Commit Graph

3463 Commits

Author SHA1 Message Date
Freddy fd5928fa4e
Require operator:write to get Connect CA config (#9240)
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that operators with `operator:read` ACL permissions are able to read the Consul Connect CA configuration when explicitly configured with the `/v1/connect/ca/configuration` endpoint, including the private key. This allows the user to effectively privilege escalate by enabling the ability to mint certificates for any Consul Connect services. This would potentially allow them to masquerade (receive/send traffic) as any service in the mesh.

--

This PR increases the permissions required to read the Connect CA's private key when it was configured via the `/connect/ca/configuration` endpoint. They are now `operator:write`.
2020-11-19 10:14:48 -07:00
Kit Patella 0cc8d8e0a1
Merge pull request #9091 from scellef/correct-upgrade-guide
Correcting text on when default was changed in Consul
2020-11-18 16:54:48 -08:00
Nitya Dhanushkodi d24be614e5
Add docs for envoyExtraArgs (#9206) 2020-11-18 15:40:39 -08:00
Matt Keeler 66fd23d67f
Refactor to call non-voting servers read replicas (#9191)
Co-authored-by: Kit Patella <kit@jepsen.io>
2020-11-17 10:53:57 -05:00
Matt Keeler 946cc0b82a
[docs] Change links to the DNS information to the right place (#8675)
The redirects were working in many situations but some (INTERNALS.md) was not. This just flips everything over to using the real link.
2020-11-17 10:03:00 -05:00
Luke Kysow 11db2b37c3
Docs for upgrading to CRDs (#9176)
* Add Upgrading to CRDs docs
2020-11-13 15:19:21 -08:00
Kent 'picat' Gruber 53e0683ae6
Merge pull request #9106 from hashicorp/security-model-docs-revamp
Revamp Security Model Documentation
2020-11-13 17:30:24 -05:00
Mike Morris 96df6a7bf5 Merge pull request #9155 from hashicorp/release/1.9.0-beta3
merge: 1.9.0-beta3
2020-11-13 16:45:50 -05:00
Iryna Shustava 491a1ab877
docs: add link to the OpenShift platform guide to k8s docs (#9177) 2020-11-12 15:06:25 -08:00
Kyle Schochenmaier a3653a7ae2
Docs: for consul-k8s health checks (#8819)
* docs for consul-k8s health checks

Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2020-11-12 16:55:44 -06:00
Nitya Dhanushkodi 5d31e2d766
Update compatibility matrix
Co-authored-by: Ashwin Venkatesh <ashwin@hashicorp.com>
2020-11-12 14:43:33 -08:00
R.B. Boyer 61eac21f1a
agent: return the default ACL policy to callers as a header (#9101)
Header is: X-Consul-Default-ACL-Policy=<allow|deny>

This is of particular utility when fetching matching intentions, as the
fallthrough for a request that doesn't match any intentions is to
enforce using the default acl policy.
2020-11-12 10:38:32 -06:00
Paul Banks 3f37a3132e
Update ui-visualization.mdx 2020-11-12 15:52:24 +00:00
Matt Keeler 7ef9b04f90
Add a CLI command for retrieving the autopilot configuration. (#9142) 2020-11-11 13:19:02 -05:00
Joel Watson 81fb937e4f
Merge pull request #9098 from hashicorp/watsonian/kv-size-breakdown
Add detailed key size breakdown to snapshot inspect
2020-11-11 11:34:45 -06:00
Joel Watson 2e654a1759 docs: add warning in 0.9.0 upgrade notes 2020-11-11 09:23:43 -05:00
Joel Watson 6957056911 Missed a spot with old params in docs 2020-11-10 11:22:45 -06:00
Joel Watson 1ef259b093 Rename params to better reflect their purpose 2020-11-10 10:44:09 -06:00
Joel Watson 5ad0db73c8 Make docs for params clearer 2020-11-10 10:35:24 -06:00
Matt Keeler 361fe3ad20
Add some autopilot docs and update the changelog (#9139) 2020-11-09 14:14:19 -05:00
Matt Keeler c048e86bb2
Switch to using the external autopilot module 2020-11-09 09:22:11 -05:00
Mike Morris 75019baadd
chore: upgrade to gopsutil/v3 (#9118)
* deps: update golang.org/x/sys

