18e9f925b8
Add lifecycle sidecar and init container resource settings docs
2020-08-06 15:11:54 -07:00
c599a2f5f4
xds: add support for envoy 1.15.0 and drop support for 1.11.x ( #8424 )
...
Related changes:
- hard-fail the xDS connection attempt if the envoy version is known to be too old to be supported
- remove the RouterMatchSafeRegex proxy feature since all supported envoy versions have it
- stop using --max-obj-name-len (due to: envoyproxy/envoy#11740 )
2020-07-31 15:52:49 -05:00
6352766235
Add some auto-config docs ( #8410 )
...
We will probably want a tutorial about this in the future but for now at least we document it a little.
2020-07-30 12:10:25 -04:00
a1a2c008a7
docs: Fix typo in -pid file description
...
Fix typo in `-pid` file option description. This change restores text
which was erroneously deleted in PR #736 with commit f41dce9Fixes #8388
2020-07-28 10:21:28 -07:00
505de6dc29
Added ratelimit to handle throtling cache ( #8226 )
...
This implements a solution for #7863
It does:
Add a new config cache.entry_fetch_rate to limit the number of calls/s for a given cache entry, default value = rate.Inf
Add cache.entry_fetch_max_burst size of rate limit (default value = 2)
The new configuration now supports the following syntax for instance to allow 1 query every 3s:
command line HCL: -hcl 'cache = { entry_fetch_rate = 0.333}'
in JSON
{
"cache": {
"entry_fetch_rate": 0.333
}
}
2020-07-27 23:11:11 +02:00
af51b9e975
docs: Modify network segments limitation callout
...
Change the callout on the Network Segments page to specify the
limitation applies to versions of Consul prior to version 1.7.3.
2020-07-27 09:10:27 -07:00
cd27921885
Gateway tasks and overview ( #8195 )
...
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
2020-07-24 15:07:36 -06:00
99d2f6658c
Update terminating-gateways.mdx
...
* fix formatting issue
* use a command that will work with any pod id
2020-07-23 09:19:33 -07:00
edfdcd3d67
terminating gw docs ( #8300 )
...
* terminating gw docs
Co-authored-by: Rebecca Zanzig <16315901+adilyse@users.noreply.github.com>
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
2020-07-22 16:02:47 -05:00
ac6ab7c9f5
Add certificate disclaimer for TLS encryption ( #8316 )
...
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
2020-07-21 10:38:03 -06:00
49edce1076
docs: Add raft_multiplier default clarification ( #8339 )
2020-07-20 15:49:46 -06:00
340bc68e45
docs: Fix link to kv_max_value_size config option ( #8322 )
...
The sizing recommendation link should point to the config option for
tuning kv_max_value_size.
2020-07-16 14:13:06 -07:00
d0f222008c
Merge pull request #8259 from hashicorp/enterprise_docs_update
...
Consul Enterprise docs update
2020-07-16 15:34:15 -05:00
5f8825af96
Apply suggestions from code review
2020-07-15 18:24:55 -05:00
eb6b9f4b37
Merge branch 'master' into k8s/gateway-setup-docs
2020-07-15 17:47:21 -05:00
1227974f43
ingress gw docs for k8s ( #8291 )
...
Co-authored-by: Derek Strickland
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2020-07-15 17:45:20 -05:00
ecc406562a
Merge pull request #8230 from hashicorp/je.pin-deps
...
📌 Hard Pin Website Dependencies
2020-07-15 18:45:19 -04:00
8049aac526
remove term-gw until its ready to merge and update redirects
2020-07-15 17:38:23 -05:00
496fb5fc5b
add support for envoy 1.14.4, 1.13.4, 1.12.6 ( #8216 )
2020-07-13 15:44:44 -05:00
fb9517bae8
Merge pull request #8268 from hashicorp/feature/improved-version-output
...
Add Revision to version CLI output and add JSON support
2020-07-10 10:01:57 -04:00
b8b939b98a
Keep both metrics
2020-07-10 11:27:22 +02:00
1eef096dfe
xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions ( #8222 )
...
