4694 Commits (eb4bc313ee8203a8f3466d037c6c7d3c7fae1060)

Author	SHA1	Message	Date
Jeff Boruszak	bd134d0d60	Update to federation.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Jeff Boruszak	6b062ed7ad	Update to audit-logging.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Jeff Boruszak	84bf170ca3	Update to admin-partitions.mdx ... Removed references to modules in callout box at the top of the page. Edit requested by Neena Pemmaraju via Slack on 4/21/22	3 years ago
Andrew Stucki	d12b16a5fd	Add doc for proposed annotation (#12716)	3 years ago
Jeff-Apple	280b8bddf9	Add template for consul-k8s release notes.	3 years ago
David Yu	406b7e12b7	docs: small spelling typo on consul k8s compat matrix (#12840)	3 years ago
Kyle Schochenmaier	636ecf7eed	docs: update acl token generation with uuidgen (#12821) ... * update acl token generation with uuidgen	3 years ago
David Yu	5016ccb51e	docs: Update Consul K8s compatibility matrix (#12829) ... * docs: Update Consul K8s compatibility matrix Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
John Murret	cffddab0f4	Adding documentation for WAN Federation with Vault as a secrets backend (#12802) ... * Adding documentation for WAN Federation with Vault as a secrets backend * Reformatting systems integration * fixing spacing and typos * Fixing link to createFederactionSecret helm chart value * More revisions in the Systems Integration section * Systems Integration - fixing brok shell-session and adding paragraph. * More formatting in data integration section * Formatting consul config sections * Fixing verbiage near helm installations. * Changing refence to dc1 and dc2 to be primary datacenter(dc1) and secondary dataceneter (dc2) * Apply suggestions from code review Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com> Co-authored-by: David Yu <dyu@hashicorp.com> * fixing missing s in Kubernetes * Providing reason in Usage section as to why someone would look at the Systems and Data Integration sections of the vault docs * fixing highlighted linenumbers that got through off by deleting the comment line at the beginning. * fixing indentation within order lists * Add a validation step to the next steps section. * making the data integration sections for dc1 and dc2 symmetrical * PR Feedback * Adding images * Remove confusing references to Systems Integration and Data Integration pages. * Updating images to be centered * Removed confusing reference to federation secret. Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com> Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
Karl Cardenas	0b14c17c16	docs: fixed broken url	3 years ago
Bryce Kalow	380db67b14	website: remove unnecessary files (#12833)	3 years ago
David Yu	d08b5a1832	docs: remove 1.9.x row in Envoy compatibility matrix (#12828)	3 years ago
Dan Stough	76c03872b7	Fix spelling for secrurity/acl mdx.	3 years ago
Jared Kirschner	1da37d87b2	docs: use correct previous name of recovery token	3 years ago
Bryce Kalow	239c84a5c1	website: remove source code (#12806)	3 years ago
Paul Glass	90b2cb6128	Docs: IAM auth method (#12779) ... * Docs: IAM auth method Co-authored-by: Karl Cardenas <kcardenas@hashicorp.com>	3 years ago
Evan Culver	000d0621b4	connect: Add Envoy 1.22 to integration tests, remove Envoy 1.18 (#12805) ... Co-authored-by: R.B. Boyer <rb@hashicorp.com>	3 years ago
Jeff-Apple	d2c07a3dd3	Rename and re-title docs page for installing Consul API Gateway	3 years ago
Jeff-Apple	bc9bb1c5ce	Initial changes for reoranizing the Release Notes	3 years ago
Karl Cardenas	6c0846983c	docs: fixed redirect issue	3 years ago
Evan Culver	881e17fae1	connect: Add Envoy 1.21.1 to support matrix, remove 1.17.4 (#12777)	3 years ago
FFMMM	d603af774d	Update latest version on website to 1.11.5 ... Per the latest release	3 years ago
Karl Cardenas	43b548d4c1	Merge pull request #12562 from hashicorp/docs/blake-agent-config ... docs: Agent configuration hierarchy reorganization	3 years ago
FFMMM	59c25cf891	add docs for new labels (#12757)	3 years ago
John Murret	1006c8a94b	Correcting an uncapitalized word setup at the beginning of titles to be capitalized in vault section. (#12759)	3 years ago
Natalie Smith	0a51e145c1	docs: simplify agent docs slugs	3 years ago
Natalie Smith	0fcdddcd46	docs: pr feedback	3 years ago
Natalie Smith	1d8e89425e	chore: rebase updates	3 years ago
Natalie Smith	ddae7d18a2	docs: fix external links to agent config pages	3 years ago
Natalie Smith	83f9879b2d	docs: fix agent config links	3 years ago
Natalie Smith	4d4c760190	docs: arrange agent configuration file parameters into logical groups	3 years ago
Blake Covarrubias	f4c03d2340	docs: move configuration files content from agent/config/index to agent/config/agent-config-files	3 years ago
Blake Covarrubias	c5220fd184	docs: move cli content from agent/config/index to agent/config/agent-config-cli ... And add sections for logical groupings of options	3 years ago
Blake Covarrubias	caf34daa39	docs: move agent/options.mdx into agent/config/index.mdx and add placeholder .mdx files for cli/files ... Also update nav data	3 years ago
David Yu	e1db4c04d8	redirect.js: fixing redirect to new compatibility matrix for k8s (#12755)	3 years ago
David Yu	3f9b31effe	website: redirect change consul k8s compatibility matrix link (#12751)	3 years ago
David Yu	140e4f5578	docs: Upgrade Consul K8s update link to combat matrix (#12744)	3 years ago
R.B. Boyer	25ba9c147a	xds: ensure that all connect timeout configs can apply equally to tproxy direct dial connections (#12711) ... Just like standard upstreams the order of applicability in descending precedence: 1. caller's `service-defaults` upstream override for destination 2. caller's `service-defaults` upstream defaults 3. destination's `service-resolver` ConnectTimeout 4. system default of 5s Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
