Fix "fail open" wording

"fail open" implies that we just allow anything if an agent gets partitioned which is not the right meaning!
This commit is contained in:
Paul Banks 2018-06-08 12:26:27 +01:00 committed by Jack Pearkes
parent 5d005df8c6
commit 12a46cd996

View File

@ -153,6 +153,8 @@ Updates to intentions are propagated nearly instantly to agents since agents
maintain a continuous blocking query in the background for intention updates
for registered services.
Because all the intention data is cached locally, the agents can fail open.
Because all the intention data is cached locally, the agents can fail static.
Even if the agents are severed completely from the Consul servers, inbound
connection authorization continues to work for a configured amount of time.
Changes to intentions will not be picked up until the partition heals, but
will then automatically take effect when connectivity is restored.