* deps: update imports to gopsutil/v3

* chore: make update-vendor
2020-11-06 20:48:38 -05:00
Mike Morris 9875846509
website: update callout to 1.9.0-beta2 (#9131) 2020-11-06 20:39:25 -05:00
Kent 'picat' Gruber 81efada5c3 Adjust the ACLs requirement section wording and add link to ACL docs
It's better to avoid the ambiguous Vault statement that was not clarified and drop the loaded "roles" term in favor of "capabilities" since the ACL system is described as capability-based in previous ACL documentation.
2020-11-06 16:25:21 -05:00
Paul Banks b5dbeff784
UI Metrics documentation (#9048)
* UI Metrics documentation

* Update website/pages/docs/connect/observability/ui-visualization.mdx

* Fix some review comments

* Fix review comments

* Apply suggestions from code review

Co-authored-by: R.B. Boyer <rb@hashicorp.com>

Co-authored-by: R.B. Boyer <rb@hashicorp.com>
2020-11-06 20:32:28 +00:00
Kent 'picat' Gruber facd48b486 Use the EnterpriseAlert inline widget 2020-11-06 10:47:22 -05:00
Kent 'picat' Gruber fd29187499 Add mention of auto_encrypt to mTLS requirements 2020-11-06 10:15:26 -05:00
Kent 'picat' Gruber c7c151f789 Fix sublist format for client agent threats 2020-11-05 16:41:15 -05:00
Kent 'picat' Gruber 05b34a3cf0 Add link to the keygen command 2020-11-05 16:34:32 -05:00
Kent 'picat' Gruber a06768f582 Use short link to keyring command 2020-11-05 16:33:04 -05:00
Kent 'picat' Gruber d0e4e7a6ff Add link to default_policy with code format to ACLs requirement section 2020-11-05 16:30:00 -05:00
Kent 'picat' Gruber cc58a73716 Cleanup verify_server_hostname mTLS requirement 2020-11-05 16:27:23 -05:00
Kent 'picat' Gruber e0a9e329e5 Add extra clarification around verify_incoming_https for localhost
In many cases access to localhost is restricted to trusted/privellged actors only
2020-11-05 16:20:41 -05:00
Kent 'picat' Gruber 84a345324c Fix inline links + format in mTLS requirements section 2020-11-05 16:09:07 -05:00
Kent 'picat' Gruber 7a7f0425a1 Capitalize enterprise and add link to enerprise docs 2020-11-05 16:03:14 -05:00
Kent 'picat' Gruber e51dbbf529 Soften language by replacing utilize with use 2020-11-05 15:59:53 -05:00
Kim Ngo 52f3714c7a
Fix NIA doc links (#9110)
fix config link and anchor
2020-11-05 13:35:57 -06:00
Jimmy Merritello 80c9f54bbc
Bump HSM version (#9102) 2020-11-05 11:48:12 -06:00
Joel Watson 52ea53f95e Update docs with new flags 2020-11-05 10:31:36 -06:00
Kent 'picat' Gruber 8c2f2ca806 Actually fix spelling of recommendations
I obviously have no idea how to spell this word
2020-11-05 11:13:14 -05:00
Kent 'picat' Gruber 2d0be0c7a0 Fix spelling of recomendations
Thank you @rboyer!
2020-11-04 17:44:51 -05:00
Kent 'picat' Gruber 961f475de2 Revamp security model documentation 2020-11-04 17:05:44 -05:00
Sean Ellefson acc6cfaaf6 Correcting text on when default was changed in Consul 2020-11-02 15:10:34 -08:00
Alvin Huang ea88956c9c
use hashicorp docker mirror to prevent rate limit (#9070) 2020-10-30 17:59:13 -04:00
s-christoff 79ce24e9fc
cli: Add JSON and Pretty Print formatting for `consul snapshot inspect` (#9006) 2020-10-29 11:31:14 -05:00
Kim Ngo a670f7a098
docs: Add links in CTS docs for the community to get involved (#9060) 2020-10-29 10:07:20 -05:00
Daniel Nephin 7b9ee25956
Merge pull request #9026 from hashicorp/dnephin/streaming-without-cache-query-param
streaming: rename config and remove requirement for cache=1
2020-10-28 12:33:25 -04:00
Daniel Nephin 62c9124011 docs: Add the new metrics to telemetry.mdx 2020-10-27 16:49:50 -04:00
Kevin Pruett 5637683f5d
Merge pull request #9021 from hashicorp/pruett.alertbanner-exp
Expose `expirationDate` prop in <AlertBanner/>
2020-10-26 16:08:23 -04:00
Mike Morris bc6fcfaf75
website: update version.js (#9034) 2020-10-26 10:58:25 -04:00
Kim Ngo 47009930a2
NIA: add Terraform version compatibility (#9023) 2020-10-26 09:46:34 -05:00
Daniel Nephin 853667e7d8 health: change the name of UseStreamingBackend config
Remove it from the cache section, and update the docs.
2020-10-23 17:47:01 -04:00
Kevin Pruett 6a946ec6e4
Expose `expirationDate` prop in <AlertBanner/> 2020-10-23 11:19:41 -04:00
James Light 5b10046418
Update managed-deprecated.mdx (#9016)
fix typo / spell checker replacing w/ wrong word
2020-10-23 10:54:16 -04:00
R.B. Boyer a2c50d3303
connect: add support for envoy 1.16.0, drop support for 1.12.x, and bump point releases as well (#8944)
Supported versions will be: "1.16.0", "1.15.2", "1.14.5", "1.13.6"
2020-10-22 13:46:19 -05:00
Kim Ngo 8ffebeb793
NIA: document daemon exiting on task errors (#8985) 2020-10-22 13:22:55 -05:00
Blake Covarrubias 0c6d1ff3c9
Add extraEnvironmentVars and client.affinity to Helm values (#8997)
Document client.extraEnvironmentVars, server.extraEnvironmentVars, and
client.affinity Helm chart values.

