Commit graph

800 commits

Author SHA1 Message Date
Alex Dadgar 39987d5236
Merge branch 'master' into b-acl-name 2018-03-22 14:51:40 -07:00
Alex Dadgar bdbf456e24 changelog 2018-03-22 13:59:58 -07:00
Preetha 4f5d307397
Update CHANGELOG.md 2018-03-21 09:21:10 -05:00
Michael Schurter ba2251cfe4 Add changelog entry for #4003 2018-03-20 16:44:50 -07:00
Alex Dadgar c65fc6e2ed changelog 2018-03-20 10:41:26 -07:00
Michael Schurter 1044bc0feb
Merge pull request #3984 from hashicorp/f-loosen-consul-skipverify
Replace Consul TLSSkipVerify handling
2018-03-16 11:21:28 -07:00
Michael Schurter 32ee5e0d53
Merge pull request #3990 from hashicorp/f-rkt-groups
rkt: allow specifying --group
2018-03-16 11:19:53 -07:00
Michael Schurter 63b2c36489 Add changelog entry for #3993 2018-03-16 11:15:12 -07:00
Michael Schurter bd78cfb039 rkt: allow specifying --group 2018-03-16 11:08:22 -07:00
Alex Dadgar b3ab063132
Merge pull request #3992 from hashicorp/f-vault-orphan
Allow and recommend Orphaned Vault tokens
2018-03-16 10:59:54 -07:00
Alex Dadgar a4662c804e changelog 2018-03-16 10:59:36 -07:00
Alex Dadgar 1d8ea2f534 changelog 2018-03-16 10:54:26 -07:00
Michael Schurter 0971114f0c Replace Consul TLSSkipVerify handling
Instead of checking Consul's version on startup to see if it supports
TLSSkipVerify, assume that it does and only log in the job service
handler if we discover Consul does not support TLSSkipVerify.

The old code would break TLSSkipVerify support if Nomad started before
Consul (such as on system boot) as TLSSkipVerify would default to false
if Consul wasn't running. Since TLSSkipVerify has been supported since
Consul 0.7.2, it's safe to relax our handling.
2018-03-14 17:43:06 -07:00
Alex Dadgar 3537c73289
Merge pull request #3978 from hashicorp/b-core-sched
Always add core scheduler
2018-03-14 16:13:15 -07:00
Preetha Appan 7cf35ac9ea
Update CHANGELOG for rescheduling 2018-03-14 16:43:46 -05:00
Preetha Appan 56cd1fe2ea
Update CHANGELOG 2018-03-14 15:52:44 -05:00
Alex Dadgar 9c07adb830 changelog 2018-03-14 10:57:12 -07:00
Preetha Appan 6484302f8e
better wording in CHANGELOG.md 2018-03-14 09:15:04 -05:00
Chelsea Komlo 810eedfa2a
Merge pull request #3945 from hashicorp/f-add-node-events
Add node events
2018-03-14 08:42:55 -04:00
Preetha Appan 7b9f349f7c
Update CHANGELOG.md 2018-03-13 20:55:43 -05:00
Chelsea Holland Komlo 0934769b04 add client side emitting of node events
Changelog
2018-03-13 18:08:21 -07:00
Preetha 7bd9e6cbda
Slightly better wording on CHANGELOG 2018-03-13 15:13:37 -05:00
Preetha Appan 1723b6d359
Update CHANGELOG 2018-03-13 15:10:49 -05:00
Michael Schurter 79df90acb0
Merge pull request #3958 from simplesurance/swappiness
fix: disable swap for executor_linux allocations
2018-03-13 10:10:22 -07:00
Michael Schurter 9b282e0c8c Add #3958 to changelog 2018-03-13 10:08:28 -07:00
Alex Dadgar 09e81c5d25 changelog 2018-03-12 14:47:23 -07:00
Michael Schurter 7dd7fbcda2 non-Existent -> nonexistent
Reverting from #3963

