Commit Graph

1748 Commits

Author SHA1 Message Date
Seth Hoenig f030a22c7c command, docs: create and document consul token configuration for connect acls (gh-6716)
This change provides an initial pass at setting up the configuration necessary to
enable use of Connect with Consul ACLs. Operators will be able to pass in a Consul
Token through `-consul-token` or `$CONSUL_TOKEN` in the `job run` and `job revert`
commands (similar to Vault tokens).

These values are not actually used yet in this changeset.
2020-01-31 19:02:53 -06:00
Sebastián Ramírez 830ee3a693
Use secret ID for NOMAD_TOKEN
Use secret ID for NOMAD_TOKEN as the accessor ID doesn't seem to work.

I tried with a local micro cluster following the tutorials, and if I do:

```console
$ export NOMAD_TOKEN=85310d07-9afa-ef53-0933-0c043cd673c7
```

Using the accessor ID as in this example, I get an error:

```
Error querying jobs: Unexpected response code: 403 (ACL token not found)
```

But when using the secret ID in that env var it seems to work correctly.
2020-01-31 18:57:16 +01:00
Mahmood Ali 73200bfa69
Merge pull request #7010 from hashicorp/doc-bulk-20200129
Docs and Changelog catch up
2020-01-31 10:51:07 -05:00
Michael Schurter 8d18b5d6be docs: document limits
Taken more or less verbatim from Consul.
2020-01-30 10:38:42 -08:00
Mahmood Ali 42907cf259 incorporate review feedback 2020-01-29 21:56:26 -05:00
Mahmood Ali 14c806248e document docker's disable_log_collection flag 2020-01-29 21:44:05 -05:00
Mahmood Ali a7d65049c5 Document default_scheduler_config option 2020-01-29 21:44:05 -05:00
Nick Ethier 6d0556bc30 website: add canary meta to api docs 2020-01-27 09:53:30 -05:00
Nick Ethier 5cbb94e16e consul: add support for canary meta 2020-01-27 09:53:30 -05:00
Charlie Voiselle a4aeea0058
Upgrade -> Update 2020-01-13 17:36:49 -05:00
Danielle 5fd52171aa
cli: add system command and subcmds to interact with system API. (#6924)
cli: add system command and subcmds to interact with system API.
2020-01-13 16:16:08 +01:00
James Rasell 09519bb03f
system CLI documentation fixes based on feedback from @angrycub 2020-01-13 15:45:14 +01:00
James Rasell c452f32414
docs: add documentation for system command. 2020-01-13 11:35:24 +01:00
Nick Ethier 1f28633954
Merge pull request #6816 from hashicorp/b-multiple-envoy
connect: configure envoy to support multiple sidecars in the same alloc
2020-01-09 23:25:39 -05:00
Charlie Voiselle 52dfb3de79 Change consul agent note to callout
Because this is such a common misconfig, it is probably worth
highlighting
2020-01-08 13:08:54 -05:00
Nick Ethier 105cbf6df9 tr: expose envoy sidecar admin port as environment variable 2020-01-06 21:53:45 -05:00
Michael Schurter 0a3558f27e docs: add podman as an external task driver plugin
Tested using https://github.com/schmichael/nomad-podman-vagrant
2020-01-03 12:58:17 -08:00
Michael Schurter 92e78c59cd docs: fix lxc anchor link 2020-01-03 12:57:48 -08:00
Michael Schurter 6740d055df docs: fix capitalization 2020-01-03 12:57:27 -08:00
Charlie Voiselle 509f53217e
[docs] Migrating Web-UI and Governance Guides to learn (#6876)
* [docs] Migrating Web-UI and Governance Guides to learn

* fix 404s caught in checks
2019-12-19 15:32:23 -05:00
Charlie Voiselle fd3bf5f971
cli: Allow user to specify dest filename for nomad init (#6520)
* Allow user to specify dest filename for nomad init
* Create changelog entry for GH-6520
2019-12-19 14:59:12 -05:00
Drew Bailey 8e59e91991
Merge pull request #6746 from hashicorp/f-shutdown-delay-tg
Group shutdown_delay
2019-12-18 16:01:30 -05:00
John Schlederer 8b35c75206 Making pull activity timeout configurable in Docker
* Making pull activity timeout configurable in Docker plugin config, first pass

* Fixing broken function call

* Fixing broken tests

* Fixing linter suggestion

* Adding documentation on new parameter in Docker plugin config

* Adding unit test

* Setting min value for pull_activity_timeout, making pull activity duration a private var
2019-12-18 12:58:53 +01:00
Drew Bailey d9e41d2880
docs for shutdown delay
update docs, address pr comments

ensure pointer is not nil

use pointer for diff tests, set vs unset
2019-12-16 11:38:35 -05:00
ebarriosjr b953239227 driver/pot: Added extra_hosts and args commands (#6577) 2019-12-12 16:29:45 -05:00
Tim Gross b25713a837
doc: spread is inherited from job to group (#6837) 2019-12-11 09:59:26 -05:00
Tim Gross 5289c1e0aa
doc: explain ALLOC_INDEX uniqueness guarantees (#6830)
The `ALLOC_INDEX` isn't guaranteed to be unique, and this has caused
some user confusion. The servers make a best-effort attempt to make
this value unique from 0 to count-1 but when you have canaries on the
task group, there are reused indexes because you have multiple job
versions running at the same time. If a user needs a unique number for
interpolating a value in your application, they can get this by
combining the job version and the alloc index.

