Commit graph

1651 commits

Author SHA1 Message Date
Mahmood Ali 277e358489
keep security-related together 2019-09-03 20:38:32 -04:00
Jamie Finnigan d4c9e1028f docs: task driver resource isolation & security 2019-09-03 15:19:46 -07:00
Jasmine Dahilig 4edebe389a
add default update stanza and max_parallel=0 disables deployments (#6191) 2019-09-02 10:30:09 -07:00
Preetha eba025f35d
Merge pull request #6237 from hashicorp/f-rkt-deprecated
rkt deprecation notice
2019-08-30 16:45:40 -05:00
Preetha Appan 4ebe5e3daf
fix casing 2019-08-30 15:31:28 -05:00
Preetha Appan 284ec935ea
Wording changes 2019-08-30 14:36:08 -05:00
Tim Gross b79021adfd cli: split -dev and -dev-connect flags 2019-08-30 09:33:30 -04:00
Preetha Appan c8f5130978
Deprecation notice for rkt 2019-08-29 13:38:12 -05:00
Michael Schurter 3b0e1d8ef7 consul: use Consul's defaults and env vars
Use Consul's API package defaults and env vars as Nomad's defaults.
2019-08-27 14:56:52 -07:00
Jasmine Dahilig 4078393bb6
expose nomad namespace as environment variable in allocation #5692 (#6192) 2019-08-27 08:38:07 -07:00
Jerome Gravel-Niquet cbdc1978bf Consul service meta (#6193)
* adds meta object to service in job spec, sends it to consul

* adds tests for service meta

* fix tests

* adds docs

* better hashing for service meta, use helper for copying meta when registering service

* tried to be DRY, but looks like it would be more work to use the
helper function
2019-08-23 12:49:02 -04:00
Chris Baker 1db5e3501f add node.region to interpolation documentation to address #6164 2019-08-20 17:55:21 +00:00
Charlie Voiselle 84880f5fbc
Merge pull request #6149 from hashicorp/docs-cv-prefer-routable
link-local addresses can be fingerprinted
2019-08-19 15:22:12 -04:00
Tim Gross 2ab004d971 command: add -connect flag to job init
Adds an example job for Consul Connect integration as well as an
annotated example job.
2019-08-19 14:43:04 -04:00
Charlie Voiselle af00dfa88b
Rewording based on reviews 2019-08-16 13:33:26 -04:00
Charlie Voiselle d9a77b0e61 link-local addresses can be fingerprinted
Added note to document that link-local addresses can be fingerprinted in
cases where no routable address can be found.  Crosslinked to
`"fingerprint.network.disallow_link_local"` because they are somewhat
related and it is documented at a reasonable distance from this setting.
2019-08-16 12:44:57 -04:00
Michael Schurter 6a45c2431e
Merge pull request #6103 from groovemonkey/master
syntax fix; add example for alloc exec -task
2019-08-15 10:54:00 -07:00
Tim Gross 2a592a2e0c
agent: add optional param to -dev flag for connect (#6126)
Consul Connect must route traffic between network namespaces through a
public interface (i.e. not localhost). In order to support testing in
dev mode, users needed to manually set the interface which doesn't
make for a smooth experience.

This commit adds a facility for adding optional parameters to the
`nomad agent -dev` flag and uses it to add a `-dev=connect` flag that
binds to a public interface on the host.
2019-08-14 15:29:37 -04:00
Tim Gross 03433f35d4 client/template: configuration for function blacklist and sandboxing
When rendering a task template, the `plugin` function is no longer
permitted by default and will raise an error. An operator can opt-in
to permitting this function with the new `template.function_blacklist`
field in the client configuration.

