo",
      "port": 8080,
      "connect": { "sidecar_service": {} },
      "tags": ["tag"]
   ]
}
```

If you executed the query it would always turn up with 0 results. This was because the sidecar service was being created without any tags. You could instead make your config look like:

```
{
   "services": [
      "name": "foo",
      "port": 8080,
      "connect": { "sidecar_service": {
         "tags": ["tag"]
      } },
      "tags": ["tag"]
   ]
}
```

However that is a bit redundant for most cases. This PR ensures that the tags and service meta of the parent service get copied to the sidecar service. If there are any tags or service meta set in the sidecar service definition then this copying does not take place. After the changes, the query will now return the expected results.

A second change was made to prepared queries in this PR which is to allow filtering on ServiceMeta just like we allow for filtering on NodeMeta.
 2019-02-04 09:36:51 -05:00
kaitlincarter-hc 9bdd921917
Apply suggestions from code review 
Co-Authored-By: adilyse <rebecca@hashicorp.com>
 2019-02-01 14:33:06 -08:00
kaitlincarter-hc c60efabed2
Update website/source/docs/platform/k8s/service-sync.html.md 
Co-Authored-By: adilyse <rebecca@hashicorp.com>
 2019-02-01 14:32:37 -08:00
R.B. Boyer 5165874318
incorrect examples for 'consul acl policy' commands (#5303) 2019-02-01 09:16:36 -06:00
Rebecca Zanzig a3b830f68f Update k8s ACL documentation 
Clarifies that an ACL token only needs to be provided when ACLs are
enabled within the Consul cluster.
 2019-01-31 13:55:09 -08:00
Matt Keeler 82e741f36f Fix some docs formatting around DNS SOA RR configuration (#5297) 2019-01-30 16:47:32 -06:00
Rebecca Zanzig ce747c63f0
Merge pull request #5292 from hashicorp/docs/acl-quotes 
Switch smart quotes to straight quotes
 2019-01-29 15:11:00 -08:00
kaitlincarter-hc 14aefea0d4
Created a new index page that links to all the ACL guides. I also removed the sidebar nav drop down to be more consistent with the other guides. (#5260) 2019-01-29 14:51:41 -06:00
Rebecca Zanzig 386df104df Switch smart quotes to straight quotes 
The ACL guide had a couple instances of smart quotes which get rendered
as the incorrect character on the website.
 2019-01-29 11:29:16 -08:00
Ilya Pavlov 39d5f2c08e Fix missed letter in the documentation (#5281) 2019-01-28 16:25:56 -06:00
kaitlincarter-hc abf32ef5e8
Fixing broken link. (#5283) 2019-01-28 16:23:29 -06:00
Gabriel Pérez S 80325189fc Invalid syntax in Envoy configuration docs. (#5275) 2019-01-28 09:58:29 -05:00
danielehc 1e5c56f1aa Adding quorum note on leave command page (#5102) 
Reusing the same phrasing as  https://github.com/hashicorp/consul/pull/5095/ to provide info on the effects of the `consul leave` command on Consul quorum
 2019-01-25 14:20:48 -06:00
Geoffrey Grosenbach 4639466618 Corrects `defile` to `defined` (#5262) 2019-01-25 13:45:08 -06:00
Matt Hoey c39ffad100 website: reference last command's last field instead of background PID (#5264) 2019-01-25 17:30:38 +01:00
Paul Banks 89af3bc8f5
Update services.html.md 2019-01-24 12:41:43 +00:00
Diogenes S. Jesus f0e081bf88 Fix repeating wording in sentence (#5256) 
Fix `to join to join` typo
 2019-01-23 09:12:41 -05:00
Paul Banks ef9f27cbc8
connect: tame thundering herd of CSRs on CA rotation (#5228) 
* Support rate limiting and concurrency limiting CSR requests on servers; handle CA rotations gracefully with jitter and backoff-on-rate-limit in client

* Add CSR rate limiting docs

* Fix config naming and add tests for new CA configs
 2019-01-22 17:19:36 +00:00
kaitlincarter-hc 3e45da1414
Add acl.enable_key_list_policy to agent config docs. (#5227) 
* Adding key list parameter to agent config docs.

