56 Commits (d795a73f780092c18c255b432998cc7bd009ec39)

Author	SHA1	Message	Date
Daniel Nephin	4d741531b4	Update references to the main branch ... The main branch is being renamed from master->main. This commit should update all references to the main branch to the new name. Co-Authored-By: Mike Morris <mikemorris@users.noreply.github.com>	3 years ago
Zachary Shilton	adfaf29da4	website: support hidden pages in nav-data (#10180) ... * website: bump to docs-page prerelease with hidden page support * website: replace hidden pages hot fix for /docs, /api-docs, and /commmands * website: remove unused files for old hidden pages hotfix * website: bump to stable docs-page, w next-mdx-remote bump * website: bump to latest markdown-page	4 years ago
Zachary Shilton	2cebb550b3	website: resolve unlinked content (#10087) ... * website: add back unlinked pages to match previous state * website: add unlinked content check * website: add hidden nav-data to unlinked content check	4 years ago
Zachary Shilton	8671762474	website: implement mktg 032 (#9953) ... * website: migrate to new nav-data format * website: clean up unused intro content * website: remove deprecated sidebar_title from frontmatter * website: add react-content to fix global style import issue	4 years ago
Jeff Escalante	24554d7672	update to latest deps	4 years ago
Jeff Escalante	582dce9d8f	maintenance complete, pending markdown-page component addition	4 years ago
Daniel Nephin	c5b74fcdaa	Merge pull request #9262 from hashicorp/dnephin/docs-deprecate-old-filters ... docs: deprecate some old filter parameters	4 years ago
Maksym	6a4dd3554f	fix 'agent/check/pass/my-check-id' curl example in documentation (#9372)	4 years ago
kaitlincarter-hc	7ea383fce6	Filter API Docs (#9202) ... * reorganize for clarity and update for value syntax * fix quotes around value * Apply suggestions from code review Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Apply suggestions from code review Co-authored-by: Freddy <freddygv@users.noreply.github.com> Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Freddy <freddygv@users.noreply.github.com>	4 years ago
Daniel Nephin	341552198e	docs: deprecate some old filter parameters ... The filtering can be done with the general purpose `filter` query parameter.	4 years ago
R.B. Boyer	7c7a3e5165	command: when generating envoy bootstrap configs use the datacenter returned from the agent services endpoint (#9229) ... Fixes #9215	4 years ago
Freddy	fd5928fa4e	Require operator:write to get Connect CA config (#9240) ... A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh. -- This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.	4 years ago
Matt Keeler	946cc0b82a	[docs] Change links to the DNS information to the right place (#8675) ... The redirects were working in many situations but some (INTERNALS.md) was not. This just flips everything over to using the real link.	4 years ago
R.B. Boyer	61eac21f1a	agent: return the default ACL policy to callers as a header (#9101) ... Header is: X-Consul-Default-ACL-Policy=<allow|deny> This is of particular utility when fetching matching intentions, as the fallthrough for a request that doesn't match any intentions is to enforce using the default acl policy.	4 years ago
Matt Keeler	361fe3ad20	Add some autopilot docs and update the changelog (#9139)	4 years ago
R.B. Boyer	f0d47ded95	docs: all intention documentation updates (#8869)	4 years ago
Matt Keeler	8f890bc027	Add capability for the v1/connect/ca/roots endpoint to return a PEM encoded certificate chain (#8774) ... Co-authored-by: R.B. Boyer <rb@hashicorp.com>	4 years ago
Hans Hasselberg	8f5a56e4e6	Update API docs for GET /operator/keyring (#8691) ... The response includes a new field: PrimaryKeys that lists the installed primary keys.	4 years ago
Blake Covarrubias	d21740a308	docs: Fix rendering of link under service config endpoint ... HTML and markdown cannot be present in the same line. Change markdown link to HTML anchor element.	4 years ago
Jasmine W	a9df6ac50b	docs: update structure (#8506) ... - moved and renamed files/folders based on new structure - updated docs navigation based on new structure - moved CLI to top nav (created commands.jsx and commands-navigation.js) - updated and added redirects - updating to be consistent with standalone categories - changing "overview" link in top nav to lead to where intro was moved (docs/intro) - adding redirects for intro content - deleting old intro folders - format all data/navigation files - deleting old commands folder - reverting changes to glossary page - adjust intro navigation for removal of 'vs' paths - add helm page redirect - fix more redirects - add a missing redirect - fix broken anchor links and formatting mistakes - deleted duplicate section, added redirect, changed link - removed duplicate glossary page	4 years ago
danielehc	96916a770c	Refactor api-docs links to learn (#8488)	4 years ago
Blake Covarrubias	1ec81bb20c	docs: Fix heading for list prepared queries endpoint	4 years ago
Jeff Escalante	ecc406562a	Merge pull request #8230 from hashicorp/je.pin-deps ... 📌 Hard Pin Website Dependencies	4 years ago
Chris Piraino	45a2987c6c	docs: add section for /health/ingress/:service API (#8108) ... * docs: add section for /health/ingress/:service API * Add documentation around consul version for API * docs: add note about gateway-services API release version	4 years ago