- cut down on extra node metadata transmission
- split the golden file generation to compare all envoy version
2020-07-09 17:04:51 -05:00
cf68577bef
Use method and path as labels
2020-07-09 10:31:27 +02:00
afb888cc09
docs: Add Audit Logging page under Consul Enterprise
2020-07-08 18:16:12 -05:00
fa135ae285
update deps, format all files
2020-07-08 19:12:34 -04:00
680ac0c1c6
Add Revision to version CLI output and add JSON support
...
Also add JSON format support
2020-07-08 16:32:46 -04:00
5e5dbedd47
Added undocumented CONSUL_NAMESPACE to website. ( #8264 )
2020-07-08 10:41:42 -04:00
8a6ad77620
docs: Update Consul Enterprise Intro
2020-07-07 16:11:30 -05:00
0cb9d0739f
docs: dns_config.cache_max_age=0
2020-07-07 15:24:26 -04:00
a93e44f20c
docs: fix link to connect authorize endpoint ( #8248 )
...
/docs/connect/intentions has a broken link presumably meant
to go to /api-docs/agent/connect#authorize
This PR fixes the link.
2020-07-06 16:16:09 -05:00
0cd4178a4c
Fix typos on commandline flags, updated config opts ( #8227 )
...
* Fix typos on commandline flags, updated config opts
- Added anchors to https://github.com/hashicorp/consul/pull/8223
- Fix Typos
Updated to include config file options as well as CLI.
2020-07-02 16:13:11 -04:00
08c92ba880
docs: Fix formatting issues on built-in proxy page ( #8005 )
...
Fix markdown formatting and display issues on built-in proxy page.
2020-07-02 12:39:50 -04:00
421b9e8ef1
Fix typo in configuration documentation ( #7997 )
2020-07-02 12:39:23 -04:00
d06d9ef29e
Update lock.mdx ( #8217 )
...
Remove duplicated `-timeout` value.
2020-07-01 14:59:07 +02:00
f6eaf74de2
docs: Fix typo on openstack cloud-auto-join
2020-06-29 13:56:01 -07:00
462f0f37ed
connect: various changes to make namespaces for intentions work more like for other subsystems ( #8194 )
...
Highlights:
- add new endpoint to query for intentions by exact match
- using this endpoint from the CLI instead of the dump+filter approach
- enforcing that OSS can only read/write intentions with a SourceNS or
DestinationNS field of "default".
- preexisting OSS intentions with now-invalid namespace fields will
delete those intentions on initial election or for wildcard namespaces
an attempt will be made to downgrade them to "default" unless one
exists.
- also allow the '-namespace' CLI arg on all of the intention subcommands
- update lots of docs
2020-06-26 16:59:15 -05:00
e10058bc3f
Update website/pages/docs/acl/auth-methods/jwt.mdx
...
Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>
2020-06-25 11:43:42 -06:00
166da8f710
Remove remaining beta tags
2020-06-24 16:12:24 -06:00
3f01e08ae0
Remove stray instruction
2020-06-24 16:12:08 -06:00
98c5eb8868
Add docs for upstream destination's namespace
2020-06-24 16:11:44 -06:00
394b1f2e7f
Add tabs to config entry examples
2020-06-24 16:10:46 -06:00
864e7f6ae0
Rearrange k8s connect docs to make space for gateways
2020-06-24 13:35:14 -07:00
49fc7eb4bb
Update dev.mdx ( #8090 )
...
Remove ref to "virtual service" to avoid confusion with L7 routing virtual services, replace with "debug service".
2020-06-24 14:26:01 +02:00
3098bc8593
Fix quorum formula in consensus.mdx ( #8166 )
...
[Add & Remove Servers](https://learn.hashicorp.com/consul/day-2-operations/servers )
guide uses `(N/2)+1` quorum formula. So does the
[Raft implementation](5927dcda05/raft.go (L909)https://www.consul.io/docs/internals/consensus.html#deployment_table )
in the same document; e.g., (6+1)/2 = 3, not 4.