John Murret	62476e25fb	docs: Updating Gossip EncryptionKey Rotation page with Vault use case (#12720) ... * docs: Updating Gossip EncryptionKey Rotation page with Vault use case * Adding a note to the vault instructions linking to the gossip key encryption using Vault page. * Correcting Vault guide for storing the rotated gossip key. * adding $ to shell sessions where it is missing on the gossip rotation page * adding $ to more shell sessions where it is missing on the gossip rotation page	3 years ago
Chris Thain	1502936c12	Consul on ECS 0.4.0 (#12694) ... Update website docs for Consul on ECS 0.4.0	3 years ago
Kyle Havlovitz	9780b672da	Merge pull request #12685 from hashicorp/http-check-redirect-option ... Add a field to disable following redirects on http checks	3 years ago
John Murret	fd08b6aaf6	Update k8s docs for Vault as a Secrets Backend (#12691) ... * Updating k8s Vault as a Secrets Backend docs * Moving files in data-integration folder * Updating routes to moved files * Removing known limitations since we have delivered them. * Revise overview page to point towards the System Integration and Data Integration pages. * Updating Systems Overview page * Making corrections to Overview and Systems Integration page * Updating Data Integration page * Gossip page * Enterprise Licensepage * Bootstrap Token * Replication Token * Revisions to bootrap, replication, and enterprise license * snapshot agent page. revisiions to other data integration pages * Consul Service Mesh TLS Provider page * ServerTLS page * Spelling, grammar errors * Update website/content/docs/k8s/installation/vault/index.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/index.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/server-tls.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/connect-ca.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/gossip.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/snapshot-agent-config.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/bootstrap-token.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/connect-ca.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/enterprise-license.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/replication-token.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/data-integration/replication-token.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Updating data center to datacenter * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * interim changes * more formatting changes * adding additional formatting changes * more formatting on systems integration page * remove TODO * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: David Yu <dyu@hashicorp.com> * Update website/content/docs/k8s/installation/vault/index.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/index.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Update website/content/docs/k8s/installation/vault/systems-integration.mdx Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com> * Adding partition token * removing dangling word * Adding missing navlink for partitions page * Adding VAULT_TOKEN documentation and a note to VAULT_ADDR about https and the possible need for the VAULT_CACERT. * Fixing broken links and ordering lists * Fixing broken links. Changing pre-requisites to prerequisites. Co-authored-by: David Yu <dyu@hashicorp.com> Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>	3 years ago
Matt Keeler	a553982506	Enable running autopilot state updates on all servers (#12617) ... * Fixes a lint warning about t.Errorf not supporting %w * Enable running autopilot on all servers On the non-leader servers all they do is update the state and do not attempt any modifications. * Fix the RPC conn limiting tests Technically they were relying on racey behavior before. Now they should be reliable.	3 years ago
John Murret	25c32be517	k8s docs - ACLs refactor - Updating terminating gateway documentation to call out updating the role rather than the token with the policy (#12612) ... * k8s docs - ACLs refactor - Updating terminating gateway documentation to call out updating the role rather than the token with the policy * Modifying role and policy names based on naming convention change.	3 years ago
Kyle Havlovitz	3b44343276	Add a field to disable following redirects on http checks	3 years ago
Kyle Havlovitz	6cf22a5cef	Merge pull request #12672 from hashicorp/tgate-san-validation ... Respect SNI with terminating gateways and log a warning if it isn't set alongside TLS	3 years ago
Bryce Kalow	82d3418642	website: fix usages of img tag (#12696)	3 years ago
David Yu	d49ea7930a	docs: rename Connect Service Mesh Kubernetes to Consul Service Mesh on Kubernetes (#12690) ... * docs:rename Connect Service Mesh Kubernetes to Consul Service Mesh on Kubernetes	3 years ago
Thomas Eckert	f51c02a923	Update Helm docs to reflect 0.42.0 release (#12689) ... * Update Helm docs to reflect 0.42.0 release Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> Co-authored-by: David Yu <dyu@hashicorp.com> Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Blake Covarrubias	79144dbac6	docs: Update links to K8s service mesh annotations (#12652) ... The list of supported annotations for Consul service mesh were moved from /docs/k8s/connect to /docs/k8s/annotations-and-labels in PR #12323. This commit updates various across the site to point to the new URL for these annotations.	3 years ago