Jeff Escalante	fa135ae285	update deps, format all files	4 years ago
Seth Hoenig	95f46eb3ed	api/agent: enable setting SuccessBeforePassing and FailuresBeforeCritical in API (#7949) ... Fixes #7764 Until now these two fields could only be set through on-disk agent configuration. This change adds the fields to the agent API struct definition so that they can be set using the agent HTTP API.	4 years ago
R.B. Boyer	462f0f37ed	connect: various changes to make namespaces for intentions work more like for other subsystems (#8194) ... Highlights: - add new endpoint to query for intentions by exact match - using this endpoint from the CLI instead of the dump+filter approach - enforcing that OSS can only read/write intentions with a SourceNS or DestinationNS field of "default". - preexisting OSS intentions with now-invalid namespace fields will delete those intentions on initial election or for wildcard namespaces an attempt will be made to downgrade them to "default" unless one exists. - also allow the '-namespace' CLI arg on all of the intention subcommands - update lots of docs	4 years ago
Jono Sosulska	c8bee5a934	Fixing multiple document updates (#8135) ... * Fixes #7663-ACL Token Reloadable#7432-Cipher Suites,#7385-KV Delete DC, raft list-peers docs Co-authored-by: Freddy <freddygv@users.noreply.github.com>	5 years ago
Dexter Lowe	6e208a2120	#8059 Improve Clarity on TTL docs (#8141)	5 years ago
Matt Keeler	d3881dd754	ACL Node Identities (#7970) ... A Node Identity is very similar to a service identity. Its main targeted use is to allow creating tokens for use by Consul agents that will grant the necessary permissions for all the typical agent operations (node registration, coordinate updates, anti-entropy). Half of this commit is for golden file based tests of the acl token and role cli output. Another big updates was to refactor many of the tests in agent/consul/acl_endpoint_test.go to use the same style of tests and the same helpers. Besides being less boiler plate in the tests it also uses a common way of starting a test server with ACLs that should operate without any warnings regarding deprecated non-uuid master tokens etc.	5 years ago
freddygv	cd927eed5e	Remove unused method and fixup docs ref	5 years ago
freddygv	b2c66359ab	Add docs	5 years ago
Daniel Nephin	ce6cc094a1	intentions: fix a bug in Intention.SetHash ... Found using staticcheck. binary.Write does not accept int types without a size. The error from binary.Write was ignored, so we never saw this error. Casting the data to uint64 produces a correct hash. Also deprecate the Default{Addr,Port} fields, and prevent them from being encoded. These fields will always be empty and are not used. Removing these would break backwards compatibility, so they are left in place for now. Co-authored-by: Hans Hasselberg <me@hans.io>	5 years ago
R.B. Boyer	833211c14c	acl: allow auth methods created in the primary datacenter to optionally create global tokens (#7899)	5 years ago
Chris Piraino	6c444ba24c	Remove underscores from gateway URL paths (#7962)	5 years ago
Jeff Escalante	326ec30d68	update dependencies	5 years ago
Paul Mundt	82c391b75d	docs: Add Dart client to list of Libraries and SDKs (#7884)	5 years ago
Chris Piraino	98005a79c4	Ingress and Terminating Gateway docs (#7710) ... This PR contains documentation additions for ingress and terminating gateways. New pages for the config-entries and overall feature description were added, as well as various additions to related pages. Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com> Co-authored-by: freddygv <gh@freddygv.xyz> Co-authored-by: Freddy <freddygv@users.noreply.github.com> Co-authored-by: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>	5 years ago
R.B. Boyer	44d10e4894	docs: docs for jwt and oidc auth methods (#7847)	5 years ago
krishna sindhur	3698e03e7a	docs: header payload type change (#7763) ... * changed the header type from string to list as mentioned in doc in [website/pages/api-docs/agent/check.mdx, website/pages/docs/agent/checks.mdx]	5 years ago
Jono Sosulska	9b363e9f23	Fix spelling of deregister (#7804)	5 years ago
R.B. Boyer	a854e4d9c5	acl: oss plumbing to support auth method namespace rules in enterprise (#7794) ... This includes website docs updates.	5 years ago
R.B. Boyer	22eb016153	acl: add MaxTokenTTL field to auth methods (#7779) ... When set to a non zero value it will limit the ExpirationTime of all tokens created via the auth method.	5 years ago
R.B. Boyer	ca52ba7068	acl: add DisplayName field to auth methods (#7769) ... Also add a few missing acl fields in the api.	5 years ago
Blake Covarrubias	bf4ef056af	Add callouts to Enterprise features (#7548) ... Label all enterprise-related content with Enterprise badge/callout. Resolves #6887 Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>	5 years ago
Jeff Escalante	cc19b88288	a couple more anchor link fixes	5 years ago
Jeff Escalante	57c5118a83	update deps, add no-index category, fix downloads page	5 years ago
Jeff Escalante	6907c7e3db	fix broken links	5 years ago
Jeff Escalante	4a5d67a24e	add k8s/consul alias back, fix react prop name	5 years ago
Jeff Escalante	a8a3c76983	remove 'sidebar_current' from frontmatter	5 years ago