mirror of https://github.com/status-im/consul.git
website: document the precedence table
This commit is contained in:
parent
028aa78e83
commit
f6685177f0
|
@ -128,6 +128,7 @@ $ curl \
|
||||||
"DefaultAddr": "",
|
"DefaultAddr": "",
|
||||||
"DefaultPort": 0,
|
"DefaultPort": 0,
|
||||||
"Meta": {},
|
"Meta": {},
|
||||||
|
"Precedence": 9,
|
||||||
"CreatedAt": "2018-05-21T16:41:27.977155457Z",
|
"CreatedAt": "2018-05-21T16:41:27.977155457Z",
|
||||||
"UpdatedAt": "2018-05-21T16:41:27.977157724Z",
|
"UpdatedAt": "2018-05-21T16:41:27.977157724Z",
|
||||||
"CreateIndex": 11,
|
"CreateIndex": 11,
|
||||||
|
@ -175,6 +176,7 @@ $ curl \
|
||||||
"DefaultAddr": "",
|
"DefaultAddr": "",
|
||||||
"DefaultPort": 0,
|
"DefaultPort": 0,
|
||||||
"Meta": {},
|
"Meta": {},
|
||||||
|
"Precedence": 9,
|
||||||
"CreatedAt": "2018-05-21T16:41:27.977155457Z",
|
"CreatedAt": "2018-05-21T16:41:27.977155457Z",
|
||||||
"UpdatedAt": "2018-05-21T16:41:27.977157724Z",
|
"UpdatedAt": "2018-05-21T16:41:27.977157724Z",
|
||||||
"CreateIndex": 11,
|
"CreateIndex": 11,
|
||||||
|
|
|
@ -81,10 +81,22 @@ Created At: Friday, 25-May-18 02:07:51 CEST
|
||||||
## Precedence and Match Order
|
## Precedence and Match Order
|
||||||
|
|
||||||
Intentions are matched in an implicit order based on specificity, preferring
|
Intentions are matched in an implicit order based on specificity, preferring
|
||||||
deny over allow. The full precedence table is shown below and is evaluated
|
deny over allow. Specificity is determined by whether a value is an exact
|
||||||
top to bottom.
|
specified value or is the wildcard value `*`.
|
||||||
|
The full precedence table is shown below and is evaluated
|
||||||
|
top to bottom, with larger numbers being evaluated first.
|
||||||
|
|
||||||
TODO
|
| Source Name | Destination Name | Precedence |
|
||||||
|
| ----------- | ---------------- | ---------- |
|
||||||
|
| Exact | Exact | 9 |
|
||||||
|
| `*` | Exact | 8 |
|
||||||
|
| Exact | `*` | 6 |
|
||||||
|
| `*` | `*` | 5 |
|
||||||
|
|
||||||
|
The precedence value can be read from the [API](/api/connect/intentions.html)
|
||||||
|
after an intention is created.
|
||||||
|
Precedence cannot be manually overridden today. This is a feature that will
|
||||||
|
be added in a later version of Consul.
|
||||||
|
|
||||||
## Intention Management Permissions
|
## Intention Management Permissions
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue