8f365bfbbf
Update vault_test to use minimal set of policies + start of Vault documentation
2016-11-01 10:39:15 -07:00
df4398beac
Implement blocking queries for /v1/job/evaluations
2016-10-29 17:30:34 -07:00
fde7a24865
Consul-template fixes + PreviousAlloc in api
2016-10-28 15:50:35 -07:00
ffefb6d3c1
Fix flaky test
2016-10-27 11:48:00 -07:00
9c9ab621c3
Merge pull request #1872 from hashicorp/f-dequeue
...
Add scheduler version enforcement
2016-10-27 11:42:11 -07:00
bbe6e3d0b6
Larger delay on mismatch
2016-10-27 11:41:43 -07:00
ddf5fb82b5
Small cleanups
2016-10-27 10:51:11 -07:00
03fde26656
Fix inplace update for pre secret node
2016-10-26 22:05:44 -07:00
a1d08c2aba
Add scheduler version enforcement
2016-10-26 14:52:48 -07:00
84722234b4
Fixed a bunch of TLS related failures
2016-10-26 14:08:46 -07:00
8e3d9d4f4f
Merge pull request #1864 from hashicorp/b-allow-empty-resource
...
Allow omitting resource block entirely
2016-10-26 13:26:04 -07:00
41c5bdb510
Document missing task resources handling
2016-10-26 13:21:09 -07:00
067fcda3fe
Making the cli use TLS if the client has enabled TLS
2016-10-26 11:13:53 -07:00
3ea1fe8d20
Allow omitting resource block entirely
2016-10-26 10:36:41 -07:00
50ca5e1e9d
Merge pull request #1853 from hashicorp/f-rpc-http-tls
...
TLS support for http and RPC
2016-10-25 16:14:43 -07:00
7c61e115bd
Moved tlsutil into helpers
2016-10-25 16:05:37 -07:00
cf35aeac84
Moving the TLSConfig to structs
2016-10-25 15:57:38 -07:00
d88f1d3e3d
Merge pull request #1854 from hashicorp/f-vault-role-validate
...
Validate the Vault role being used
2016-10-25 14:41:40 -07:00
d3649f5d98
check period
2016-10-25 14:37:54 -07:00
4082732d3a
Interpolate and then validate services
2016-10-25 14:27:49 -07:00
8e07c2750e
Merge pull request #1839 from hashicorp/f-signal-constraints
...
Signal creates an auto-constraints
2016-10-25 11:09:33 -07:00
22eb507955
Upper case signals
2016-10-25 11:09:22 -07:00
3d04efb21f
Validate the Vault role being used
2016-10-24 16:53:47 -07:00
03eba049ed
Merge pull request #1848 from hashicorp/f-vault-error
...
Thread through whether DeriveToken error is recoverable or not
2016-10-24 15:01:18 -07:00
fc8856e82b
Remove default
2016-10-24 15:01:08 -07:00
e03927bb5c
Changed the way TLS config is parsed
2016-10-24 13:56:19 -07:00
e85d0ebace
Merge pull request #1840 from hashicorp/f-kill-fail
...
Change how we mark tasks as failed and allow consul-template to fail tasks
2016-10-24 13:40:52 -07:00
2e3118e69c
Implemented TLS support for http and rpc
2016-10-23 22:22:00 -07:00
ede3a814ba
Small fixes
2016-10-22 18:20:50 -07:00
0070178741
Thread through whether DeriveToken error is recoverable or not
2016-10-22 18:08:30 -07:00
285e80ac0f
Remove disk usage enforcement
...
Many thanks to @iverberk for the original PR (#1609 ), but we ended up
not wanting to ship this implementation with 0.5.
We'll come back to it after 0.5 and hopefully find a way to leverage
filesystem accounting and quotas, so we can skip the expensive polling.
2016-10-21 13:55:51 -07:00
46a7d1a0d7
Change how we mark tasks as failed and allow consul-template to fail tasks
2016-10-20 17:27:16 -07:00
aadc9e3017
Add implicit signal constraint and validate that a driver can handle the signal. Also fixes a bug with plan and implicit constraints by adding them to the job being planned
2016-10-20 13:55:35 -07:00
989827e402
Add set contains
2016-10-19 13:06:28 -07:00
7f17c93f89
Ensuring that ephemeral disk is present before deciding if we should migrate ( #1827 )
2016-10-19 11:12:25 -07:00
d6606ecbe5
tests
2016-10-18 14:54:14 -07:00
36cfe6e89e
Large refactor of task runner and Vault token rehandling
2016-10-18 11:24:20 -07:00
af036be754
Struct/api/parsing
2016-10-18 11:24:20 -07:00
53eeec9bc1
Merge pull request #1801 from hashicorp/f-signals
...
