From cef46ef953face71f52f4e900a0ea2132ebfae88 Mon Sep 17 00:00:00 2001 From: Scott Stevenson Date: Fri, 11 Jan 2019 14:43:56 -0500 Subject: [PATCH] Add details about using lock=true when consul ACL is enabled This PR addresses https://github.com/hashicorp/terraform/issues/19963. --- website/docs/backends/types/consul.html.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/docs/backends/types/consul.html.md b/website/docs/backends/types/consul.html.md index 5e1577269..a8740cb5e 100644 --- a/website/docs/backends/types/consul.html.md +++ b/website/docs/backends/types/consul.html.md @@ -55,7 +55,7 @@ The following configuration options / environment variables are supported: * `http_auth` / `CONSUL_HTTP_AUTH` - (Optional) HTTP Basic Authentication credentials to be used when communicating with Consul, in the format of either `user` or `user:pass`. * `gzip` - (Optional) `true` to compress the state data using gzip, or `false` (the default) to leave it uncompressed. - * `lock` - (Optional) `false` to disable locking. This defaults to true, but will require session permissions with Consul to perform locking. + * `lock` - (Optional) `false` to disable locking. This defaults to true, but will require session permissions with Consul and at least kv write permissions on `$path/.lock` to perform locking. * `ca_file` / `CONSUL_CAFILE` - (Optional) A path to a PEM-encoded certificate authority used to verify the remote agent's certificate. * `cert_file` / `CONSUL_CLIENT_CERT` - (Optional) A path to a PEM-encoded certificate provided to the remote agent; requires use of `key_file`. * `key_file` / `CONSUL_CLIENT_KEY` - (Optional) A path to a PEM-encoded private key, required if `cert_file` is specified.