mrspanishviking	13fba7567f	Merge pull request #12687 from hashicorp/acl-fix ... docs: fixes broken url in acl overview page	3 years ago
John Murret	2bc11a5db6	Updating helm docs with additionalVault and ACLs refactor functionality. (#12669) ... * Updating helm docs with additionalVault and ACLs refactor funtionality. * PR Feedback corrections. - Fix indentation. - Fix description of secretName and secretKey to be consistent - Change description of manageACLsRole to be more clear. - Make the added vault role field descriptions consistent * PR Feedback - correcting description for adminPartitionsRole * Fixing broken shell sessions * Fixing broken shell sessions by changing shell-session tobecloser tocomment marker	3 years ago
Karl Cardenas	1db1905cb5	docs: fixes broken url in acl overview page	3 years ago
Dhia Ayachi	319fe48561	documentation for config auto reload feature (#12548) ... * add config watcher to the config package * add logging to watcher * add test and refactor to add WatcherEvent. * add all API calls and fix a bug with recreated files * add tests for watcher * remove the unnecessary use of context * Add debug log and a test for file rename * use inode to detect if the file is recreated/replaced and only listen to create events. * tidy ups (#1535) * tidy ups * Add tests for inode reconcile * fix linux vs windows syscall * fix linux vs windows syscall * fix windows compile error * increase timeout * use ctime ID * remove remove/creation test as it's a use case that fail in linux * fix linux/windows to use Ino/CreationTime * fix the watcher to only overwrite current file id * fix linter error * fix remove/create test * set reconcile loop to 200 Milliseconds * fix watcher to not trigger event on remove, add more tests * on a remove event try to add the file back to the watcher and trigger the handler if success * fix race condition * fix flaky test * fix race conditions * set level to info * fix when file is removed and get an event for it after * fix to trigger handler when we get a remove but re-add fail * fix error message * add tests for directory watch and fixes * detect if a file is a symlink and return an error on Add * rename Watcher to FileWatcher and remove symlink deref * add fsnotify@v1.5.1 * fix go mod * do not reset timer on errors, rename OS specific files * rename New func * events trigger on write and rename * add missing test * fix flaking tests * fix flaky test * check reconcile when removed * delete invalid file * fix test to create files with different mod time. * back date file instead of sleeping * add watching file in agent command. * fix watcher call to use new API * add configuration and stop watcher when server stop * add certs as watched files * move FileWatcher to the agent start instead of the command code * stop watcher before replacing it * save watched files in agent * add add and remove interfaces to the file watcher * fix remove to not return an error * use `Add` and `Remove` to update certs files * fix tests * close events channel on the file watcher even when the context is done * extract `NotAutoReloadableRuntimeConfig` is a separate struct * fix linter errors * add Ca configs and outgoing verify to the not auto reloadable config * add some logs and fix to use background context * add tests to auto-config reload * remove stale test * add tests to changes to config files * add check to see if old cert files still trigger updates * rename `NotAutoReloadableRuntimeConfig` to `StaticRuntimeConfig` * fix to re add both key and cert file. Add test to cover this case. * review suggestion Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * add check to static runtime config changes * fix test * add changelog file * fix review comments * Apply suggestions from code review Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * update flag description Co-authored-by: FFMMM <FFMMM@users.noreply.github.com> * fix compilation error * add static runtime config support * fix test * fix review comments * fix log test * Update .changelog/12329.txt Co-authored-by: Dan Upton <daniel@floppy.co> * transfer tests to runtime_test.go * fix filewatcher Replace to not deadlock. * avoid having lingering locks Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * split ReloadConfig func * fix warning message Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * convert `FileWatcher` into an interface * fix compilation errors * fix tests * extract func for adding and removing files * add a coalesceTimer with a very small timer * extract coaelsce Timer and add a shim for testing * add tests to coalesceTimer fix to send remaining events * set `coalesceTimer` to 1 Second * support symlink, fix a nil deref. * fix compile error * fix compile error * refactor file watcher rate limiting to be a Watcher implementation * fix linter issue * fix runtime config * fix runtime test * fix flaky tests * fix compile error * Apply suggestions from code review Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> * fix agent New to return an error if File watcher New return an error * add a coalesceTimer with a very small timer * extract coaelsce Timer and add a shim for testing * set `coalesceTimer` to 1 Second * add flag description to agent command docs * fix link * add Static runtime config docs * fix links and alignment * fix typo * Revert "add a coalesceTimer with a very small timer" This reverts commit d9db2fcb82. * Revert "extract coaelsce Timer and add a shim for testing" This reverts commit 0ab86012a4. * Apply suggestions from code review Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com> Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com> Co-authored-by: FFMMM <FFMMM@users.noreply.github.com> Co-authored-by: Daniel Upton <daniel@floppy.co> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
