consul/website/content/docs/connect
Mark Anderson c6ff4ba7d8
Support vault namespaces in connect CA (#12904)
* Support vault namespaces in connect CA

Follow on to some missed items from #12655

From an internal ticket "Support standard "Vault namespace in the
path" semantics for Connect Vault CA Provider"

Vault allows the namespace to be specified as a prefix in the path of
a PKI definition, but our usage of the Vault API includes calls that
don't support a namespaced key. In particular the sys.* family of
calls simply appends the key, instead of prefixing the namespace in
front of the path.

Unfortunately it is difficult to reliably parse a path with a
namespace; only vault knows what namespaces are present, and the '/'
separator can be inside a key name, as well as separating path
elements. This is in use in the wild; for example
'dc1/intermediate-key' is a relatively common naming schema.

Instead we add two new fields: RootPKINamespace and
IntermediatePKINamespace, which are the absolute namespace paths
'prefixed' in front of the respective PKI Paths.

Signed-off-by: Mark Anderson <manderson@hashicorp.com>
2022-05-04 19:41:55 -07:00
..
ca Support vault namespaces in connect CA (#12904) 2022-05-04 19:41:55 -07:00
config-entries Docs and changelog edits 2022-05-04 08:50:59 -07:00
gateways docs: simplify agent docs slugs 2022-04-11 17:38:47 -07:00
l7-traffic xds: ensure that all connect timeout configs can apply equally to tproxy direct dial connections (#12711) 2022-04-07 16:58:21 -05:00
native website: redirect /api to /api-docs (#12660) 2022-03-30 16:16:26 -05:00
observability docs: simplify agent docs slugs 2022-04-11 17:38:47 -07:00
proxies docs: Add example Envoy escape hatch configs (#12764) 2022-05-02 11:25:59 -07:00
registration docs: simplify agent docs slugs 2022-04-11 17:38:47 -07:00
configuration.mdx Apply suggestions from code review 2022-04-26 13:12:53 -07:00
connect-internals.mdx Apply suggestions from code review 2022-04-26 13:12:53 -07:00
connectivity-tasks.mdx docs: Avoid redirects by pointing links to new URLs 2022-01-20 08:52:51 -08:00
dev.mdx docs: Use long form of CLI flags (#12030) 2022-01-12 15:05:01 -08:00
distributed-tracing.mdx Update distributed-tracing.mdx with caveat on 128 bit IDs (#12196) 2022-01-26 10:39:33 -08:00
index.mdx docs: Consul Service Mesh overview - rename of title and K8s getting started (#12574) 2022-03-18 08:55:57 -07:00
intentions-legacy.mdx docs: simplify agent docs slugs 2022-04-11 17:38:47 -07:00
intentions.mdx docs: simplify agent docs slugs 2022-04-11 17:38:47 -07:00
nomad.mdx website: Update copy (#11853) 2022-01-04 15:29:46 -05:00
security.mdx docs: Avoid redirects by pointing links to new URLs 2022-01-20 08:52:51 -08:00
transparent-proxy.mdx xds: ensure that all connect timeout configs can apply equally to tproxy direct dial connections (#12711) 2022-04-07 16:58:21 -05:00