Consul-template signal change mode
2016-10-18 11:23:47 -07:00
a0dcd4a228
comment
2016-10-18 11:23:27 -07:00
0f6e0d10b6
Enable serf encryption ( #1791 )
...
* Added the keygen command
* Added support for gossip encryption
* Changed the URL for keyring management
* Fixed the cli
* Added some tests
* Added tests for keyring operations
* Added a test for removal of keys
* Added some docs
* Fixed some docs
* Added general options
2016-10-17 10:48:04 -07:00
db4e676d73
Merge pull request #1803 from hashicorp/b-vault-parse
...
Fix Vault Config parsing of booleans
2016-10-11 13:47:46 -07:00
82960c46d8
Tests
2016-10-11 13:28:18 -07:00
83f647ed84
Replace "the the" with "the" in documentation and comments
2016-10-11 15:31:40 -04:00
751aa114bf
Fix Vault parsing of booleans
2016-10-10 18:04:39 -07:00
3d0edaa91e
Ensure templates have different destinations
2016-10-10 15:19:00 -07:00
bc35eaee21
Task runner sends signals
2016-10-10 15:09:00 -07:00
68c5fe78f8
Tests
2016-10-06 15:17:34 -07:00
8fb07bb083
Fix handling of restart in TaskEvents
2016-10-06 15:06:54 -07:00
8eb7fa91cf
Start of integration
2016-10-06 15:05:49 -07:00
3693de99d8
Merge pull request #1783 from hashicorp/f-consul-template
...
Consul template manager
2016-10-06 15:05:01 -07:00
acdbc2e1c9
Fix diff test
2016-10-06 14:14:59 -07:00
19a6aefd68
more vendoring
2016-10-06 12:36:44 -07:00
d2837dec44
Do not allow path to escape the alloc dir for the FS commands
2016-10-03 14:58:44 -07:00
4eaabd675c
Consul Template Manager
2016-10-03 12:59:31 -07:00
d50c395421
Getting snapshot of allocation from remote node ( #1741 )
...
* Added the alloc dir move
* Moving allocdirs when starting allocations
* Added the migrate flag to ephemeral disk
* Stopping migration if the allocation doesn't need migration any more
* Added the GetAllocDir method
* refactored code
* Added a test for alloc runner
* Incorporated review comments
2016-10-03 09:59:57 -07:00
9b98d70aec
Fixed task group validation tests
2016-09-27 17:57:30 -07:00
80085ddda5
Merge pull request #1735 from hashicorp/b-bootstrap-flapping
...
Retry all servers on RPC call failure
2016-09-27 16:33:15 -07:00
fca2becaa5
Parse
2016-09-26 15:36:11 -07:00
b4c3f015bc
Template diff
2016-09-26 15:36:11 -07:00
e925f8ca58
Add template structs
2016-09-26 15:36:11 -07:00
dae7f88118
Not setting a drained node as preferred node ( #1740 )
2016-09-23 21:15:50 -07:00
2ab5264595
Retry all servers on RPC call failure
...
rpcproxy is refactored into serverlist which prioritizes good servers
over servers in a remote DC or who have had a failure.
Registration, heartbeating, and alloc status updating will retry faster
when new servers are discovered.
Consul discovery will be retried more quickly when no servers are
available (eg on startup or an outage).
2016-09-23 11:44:48 -07:00
d64ef28c39
Handle the various valid root cases
2016-09-21 17:30:57 -07:00
f99d84d2c3
Renew root tokens where applicable
2016-09-21 16:49:15 -07:00
08d79893b0
Merge pull request #1727 from kaskavalci/patch-4
...
Change error message
2016-09-21 13:53:13 -07:00
59df3dcf58
Vault diff
2016-09-21 13:49:34 -07:00
12de69a66f
Struct and parse
2016-09-21 11:31:09 -07:00
5a9919bfbf
Fix VaultPolicies returning non-empty map when there are no policies
2016-09-21 11:14:09 -07:00
d166f8e3bf
Lowercase message
2016-09-21 20:43:15 +03:00
389beda383
Change error message
...
Local Disk -> Ephemeral Disk
2016-09-21 17:57:19 +03:00
50efdb00e9
Merge pull request #1713 from hashicorp/f-alloc-runner-vault
...
Vault integration in client
2016-09-20 16:15:55 -07:00
64de46432a
Merge pull request #1677 from hashicorp/f-vault-implicit-constraint
...