Remove deprecated connectInject.imageEnvoy and meshGateway.imageEnvoy
values.
2020-10-21 23:28:39 -07:00
Blake Covarrubias bdd5e1e2a8 docs: Remove sentence about pluggable CAs
Consul's Connect CA documentation mentions future releases will
support a pluggable CA system. This sentence has existed in the docs
for over two years, however there are currently no plans to develop
this feature on the near-term roadmap.

This commit removes this sentence to avoid giving the impression that
this feature will be available in an upcoming release.
2020-10-20 11:51:22 -07:00
Jasmine W d26b1c1ce3
Merge pull request #8959 from hashicorp/docs-update-api-cli
Update docs-navigation.js
2020-10-20 11:45:33 -04:00
Sabeen Syed 37cfa479d8
Update links (#8949) 2020-10-19 14:38:10 -05:00
Sabeen Syed a3f8aa20dd
Add A10 and Checkpoint TF modules (#8950) 2020-10-15 16:11:09 -05:00
Luke Kysow 812fe06d6c
Update to CRD docs (#8956)
* Update to CRD docs

* Update website/pages/docs/k8s/crds.mdx

* Modify proxy default and service default protocols

Carry over from previous PR that I forgot to submit a review/suggestion to, TCP and HTTP are not valid protocols for Proxy Defaults and Service Defaults

kubectl apply -f sdefault.yml
Error from server: error when creating "sdefault.yml": admission webhook "mutate-servicedefaults.consul.hashicorp.com" denied the request: servicedefaults.consul.hashicorp.com "your-service-name" is invalid: spec.expose.paths[0].protocol: Invalid value: "tcp": must be one of "http", "http2"


kubectl apply -f sdefault.yml
Error from server: error when creating "sdefault.yml": admission webhook "mutate-servicedefaults.consul.hashicorp.com" denied the request: servicedefaults.consul.hashicorp.com "your-service-name" is invalid: spec.expose.paths[0].protocol: Invalid value: "tcp": must be one of "http", "http2"

Co-authored-by: David Yu <dyu@hashicorp.com>
2020-10-15 10:35:26 -07:00
Jimmy Merritello 4d535efb49
Update HSM version w/ Waypoint (#8971) 2020-10-15 12:07:33 -05:00
Brandon Romano b5ea5d0841 Update banner for Consul 1.9 2020-10-14 16:31:58 -07:00
Kit Patella dc8beffb48 truncate jepsen.mdx log for length 2020-10-14 13:13:38 -07:00
Jimmy Merritello 81554b2edf
[Website] Bump HSM version (#8957)
* Bump HSM version

* New pkg
2020-10-14 13:25:16 -05:00
Jasmine W 26a1342595 Update docs-navigation.js
Added links for API and CLI docs to sidebar
2020-10-14 14:12:50 -04:00
R.B. Boyer f0d47ded95
docs: all intention documentation updates (#8869) 2020-10-14 10:23:05 -05:00
Preetha 891c4026c1
Merge pull request #8920 from hashicorp/crd-docs
CRD Docs
2020-10-14 09:42:45 -05:00
Luke Kysow 3ba38fb4be
CRD docs 2020-10-13 17:00:24 -07:00
Luke Kysow bfcd9a5ee3
Recommend using vault token auto-renew in 1.8.5 (#8945) 2020-10-13 16:18:19 -07:00
Peter M 05665e0b84
Add files via upload
updating logo grid image
2020-10-13 15:16:34 -07:00
Kyle Havlovitz 659c4fa941
Merge pull request #8943 from hashicorp/vault-renew-docs
docs: Add a note about auto-renewing the Vault token
2020-10-13 14:36:44 -07:00
Mike Morris 1b2518a358
website: add v1.9.0-beta1 download callout (#8939) 2020-10-13 17:33:49 -04:00
Kyle Havlovitz 2b0713b34d docs: Add a note about auto-renewing the Vault token 2020-10-13 14:25:42 -07:00
Paul Banks f1fd722b81
Add ui metrics config docs (#8921)
* Add ui metrics docs