When rendering a task template, path parameters for the `file`
function will be treated as relative to the task directory by
default. Relative paths or symlinks that point outside the task
directory will raise an error. An operator can opt-out of this
protection with the new `template.disable_file_sandbox` field in the
client configuration.
2019-08-12 16:34:48 -04:00
David Cohen e69865264b syntax fix; add example for alloc exec -task 2019-08-09 10:16:45 -04:00
defau1t aae9c4b368 Fix Rkt driver requirements list (#6093) 2019-08-08 12:03:41 -05:00
Michael Schurter 3e4796799a
Merge pull request #6003 from pete-woods/add-job-status-metrics
nomad: add job status metrics
2019-08-07 08:02:16 -07:00
Nick Ethier 34deb47a8b
Merge network namespaces work into master (#6046)
Merge network namespaces work into master
2019-07-31 11:03:17 -04:00
Mahmood Ali 7d8dc50514
Merge pull request #6035 from jrasell/patch-6
Update example setup to use non-deprecated join
2019-07-31 02:27:51 -05:00
Nick Ethier af7f34604e
Update website/source/docs/drivers/docker.html.md
Co-Authored-By: Michael Schurter <michael.schurter@gmail.com>
2019-07-31 01:04:08 -04:00
Nick Ethier 1dae42ab81
docker: allow configuration of infra image 2019-07-31 01:04:07 -04:00
Nick Ethier c90753ee23
website: add new networking related client config docs 2019-07-31 01:04:07 -04:00
Michael Schurter d31488e262
Merge pull request #5978 from pete-woods/configurable-job-gc-interval
command/agent: allow the job GC interval to be configured
2019-07-30 15:54:29 -07:00
James Rasell d70d8c4256
Update example setup to use non-deprecated join 2019-07-30 14:54:52 +02:00
Michael Schurter 9bce153a50 docs: job names are unique by region/namespace
"globally" is incorrect here unless you're running 1 region or at least
only 1 per planet.

Sorted link list at the bottom as well.
2019-07-29 08:00:28 -07:00
Pete Woods 9096aa3d23
Add job status metrics
This avoids having to write services to repeatedly hit the jobs API
2019-07-26 10:12:49 +01:00
Pete Woods b47c5ca467
Allow the job GC interval to be configured from default of 5 minutes 2019-07-26 10:11:25 +01:00
Preetha Appan 7455688649
fix grammar 2019-07-25 21:03:20 -05:00
Lang Martin db9fcb03f4 docs for linux raw_exec cgroups 2019-07-24 12:36:49 -04:00
Preetha 35f4bd4279
Merge pull request #5985 from hashicorp/b-enterprise-docs-guides-links
Fix links to namespace and quotas guides
2019-07-22 13:54:25 -05:00
Mahmood Ali dd6f55f33f
Merge pull request #5989 from hashicorp/d-fix-bashism-text
Clarify script checks requiring shell
2019-07-22 19:41:07 +08:00
Mahmood Ali 305b61631e Clarify script checks requiring shell
Closes https://github.com/hashicorp/nomad/issues/5981
2019-07-22 18:34:59 +08:00
Buck Doyle 1eaf8b0568 Fix links to namespace and quotas guides 2019-07-19 12:45:28 -05:00
tariq87 98c8103a05
Update index.html.md 2019-07-19 09:21:20 +05:30
cneira ef214a8790 fixup 2019-07-12 17:08:23 -04:00
cneira 2f7061a40f Merge branch 'jail-task-driver' of https://github.com/cneira/nomad into jail-task-driver 2019-07-12 16:52:22 -04:00
cneira 438d27c652 fixup 2019-07-12 16:52:19 -04:00
Carlos Neira 33e1cf4ba6
Update jail-task-driver.html.md 2019-07-12 11:45:56 -04:00
Carlos Neira c9112dd9bf
Fixed LXC reference 2019-07-12 11:27:47 -04:00
cneira 82baa8c5a7 Added Community task driver for FreeBSD jails 2019-07-11 13:43:16 -04:00
Jasmine Dahilig 1c1e81b294
Merge pull request #5846 from hashicorp/f-docker-log-constraints
add log rotation to docker driver log defaults
2019-07-03 10:17:19 -07:00
Jasmine Dahilig cece83dd9c default to json-file log rotation for docker driver 2019-07-03 09:04:45 -07:00
Yishan Lin cd8fc7c983
Merge pull request #5804 from hashicorp/yishan/revised-enterprise-docs
Revised Nomad Enterprise page
2019-07-01 10:41:32 -07:00
Yishan Lin 92f36ed021 Updated with suggestions. 2019-07-01 10:39:35 -07:00
Robert James Hernandez 16939aa8c3 Update website example config 2019-06-23 10:41:48 -07:00