consul/docs
R.B. Boyer ef6f2494c7
resource: allow for the ACLs.Read hook to request the entire data payload to perform the authz check (#18925)
The ACLs.Read hook for a resource only allows for the identity of a 
resource to be passed in for use in authz consideration. For some 
resources we wish to allow for the current stored value to dictate how 
to enforce the ACLs (such as reading a list of applicable services from 
the payload and allowing service:read on any of them to control reading the enclosing resource).

This change update the interface to usually accept a *pbresource.ID, 
but if the hook decides it needs more data it returns a sentinel error 
and the resource service knows to defer the authz check until after
 fetching the data from storage.
2023-09-22 09:53:55 -05:00
..
acl
cli
client-agent
cluster-federation
cluster-membership
config OSS -> CE (community edition) changes (#18517) 2023-08-22 09:46:03 -05:00
contributing
debug
http-api
persistence OSS -> CE (community edition) changes (#18517) 2023-08-22 09:46:03 -05:00
resources resource: allow for the ACLs.Read hook to request the entire data payload to perform the authz check (#18925) 2023-09-22 09:53:55 -05:00
rpc
service-discovery fix: missing UDP field in checkType (#14885) 2022-10-05 15:57:21 -04:00
service-mesh docs: add envoy to the proxycfg diagram (#16834) 2023-04-04 09:42:42 -04:00
README.md update readme.md (#18191) 2023-07-19 18:24:55 -04:00
consul-mermaid-theme.json
faq.md
overview.mmd
overview.svg

README.md

Consul Developer Documentation

See our contributing guide to get started.

This directory contains documentation intended for anyone interested in understanding, and contributing changes to, the Consul codebase.

Overview

This documentation is organized into the following categories. Each category is either a significant architectural layer, or major functional area of Consul. These documents assume a basic understanding of Consul's feature set, which can be found in the public user documentation.

Overview

source

Contents

  1. Command-Line Interface (CLI)
  2. HTTP API
  3. Agent Configuration
  4. RPC
  5. Cluster Persistence
  6. Resources and Controllers
  7. Client Agent
  8. Service Discovery
  9. Service Mesh (Connect)
  10. Cluster Membership
  11. Key/Value Store
  12. ACL
  13. Multi-Cluster Federation

Also see the FAQ.

Other Docs

  1. Integration Tests
  2. Upgrade Tests
  3. Remote Debugging Integration Tests
  4. Peering Common Topology Tests

Important Directories

Most top level directories contain Go source code. The directories listed below contain other important source related to Consul.

  • ui contains the source code for the Consul UI.
  • website contains the source for consul.io. A pull requests can update the source code and Consul's documentation at the same time.
  • .github contains the source for our CI and GitHub repository automation.
  • .changelog contains markdown files that are used by hashicorp/go-changelog to produce the CHANGELOG.md.
  • build-support contains bash functions and scripts used to automate. development tasks. Generally these scripts are called from the Makefile.
  • grafana contains the source for a Grafana dashboard that can be used to monitor Consul.

Contributing to these docs

This section is meta documentation about contributing to these docs.

Diagrams

The diagrams in these documents are created using the mermaid-js live editor. The mermaid-js docs provide a complete reference for how to create and edit the diagrams. Use the consul-mermaid-theme.json (paste it into the Config tab in the editor) to maintain a consistent Consul style for the diagrams.