Replace `(n+1)/2` with `(N/2)+1` in Consensus Protocol document.
2020-06-24 14:23:36 +02:00
2904cdac36
docs: Specify port in host for example ( #8167 )
...
This example shows a TLS enabled ingress config on a non-https port.
Currently, that means we require the port to be specified in one of the
host entries to route traffic.
2020-06-23 14:41:51 -05:00
28f22c8a90
Finalize gateway documentation for 1.8.0 GA ( #8121 )
...
Co-authored-by: Derek Strickland <1111455+DerekStrickland@users.noreply.github.com>
2020-06-18 15:27:06 -06:00
fcbed6da44
Remove consul:beta now that 1.8 is out.
2020-06-18 11:50:25 -07:00
ea8fbdc68f
Merge pull request #8126 from hashicorp/k8s/gateway-docs
...
Add helm chart options for ingress and terminating gateways
2020-06-18 11:30:59 -07:00
c8bee5a934
Fixing multiple document updates ( #8135 )
...
* Fixes #7663-ACL Token Reloadable#7432-Cipher Suites,#7385-KV Delete DC, raft list-peers docs
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
2020-06-18 14:10:45 -04:00
5c7e62169d
Add helm chart options for ingress and terminating gateways
2020-06-18 11:04:19 -07:00
bb103f22dd
Updates docs with ingress Host header clarifications ( #8062 )
...
* Updates docs with ingress Host header changes
Clarify that a Host header is required for L7 protocols, and specify
that the default is to use the Consul DNS ingress subdomain
* Add sentence about using '*' by itself for testing
* Add optional step for using L7 routing config
* Note that port numbers may need to be added in the Hosts field
2020-06-17 14:43:58 -05:00
fb1f043cdc
Formatting spaces between keys in Config entries ( #8116 )
...
* Formatting spaces between keys in Config entries
* Service Router spacing
* Missing Camel Case proxy-defaults
* Remove extra spaces service-splitter
* Remove extra spsaces service-resolver
* More spaces a la hclfmt
* Nice!
* Oh joy!
* More spaces on proxy-defaults
* Update website/pages/docs/agent/config-entries/proxy-defaults.mdx
Co-authored-by: Chris Piraino <cpiraino@hashicorp.com>
2020-06-16 11:28:21 -07:00
d3881dd754
ACL Node Identities ( #7970 )
...
A Node Identity is very similar to a service identity. Its main targeted use is to allow creating tokens for use by Consul agents that will grant the necessary permissions for all the typical agent operations (node registration, coordinate updates, anti-entropy).
Half of this commit is for golden file based tests of the acl token and role cli output. Another big updates was to refactor many of the tests in agent/consul/acl_endpoint_test.go to use the same style of tests and the same helpers. Besides being less boiler plate in the tests it also uses a common way of starting a test server with ACLs that should operate without any warnings regarding deprecated non-uuid master tokens etc.
2020-06-16 12:54:27 -04:00
fdac1d8add
Switching service-route, service-resolver, service-splitter examples to CamelCase ( #8107 )
...
* Switching service-route example to CamelCase
* Switch service-resovler examples to CamelCase
* Changing service-splitter examples to CamelCase
2020-06-15 14:14:36 -07:00
15b5142bca
docs: Fix ingress dns entry ( #8072 )
2020-06-15 15:15:33 -05:00
d97cff0966
Update telemetry for gateway-services endpoint
2020-06-12 14:44:36 -06:00
b2c66359ab
Add docs
2020-06-12 13:47:43 -06:00
e62a43c6cf
Support envoy 1.14.2, 1.13.2, 1.12.4 ( #8057 )
2020-06-10 23:20:17 +02:00
0c8966220f
Merge pull request #8040 from hashicorp/ingress/expose-cli
...
Ingress expose CLI command
2020-06-09 12:11:23 -07:00
edab5588d8
Add -host flag to expose command
2020-06-08 16:59:47 -07:00
dd1e4ffd0d
docs: Fix rendering of markdown on performance page
...