Vault implicit Task Group constraint + allow root tokens
2016-09-20 16:15:32 -07:00
ada5d8dd0c
alloc-status
2016-09-14 18:27:13 -07:00
1b3c5e98c8
Renaming LocalDisk to EphemeralDisk ( #1710 )
...
Renaming LocalDisk to EphemeralDisk
2016-09-14 15:43:42 -07:00
6702a29071
Vault token threaded
2016-09-14 13:30:01 -07:00
6028682ad2
Adding LocalDisk to alloc.Job
2016-09-01 17:41:50 -07:00
874dfbc84a
Implicit vault constraint
2016-09-01 14:23:40 -07:00
b0adaa5301
Allow root token
2016-09-01 12:05:08 -07:00
3c9936ae4a
Merge pull request #1659 from hashicorp/f-revoke-accessors
...
Token revocation and keeping only a single Vault client active among servers
2016-08-31 14:10:46 -07:00
6047414fb9
address comments
2016-08-31 14:10:33 -07:00
d94bb45ad3
Added some more comments
2016-08-31 14:06:31 -07:00
64c57d9136
Added a test
2016-08-31 13:40:43 -07:00
52e9946da9
Implemented SetPrefferingNodes in stack
2016-08-30 16:17:50 -07:00
bfee7b30a3
Introducing shared resources in alloc
2016-08-29 13:49:25 -07:00
48696ba0cc
Use tomb to shutdown
...
Token revocation
Remove from the statestore
Revoke tokens
Don't error when Vault is disabled as this could cause issue if the operator ever goes from enabled to disabled
update server interface to allow enable/disable and config loading
test the new functions
Leader revoke
Use active
2016-08-28 14:06:25 -07:00
3dec7cd2c9
Added LocalDisk to diff
2016-08-26 20:38:50 -07:00
13497913f9
Ensuring resources are re-calculated properly in fsm
2016-08-26 20:13:11 -07:00
e79cb67391
Changing implementation of AllocsFit
2016-08-26 17:28:29 -05:00
2f681b6415
Added copy method to LocalDisk
2016-08-26 14:24:47 -05:00
b844dc3600
Fixed more tests
2016-08-26 01:51:19 -05:00
3447658bba
Added scheduler tests to ensure disk constraints are honored
2016-08-25 15:31:56 -05:00
ffaf6c6299
Fixed some tests
2016-08-25 13:56:39 -05:00
8105613c25
Added an upgrade path for existing jobs with no local disk
2016-08-25 13:00:20 -05:00
ec73c768f1
Making the scheduler use LocalDisk instead of Resources.DiskMB
2016-08-25 12:27:42 -05:00
d156f32f94
Implemented job spec parsing for sticky volumes
2016-08-24 13:51:15 -05:00
05fe72e89e
fixed the exec fingerprinter test
2016-08-23 16:40:56 -05:00
db2806a9c1
Merge pull request #1629 from hashicorp/f-derive-token
...
Server Deriving Tokens on behalf of Clients
2016-08-23 13:58:47 -07:00
1da8566322
Merge pull request #1580 from hashicorp/f-disk-usage-monitoring
...
Monitor and enforce shared allocation directory disk usage
2016-08-23 09:49:53 -07:00
76d324a8f0
fix comment
2016-08-22 11:41:47 -07:00
4ca623bcfe
blocking chained allocations until previous allocation hasn't terminated
2016-08-22 11:34:24 -05:00
19be6b57b2
fixes
2016-08-19 20:02:32 -07:00
7f18074637
remove debug
2016-08-19 17:30:16 -07:00
c394a45b72
create token tests
2016-08-19 16:40:37 -07:00
909f552d9e
tests
2016-08-19 16:40:37 -07:00
10cd844ca8
Commit Vault Accessors to vault and return the response
2016-08-19 16:40:37 -07:00
901000f789
Raft message, fsm and state store table
2016-08-19 16:40:37 -07:00
19752edfaf
Pipeline Vault token creation
2016-08-19 16:40:37 -07:00
123a26ffea
Rate limiting
2016-08-19 16:40:37 -07:00
94b870a58b
Start
2016-08-19 16:40:37 -07:00
e7e8d5ab50
Merge pull request #1597 from hashicorp/f-node-secret-id
...