Co-Authored-By: Michael Schurter <mschurter@hashicorp.com>
2019-12-10 10:30:26 -05:00
abhip c81b3f5cbd Update consensus.html.md (#6813)
The url for raft algorithm pdf is no longer valid. Here is correct url - https://raft.github.io/raft.pdf  and website is https://raft.github.io/
2019-12-06 06:17:30 -08:00
Fredrik Hoem Grelland 3e164b42fe Update network.html.md (#6782)
There is an undocumented way of mapping a dynamically allocated port to the container. This is applicable in bridge networking ( necessary for consul connect enabled services ) to expose the service *directly*. This is needed when using upstream connect services, but you need to expose the service by normal means. By referencing the current documentation you need to use static ports in order to do so. Introduced in #6189 but undocumented
2019-12-06 06:08:56 -08:00
Hugo Herter a98e59e0fc docs: port name requires quotes in hcl
When trying to run this example, Nomad v0.10.2 raises the following error:
`Error getting job struct: Error parsing job file from example-ipv6.hcl: error parsing: At 33:22: Unknown token: 27:16 IDENT db`

Adding quotes around the port map `db` fixes the problem and the job works as expected.
2019-12-05 12:37:24 +01:00
Luiz Aoqui 31d0d99148
docs: add reference to the drivir plugin skeleton project 2019-12-03 17:17:52 -05:00
Seth Hoenig d81a091ccd
Merge pull request #6752 from hashicorp/docs-vault-token_period
docs: vault integration docs should reference new token_period field
2019-12-02 16:21:17 -05:00
Seth Hoenig 953e40c8ed docs: vault integration docs should reference new token_explicit_max_ttl field 2019-12-02 14:22:47 -06:00
Tim Gross 781c20ea90
docs: show /etc/passwd in minimal chroot (#6769) 2019-11-25 13:47:18 -05:00
Mahmood Ali d9e7599ced docs: address more GH-6762 review comments
Incorporate suggestions in https://github.com/hashicorp/nomad/pull/6762#pullrequestreview-321716747

[ci skip]
2019-11-22 13:22:14 -05:00
Mahmood Ali 12e65c054d address more review comments 2019-11-22 13:10:10 -05:00
Mahmood Ali eda18fff76
Apply suggestions from code review
Co-Authored-By: Michael Schurter <mschurter@hashicorp.com>
2019-11-22 13:03:20 -05:00
Mahmood Ali d694f1d61c document docker dangling container repeaper 2019-11-22 09:58:00 -05:00
Chris Baker bde82d7d0e added the device plugin authoring guide, made minor formatting changes to task driver plugin authoring guide. 2019-11-22 00:38:46 +00:00
Seth Hoenig 75539ff281 docs: vault integration docs should reference new token_period field 2019-11-21 14:19:34 -06:00
Lang Martin def417a33a docs: update quota docs to include network limits 2019-11-20 18:44:06 -05:00
Lang Martin 2e2c662977 command: quota status reports network usage 2019-11-20 18:44:06 -05:00
Michael Schurter ecf970b5a5
Merge pull request #6370 from pmcatominey/tls-server-name
command: add -tls-server-name flag
2019-11-20 08:44:54 -08:00
Buck Doyle 56d9005b07
Docs: fix broken alloc signal link (#6731) 2019-11-19 16:05:35 -06:00
Buck Doyle 941231db51
Docs: add missing exec command to alloc listing (#6730) 2019-11-19 15:17:21 -06:00
Michael Schurter 6f64e52d61
Merge pull request #6699 from hashicorp/f-semver-constraints
Add new "semver" constraint
2019-11-19 12:18:43 -08:00
Michael Schurter 260c26e9c4 docs: document semver constraint operator 2019-11-19 10:26:25 -08:00
Buck Doyle 676b84c735
Docs: correct that exec task flag is not optional (#6729)
The task is required, not optional, there’s no default as was described.
2019-11-19 11:20:07 -06:00
Drew Bailey e44a66d7fc
DOCS: Spread stanza does not exist on task
Fixes documentation inaccuracy for spread stanza placement. Spreads can
only exist on the top level job struct or within a group.

comment about nil assumption
2019-11-19 08:26:36 -05:00
Drew Bailey 9b63828658
serverID to target remote leader or server
handle the case where we request a server-id which is this current server

update docs, error on node and server id params

more accurate names for tests

use shared no leader err, formatting

rm bad comment

remove redundant variable
2019-11-14 10:07:35 -05:00