FFMMM	973d2d0f9a	mark disable_compat_1.9 to deprecate in 1.13, change default to true (#12675) ... Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>	3 years ago
Eric Haberkorn	a7d5aa94a3	Merge pull request #12680 from hashicorp/fix-k8s-dns-service-name ... Fix the Kubernetes service name for DNS	3 years ago
Eric	d7b4ed1597	Fix the Kubernetes service name for DNS	3 years ago
Kyle Havlovitz	763f728df4	Add doc examples for expanded token read CLI and API	3 years ago
Kyle Havlovitz	1a3b885027	Use the GatewayService SNI field for upstream SAN validation	3 years ago
FFMMM	64e35777e0	docs: new rpc metric (#12608)	3 years ago
Kyle Havlovitz	51527907ab	Recommend SNI with TLS in the terminating gateway docs	3 years ago
Bryce Kalow	6bf67b7ef4	website: redirect /api to /api-docs (#12660)	3 years ago
Mike Morris	7cb9bfdfa9	website(api-gateway): add common errors page (#12643) ... * Adding common errors page for API Gateway * website(api-gateway): add missing CRDs common error message * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> * Update website/content/docs/api-gateway/common-errors.mdx * Additional page editing instructions and formating * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx * Update website/content/docs/api-gateway/common-errors.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Apply suggestions from code review Co-authored-by: Jeff-Apple <79924108+Jeff-Apple@users.noreply.github.com> Co-authored-by: Nathan Coleman <nathandanielcoleman@gmail.com> Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
R.B. Boyer	e79ce8ab03	xds: adding control of the mesh-wide min/max TLS versions and cipher suites from the mesh config entry (#12601) ... - `tls.incoming`: applies to the inbound mTLS targeting the public listener on `connect-proxy` and `terminating-gateway` envoy instances - `tls.outgoing`: applies to the outbound mTLS dialing upstreams from `connect-proxy` and `ingress-gateway` envoy instances Fixes #11966	3 years ago
Matt Keeler	15ddbbc686	Update raft-boltdb to pull in new writeCapacity metric (#12646)	3 years ago
R.B. Boyer	ac5bea862a	server: ensure that service-defaults meta is incorporated into the discovery chain response (#12511) ... Also add a new "Default" field to the discovery chain response to clients	3 years ago
Mike Morris	885edde8c1	website(api-gateway): add consul namespace to helm install (#12644) ... * website: api-gateway helm install consul namespace To mirror instructions at https://learn.hashicorp.com/tutorials/consul/kubernetes-api-gateway * website(api-gateway): add notes on where to find available versions * website(api-gateway): fixup link to more clearly indicate Consul Helm chart releases * Update website/content/docs/api-gateway/api-gateway-usage.mdx	3 years ago
Michele Degges	535edfa247	[RelAPI Onboarding] Add release API metadata file (#12591)	3 years ago
mrspanishviking	7da80ddbb4	Merge pull request #12595 from hashicorp/k8s-cli-install ... docs: add link to k8s cli install page	3 years ago
Luke Kysow	c8cdebd9cc	Update consul-enterprise.mdx (#12622)	3 years ago
Mike Morris	f8a2ae2606	agent: convert listener config to TLS types (#12522) ... * tlsutil: initial implementation of types/TLSVersion tlsutil: add test for parsing deprecated agent TLS version strings tlsutil: return TLSVersionInvalid with error tlsutil: start moving tlsutil cipher suite lookups over to types/tls tlsutil: rename tlsLookup to ParseTLSVersion, add cipherSuiteLookup agent: attempt to use types in runtime config agent: implement b.tlsVersion validation in config builder agent: fix tlsVersion nil check in builder tlsutil: update to renamed ParseTLSVersion and goTLSVersions tlsutil: fixup TestConfigurator_CommonTLSConfigTLSMinVersion tlsutil: disable invalid config parsing tests tlsutil: update tests auto_config: lookup old config strings from base.TLSMinVersion auto_config: update endpoint tests to use TLS types agent: update runtime_test to use TLS types agent: update TestRuntimeCinfig_Sanitize.golden agent: update config runtime tests to expect TLS types * website: update Consul agent tls_min_version values * agent: fixup TLS parsing and compilation errors * test: fixup lint issues in agent/config_runtime_test and tlsutil/config_test * tlsutil: add CHACHA20_POLY1305 cipher suites to goTLSCipherSuites * test: revert autoconfig tls min version fixtures to old format * types: add TLSVersions public function * agent: add warning for deprecated TLS version strings * agent: move agent config specific logic from tlsutil.ParseTLSVersion into agent config builder * tlsutil(BREAKING): change default TLS min version to TLS 1.2 * agent: move ParseCiphers logic from tlsutil into agent config builder * tlsutil: remove unused CipherString function * agent: fixup import for types package * Revert "tlsutil: remove unused CipherString function" This reverts commit 6ca7f6f58d. * agent: fixup config builder and runtime tests * tlsutil: fixup one remaining ListenerConfig -> ProtocolConfig * test: move TLS cipher suites parsing test from tlsutil into agent config builder tests * agent: remove parseCiphers helper from auto_config_endpoint_test * test: remove unused imports from tlsutil * agent: remove resolved FIXME comment * tlsutil: remove TODO and FIXME in cipher suite validation * agent: prevent setting inherited cipher suite config when TLS 1.3 is specified * changelog: add entry for converting agent config to TLS types * agent: remove FIXME in runtime