* Fixed typo in master token section

* Updated based on comments from Paul and Matt.
 2019-01-22 10:20:05 -06:00
Erik R. Rygg 8c87238b99
Merge pull request #5215 from hashicorp/deployment_guide_updates 
Include information about multi-dc Connect
 2019-01-17 19:39:41 -07:00
Rebecca Zanzig ebba215891 Fix broken links 2019-01-16 14:42:12 -08:00
Rebecca Zanzig df99f4a3ac Indent code blocks further to fix list formatting 2019-01-16 14:31:50 -08:00
Rebecca Zanzig 388ff4caed
Merge pull request #5222 from hashicorp/docs/helm-0.5.0 
Add documentation about the two additional Helm chart options
 2019-01-16 14:18:15 -08:00
Chris Wang 1e3bda174d Fix typo in k8s connect documentation (#5229) 2019-01-16 17:03:40 -05:00
kaitlincarter-hc 59c010eb3b
Update links for learn migration (#5223) 
* Stared updaing links for the learn migration

* Language change cluster -> datacenter (#5212)

* Updating the language from cluster to datacenter in the backup guide to be consistent and more accurate.

* missed some clusters

* updated three broken links for the sidebar nav
 2019-01-15 14:57:17 -06:00
Rebecca Zanzig 98b3c13dbb
Merge pull request #5213 from hashicorp/docs/helm-security 
Add a security warning about the default Helm chart installation
 2019-01-14 16:28:31 -08:00
Rebecca Zanzig 6de477ef96 Add documentation about the two additional Helm chart options 
Adds info about `k8stag` and `nodePortSyncType` options that were
added in consul-helm v0.5.0.

Additionally moves the k8sprefix to match the order in the Helm chart
values file, while also clarifying that it only affects one sync
direction.
 2019-01-14 16:15:26 -08:00
Rebecca Zanzig 1c70407bd1 Add a security warning about the default Helm chart installation 
If a user installs the default Helm chart Consul on a Kubernetes
cluster that is open to the internet, it is lacking some important
security configurations.
 2019-01-14 15:59:27 -08:00
kaitlincarter-hc adcdc81f93
Language change cluster -> datacenter (#5212) 
* Updating the language from cluster to datacenter in the backup guide to be consistent and more accurate.

* missed some clusters
 2019-01-14 10:46:34 -06:00
R.B. Boyer 4db60f8243
website: minor acl guide fixes (#5214) 2019-01-10 14:17:20 -06:00
Aestek c043de5381 [Security] Allow blocking Write endpoints on Agent using Network Addresses (#4719) 
* Add -write-allowed-nets option

* Add documentation for the new write_allowed_nets option
 2019-01-10 09:27:26 -05:00
kaitlincarter-hc 2dfc9ae989
Re-worked the ACL guide into two docs and an updated guide. (#5093) 
* Re-worked the ACL guide into two docs and an updated guide.

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Updating syntax based on amayer5125's comments.

* Missed one of amayer5125's comments

* found a bad link in the acl system docs

* fixing a link in the rules docs
 2019-01-09 15:07:20 -06:00
Erik R. Rygg 6580890f6e Include information about multi-dc Connect 2019-01-08 14:30:36 -07:00
Hans Hasselberg 067027230b
connect: add tls config for vault connect ca provider (#5125) 
* add tlsconfig for vault connect ca provider.
* add options to the docs
* add tests for new configuration
 2019-01-08 17:09:22 +01:00
Jack Pearkes 96b877f79e
website: fixed ca provider references (#5185) 
Fixes https://github.com/hashicorp/consul/issues/5182.
