ACL HTTP API
The /acl endpoints are used to manage ACL tokens and policies in Consul, bootstrap the ACL system and check ACL replication status. There are additional pages for managing tokens and policies with the /acl endpoints.
For more information on how to setup ACLs, refer to the following resources:
Bootstrap ACLs
This endpoint does a special one-time bootstrap of the ACL system, making the first
management token if the acl.tokens.initial_management
configuration entry is not specified in the Consul server configuration and if the
cluster has not been bootstrapped previously. An operator created token can be provided in the body of the request to
bootstrap the cluster if required. The provided token should be presented in a UUID format.
This provides a mechanism to bootstrap ACLs without having any secrets present in Consul's configuration files.
| Method | Path | Produces |
|---|---|---|
PUT | /acl/bootstrap | application/json |
The table below shows this endpoint's support for blocking queries, consistency modes, agent caching, and required ACLs.
| Blocking Queries | Consistency Modes | Agent Caching | ACL Required |
|---|---|---|---|
NO | none | none | none |
The corresponding CLI command is consul acl bootstrap.