Fix issue with markdown not being rendered on /docs/install/performance.mdx.
Resolves #8049
2020-06-08 10:29:47 -07:00
72f92ae7ca
agent: add option to disable agent cache for HTTP endpoints ( #8023 )
...
This allows the operator to disable agent caching for the http endpoint.
It is on by default for backwards compatibility and if disabled will
ignore the url parameter `cached`.
2020-06-08 10:08:12 +02:00
9262d7a79a
website: fix a link in docs/agent/options
...
fixing the link to gopsutil in the -disable-host-node-id option text body
2020-06-07 03:36:55 -07:00
acae044df4
Document the namespace format for expose CLI command
2020-06-05 15:47:03 -07:00
ada9e2b3ab
Add docs for expose command
2020-06-05 14:54:45 -07:00
9ed325ba8b
Enable gateways to resolve hostnames to IPv4 addresses ( #7999 )
...
The DNS resolution will be handled by Envoy and defaults to LOGICAL_DNS. This discovery type can be overridden on a per-gateway basis with the envoy_dns_discovery_type Gateway Option.
If a service contains an instance with a hostname as an address we set the Envoy cluster to use DNS as the discovery type rather than EDS. Since both mesh gateways and terminating gateways route to clusters using SNI, whenever there is a mix of hostnames and IP addresses associated with a service we use the hostname + CDS rather than the IPs + EDS.
Note that we detect hostnames by attempting to parse the service instance's address as an IP. If it is not a valid IP we assume it is a hostname.
2020-06-03 15:28:45 -06:00
9b0d0de178
Merge pull request #8002 from pruett/pruett.quickfix-acl-docs
...
Add newline to fix rendering bug
2020-06-03 17:21:52 -04:00
66ee9c3bb2
Updating Stopping Agent Section ( #8016 )
...
Fixes #6935 to clarify agent behavior.
2020-06-03 17:08:49 -04:00
bf0b5055f1
Add newline to fix rendering bug
2020-06-03 15:21:06 -04:00
9795b19e27
Added guideLinks prop for UseCaseLayout component and linked terminating gateways guide from documentation. ( #7998 )
2020-06-02 10:40:07 -04:00
833211c14c
acl: allow auth methods created in the primary datacenter to optionally create global tokens ( #7899 )
2020-06-01 11:44:47 -05:00
ffb9c7d6f7
acl: remove the deprecated `acl_enforce_version_8` option ( #7991 )
...
Fixes #7292
2020-05-29 16:16:03 -05:00
c554ba9e10
Replace whitelist/blacklist terminology with allowlist/denylist ( #7971 )
...
* Replace whitelist/blacklist terminology with allowlist/denylist
2020-05-29 14:19:16 -04:00
6c444ba24c
Remove underscores from gateway URL paths ( #7962 )
2020-05-28 14:19:17 -05:00
db6f876b59
Merge pull request #7936 from hashicorp/helm-k8s-mgw
...
Helm docs for k8s mesh gateways and federation
2020-05-28 10:51:03 -07:00
6409c488ee
Helm docs for k8s mesh gateways and federation
2020-05-28 10:49:59 -07:00
85b20d3713
Merge pull request #7944 from hashicorp/k8s-mgw-docs-update
...
Update for consul:1.8.0-beta2
2020-05-25 11:26:28 -07:00
56e2a98aea
Update for consul:1.8.0-beta2
2020-05-25 11:26:09 -07:00
326ec30d68
update dependencies
2020-05-21 14:50:45 -04:00
3dd8b66aa2
Update ingress/terminating gateway ACL docs ( #7891 )
2020-05-20 09:27:25 -06:00
746bf9b7e2
docs: change "is" to "can be" in connect docs ( #7902 )
...
The doc says: "When the Connect injector is installed, the Connect sidecar is automatically added to all pods." But, it depends on the configuration, so I think it's better to say: "When the Connect injector is installed, the Connect sidecar can automatically added to all pods."
2020-05-20 12:40:24 +02:00
e9d176db2a
Allow to restrict servers that can join a given Serf Consul cluster. ( #7628 )
...