Nodes generate Secret ID and used retrieving allocations/registering
2016-08-19 10:51:21 -07:00
16285a0dc6
Enforce serverside secret id match
2016-08-19 10:50:49 -07:00
f8cd51b6e9
Enabling vault if token is present
2016-08-18 12:03:50 -07:00
2a17895a83
Disk resource monitoring and enforcement
2016-08-18 07:59:03 +02:00
895c31f605
Nodes generate Secret ID and used for retrieving allocations and registering
2016-08-17 16:31:47 -07:00
cabc9f829d
Merge pull request #1614 from hashicorp/f-nomad-0.5
...
F nomad 0.5
2016-08-17 16:27:50 -07:00
9bd9948c5b
Job Register endpoint validates token
2016-08-17 16:25:38 -07:00
f9f019fa62
LookupToken
2016-08-17 16:25:38 -07:00
a981fb4e0e
test renewal
2016-08-17 16:25:38 -07:00
a8efce874f
Token renewal and beginning of tests
2016-08-17 16:25:38 -07:00
713e310670
Renew loop
2016-08-17 16:25:38 -07:00
750a44b2c0
Create a Vault interface for the server
2016-08-17 16:25:38 -07:00
6e2f0a2776
Server has Vault API client
2016-08-17 16:25:38 -07:00
59892e4004
Merge pull request #1612 from hashicorp/diptanu-0-5-branch
...
Chained Allocs
2016-08-17 16:23:32 -07:00
4135b4ece7
Address field name feedback
2016-08-17 16:23:29 -07:00
bd0a89bdae
Added mapstructure tag for VaultToken
2016-08-17 16:23:29 -07:00
ad088db6eb
Store the Vault token once per job
2016-08-17 16:23:29 -07:00
7d899b6c60
Pass Vault config to client
2016-08-17 16:23:29 -07:00
14b4312502
Add vault struct
2016-08-17 16:23:29 -07:00
eac2675faf
Add enabled field
2016-08-17 16:23:29 -07:00
c913e4396f
Add Vault config to server
2016-08-17 16:23:29 -07:00
1584cfe93e
small fixes
2016-08-17 16:23:29 -07:00
0ca4a9fa4f
Change token/role names
2016-08-17 16:23:29 -07:00
adb3ce847f
change config variable names to match vault
2016-08-17 16:23:29 -07:00
fab7893774
vendor + api
2016-08-17 16:23:29 -07:00
b32128aa23
Initial config block
2016-08-17 16:23:29 -07:00
de6e662eb4
Fix service validate test
2016-08-17 11:09:40 -07:00
a3bcc1cbb1
Fix network dynamic port test
2016-08-17 11:08:21 -07:00
be51f1b265
Fix TaskDiff test
2016-08-17 11:07:11 -07:00
b6c39349b7
struct: tiny: output case number of the diff test
2016-08-17 19:15:59 +09:00
2e22fea61d
Merge pull request #1599 from hoffoo/initial_check_state
...
Add support for initial check status
2016-08-16 15:16:47 -07:00
8a23780aee
Fix bitmap test and check bitmap bounds
2016-08-16 15:16:35 -07:00
8fc52974a3
fix initial status tests
2016-08-16 14:34:36 -07:00
69bc3a8fc8
Add support for initial check status
2016-08-16 12:05:15 -07:00
c1a455983d
Added the chained alloc for system scheduler
2016-08-16 10:49:45 -07:00
ce0b78525d
inclusive range
2016-08-15 13:13:04 -07:00
761cc40cd2
Fixed a make vet warning
2016-08-12 12:09:44 -07:00
dd7e69006e
Not running tests parallal
2016-08-11 21:53:27 -07:00
01e08a64ee
Merge pull request #1569 from hashicorp/fix-network-port-collisions
...
Fix network port collisions when asking for dyn ports
2016-08-11 16:19:45 -07:00
d81b20c1a6
Fix network port collisions when asking for dyn ports
2016-08-11 16:18:45 -07:00
007a538515
Fix core scheduler tests
2016-08-11 14:36:22 -07:00
6e5c47a315
Merge pull request #1526 from hashicorp/b-random-ports
...
Set difference when picking random ports
2016-08-10 16:37:57 -07:00
5a37e720c5
Fixes plus address feedback
2016-08-10 16:37:26 -07:00
b8fd989d3a
Try stochastic and fallback to precise
2016-08-10 11:47:20 -07:00
ab94c8eed9
Marking allocations which are not terminal and are on down nodes as lost
2016-08-09 13:11:58 -07:00
3cc684211a
Added a test to ensure summaries are correct when a node goes down
2016-08-09 10:16:17 -07:00
c63a78b9a3
Removing the check related to checking version of server before reconciling in leader
2016-08-05 17:48:37 -07:00
1518f23d0a
Making servers reconcile job summaries when they acquire leadership
2016-08-05 16:47:36 -07:00
1b620bcdd8
Add a test
2016-08-05 16:23:41 -07:00
9089a279a1
Set difference when picking random ports
2016-08-05 16:08:35 -07:00
6dc5b1972c
Setting job's create index as summary create index during reconciliation
2016-08-04 15:14:01 -07:00
2fb67fefb5
Merge pull request #1516 from hashicorp/f-lost-state-sched
...
