Skip to content

Commit ee7686f

Browse files
authored
Consul Docs: Add anonymous token warning to ACL tokens overview (#1484)
## Description Requested by Deniz Dugan (Security) - Add anonymous token warning to ACL token overview, anonymous token section I updated v1.18-1.22 - https://unified-docs-frontend-preview-b8zegbmsz-hashicorp.vercel.app/consul/docs/secure/acl/token#anonymous-token - https://unified-docs-frontend-preview-b8zegbmsz-hashicorp.vercel.app/consul/docs/v1.21.x/secure/acl/token#initial-management-token - https://unified-docs-frontend-preview-b8zegbmsz-hashicorp.vercel.app/consul/docs/v1.20.x/security/acl/tokens#anonymous-token - https://unified-docs-frontend-preview-b8zegbmsz-hashicorp.vercel.app/consul/docs/v1.19.x/security/acl/tokens#anonymous-token - https://unified-docs-frontend-preview-b8zegbmsz-hashicorp.vercel.app/consul/docs/v1.18.x/security/acl/tokens#anonymous-token ## Links Jira: [CE-1095] ## Contributor checklists Review urgency: - [ ] ASAP: Bug fixes, broken content, imminent releases - [x] 3 days: Small changes, easy reviews - [ ] 1 week: Default expectation - [ ] Best effort: No urgency Pull request: - [x] Verify that the PR is set to merge into the correct base branch - [x] Verify that all status checks passed - [x] Verify that the preview environment deployed successfully - [ ] Add additional reviewers if they are not part of assigned groups Content: - [ ] I added redirects for any moved or removed pages - [ ] I followed the [Education style guide](https://github.com/hashicorp/web-unified-docs/tree/main/docs/style-guide) - [ ] I looked at the local or Vercel build to make sure the content rendered correctly ## Reviewer checklist - [ ] This PR is set to merge into the correct base branch. - [ ] The content does not contain technical inaccuracies. - [ ] The content follows the Education content and style guides. - [ ] I have verified and tested changes to instructions for end users. [CE-1095]: https://hashicorp.atlassian.net/browse/CE-1095?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ
2 parents 3b6630a + 0edcb11 commit ee7686f

File tree

6 files changed

+22
-5
lines changed

6 files changed

+22
-5
lines changed
Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
<Warning>
2+
3+
All unauthenticated requests to Consul receive permissions from the anonymous token. To ensure clusters remain secure, we recommend using tokens with specific policies instead of an overly permissive anonymous token.
4+
5+
</Warning>

content/consul/v1.18.x/content/docs/security/acl/tokens/index.mdx

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -206,7 +206,9 @@ This token has the following attributes (see [Token Attributes](#token-attribute
206206
- `AccessorID`: `00000000-0000-0000-0000-000000000002`
207207
- `SecretID`: `anonymous`
208208

209-
The description and policies may be updated, but the anonymous token cannot be deleted.
209+
You can update the anonymous token's description and policies, but you cannot delete the anonymous token.
210+
211+
@include '../../../global/partials/alerts/warn-anon-token.mdx'
210212

211213
### Initial management token
212214

content/consul/v1.19.x/content/docs/security/acl/tokens/index.mdx

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -206,7 +206,9 @@ This token has the following attributes (see [Token Attributes](#token-attribute
206206
- `AccessorID`: `00000000-0000-0000-0000-000000000002`
207207
- `SecretID`: `anonymous`
208208

209-
The description and policies may be updated, but the anonymous token cannot be deleted.
209+
You can update the anonymous token's description and policies, but you cannot delete the anonymous token.
210+
211+
@include '../../../global/partials/alerts/warn-anon-token.mdx'
210212

211213
### Initial management token
212214

content/consul/v1.20.x/content/docs/security/acl/tokens/index.mdx

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -206,7 +206,9 @@ This token has the following attributes (see [Token Attributes](#token-attribute
206206
- `AccessorID`: `00000000-0000-0000-0000-000000000002`
207207
- `SecretID`: `anonymous`
208208

209-
The description and policies may be updated, but the anonymous token cannot be deleted.
209+
You can update the anonymous token's description and policies, but you cannot delete the anonymous token.
210+
211+
@include '../../../global/partials/alerts/warn-anon-token.mdx'
210212

211213
### Initial management token
212214

content/consul/v1.21.x/content/docs/secure/acl/token/index.mdx

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -229,7 +229,10 @@ The anonymous token is used when a request is made to Consul without specifying
229229
| `AccessorID` | `00000000-0000-0000-0000-000000000002` |
230230
| `SecretID` | `anonymous` |
231231

232-
You may update the anonymous token's description and policies, however you cannot delete the token.
232+
You may update the anonymous token's description and policies, however you
233+
cannot delete the token.
234+
235+
@include '../../../global/partials/alerts/warn-anon-token.mdx'
233236

234237
### Initial management token
235238

content/consul/v1.22.x/content/docs/secure/acl/token/index.mdx

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -229,7 +229,10 @@ The anonymous token is used when a request is made to Consul without specifying
229229
| `AccessorID` | `00000000-0000-0000-0000-000000000002` |
230230
| `SecretID` | `anonymous` |
231231

232-
You may update the anonymous token's description and policies, however you cannot delete the token.
232+
You may update the anonymous token's description and policies, however you
233+
cannot delete the token.
234+
235+
@include '../../../global/partials/alerts/warn-anon-token.mdx'
233236

234237
### Initial management token
235238

0 commit comments

Comments
 (0)