119 Commits (e72ff5dd43db1e58ec52d7ac2f7ab5b20f4054ba)

Author	SHA1	Message	Date
James Phillips	ef43044494	Adds a note about not replicating data to FAQ and federation-related spots.	7 years ago
James Phillips	224f9dd2c1	Adds links to Lifeguard info.	8 years ago
Preetha Appan	72af7b9bc4	Redo bug fix for stale reads on server startup, leveraging RPCHOldtimeout instead of maxQueryTime, plus tests	8 years ago
Frank Schroeder	df91388b7b	website: rename *.markdown to *.md	8 years ago
Frank Schroeder	f0d847572d	Fix imports on website	8 years ago
James Phillips	80ecaa573d	Fixes deep link on ACL bounce page.	8 years ago
James Phillips	9c3e643d4f	Does a complete rework of the ACL guide.	8 years ago
James Phillips	5ab7ea6f53	Deprecates the ACLs internals doc in favor of a guide.	8 years ago
Seth Vargo	7779c5942c	Link to new api	8 years ago
Seth Vargo	99c3592064	Update API docs	8 years ago
James Phillips	11ee9a9e72	Disables agent-level enforcement on Consul agents unless acl_datacenter is set.	8 years ago
James Phillips	d428bc63c1	Modifies server reconcile path to not use the server's token for internal operations.	8 years ago
needkane	0eccb354fa	occasionally->occasionally	8 years ago
James Phillips	4956a66638	Adds session policy example to ACL internals doc.	8 years ago
James Phillips	3a44d46126	Adds some basic documentation about the new ACL changes.	8 years ago
James Phillips	a3dc0965a8	Clarifies ACL replication token.	8 years ago
James Turnbull	8a145d50a3	Removed two space after period exceptions	8 years ago
James Turnbull	23a4a96ad3	Documentation pass ... I was reviewing some docs and found a few issues. 1. Fixed some spelling mistakes. 2. Re-formatted some paragraphs. 3. Changed some potentially loaded language. 4. Fixed some grammar issues. 5. Tried to consistently use syntax-highlighting. 6. Fixed post-period spacing. 7. Fixed some formatting issues and inconsistency. 8. All "notes" are either proper notes or re-written.	8 years ago
Kyle Havlovitz	345e2366eb	Add keyring api website doc sections	8 years ago
Michel Lebeau	2397c75856	Fix typo ... The double "to" was distracting	8 years ago
James Phillips	f57b84b807	Tweaks wording in lifeguard section.	8 years ago
James Phillips	c591d86dd5	Adds a section about lifeguard.	8 years ago
James Phillips	2c9885d10d	Updates documentation with details on the Consul operator actions.	8 years ago
kyhavlov	c0b5e0ee06	Fix links for ACL replication status	8 years ago
James Phillips	077f048f0c	Merge pull request #2246 from atomicpirate/patch-1 ... Minor fix: "lookup up" -> "looking up"	8 years ago
James Phillips	95930e3cb7	Merge pull request #2237 from hashicorp/f-acl-replication ... Adds ACL replication.	8 years ago
Seth Vargo	c77436ce9b	Update links to serf	8 years ago
atomicpirate	5a77daac60	Minor fix: "lookup up" -> "looking up"	8 years ago
James Phillips	c499c4e7d3	Updates documentation for ACL replication.	8 years ago
Seth Vargo	31d427f925	Update arch diagram	8 years ago
James Phillips	eeb0ca636b	Adds a note about prepared queries to the coordinates internals guide.	9 years ago
Sean Chittenden	92298e3d02	Speling police	9 years ago
James Phillips	6711662676	Adds a note about template query ACLs.	9 years ago
James Phillips	01ae1e7dfe	Merge pull request #1820 from hashicorp/f-port-docs ... Adds a reference to the network ports from the security guide.	9 years ago
James Phillips	c1de5b7a13	Adds a reference to the network ports from the security page.	9 years ago
James Phillips	dca480e284	Cleans up the documents.	9 years ago
James Phillips	483898abe5	Renames "prepared_query" ACL policy to "query".	9 years ago
James Phillips	880cd21667	Refactors docs into a more complete state for prepared query ACLs.	9 years ago
James Phillips	67de77482e	Creates new "prepared-query" ACL type and new token capture behavior. ... Prior to this change, prepared queries had the following behavior for ACLs, which will need to change to support templates: 1. A management token, or a token with read access to the service being queried needed to be provided in order to create a prepared query. 2. The token used to create the prepared query was stored with the query in the state store and used to execute the query. 3. A management token, or the token used to create the query needed to be supplied to perform and CRUD operations on an existing prepared query. This was pretty subtle and complicated behavior, and won't work for templates since the service name is computed at execution time. To solve this, we introduce a new "prepared-query" ACL type, where the prefix applies to the query name for static prepared query types and to the prefix for template prepared query types. With this change, the new behavior is: 1. A management token, or a token with "prepared-query" write access to the query name or (soon) the given template prefix is required to do any CRUD operations on a prepared query, or to list prepared queries (the list is filtered by this ACL). 2. You will no longer need a management token to list prepared queries, but you will only be able to see prepared queries that you have access to (you get an empty list instead of permission denied). 3. When listing or getting a query, because it was easy to capture management tokens given the past behavior, this will always blank out the "Token" field (replacing the contents as <hidden>) for all tokens unless a management token is supplied. Going forward, we should discourage people from binding tokens for execution unless strictly necessary. 4. No token will be captured by default when a prepared query is created. If the user wishes to supply an execution token then can pass it in via the "Token" field in the prepared query definition. Otherwise, this field will default to empty. 5. At execution time, we will use the captured token if it exists with the prepared query definition, otherwise we will use the token that's passed in with the request, just like we do for other RPCs (or you can use the agent's configured token for DNS). 6. Prepared queries with no name (accessible only by ID) will not require ACLs to create or modify (execution time will depend on the service ACL configuration). Our argument here is that these are designed to be ephemeral and the IDs are as good as an ACL. Management tokens will be able to list all of these. These changes enable templates, but also enable delegation of authority to manage the prepared query namespace.	9 years ago
csawyerYumaed	5026a40ec1	Update documentation - add Network Ports. ... Update security.html.markdown add section on Network Port usage. TODO: add Atlas port usage.	9 years ago
Seth Vargo	cae0ff354a	Use HTTPS + www. where appropriate	9 years ago
James Phillips	800e946bf1	Adds and updates docs for prepared queries.	9 years ago
James Phillips	86f56ee4a1	Adds a note about the new acquire behavior into the sessions internals guide.	9 years ago
James Phillips	cf1b9fe074	Fixes a typo.	9 years ago
James Phillips	cef9402ab9	Updates docs for network coordinates.	9 years ago
James Phillips	2f9ebdb135	Merge pull request #1187 from sfncook/enable_tag_drift_03 ... Enable tag drift 03	9 years ago
Shawn Cook	1f330add02	Doc changes in response to review.	9 years ago
Shawn Cook	598526eba2	Docs - add verbage to anti-entropy page.	9 years ago
Anthony Scalisi	10e028d599	remove various typos	9 years ago
Jack Pearkes	25f0f3cb37	website: fix broken link on acl page	9 years ago