 2019-01-07 18:47:02 -08:00
R.B. Boyer 3841e9e396
website: fix stray sentinel references using the old syntax (#5191) 
[skip ci]
 2019-01-07 09:59:17 -06:00
kaitlincarter-hc 9a976a40f3
Added the new monitoring guide (#5117) 2019-01-04 10:26:07 -06:00
Junpei Tsuji 249babc244 website: Use secret id instead of policy id (#5049) 
The document uses _the agent-token policy_ as agent token by mistake.
So I fixed it to use the secret id instead of it.
 2019-01-03 10:45:01 -05:00
Tayyab Talha 517fa5edd4 Fix Type in go integration (#5132) 
Fix Typo in second example
From svc.ServeTLSConfig() to svc.ServerTLSConfig()
 2019-01-03 10:39:23 -05:00
Rebecca Zanzig 199063759b
Merge pull request #5112 from hashicorp/docs/helm-resources-example 
Add examples for helm chart multi-line strings
 2018-12-20 15:33:33 -08:00
kaitlincarter-hc 5bf14c58fa
removed an extra period that messed up formatting (#5120) 2018-12-19 18:12:43 -06:00
kaitlincarter-hc 395248dbe9
Adding the new backup guide (#5080) 
* Adding the new backup guide

* Update website/source/docs/guides/backup.html.md

Looks good.

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/backup.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/backup.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/backup.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Updated the directions for the restore command.

* Update website/source/docs/guides/backup.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/backup.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* updated the token env

* Trying to make it extra clear where to run the commands.

* added not that list of backed up items isn't inclusive
 2018-12-19 13:01:35 -06:00
kaitlincarter-hc 0b002f8560
Encryption Docs and New Guide (#5059) 
* Added the new encryption guide, updated the encryption docs, updated the side-nav and index page for new guide.

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Making updates based on feedback

* Updating language

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Removing all reload mentions

* Updated the final remarks about TLS encryption to include a note about HTTP connections

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* Update website/source/docs/guides/agent-encryption.html.md

Co-Authored-By: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>

* removed the mention of cfssl

* also removed the bit about cfssl in the doc

* updating cert names

* updated all cert values
 2018-12-19 12:41:25 -06:00
Hans Hasselberg acc458d7a4
Builtin tls helper (#5078) 
* command: add tls subcommand
* website: update docs and guide
 2018-12-19 09:22:49 +01:00
Jack Pearkes 564288adcc
website: highlight how to use agent certs for tls checks (#5086) 
Also clarifies that HTTP and gRPC checks both use the same
TLS configuration.
 2018-12-18 16:47:52 -08:00
Rebecca Zanzig ce82de1965 Add examples for helm chart multi-line strings 
There has been some confusion about the formating of multi-line
string variables in the Helm chart. This adds examples for these
situations, hopefully clarifying things for users.
 2018-12-18 12:46:45 -08:00
kaitlincarter-hc cb5524e1e9
Guide Update: Adding/Removing Server (#5095) 
* first draft of updated content for consul leave

* Changed the consul leave/bootstrap_expect scenario into a note
 2018-12-17 09:16:07 -06:00
Alvin Huang 87aea652f0
Merge pull request #5065 from hashicorp/clarify_separator_api 
clarify how `separator` should be in CLI and API
 2018-12-12 12:14:19 -08:00
kaitlincarter-hc 110c0c785e
Updates to the Adding/Removing Servers Guide (#5004) 
* added a new section for adding servers, updated section titles, and added code snippets.

* Fixing typos

* fixing typos

* Addressing some of Paul's feedback.

* Updated the outage recovery recommendation
 2018-12-12 09:12:29 -06:00
kaitlincarter-hc 6d81117544
Outage Recover Guide Updates. (#5003) 
* Adding examples and a summary. Minor structure updates.

* Added a link to the deployment guide, but needed to remove a sentence referring to a guide that's not published yet.

* fixed typo
 2018-12-11 14:51:24 -06:00