Based on work done in https://github.com/hashicorp/memberlist/pull/196
this allows to restrict the IP ranges that can join a given Serf cluster
and be a member of the cluster.
Restrictions on IPs can be done separatly using 2 new differents flags
and config options to restrict IPs for LAN and WAN Serf.
2020-05-20 11:31:19 +02:00
89a6492033
docs: remove todos ( #7922 )
...
Fixes #7921
2020-05-19 15:19:06 -05:00
228284758b
docs: update the 'consul tls' command docs to match the current flags ( #7911 )
2020-05-18 12:01:14 -05:00
e226a21c3e
Unindenting to remove shell pre-formatting ( #7890 )
2020-05-14 15:04:53 -06:00
5355c07bc1
Documentation for wan fed via mgw on k8s
2020-05-14 09:09:18 -07:00
9cbbff5318
docs: add audit logging docs to agent configuration ( #7880 )
2020-05-13 20:59:00 -04:00
33888bccad
temporarily remove link that 404s
...
will be readded later when page is available
2020-05-13 19:11:13 -05:00
56dccd2b95
Add beta tags to gateway docs ( #7876 )
2020-05-13 15:47:20 -06:00
98005a79c4
Ingress and Terminating Gateway docs ( #7710 )
...
This PR contains documentation additions for ingress and terminating gateways. New pages for the config-entries and overall feature description were added, as well as various additions to related pages.
Co-authored-by: Jono Sosulska <42216911+jsosulska@users.noreply.github.com>
Co-authored-by: freddygv <gh@freddygv.xyz>
Co-authored-by: Freddy <freddygv@users.noreply.github.com>
Co-authored-by: kaitlincarter-hc <43049322+kaitlincarter-hc@users.noreply.github.com>
2020-05-13 16:29:40 -05:00
0a77ea2bfc
Merge pull request #7823 from hashicorp/docs-wanfed-mesh
...
Redo PR #7430 for new website (docs for WAN federation over mesh gateways)
2020-05-13 14:22:18 -05:00
44d10e4894
docs: docs for jwt and oidc auth methods ( #7847 )
2020-05-13 14:14:03 -05:00
9d7ce4c621
added links, removed todo
2020-05-13 14:11:58 -05:00
ccd0822539
Use proxy-id in gateway auto-registration ( #7845 )
2020-05-13 11:56:53 -06:00
78e9766b2b
Update FAQ with Compat Matrix information
2020-05-12 19:43:56 -04:00
57096f8410
Update FAQ + formatting ( #7816 )
...
* Update FAQ + formatting
* Fix 80 chars lines in FAQ
2020-05-12 19:36:49 -04:00
8ce0a2509b
Clean up placeholder diagrams, rename file to use dashes
2020-05-12 16:34:59 -05:00
81aeb06a2e
docs: fix misleading example for HTTP healthcheck ( #7773 )
...
The documentation says the `header` field has type `map[string][]string`,
but the example has `map[string]string`.
2020-05-12 11:45:46 +02:00
c32de785a0
Add Beta super script to page title
...
also moves version availability to below feature title
2020-05-11 14:59:17 -05:00
cd5a539c38
docs: add docs for configuring ACLs with external servers ( #7802 )
2020-05-11 11:26:10 -07:00
a4ec82102e
Add beta superscript to docs title for wan federation over mesh gateways
2020-05-08 18:25:41 -05:00
cf56325196
Redo PR #7430 for new website
...
Still has todos and diagrams to be added
2020-05-08 18:07:45 -05:00
eaa05d623a
xds: Add passive health check config for upstreams
2020-05-08 14:56:57 -04:00
9b363e9f23
Fix spelling of deregister ( #7804 )
2020-05-08 10:03:45 -04:00
6cb782708f
Update website/pages/docs/commands/license.mdx
...
Co-authored-by: danielehc <40759828+danielehc@users.noreply.github.com>
2020-05-08 15:51:52 +03:00
2b39b21f0f
Update license.mdx
...
