Skip to content

Commit

Permalink
Update intentions.mdx
Browse files Browse the repository at this point in the history
Make behaviour of L7 intentions clearer
  • Loading branch information
lkysow authored Jun 8, 2023
1 parent 17f4689 commit ef68870
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions website/content/api-docs/connect/intentions.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -536,9 +536,7 @@ This endpoint evaluates the intentions for a specific source and destination
and returns whether the connection would be authorized or not given the current
Consul configuration and set of intentions.

-> **Note:** This endpoint will always evaluate intentions with `Permissions`
defined as _deny_ intentions during. This endpoint is only suited for
networking layer 4 (e.g. TCP) integration.
-> **Note:** This endpoint will always evaluate matching intentions with L7 `Permissions` defined as _deny_ intentions because there is no request to check against.

For performance and reliability reasons it is desirable to implement intention
enforcement by listing [intentions that match the
Expand Down

0 comments on commit ef68870

Please sign in to comment.