Make scheduler mark allocations as lost
2016-08-04 11:36:02 -07:00
88d383c47f
Updated tests and comments
2016-08-04 11:29:36 -07:00
e33bda76bf
test sched doesn't mark complete as lost + core_sched tests
2016-08-04 11:24:17 -07:00
c24e8ba7d8
Not updating summary if job is de-registered
2016-08-03 17:00:08 -07:00
74caed0c7a
Added an endpoint for users to reconcile job summaries
2016-08-03 16:12:47 -07:00
ac3328e812
Make scheduler mark allocations as lost
2016-08-03 15:57:46 -07:00
1b60e0823a
Added a test for restoring the summaries in fsm
2016-08-03 11:58:36 -07:00
4197e62e78
Remove old way of marking lost
2016-08-03 11:20:56 -07:00
b95cf91ee3
using the job associated with the alloc to determine if job is present
2016-08-02 19:14:05 -07:00
6f8c40fca7
Not updating summary if create index of summary not same as job's create index
2016-08-02 18:59:45 -07:00
b2d388bcba
Merge pull request #1508 from hashicorp/b-dont-update-job
...
Do not update the job of allocations that are being stopped
2016-08-02 18:58:39 -07:00
2332a58944
Do not update the job of allocations that are being stopped
2016-08-02 17:53:31 -07:00
87fdeb5393
Updated the logic to update job summary
2016-08-02 16:08:20 -07:00
3966a46996
Updating the summary after we have updated the current allocation when client updates the alloc
2016-08-02 15:06:39 -07:00
92e32e46f1
Updating the summary after we have updated the current allocation
2016-08-02 14:59:41 -07:00
3aa4f39094
Checking if a job is nil before updating the allocation
2016-08-01 17:05:48 -07:00
b69b7129a6
Using the parnet transaction to query the allocation while updating summary
2016-08-01 16:46:05 -07:00
b0e1f02e26
Not updating job summaries if jobs are not present
2016-07-28 15:24:27 -07:00
0dd8a84de0
Marking the desired state of an allocation as stop if the node on which it runs disconnects
2016-07-27 17:07:08 -07:00
b857d7c6c1
Copying job summary before mutating it
2016-07-27 14:46:46 -07:00
1bab053490
Updated some tests
2016-07-26 15:11:48 -07:00
10a5c06a5a
Running the tests in verbose mode
2016-07-26 14:02:47 -07:00
9943053239
Fixed a test
2016-07-25 22:22:55 -07:00
d1a6bdb4ba
Making the queued allocations bind late
2016-07-25 22:11:11 -07:00
5bded8d54d
Setting the right indexes while creating Job Summary
2016-07-25 17:51:20 -07:00
3089833397
Reconciling the queued allocations during restore
2016-07-25 17:31:40 -07:00
cc37ec33cf
Renamed Job.GetJobSummary to Job.Summary
2016-07-25 17:31:40 -07:00
6193529040
Fixed more tests
2016-07-25 17:31:40 -07:00
de2c79f421
Added test for blocking query of job summary endpoint
2016-07-25 17:26:38 -07:00
cce5f483ae
Added some more tests
2016-07-25 17:26:38 -07:00
f1c9427c37
Added code to create missing job summaries
2016-07-25 17:26:38 -07:00
dabb83063b
Review comments
2016-07-25 17:26:38 -07:00
50842b88c7
Fixed some bugs
2016-07-25 17:26:38 -07:00
1405687a88
Fixed some error messages and conditions
2016-07-25 17:26:38 -07:00
ef97956333
Added support for retreiving job summary in api
2016-07-25 17:26:38 -07:00
632ced5eb2
Adding the summary to the Job Stub
2016-07-25 17:26:38 -07:00
a5bb0ca6fc
Moved the job endpoint around
2016-07-25 17:26:38 -07:00
7bafb7c675
Updating the job summary while mutating jobs and allocation objects
2016-07-25 17:26:38 -07:00
109b05cb29
Applying changes to job updates via FSM
2016-07-25 17:26:38 -07:00
Alex Dadgar