* Update website/pages/docs/agent/options.mdx

Co-authored-by: R.B. Boyer <rb@hashicorp.com>

Co-authored-by: R.B. Boyer <rb@hashicorp.com>
2020-10-13 22:11:12 +01:00
Sabeen Syed 52498e8d27
Remove email address (#8931) 2020-10-13 13:16:06 -05:00
Kim Ngo fa76fb40f6
Add docs on what activates task execution (#8936) 2020-10-13 11:47:30 -05:00
Lorna Song 1b4d76da52 Update Requirements doc: Terraform module links
Update "Using Terraform Modules" with latest module links from partners
2020-10-13 09:26:39 -06:00
Brandon Romano d39830a667 Plugs in proper links for NIA page 2020-10-12 20:39:34 -07:00
Brandon Romano 2f4f93a383 Fix failed build 2020-10-12 19:38:43 -07:00
Peter M cb84904afb Update network-infrastructure-automation.jsx 2020-10-12 19:20:48 -07:00
pcmccarron 61f62acc9a updating use case pages 2020-10-12 19:20:48 -07:00
pcmccarron 3d3a29c72d updating NIA use case page 2020-10-12 19:20:48 -07:00
Iryna Shustava 4ce6f918a9
Update compatibility matrix (#8928) 2020-10-12 18:03:54 -07:00
Iryna Shustava 482402c2de
docs: add Helm docs for openshift; also add other missing Helm docs (#8833) 2020-10-12 16:35:20 -07:00
Sabeen Syed 7339a13c30
Update a link and reword some sentences (#8925)
Update PANOS link
Update sentences
2020-10-12 17:40:01 -05:00
Mike Morris 87df259720
Update version.js 2020-10-12 17:55:47 -04:00
Ricardo Oliveira a1cf7889e5
Update service-defaults.mdx (#8780) 2020-10-09 13:43:52 -07:00
s-christoff 9bb348c6c7
Enhance the output of consul snapshot inspect (#8787) 2020-10-09 14:57:29 -05:00
Ashwin Venkatesh 79fc29788a Initial docs commit 2020-10-09 15:54:15 -04:00
Kit Patella 00fc6fbf6c
Merge pull request #8913 from hashicorp/mkcp/docs/add-missing-options
adds missing options.mdx entry for telemetry {disable_compat_1.9}
2020-10-09 12:35:46 -07:00
Kit Patella 3c45459302 adds missing options.mdx entry for telemetry {disable_compat_1.9} 2020-10-09 12:29:40 -07:00
Blake Covarrubias 4c83ad3e02
doc: Update acl-method command example (#8845)
* Update acl-method command example

* add tailing backtick
2020-10-09 12:26:14 -07:00
Kim Ngo 05485619fd
Minor updates to NIA partner docs (#8912)
* Renames Terraform module registry to its new name Terraform Registry
2020-10-09 14:16:45 -05:00
Sabeen Syed bd7433c808
Docs: Nia/docs tech preview (#8908)
* Add outline and basic content for Tech Preview docs
* Add Tech Preview tag
* Add auto-labler for Consul Terrform Sync
* Add Consul Terraform Sync config docs (#8837)
* CLI Docs for Consul Terraform Sync
* Task Docs for Consul Terraform Sync
* Add docs for NIA Terraform driver (#8871)
* Update Installation Docs for Consul Terraform Sync
* Initial high level architecture overview (#8872)
* Docs: compatible Terraform modules for Consul-Terraform-Sync (#8887)
* Update Requirements Docs for Consul Terraform Sync
* Remove empty partner module sections
2020-10-09 13:37:20 -05:00
Daniel Nephin ea77eccb14
Merge pull request #8825 from hashicorp/streaming/add-config
streaming: add config and docs
2020-10-09 14:33:58 -04:00
Sabeen Syed 650eefe81a
Docs: Nia/docs partner integration (#8907)
* Add NIA Integration Program page
* Update name to Consul-Terraform-Sync and add Tech Preview tags
* Update diagram to include sequence numbers
* Remove Tech Preview tags and Update Images
* Add TF module naming convention, update image and links
* Add a note, update PANW link, and working updates
* Update URLs to local path
2020-10-09 13:22:18 -05:00
Daniel Nephin e7d505dc33 config: add field for enabling streaming in the client
agent: register the new streaming cache-type
2020-10-09 14:11:34 -04:00
Jimmy Merritello c2c3bdb377
[Website] Add HashiStackMenu to website (#8854)
* Add new HashiStackMenu