test, this is covered in builder tests with invalid tls9 value now * tlsutil: remove config tests for values checked at agent config builder boundary * tlsutil: remove tls version check from loadProtocolConfig * tlsutil: remove tests and TODOs for logic checked in TestBuilder_tlsVersion and TestBuilder_tlsCipherSuites * website: update search link for supported Consul agent cipher suites * website: apply review suggestions for tls_min_version description * website: attempt to clean up markdown list formatting for tls_min_version * website: moar linebreaks to fix tls_min_version formatting * Revert "website: moar linebreaks to fix tls_min_version formatting" This reverts commit 3858592742. * autoconfig: translate old values for TLSMinVersion * agent: rename var for translated value of deprecated TLS version value * Update agent/config/deprecated.go Co-authored-by: Dan Upton <daniel@floppy.co> * agent: fix lint issue * agent: fixup deprecated config test assertions for updated warning Co-authored-by: Dan Upton <daniel@floppy.co>	3 years ago
Jared Kirschner	9db69653e4	Merge pull request #12602 from hashicorp/jkirschner-hashicorp-patch-1 ... docs: make gossip threat model more visible	3 years ago
Luke Kysow	f1745c25c5	Lkysow/docs updates 2 (#12604) ... * Document intermediate_cert_ttl	3 years ago
Jared Kirschner	74b181018b	docs: make gossip threat model more visible	3 years ago
Karl Cardenas	d6778f4e63	docs: removed the word page	3 years ago
Karl Cardenas	b17b6a462a	docs: add link to k8s cli install page	3 years ago
Jared Kirschner	4f1bfeaf33	Merge pull request #12523 from Petenerd/patch-1 ... Update install.mdx	3 years ago
Michael Wilkerson	8178c38d9b	updated docs	3 years ago
Jared Kirschner	ca2afce5d6	docs: mention filtered by ACLs in affected APIs	3 years ago
Jared Kirschner	bea07bd6e7	Merge pull request #12489 from hashicorp/docs/results-filtered-by-acl-awareness-coordinate ... docs: mention filtered by ACLs in coordinate API	3 years ago
Jared Kirschner	1f9ca248e1	docs: add filtered by ACLs header curl example	3 years ago
Jared Kirschner	109ffcda26	docs: mention filtered by ACLs in coordinate API	3 years ago
David Yu	15a2204fe4	docs: Correction on rotating gossip key order per DC (#12579) ... * docs: Correction on rotating gossip key order per DC	3 years ago
David Yu	a1110845df	docs: consul-k8s Change "Consul Connect Service Mesh" to "Consul Service Mesh" (#12577)	3 years ago
David Yu	55e864d125	docs: Consul K8s Overview update (#12575) ... * docs: Consul K8s Overview update Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
David Yu	858e05e7d7	docs: Consul Service Mesh overview - rename of title and K8s getting started (#12574) ... * Consul Service Mesh overview - rename of title and K8s getting started * reformat lines	3 years ago
Dan Upton	b36d4e16b6	Support per-listener TLS configuration ⚙️ (#12504) ... Introduces the capability to configure TLS differently for Consul's listeners/ports (i.e. HTTPS, gRPC, and the internal multiplexed RPC port) which is useful in scenarios where you may want the HTTPS or gRPC interfaces to present a certificate signed by a well-known/public CA, rather than the certificate used for internal communication which must have a SAN in the form `server.<dc>.consul`.	3 years ago
Paul Glass	9140d3d1e9	Fix broken link in ECS docs	3 years ago
Jacob	ee78b5a380	Update ui-visualization.mdx	3 years ago
mrspanishviking	7180c99960	Revert "[Docs] Agent configuration hierarchy "	3 years ago
trujillo-adam	4151dc097a	fixing merge conflicts part 3	3 years ago
trujillo-adam	9cc9122be8	fixed merge conflicts pt2	3 years ago
trujillo-adam	76d55ac2b4	merging new hierarchy for agent configuration	3 years ago
Ashlee M Boyer	b9a5e10aea	Merge pull request #12484 from hashicorp/docs-amb-fix-prometheus-link ... docs: Fixing Prometheus link in docs/agent/telemetry	3 years ago
Ashlee M Boyer	70ab6215f5	Fixing Prometheus link in docs/agent/telemetry	3 years ago
Karl Cardenas	7d4ee3efae	docs: cleaned up code blocks and added two sentences to the intro	3 years ago
Kyle Schochenmaier	d6792f14a3	update docs (#12543)	3 years ago
trujillo-adam	c46bdbd600	Merge pull request #12460 from hashicorp/docs-day-acl-improvements ... Docs day acl improvements	3 years ago
trujillo-adam	b5745c1ac6	few more tweaks	3 years ago
trujillo-adam	4083ce71af	Apply suggestions from code review ... Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
trujillo-adam	4f76c72c58	Apply suggestions from code review ... Co-authored-by: Chris S. Kim <ckim@hashicorp.com>	3 years ago
Petenerd	053990097a	Update install.mdx ... missing a quote escape	3 years ago
Karl Cardenas	99a50b9ca1	docs: replaced ceiling with the word max	3 years ago
Karl Cardenas	1de64468d9	docs: updated the text based on feedback from PM	3 years ago
Karl Cardenas	c8badedbf7	docs: adding text for maximum number of admin partitions	3 years ago
Blake Covarrubias	9a0c2dee60	docs: Update Kubernetes YAML examples in UI visualization (#12419) ... * Update Kubernetes related YAML config examples to document supported syntax in the latest version of the Helm chart. * Fix syntax in JSON example configs. Resolves #12403 Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Blake Covarrubias	96b47aee79	docs: Clarify configuration options apply to agent ... Recently there have been a handful of GitHub issues and Discuss posts where users have expected the `consul` CLI to make use of config options defined in the agent configuration files, and are confused when it does not honor those config options. This change clarifies that command-line and configuration file options documented on the /agent/options page only apply to the Consul agent, instead of the Consul CLI.	3 years ago
