consul/website/content/docs/connect
Nathan Coleman 5e9f02d4be
[NET-8091] Add file-system-certificate config entry for API gateway (#20873)
* Define file-system-certificate config entry

* Collect file-system-certificate(s) referenced by api-gateway onto snapshot

* Add file-system-certificate to config entry kind allow lists

* Remove inapplicable validation

This validation makes sense for inline certificates since Consul server is holding the certificate; however, for file system certificates, Consul server never actually sees the certificate.

* Support file-system-certificate as source for listener TLS certificate

* Add more required mappings for the new config entry type

* Construct proper TLS context based on certificate kind

* Add support or SDS in xdscommon

* Remove unused param

* Adds back verification of certs for inline-certificates

* Undo tangential changes to TLS config consumption

* Remove stray curly braces

* Undo some more tangential changes

* Improve function name for generating API gateway secrets

* Add changelog entry

* Update .changelog/20873.txt

Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>

* Add some nil-checking, remove outdated TODO

* Update test assertions to include file-system-certificate

* Add documentation for file-system-certificate config entry

Add new doc to nav

* Fix grammar mistake

* Rename watchmaps, remove outdated TODO

---------

Co-authored-by: Melisa Griffin <melisa.griffin@hashicorp.com>
Co-authored-by: Jared Kirschner <85913323+jkirschner-hashicorp@users.noreply.github.com>
2024-04-15 16:45:05 -04:00
..
ca Fix broken links caught in weekly report (#18522) 2023-08-18 18:54:42 +00:00
cluster-peering Fix typo (#20441) 2024-02-01 14:35:52 -08:00
config-entries [NET-8091] Add file-system-certificate config entry for API gateway (#20873) 2024-04-15 16:45:05 -04:00
dataplane NET-5186 Add NET_BIND_SERVICE capability to consul-dataplane requirements (#18512) 2023-10-31 18:12:30 +00:00
gateways [NET-8091] Add file-system-certificate config entry for API gateway (#20873) 2024-04-15 16:45:05 -04:00
intentions docs: Rename Consul OSS to Consul CE (#19009) 2023-09-27 09:31:28 -07:00
manage-traffic Johnlanda/fault injection docs (#20713) 2024-02-29 17:40:19 -08:00
native docs: Deprecations for connect-native SDK and specific connect native APIs (#17937) 2023-06-28 19:45:46 +00:00
observability docs: Rename Consul OSS to Consul CE (#19009) 2023-09-27 09:31:28 -07:00
proxies security: bump go, x/net and envoy versions (#20956) 2024-04-08 19:18:40 +00:00
configuration.mdx docs: Fix invalid JSON in code examples (#18932) 2023-09-21 11:35:16 -07:00
connect-internals.mdx Reformat proxy docs refresh (#18623) 2023-09-06 16:55:18 -07:00
connectivity-tasks.mdx docs: consistently name Consul service mesh (#17222) 2023-05-05 13:41:40 -04:00
dev.mdx docs: correct misspelling (#17229) 2023-05-08 13:30:48 -04:00
distributed-tracing.mdx Reformat proxy docs refresh (#18623) 2023-09-06 16:55:18 -07:00
index.mdx docs: consistently name Consul service mesh (#17222) 2023-05-05 13:41:40 -04:00
nomad.mdx :ermahgerd "Sevice Mesh" -> "Service Mesh" (#18116) 2023-07-12 18:46:16 -07:00
security.mdx Add docs for default_intention_policy (#20886) 2024-03-22 15:33:17 -04:00