* Add transpile option

* Bump version

* Bump HSM version and rm meganav styles
2020-10-09 10:48:21 -05:00
Matt Keeler 8f890bc027
Add capability for the v1/connect/ca/roots endpoint to return a PEM encoded certificate chain (#8774)
Co-authored-by: R.B. Boyer <rb@hashicorp.com>
2020-10-09 10:43:33 -04:00
R.B. Boyer 2ec7d09381
website: re-add forgotten updates (#8890) 2020-10-08 15:33:51 -05:00
Kit Patella adeabf2399
Merge pull request #8877 from hashicorp/mkcp/telemetry/consul.api.http
Add flag for disabling 1.9 metrics backwards compatibility and warnings when set to default
2020-10-08 13:22:37 -07:00
Kit Patella f916b72ee7
Update telemetry.mdx
Make `consul.http...` have an ellipsis rather than just two dots to denote that there's a lot of different metrics under that path.
2020-10-08 13:20:43 -07:00
Matt Keeler 38f5ddce2a
Add per-agent reconnect timeouts (#8781)
This allows for client agent to be run in a more stateless manner where they may be abruptly terminated and not expected to come back. If advertising a per-agent reconnect timeout using the advertise_reconnect_timeout configuration when that agent leaves, other agents will wait only that amount of time for the agent to come back before reaping it.

This has the advantageous side effect of causing servers to deregister the node/services/checks for that agent sooner than if the global reconnect_timeout was used.
2020-10-08 15:02:19 -04:00
Daniel Nephin b93577c94f config: add field for enabling streaming RPC endpoint 2020-10-08 12:11:20 -04:00
Ryan Ooi c80b048111 Update acl-method command example 2020-10-07 06:44:24 +08:00
Iryna Shustava a7db965dc3
docs: Add missing helm docs and make link anchors consistent (#8808) 2020-10-05 10:02:04 -07:00
Kit Patella 06c3509e49 add doc entry for new metric consul.api.http, mark consul.http.. as deprecated in 1.9 2020-10-02 14:02:52 -07:00
Kit Patella 52451cf846
Merge pull request #8271 from coignetp/http-metrics-label
Use method and path as labels for http metrics
2020-10-02 13:41:48 -07:00
Luke Kysow 6abc6a293c
Update k8s upgrade docs (#8789)
* Update k8s upgrade docs
2020-10-01 14:36:15 -07:00
R.B. Boyer 9801ef8eb1
agent: enable enable_central_service_config by default (#8746) 2020-10-01 09:19:14 -05:00
Chris Piraino 97d39505ef
docs: specify what version usage metrics were added in (#8767) 2020-09-28 16:33:02 -05:00
Kit Patella eb8dad4383
Fix typos in telemetry.mdx 2020-09-28 13:50:11 -07:00
Jeff Escalante fdc4fe88fc
fix jepsen circular redirect (#8757) 2020-09-25 16:42:57 -04:00
Michael Hofer ea0b56486b
Fix typo in Service Discovery/Services documentation 2020-09-25 10:36:32 +02:00
Petrik van der Velde 069d56797f
Improve the Azure cloud auto join documentation (#8530)
* Update the Azure cloud auto join documentation with more explicit information on how to configure the infrastructure.
* Add a note regarding the length of time taken for Azure to sync the MSI permissions.
* Update references from tag_name to tag_key in the Azure examples
Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>
2020-09-24 22:41:26 -04:00
Joel Watson c5301b98ac
Merge pull request #8678 from hashicorp/watsonian/upgrade-docs
docs: Add documentation for large version jump upgrades
2020-09-24 16:49:16 -05:00
Mike Morris 85d223b73c
docs: highlight Vault service mesh CA integration (#8730) 2020-09-24 15:38:49 -04:00
Hans Hasselberg ad4e189354
add -list-primary to `consul keyring` command (#8692)
* add -list-primary