https://www.merriam-webster.com/dictionary/existent
2018-03-12 11:59:33 -07:00
Josh Soref 920ccf96d2 spelling: variable 2018-03-11 19:13:11 +00:00
Josh Soref bed09b97d4 spelling: retrieving 2018-03-11 18:51:51 +00:00
Josh Soref e949d23e1b spelling: resource 2018-03-11 18:51:03 +00:00
Josh Soref 10572df863 spelling: privileged 2018-03-11 18:38:53 +00:00
Josh Soref 2d4f9308eb spelling: preferring 2018-03-11 18:37:58 +00:00
Josh Soref 1284459a67 spelling: parameterized 2018-03-11 18:36:05 +00:00
Josh Soref 8abf038f4d spelling: output 2018-03-11 18:35:30 +00:00
Josh Soref 4a7d5ad88c spelling: occurring 2018-03-11 18:33:34 +00:00
Josh Soref 337ac13f0a spelling: interpolation 2018-03-11 18:16:36 +00:00
Josh Soref 52b83328fc spelling: heartbeating 2018-03-11 18:12:19 +00:00
Josh Soref 7f6e4012a0 spelling: existent 2018-03-11 18:30:37 +00:00
Josh Soref 7cd95f6eb3 spelling: executor 2018-03-11 18:05:31 +00:00
Josh Soref e72d4f2704 spelling: cause 2018-03-11 17:46:42 +00:00
Josh Soref 760a82fad0 spelling: autocompleting 2018-03-11 17:42:29 +00:00
Josh Soref 455eb1aeb3 spelling: authoritative 2018-03-11 17:42:05 +00:00
Josh Soref d0e59b1b61 spelling: advertise 2018-03-11 17:35:39 +00:00
Preetha Appan 273558e710
Update CHANGELOG.md 2018-03-09 14:40:05 -06:00
Preetha 1990c3a2ce
Update CHANGELOG.md 2018-03-08 07:59:50 -06:00
Preetha 9be7c345c1
Update CHANGELOG.md 2018-03-08 07:58:44 -06:00
Alex Dadgar ebe9ee1514 changelog 2018-02-20 16:38:59 -08:00
Alex Dadgar ab57db1fad Increase maximum ACL token length
This mitigates issues when generating Nomad ACL tokens from Vault.
2018-02-20 09:52:40 -08:00
Preetha df6400222b
Merge pull request #3868 from hashicorp/f-server-side-restarts
server side rescheduling
2018-02-13 20:09:51 -06:00
Michael Schurter 06397ba59d
Merge pull request #3825 from jaininshah9/master
add a flag for cpu_hard_limit
2018-02-08 20:40:38 -08:00
Michael Schurter c081fdc449 docker: add cpu_hard_limit docs 2018-02-08 20:20:26 -08:00
Alex Dadgar 7cbcdf95c1 changelog 2018-02-08 11:14:06 -08:00
Michael Schurter 896bd2c7ee Add changelog entry for #3839 2018-02-06 10:58:00 -08:00
Michael Schurter 279a3b3f28
Merge pull request #3790 from 42wim/dockerv6
Service registration for IPv6 docker addresses (Fixes #3785)
2018-02-05 17:07:53 -08:00
Michael Schurter 148d927164 Add changelog entry for #3790 2018-02-05 16:29:29 -08:00
Chelsea Komlo 42d20234a3
Merge pull request #3781 from hashicorp/f-client-fingerprint-refactor
Refactor client fingerprinters to return a diff of node attributes
2018-02-01 20:13:44 -05:00
Chelsea Holland Komlo 6f9c0ab361 req/resp should be within config locks; rename for detected fingerprints
changelog
2018-02-01 19:00:39 -05:00
Preetha 40cdc39b48
jobspec not core in changelog 2018-02-01 16:38:18 -06:00
Preetha 75679f6733
Fix link 2018-02-01 16:37:27 -06:00
Preetha Appan 0cd69b54a5
Update CHANGELOG to add info on restart policy defaults changing 2018-01-31 16:38:26 -06:00
Chelsea Holland Komlo 5d0fb6d7f9 update changelog 2018-01-31 13:33:51 -05:00
Alex Dadgar 0ed4f0517d fix changelog entry 2018-01-31 10:11:30 -08:00
Michael Schurter 66edc768f5 Add changelog entry for #3773 2018-01-30 14:59:17 -08:00
Chelsea Holland Komlo c02b4bf67a changelog for PR 3814 2018-01-30 17:46:48 -05:00
Alex Dadgar e8e58d8f76 changelog 2018-01-29 09:49:11 -08:00
Alex Dadgar 22f27aae00 changelog 2018-01-23 14:39:19 -08:00
Alex Dadgar 06ae7681bc changelog 2018-01-23 12:04:53 -08:00
Chelsea Komlo d09cc2a69f
Merge pull request #3492 from hashicorp/f-client-tls-reload
Client/Server TLS dynamic reload
2018-01-23 05:51:32 -05:00
Chelsea Holland Komlo bc8f0da635 add changelog 2018-01-23 05:00:26 -05:00
Michael Schurter 694b547a6b
Merge pull request #3682 from hashicorp/b-3681-always-set-driver-ip
Always advertise driver IP when in driver mode
2018-01-22 16:41:34 -08:00
Michael Schurter 839e4ce903 Update changelog for dot env vars 2018-01-22 14:06:40 -08:00
Kyle Havlovitz 7bea4b392c
Update CHANGELOG.md 2018-01-19 12:59:25 -08:00
Michael Schurter 1b5bb6c24c Add changelog entry for #3682 2018-01-18 15:35:24 -08:00
Alex Dadgar 3f8da551c3 changelog 2018-01-18 13:09:41 -08:00
Preetha Appan 70b27cd3ba
Linkify CHANGELOG 2018-01-18 10:10:38 -06:00
Michael Schurter 57eb128dcf
Merge pull request #3718 from hashicorp/b-3713-fix-check-restart
Fix service.check_restart stanza propagation
2018-01-16 16:39:42 -08:00
Charlie Voiselle 867bb6f7f9 Found more priviledge.
priviledge -> privilege
2018-01-12 09:44:53 -05:00
Alex Dadgar 021114f6ef changelog 2018-01-10 11:48:11 -08:00
Michael Schurter 9f179e9fab Fix HTTP code for permission denied errors
Fixes #3697