David Yu	e6e168b3e6	docs: Envoy 'compatibility' typo (#12513)	3 years ago
David Yu	fb18aa5529	docs: bump Envoy for 1.10.x (#12472) ... * docs: bump Envoy for 1.10.x * update security notes and remove previous versions older than n-2 Envoy 1.9.0 and older have last vulnerability. * Update envoy.mdx * Update envoy.mdx * Update envoy.mdx * Update envoy.mdx * formatting * Update website/content/docs/connect/proxies/envoy.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> * Update website/content/docs/connect/proxies/envoy.mdx Co-authored-by: Blake Covarrubias <blake@covarrubi.as> Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
Petenerd	165089eab2	Update install.mdx ... missing comma	3 years ago
David Yu	c8865be799	docs: consul-k8s service mesh overview - move verification section (#12500)	3 years ago
Luke Kysow	16085d7eee	Update exported-services.mdx (#12499)	3 years ago
trujillo-adam	ed4f66b4d7	added some ACL example use cases to policy section	3 years ago
Eddie Rowe	28c78c52a2	Remove deprecated built-in proxy tutorial reference	3 years ago
trujillo-adam	e9a42df7c7	renamed acl-overview to index, fixed formatting, reworded node/service ID intros	3 years ago
trujillo-adam	4331a29f95	Apply suggestions from code review ... Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
trujillo-adam	7e98a0dc7b	fixing merge conflicts	3 years ago
Evan Culver	d041559fce	Update latest version on website to 1.11.4 (#12469)	3 years ago
Jared Kirschner	9c74f14061	Merge pull request #12455 from hashicorp/docs/enterprise-license-faq-improvements ... Enterprise license FAQ improvements	3 years ago
Jared Kirschner	728b04427c	docs: clarify trial license FAQ ... Also use consistent language throughout to refer to the non-production license (just "trial" license, not both "trial" and "evaluation").	3 years ago
Kyle Schochenmaier	4e24143b89	update helm docs for release 0.41.1 (#12465) ... * update helm docs for release 0.41.1 * apply escape on <ip>:<port> Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
Jared Kirschner	fb228cbeae	docs: add FAQ for obtaining copy of license ... For existing enterprise customers who need access to the license.	3 years ago
Jared Kirschner	9d64dab443	docs: add license renewal FAQ	3 years ago
Jared Kirschner	e8cb3a8156	docs: clarify license expiration behavior ... Also corrects the grace period between expiration and termination (10 years, not 24 hours).	3 years ago
Evan Culver	522676ed8d	connect: Update supported Envoy versions to include 1.19.3 and 1.18.6	3 years ago
Evan Culver	b95f010ac0	connect: Upgrade Envoy 1.20 to 1.20.2 (#12443)	3 years ago
Jeff-Apple	263357f7d5	Merge pull request #12416 from hashicorp/api-gateway-ga-docs ... website: update API Gateway docs for v0.1.0 GA release	3 years ago
Jeff-Apple	eea07af17a	Update website/content/docs/api-gateway/index.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	31e6ec62f0	Update website/content/docs/api-gateway/api-gateway-usage.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	6f80f9c4a7	Update website/content/docs/api-gateway/api-gateway-usage.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	7e515eef97	Update website/content/docs/api-gateway/index.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	f56981baf5	Update website/content/docs/api-gateway/api-gateway-usage.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
Jeff-Apple	ba36bdc2e5	Update website/content/docs/api-gateway/api-gateway-usage.mdx ... Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>	3 years ago
mrspanishviking	1f6651fac5	Merge pull request #12441 from hashicorp/retry-docs ... docs: added example for service-router retry	3 years ago
Jeff-Apple	5bc1e75e8f	Updated helm chart version number and a minor edit	3 years ago
Karl Cardenas	48c60946f9	docs: added example for service-router retry	3 years ago
Jeff-Apple	cc00e5e403	Minor edits and additions to the API Gateway docs.	3 years ago
David Yu	705f193f3f	docs: set tproxy annotation to false for multi-port (#12431)	3 years ago
Nitya Dhanushkodi	00c7f4f834	add multiport docs for K8s (#12428) ... * add multiport docs for K8s * add formatting Co-authored-by: David Yu <dyu@hashicorp.com>	3 years ago
John Murret	b52aaf153a	Adding documentation to store Enterprise License in Vault (#12375) ... * Adding documentation to store Enterprise License in Vault * Update website/content/docs/k8s/installation/vault/enterprise-license.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Update website/content/docs/k8s/installation/vault/enterprise-license.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Update website/content/docs/k8s/installation/vault/enterprise-license.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Update website/content/docs/k8s/installation/vault/enterprise-license.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Update website/content/docs/k8s/installation/vault/enterprise-license.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Update website/content/docs/k8s/installation/vault/enterprise-license.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Referencing Storing the Enterprise License in Vault from the Consul Enterprise installation instructions. * Added missing words about stroing in Vault * Update website/content/docs/k8s/installation/vault/enterprise-license.mdx Co-authored-by: Kyle Schochenmaier <kschoche@gmail.com> * Clarifying that enterprise code block is just changes on top of your normal config. Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> Co-authored-by: Kyle Schochenmaier <kschoche@gmail.com>	3 years ago