* add docs

* use builder

* fix multiple actions
2020-09-24 20:04:20 +02:00
danielehc 5bfd69fe55
Add alias-node option info (#8706) 2020-09-23 18:11:09 +02:00
Prabodh b87e6443cf
Update index.mdx (#8727)
Fixed a gramatical mistake.
2020-09-22 17:57:46 -04:00
Michael Ethridge 512250408e
Adding Vault ACL examples for Connect CA (#8536) 2020-09-22 16:02:06 -04:00
Luke Kysow 0208fd00a2
Reword docs to make k8s arch clear (#8723)
* Reword docs to make k8s arch clear

Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
2020-09-22 10:31:29 -07:00
Joel Watson 2265ad41be Incorporate changes from engineering review 2020-09-22 11:27:57 -05:00
Joel Watson 70ebf306a2 Language changes from review
Co-Authored-By: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
2020-09-22 11:21:28 -05:00
Joel Watson 1f20d5afba Add documentation for large version jump upgrades. 2020-09-22 11:21:28 -05:00
Nicole Forrester 2e091dbb56
Add Using in Production Question (#8718)
* website: add using in prod question

* adjust padding
2020-09-21 20:08:44 -04:00
Daniel Kimsey 3142f05770
Clarify consul maint enable/disable scope (#8615)
Try to make it more clear to an operator that toggling off a node-level
maintenance is independent of toggling service level maintenance.
2020-09-21 12:32:10 -04:00
Lowe Schmidt 68dae68612
docs: Fix typo in tutorial URL (#8716) 2020-09-21 07:08:00 -07:00
Blake Covarrubias 7e5c39d03d
docs: Add go-sockaddr examples for bind_addr (#8677)
Add examples of using a go-sockaddr template with `bind_addr` within
HCL or JSON configuration.

Resolves #8633
2020-09-18 08:15:30 -07:00
Blake Covarrubias f2e138ae0a
docs: Add missing options for consul connect envoy (#8670)
Document missing CLI options for the `consul connect envoy` command.

Resolves #8041
2020-09-18 08:11:48 -07:00
Preetha 5c0dcfb216
Merge pull request #8638 from eckdanny/docs/clarify-kv-keys-url-safe
docs: clarify KV url-safe key names
2020-09-17 15:51:15 -05:00
Mike Wickett e12bb6ce31 website: change sku to tier 2020-09-17 12:56:31 -04:00
Mike Wickett f772b0732c website: update alert bar for HCS prod sku 2020-09-17 12:19:26 -04:00
Sabeen Syed 909875d84c Add Consul ESM to Consul Tools page 2020-09-16 09:18:15 -04:00
Blake Covarrubias 7843577725
Add path-based routing example to Ingress docs (#8672)
Add configuration example for HTTP path-based routing with virtual
services to Ingress gateway configuration entry documentation.

Resolves #8018
2020-09-15 15:37:47 -07:00
Hans Hasselberg 8f5a56e4e6
Update API docs for GET /operator/keyring (#8691)
The response includes a new field: PrimaryKeys that lists the installed
primary keys.
2020-09-15 21:35:02 +02:00
Blake Covarrubias dec8dcd1fa
website: Add redirects for additional pages (#8684)
Add redirects for additional pages which have old URLs being returned
in search engine results.
2020-09-15 11:49:34 -07:00
Jeff Escalante f6c522fb01
round 2 2020-09-15 12:01:47 -04:00
Jeff Escalante 4f541df88b
redirect fix round 1 2020-09-15 11:37:59 -04:00
Blake Covarrubias 86e7274a70
docs: Add -node-identity option to token and role command (#8671)
Document `-node-identity` option which was added in #7970 for
`acl token <create|update>` and `acl role <create|update>` commands.
2020-09-14 19:02:43 -07:00
Freddy aaf413a421
Support specifying load balancer configuration for destination services
Load balancing policies are configured in service-resolvers. All Envoy load balancing algorithms are currently supported. Including: least_request, round_robin, random, maglev, and ring_hash.