The existing code and test case only covered the leader behavior. When
querying against non-leaders the error has an "rpc error: " prefix.

To provide consistency in HTTP error response I also strip the "rpc
error: " prefix for 403 responses as they offer no beneficial additional
information (and in theory disclose a tiny bit of data to unauthorized
users, but it would be a pretty weird bit of data to use in a malicious
way).
2018-01-09 15:25:53 -08:00
Michael Schurter 1f6b568322 Move changelog entry from bug fix to feature
It was never really implemented to begin with
2018-01-09 15:17:07 -08:00
Michael Schurter 7c282f174b Fix service.check_restart stanza propagation
There was a bug in jobspec parsing, a bug in CheckRestart merging, and a
bug in CheckRestart canonicalization. All are now tested.
2018-01-09 15:15:36 -08:00
Michael Schurter d316ac70af
Merge pull request #3715 from hashicorp/docs-3685-changelog
Add #3685 to changelog
2018-01-09 14:02:37 -08:00
Michael Schurter 189ce7f991
Merge pull request #3723 from hashicorp/b-3702-chown-dirs
chown dirs when migrating ephemeral_disk data
2018-01-09 09:27:26 -08:00
Michael Schurter ab56b07101
Merge pull request #3730 from hashicorp/cv-typo-privilege
Fix typo
2018-01-08 17:32:02 -08:00
Michael Schurter 2c79ffb213 chown dirs when migrating ephemeral_disk data
Fixes #3702

Added missing chown call and made it conditional on running as root and
not on Windows as we do with files.
2018-01-08 15:31:12 -08:00
Charlie Voiselle 1bb1ab5069 fix typo
Priviledge -> privilege
2018-01-08 15:56:07 -05:00
Michael Schurter 7a77fc69ce Include credentials in fetch requests
Fixes #3701

Relevant spec section:
https://fetch.spec.whatwg.org/#concept-request-credentials-mode
2018-01-08 12:18:03 -08:00
Alex Dadgar 6dda0ebaed gofmt 2018-01-04 14:45:15 -08:00
Alex Dadgar 58d1c52684 changelog 2018-01-04 14:27:19 -08:00
Michael Schurter 4055fdfdf9 Add #3685 to changelog 2018-01-04 11:02:03 -08:00
Preetha Appan 4101ab86e0
Linkify CHANGELOG in one missing place. 2018-01-03 16:39:12 -06:00
Preetha 1712b03705
Merge branch 'master' into 0.8 2018-01-03 16:06:38 -06:00
Preetha 727fcc6212
Update CHANGELOG.md 2018-01-03 11:53:21 -06:00
Preetha 6070da7c22
Update CHANGELOG.md
Mentions min CPU limit change in backward incompatibilities section.
2018-01-03 11:52:21 -06:00
Chelsea Holland Komlo a105bb52e3 update changelog 2017-12-20 19:04:07 -05:00
Chelsea Holland Komlo 940bc59790 Fixes #3679
code review fixups; add changelog
2017-12-20 17:58:07 -05:00
Alex Dadgar 1bd34d0df8 Release v0.7.1 2017-12-19 17:09:11 -08:00
Alex Dadgar dd680f61f7 changelog 2017-12-18 16:14:34 -08:00
Preetha Appan c815471e84
Initial run of make changelogfmt that linkifies all issues in CHANGELOG 2017-12-12 15:54:16 -06:00
Michael Schurter 2a3de8f889 Add #3551 to 0.7.1 changelog 2017-12-12 13:15:53 -08:00
Alex Dadgar e19d633f4d changelog 2017-12-11 14:00:20 -08:00
Michael Schurter b71edf846f Hash fields used in task service IDs
Fixes #3620