John Murret	f956e66207	Updating consul on k8s to remove known limitations of serverAdditionalDNSSans and serverAdditionalIPSans (#12338)	3 years ago
lornasong	c8d0301dd5	nia/docs 0.5.0 (#12381) ... * docs/nia: new configuration for services condition & source_input (#11646) * docs/nia: new configuration for services condition * docs/nia: new configuration for services source_input * reword filter and cts_user_defined_meta Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Update service block config to table format Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Remove deprecated driver.working_dir (#11831) * Deprecate workspace_prefix for now workspaces.prefix (#11836) * docs/nia: new config field names for services condition/source_input (#11896) * docs/nia: new config field `names` for services condition/source_input * Remove language about 'default condition' and services condition relation to services list Context: - Added a new `names` field to condition/source_input "services" - `names` or `regexp` must be configured for condition/source_input "services" This therefore: - Removed relationship between condition/source_input "services" and task.services list - Removed concept of "default condition" i.e. condition "services" must be configured with `names` or `regexp`, there is no meaningful unconfigured default Change: remove language regarding "default condition" and relationship with services list * docs/nia: Update paramters to table format Changes from a bulleted list to a table. Also adds the possible response codes and fixes the update example response to include the inspect object. * docs/nia: Delete task API and CLI * docs/nia: Update wording for run values Co-authored-by: Michael Wilkerson <62034708+wilkermichael@users.noreply.github.com> * docs/nia: require condition "catalog-services" block's regexp to be configured (#11915) Changes: - Update Catalog Services Condition configuration docs to new table format - Rewrite `regexp` field docs to be required, no longer optional - Remove details about `regexp` field's original default behavior when the field was optional * docs/nia: Update status API docs to table format * Cleaner wording for response descriptions Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * docs/nia - 'source_includes_var' changes (#11939) * docs/nia - condition "services" new field source_includes_var - Add new configuration details for condition "services" block's `source_includes_var` field. - Note: this field's description is worded differently from condition type's `source_includes_var` since a services variable is always required (unlike other vars) for CTS modules. - Also worded in a way to anticipate renaming to `use_as_module_input` * docs/nia - change 'source_includes_var' default value from false to true - Update configs - Table-ify Consul-KV condition (reuse wording from Consul-KV source input) * docs/nia - reword task execution page for source_includes_var changes - Note: switched to using "module input" language over "source input" language. Separate PR will make a mass change across docs - Slim down general task condition section to have fewer details on module input - Updated services, catalog-services, and consul-kv condition sections for source_includes_var - Add config page links for details * Improve CTS acronym usage - Use Consul-Terraform-Sync at the first instance with CTS in brackets - Consul-Terraform-Sync (CTS) and then CTS for all following instances on a per-page basis. - some exceptions: left usage of the term `Consul-Terraform-Sync` in config examples and where it made sense for hyperlinking * Improve CTS acronym usage (part 2) (#11991) Per page: - At first instance in text, use "Consul-Terraform-Sync (CTS)" - Subsequent instances in text, use "CTS" * Update schedule condition config to table format * Update config tables with type column * docs/nia: Update required fields values Standardizing Required/Optional over boolean values. * docs/nia: Standardize order of columns Updated Required to come before Type, which is how the configurations are formatted. Also changed the empty strings to "none" for default values. * Deprecate port CLI option for CTS and updated example usage * docs/nia cts multiple source input configuration updates (#12158) * docs/nia cts multiple source input configuration updates CTS expanded its usage of `source_input` block configurations and added some restrictions. This change accounts for the following changes: - `source_input` block can be configured for a task. No longer restricting to scheduled task - Multiple `source_input` blocks can be configured for a task. No longer restricting to one - Task cannot have multiple configurations defining the same variable type Future work: We're planning to do some renaming from "source" to "module" for v0.5. These changes are made in the code and not yet in the docs. These will be taken care of across our docs in a separate PR. Perpetuating "source" in this PR to reduce confusion. * Apply suggestions from code review Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Apply suggestions from code review Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * code review feedback Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> * Add "Consul object" glossary entry Changes: - Add "Consul object" to CTS glossary - Format glossary terms so that they can be linked - Add link to "Consul object" glossary entry * Reorganize source_input limitations section Co-authored-by: findkim <6362111+findkim@users.noreply.github.com> Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: findkim <6362111+findkim@users.noreply.github.com> * docs/nia: overview of config streamlining deprecations (#12193) * docs/nia: overview of config streamlining deprecations * Update config snippets to use CodeTabs * Apply code review feedback suggestions Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Apply suggestions from code review Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Clarify source table language * Add use_as_module_input callout Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * docs/nia: deprecate "services" field and "service" block (#12234) * Deprecate `services` field Did a search on "`services`", "`task.services`", "services list", and "services field" Changes: - In config docs, mark `services` field as deprecated and `condition` block as required. - For necessary references to `services` field, mark with "(deprecated)" e.g. when listing all options for source input - Remove unnecessary references to `services` field from docs e.g. any docs encouraging use of `services` - Replace `services` field with `condition` / `module_input` "services" in config snippets and explanations * Deprecate `service` block Did a search for "service block", "`service`", and "service {" Changes: - In config docs, mark `service` block as deprecated - For necessary references to `service` block, mark with "(deprecated)" - Remove unnecessary references to `service` block from docs * Fix service block typos in config snippet service block is singular and not plural * docs/nia: deprecate "source includes var" and "source input" (#12244) * Deprecate `source_includes_var` field Did a search for "source_includes_var" and an audit of "include" Changes - In config docs, mark `source_includes_var` field as deprecated - In config docs, add new field for `use_as_module_input` - For necessary references to `source_includes_var`, mark with "(deprecated)" - Audit and update "include" language * Deprecate `source_input` field and language Did a search and replace for "source_input", "source-input", "source input" Changes: - In config docs, mark `source_input` field as deprecated - In config docs, add new entry for `module_input` - For necessary references to `source_input`, mark with "(deprecated)" - Remove or replace "source*input" with "module*input" Note: added an anchor link alias e.g. `# Module Input ((#source-input))` for headers that were renamed from "Source Input" so that bookmarked links won't break * Update config streamlining release removal version to 0.8 * remove duplicate bullet * docs/nia: deprecate `source` (#12245) * Update "source" field in config snippets to "module" * Deprecate task config `source` field Did a search and replace for "source" and "src" Changes: - In config docs, mark `source` field as deprecated - In config docs, add new entry for `module` - Remove or replace "source" with "module" * Deprecate Status API Event `source` field Changes: - Mark `source` field as deprecated - Add new entry for `module` * docs/nia - Get Task API docs & Task Status API deprecations (#12303) * docs/nia - Get Task API Added a Task Object section intended to be shared with the Create Task API * docs/nia - Deprecate non-status fields from Task Status API Deprecate the fields that Get Task API replaces * docs/nia - Align API docs on `:task_name` request resource Followed a convention found in Nomad docs * docs/nia - misc fixes Context for some: - remove "" from license_path for consistency - do not specify the default value when empty string - remove "optional" language from task condition. we want to move towards it being required * docs/nia - add new columns to API Task Object * Added Create Task API documentation * Added create task CLI documentation * addressed code review comments * fixed example * docs/nia: Update task delete with async behavior CTS delete task command is now asynchronous, so updating docs to reflect this new behavior. * update create task CLI with new changes from code * update create task api and cli - update curl command to include the json header - update example task names to use 'task_a' to conform with other examples * docs/nia: Fix hyphens in CTS CLI output * docs/nia: Add auto-approve option in CLI * docs/nia: Clarify infrastructure is not destroyed on task deletion Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com> Co-authored-by: Kim Ngo <6362111+findkim@users.noreply.github.com> Co-authored-by: Melissa Kam <mkam@hashicorp.com> Co-authored-by: Melissa Kam <3768460+mkam@users.noreply.github.com> Co-authored-by: Michael Wilkerson <62034708+wilkermichael@users.noreply.github.com> Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> Co-authored-by: Michael Wilkerson <mwilkerson@hashicorp.com> Co-authored-by: AJ Jwair <aj.jwair@hashicorp.com>	3 years ago
Eric Haberkorn	a16f665f0f	Merge pull request #12228 from hashicorp/ecs-resource-usage ... Document Consul ECS Resource Usage	3 years ago
trujillo-adam	94a7963de7	merged the k8s features section into the overview	3 years ago
trujillo-adam	e2266e5a39	separating usage from overview content	3 years ago
Andrew Stucki	4d17e10692	Update website/content/docs/api-gateway/kubernetes-features.mdx ... Co-authored-by: Jeff-Apple <79924108+Jeff-Apple@users.noreply.github.com>	3 years ago
Andrew Stucki	be6528e80b	Update website/content/docs/api-gateway/kubernetes-features.mdx ... Co-authored-by: Jeff-Apple <79924108+Jeff-Apple@users.noreply.github.com>	3 years ago
Andrew Stucki	1c3cdfc39c	Add links to sections of the spec	3 years ago
Andrew Stucki	51225a3476	Add k8s features	3 years ago
Nathan Coleman	429427be09	Merge branch 'main' into api-gateway-ga-docs	3 years ago