At the moment hash-based load balancing configuration is not applied at mesh gateways since they cannot decrypt traffic to inspect HTTP attributes like headers.
2020-09-14 12:02:26 -06:00
Derek Strickland 9e9d5b78eb
Fixed broken install links (#8674) 2020-09-14 13:37:35 -04:00
David Yu ce1c03d30c
Create compatability.mdx for Consul Kubernetes docs (#8655)
Create Compatibility Matrix page for Consul and Consul on Kubernetes underneath Upgrade section in the Kubernetes docs.
2020-09-14 10:24:39 -07:00
freddygv 7b9d1b41d5 Resolve conflicts against master 2020-09-11 18:41:58 -06:00
freddygv 768dbaa68d Add session flag to cookie config 2020-09-11 18:34:03 -06:00
Derek Strickland 248c933e6b
Added docs link to Learn tutorial for Kind. (#8610) 2020-09-11 17:03:35 -04:00
Jasmine W 6be04a2478
Merge pull request #8666 from hashicorp/update-docs-redirect
Update _redirects
2020-09-11 15:41:59 -05:00
kaitlincarter-hc 11447952cf
Website Links to Learn (#8641)
* update links

* Update website/pages/home/index.jsx
2020-09-11 15:33:15 -05:00
Jasmine W f7c74ef3d7 Update _redirects
- updating old acl redirects
- removed duplicate ones I added previously toward the bottom
2020-09-11 14:39:49 -05:00
freddygv 31fb1b75b5 Update website docs 2020-09-11 10:50:57 -06:00
Derek Strickland 3430da1d22
Fixed broken link to Helm Chart install page. (#8662) 2020-09-11 12:48:41 -04:00
Joel Watson 72e64e9f6f
Merge pull request #8544 from hashicorp/watsonian/consul-acl-translate-rules-typo
Fix usage typo for `consul acl translate-rules`
2020-09-09 15:33:30 -05:00
Joel Watson 0d27ead716 s/translate rules/translate-rules/
Just fixes a typo in the command's usage info.
2020-09-09 14:16:29 -05:00
Jasmine W 801d03480c added Integration category
- added "Integration" category
- added redirects
2020-09-09 13:55:36 -05:00
Luke Kysow b55f3ed43c
Move around k8s docs
* k8s > ambassador integration moved to k8s > service mesh > ambassador integration
* k8s > get started > overview moved to k8s > get started > install with
helm chart
* k8s > helm chart reference renamed to helm chart configuration
2020-09-09 09:59:51 -07:00
Jasmine W 7ad2113a1d
Update index.mdx (#8632)
renamed page to remain consistent
2020-09-09 11:07:20 -04:00
Danny Eck 817ae42a7b docs: clarify KV url-safe key names 2020-09-08 23:04:32 -05:00
Blake Covarrubias d21740a308 docs: Fix rendering of link under service config endpoint
HTML and markdown cannot be present in the same line. Change markdown
link to HTML anchor element.
2020-09-08 17:41:10 -07:00
Luke Kysow 8595fef2be
Move helm reference out 2020-09-08 12:05:55 -07:00
Luke Kysow 71237fef4f
Update useSystemRoots docs for k8s 2020-09-08 11:11:48 -07:00
Kevin Pruett b94d24fcd0 Integrate @hashicorp/react-search into layout 2020-09-08 11:32:00 -04:00
Tyler Ryan 4d44809cbd
Clarifying service definition requirements for registering a service … (#8608) 2020-09-03 14:25:54 -04:00
R.B. Boyer 5287ff15a8
docs: forgot to change this version number when the feature was backported (#8607) 2020-09-03 11:08:59 -05:00
R.B. Boyer 119e945c3e
connect: all config entries pick up a meta field (#8596)
Fixes #8595
2020-09-02 14:10:25 -05:00
Chris Piraino bf50c478db docs: add new usage metrics to telemetry page 2020-09-02 10:38:29 -05:00
freddygv 63f79e5f9b Restructure structs and other PR comments 2020-09-02 09:10:50 -06:00
Hans Hasselberg a8c3fa4711
add docs for dual stack options (#8407) 2020-09-02 14:15:41 +02:00
Jasmine W a9df6ac50b
docs: update structure (#8506)
- moved and renamed files/folders based on new structure
- updated docs navigation based on new structure
- moved CLI to top nav (created commands.jsx and commands-navigation.js)
- updated and added redirects
- updating to be consistent with standalone categories
- changing "overview" link in top nav to lead to where intro was moved (docs/intro)
- adding redirects for intro content
- deleting old intro folders
- format all data/navigation files
- deleting old commands folder
- reverting changes to glossary page
- adjust intro navigation for removal of 'vs' paths
- add helm page redirect
- fix more redirects
- add a missing redirect
- fix broken anchor links and formatting mistakes
- deleted duplicate section, added redirect, changed link
- removed duplicate glossary page
2020-09-01 11:14:13 -04:00
freddygv 0236e169bb Add documentation for resolver LB cfg 2020-08-28 14:46:13 -06:00
Jack 9e1c6727f9
Add http2 and grpc support to ingress gateways (#8458) 2020-08-27 15:34:08 -06:00
Nick Wales d7017aa4db
Fixes table formatting (#8572) 2020-08-26 15:11:56 -04:00
Jeff Escalante dfcd9c00cf
Merge pull request #8531 from hashicorp/je.fix-broken-links
Docs Sidenav Update, Fix Broken Links
2020-08-24 15:43:08 -04:00
Kyle MacDonald 4d84e9d309
website: add link to certification on /community (#7807) 2020-08-24 15:21:54 -04:00
Jeff Escalante bc6b8fc64f
one more 2020-08-18 19:13:40 -04:00
Jeff Escalante 2448a34a2b
more link fixes 2020-08-18 18:57:52 -04:00
Jeff Escalante b44a36ce01
fix a bunch of broken links 2020-08-18 18:22:29 -04:00
danielehc 1790b37a11
Adding warning for ACL replication data loss (#8210) 2020-08-18 17:48:37 -04:00
Jeff Escalante 7cfffa5a8e
fix more redirects 2020-08-18 16:36:40 -04:00
Jeff Escalante 42ea775e4d
remove invalid redirects 2020-08-18 16:36:21 -04:00
Jeff Escalante b1dc6a4a01
upgrade to latest docs-sidenav, fix some issues with the k8s section 2020-08-18 15:11:06 -04:00
danielehc 96916a770c
Refactor api-docs links to learn (#8488) 2020-08-17 18:20:02 +02:00
danielehc 5483988b5b
Refactor docs links to learn 2 (#8491)
* Refactor docs links to learn