Previously we concatenated tags into task service IDs. This could break
deregistration of tag names that contained double //s like some Fabio
tags.

This change breaks service ID backward compatibility so on upgrade all
users services and checks will be removed and re-added with new IDs.

This change has the side effect of including all service fields in the
ID's hash, so we no longer have to track PortLabel and AddressMode
changes independently.
2017-12-08 12:03:43 -08:00
Michael Schurter e930057e4a Document service/check address_mode/port changes 2017-12-08 12:03:43 -08:00
Michael Schurter 1dd5b3822c
Merge pull request #3608 from hashicorp/b-3342-windows-log-leak
Fix bug in log framer only affecting Windows
2017-12-08 10:59:26 -08:00
Michael Lange b7048179dd Adds UI changes to the changelog 2017-12-07 15:44:12 -08:00
Chelsea Holland Komlo 61fa8ad4ba code review fixes 2017-12-07 13:46:25 -05:00
Chelsea Holland Komlo 3f231a0856 add test for kill signal in required signals
update changelog
2017-12-07 11:40:15 -05:00
Chelsea Holland Komlo 80de7d5ebd allow controlling the stop signal in exec/raw_exec 2017-12-06 11:28:45 -05:00
Chelsea Komlo 9ae849e09c
Merge pull request #3612 from hashicorp/docker-rkt-user
Set user for rkt tasks
2017-12-05 17:45:08 -05:00
Michael Schurter b66aa5b7f6
Merge pull request #3563 from hashicorp/b-snapshot-atomic
Atomic Snapshotting / Sticky Volume Migration
2017-12-05 09:16:33 -08:00
Michael Schurter 6ccc4219d3
Merge pull request #3615 from hashicorp/b-rkt-host-ports
rkt: Don't require port_map with host networking
2017-12-04 14:49:42 -08:00
Chelsea Holland Komlo 7c74968452 add ability to specify user for rkt 2017-12-04 14:21:48 -05:00
Alex Dadgar cff9fe2938 changelog 2017-12-04 10:43:27 -08:00
Alex Dadgar ab67a98c13 Emit hostname as a label 2017-12-04 10:42:31 -08:00
Michael Schurter 2bf1d6d85e rkt: Don't require port_map with host networking
Also don't try to return a DriverNetwork with host networking. None will
ever exist as that's the point of host networking: rkt won't create a
network namespace.
2017-12-01 17:23:25 -08:00
Michael Schurter 288e94302e Add changelog entry for #3608 2017-12-01 15:59:42 -08:00
Michael Schurter 0b12984552 Add atomic migrations to changelog and docs 2017-11-29 17:27:13 -08:00
Chelsea Holland Komlo 2e159fe01e add changelog 2017-11-29 15:27:50 -05:00
Preetha 0c1449a305
Update CHANGELOG.md 2017-11-20 14:08:40 -06:00
Preetha c02b740182
Update CHANGELOG.md 2017-11-17 15:31:25 -06:00
Preetha 55483bb546
Update CHANGELOG.md 2017-11-17 15:10:01 -06:00
Preetha 1d321f3556
Update CHANGELOG.md 2017-11-17 14:35:54 -06:00
Alex Dadgar 32140001e3 changelog 2017-11-17 12:10:15 -08:00
Alex Dadgar 205d42dc9a changelog 2017-11-17 10:35:12 -08:00
Michael Schurter 3ceec0caab Remove rkt pods when exiting
Fixes #3561
2017-11-16 14:33:44 -08:00
Alex Dadgar 07963f0b6d
Merge pull request #3546 from hashicorp/f-heuristic
Better interface selection heuristic
2017-11-15 12:51:21 -08:00
Alex Dadgar a479ee6f0c changelog 2017-11-15 12:50:49 -08:00
Michael Schurter f86f0bd9ea Handle leader task being dead in RestoreState
Fixes the panic mentioned in
https://github.com/hashicorp/nomad/issues/3420#issuecomment-341666932