Hello team,
I noticed that the reset part of the consul license command was missing in the documentation so I added it and created this PR.
2020-05-08 11:13:41 +03:00
a854e4d9c5
acl: oss plumbing to support auth method namespace rules in enterprise ( #7794 )
...
This includes website docs updates.
2020-05-06 13:48:04 -05:00
c33a241438
Merge pull request #7724 from hashicorp/helm-repo
...
Update k8s instructions for new helm repo
2020-05-05 16:17:53 -07:00
543568fd9a
docs: add Helm docs for external servers and bootstrapToken ( #7725 )
2020-05-04 18:09:59 -07:00
88d5060610
docs: add docs for snapshot agent local_scratch_path option ( #7730 )
...
Also fix some website upgrade bugs.
2020-05-01 14:51:57 -05:00
27eb12ec51
fix multiline note ( #7744 )
2020-04-30 14:07:16 -04:00
dca331ed44
Update k8s instructions for new helm repo
...
Also remove index page for operations since it just linked to the other
pages in the list.
2020-04-30 10:04:55 -07:00
d88be94c93
docs: add Helm docs for external servers and bootstrapToken ( #7725 )
...
Also, backfill some Helm docs that got lost in the new website merge
2020-04-28 14:38:02 -07:00
63d6c3cfbb
Fix broken markdown link
2020-04-28 12:53:29 -04:00
bf4ef056af
Add callouts to Enterprise features ( #7548 )
...
Label all enterprise-related content with Enterprise badge/callout.
Resolves #6887
Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
2020-04-28 12:53:29 -04:00
045ee37976
[Docs] Kuberentes Guides ( #7660 )
...
* Update k8s guide titles
* Update website/pages/docs/k8s/installation/gke.mdx
Co-Authored-By: Luke Kysow <1034429+lkysow@users.noreply.github.com>
Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
2020-04-28 12:53:28 -04:00
3da057018c
correct rebased k8s/eks location
2020-04-28 12:53:27 -04:00
cc19b88288
a couple more anchor link fixes
2020-04-28 12:53:26 -04:00
62c991c66d
misc cleanup & fixes
2020-04-28 12:53:26 -04:00
6907c7e3db
fix broken links
2020-04-28 12:53:25 -04:00
95a4c2adde
fix homepage link, docs index
2020-04-28 12:53:25 -04:00
af07d9f006
remove guides that were moved to learn
2020-04-28 12:53:24 -04:00
a8a3c76983
remove 'sidebar_current' from frontmatter
2020-04-28 12:53:24 -04:00
373f45a832
update deps, fixes for agent/options
2020-04-28 12:53:22 -04:00
2bfa64f903
replace internal .html link extensions
2020-04-28 12:53:20 -04:00
9cd0b95f24
remove internal /index.html
2020-04-28 12:53:20 -04:00
f1c86126e9
redirects port
2020-04-28 12:53:18 -04:00
c23cda3389
anchor link fixes across a lot of pages
2020-04-28 12:53:18 -04:00
711352bcf1
docs rendering
2020-04-28 12:53:18 -04:00
6bd1a51413
intro and api navigation converted
2020-04-28 12:52:44 -04:00
93bc85dc4f
initial
2020-04-28 12:52:43 -04:00
Rebecca Zanzig
R.B. Boyer
Matt Keeler
Blake Covarrubias
Pierre Souchay
Freddy
Luke Kysow
Kyle Schochenmaier
Nathan Lacey
Joel Watson
Sabeen Syed
Jeff Escalante
Hans Hasselberg
Paul Coignet
Matt Keeler
JohnnyB
Daniel Nephin
Seth Hoenig
Jono Sosulska
Rémi Lapeyre
André
Fatih Sarhan
freddygv
Mike Morris
Valery V. Vorotyntsev
Chris Piraino
David Yu
Spencer Owen
Kyle Havlovitz
Krastin
Kevin Pruett
Kevin Pruett
Derek Strickland
Patrice Krakow
Preetha
jsosulska
Marek Vavruša
Iryna Shustava
Denislav Denov
kaitlincarter-hc