* Apply suggestions from code review

Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>

Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
2020-08-17 18:19:04 +02:00
danielehc f32b3d2cca
Refactor docs links to learn (#8490) 2020-08-17 18:17:51 +02:00
Derek Strickland 2bf85fae62
Added link to Secure Consul on K8S Tutorial (#8402) 2020-08-14 14:27:34 -04:00
Iryna Shustava 7f8e723dc2
docs: add docs to use Connect CA providers with Helm (#8464) 2020-08-13 14:29:59 -07:00
Derek Strickland 930d7d3158
Learn/link updates derek (#8487)
* Updated Learn url paths.

Co-authored-by: danielehc <40759828+danielehc@users.noreply.github.com>
2020-08-13 17:02:44 -04:00
Iryna Shustava cd3d6adbf4
docs: consul on k8s doesn't support external servers requiring mTLS (#8484) 2020-08-13 12:04:34 -07:00
Luke Kysow 7e5253bf04
Update k8s sync docs (#8452)
* Update k8s sync docs

- remove docs that said for nodeport service we register each instance
on a node with its same node name. We instead register each instance
onto the k8s-sync node
- add docs describing which ports and ips are used
2020-08-12 16:34:55 -07:00
Luke Kysow 0f99b63fc8
Document k8s sidecar resource annotations (#8455) 2020-08-12 16:34:17 -07:00
s-christoff 27a6871434
Update version.js to 1.8.3 (#8505) 2020-08-12 17:35:54 -05:00
Iryna Shustava ed0fa4b3b1
docs: update helm chart ref (#8483)
No longer require servers to be running on k8s when
manageSystemACLs is true
2020-08-11 14:39:44 -07:00
Mike Morris ff37af1129
changelog: Update for 1.8.2, 1.7.6, 1.7.5 and 1.6.7 (#8462)
* update bindata_assetfs.go

* Release v1.8.2

* Putting source back into Dev Mode

* changelog: add entries for 1.7.6, 1.7.5 and 1.6.7

Co-authored-by: hashicorp-ci <hashicorp-ci@users.noreply.github.com>
2020-08-07 18:58:09 -04:00
Jack 77d0c33fc8
Specify allowed ingress gateway protocols in docs (#8454)
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
2020-08-07 13:25:23 -06:00
Hans Hasselberg d316cd06c1
auto_config implies connect (#8433) 2020-08-07 12:02:02 +02:00
Rebecca Zanzig 39b62e5d8a
Merge pull request #8426 from hashicorp/docs/k8s-resources
Add lifecycle sidecar and init container resource settings docs
2020-08-06 15:28:11 -07:00
Rebecca Zanzig 18e9f925b8 Add lifecycle sidecar and init container resource settings docs 2020-08-06 15:11:54 -07:00
Blake Covarrubias c81610c5f9 website: Redirect /mesh to new URL
Redirect service mesh use case page to point to new URL.
2020-08-06 09:25:08 -07:00
Mike Morris 7fd4471b80
Update version.js to 1.8.1 (#8439) 2020-08-05 16:56:38 -04:00