While a leader task dying serially stops all follower tasks, the
synchronizing of state is asynchrnous. Nomad can shutdown before all
follower tasks have updated their state to dead thus saving the state
necessary to hit this panic: *have a non-terminal alloc with a dead
leader.*

The actual fix is a simple nil check to not assume non-terminal allocs
leader's have a TaskRunner.
2017-11-15 10:36:13 -08:00
Preetha Appan 2cee27ea31 Update Changelog 2017-11-15 08:28:27 -06:00
Preetha Appan bb3fd9fb7f Update CHANGELOG.md to mention consul template version 2017-11-15 08:25:57 -06:00
Chelsea Komlo 2dfda33703 Nomad agent reload TLS configuration on SIGHUP (#3479)
* Allow server TLS configuration to be reloaded via SIGHUP

* dynamic tls reloading for nomad agents

* code cleanup and refactoring

* ensure keyloader is initialized, add comments

* allow downgrading from TLS

* initalize keyloader if necessary

* integration test for tls reload

* fix up test to assert success on reloaded TLS configuration

* failure in loading a new TLS config should remain at current

Reload only the config if agent is already using TLS

* reload agent configuration before specific server/client

lock keyloader before loading/caching a new certificate

* introduce a get-or-set method for keyloader

* fixups from code review

* fix up linting errors

* fixups from code review

* add lock for config updates; improve copy of tls config

* GetCertificate only reloads certificates dynamically for the server

* config updates/copies should be on agent

* improve http integration test

* simplify agent reloading storing a local copy of config

* reuse the same keyloader when reloading

* Test that server and client get reloaded but keep keyloader

* Keyloader exposes GetClientCertificate as well for outgoing connections

* Fix spelling

* correct changelog style
2017-11-14 17:53:23 -08:00
Preetha Appan 84dcdcf2bf Update CHANGELOG.md 2017-11-13 12:46:42 -06:00
Alex Dadgar c44f94fbd0
Merge pull request #3529 from hashicorp/b-env-ct
Handle multiple environment templates
2017-11-10 12:56:02 -08:00
Alex Dadgar ea57850b6d changelog 2017-11-10 12:44:36 -08:00
Alex Dadgar 491fce5dcb changelog 2017-11-10 11:10:34 -08:00
Alex Dadgar 68985aaa7d changelog 2017-11-06 15:48:05 -08:00
Michael Schurter 2ef8b15680 Add #3509 to changelog 2017-11-06 11:26:04 -08:00
Alex Dadgar f6dd1d1fa9 changelog and website 2017-11-03 16:43:16 -07:00
Alex Dadgar 5505922cf5 changelog 2017-11-03 16:33:23 -07:00
Preetha effe2a93ea
Update CHANGELOG.md 2017-11-03 17:34:09 -05:00
Alex Dadgar 6837b67e25 changelog 2017-11-03 13:45:15 -07:00
Alex Dadgar 28bcb3ca08 changelog 2017-11-03 13:24:45 -07:00
Preetha Appan fb74ffb18c Update CHANGELOG.md 2017-11-03 13:07:40 -05:00
Alex Dadgar abd28cbd7d
Merge pull request #3493 from hashicorp/f-remove-atlas
Remove Atlas and Scada from codebase
2017-11-02 16:00:44 -07:00
Preetha Appan fcd9be1ff8 Update CHANGELOG,md, include PR numbers. 2017-11-02 15:58:51 -05:00
Diptanu Choudhury 132e145a30
Merge pull request #3061 from hashicorp/f-add-client-metrics
Added metrics to track task/alloc start/restarts/dead events
2017-11-02 13:45:29 -07:00
Diptanu Choudhury f4abb6ccd3 Updated changelog 2017-11-02 13:44:13 -07:00
Alex Dadgar 9a8b4c13ec deprecation notice 2017-11-02 13:38:50 -07:00
Michael Schurter 78105bcb57 Add #3445 to changelog 2017-11-01 17:17:51 -07:00
Preetha Appan 2daed26a74 Update CHANGELOG.md 2017-11-01 15:21:05 -05:00