2dfda33703
Nomad agent reload TLS configuration on SIGHUP ( #3479 )
...
* Allow server TLS configuration to be reloaded via SIGHUP
* dynamic tls reloading for nomad agents
* code cleanup and refactoring
* ensure keyloader is initialized, add comments
* allow downgrading from TLS
* initalize keyloader if necessary
* integration test for tls reload
* fix up test to assert success on reloaded TLS configuration
* failure in loading a new TLS config should remain at current
Reload only the config if agent is already using TLS
* reload agent configuration before specific server/client
lock keyloader before loading/caching a new certificate
* introduce a get-or-set method for keyloader
* fixups from code review
* fix up linting errors
* fixups from code review
* add lock for config updates; improve copy of tls config
* GetCertificate only reloads certificates dynamically for the server
* config updates/copies should be on agent
* improve http integration test
* simplify agent reloading storing a local copy of config
* reuse the same keyloader when reloading
* Test that server and client get reloaded but keep keyloader
* Keyloader exposes GetClientCertificate as well for outgoing connections
* Fix spelling
* correct changelog style
2017-11-14 17:53:23 -08:00
46bc4280b2
Adding support for tagged metrics
2017-11-01 13:15:06 -07:00
d4128f0e5a
Setting the default stats collection interval
2017-11-01 13:15:06 -07:00
524a1f0712
Publishing metrics for job summary
2017-11-01 13:15:06 -07:00
e5ec915ac3
sync
2017-09-19 10:08:23 -05:00
3e46094cee
Passthrough replication token for token/policy replication
2017-09-04 13:05:53 -07:00
cb827b6696
nomad: adding policy replication support
2017-09-04 13:04:45 -07:00
7d4aa1975f
agent: thread through ACL config to Server
2017-09-04 13:04:45 -07:00
c643e6b0d1
Add config options
2017-07-07 12:05:56 -07:00
a9c8b09da8
Push to configs
2017-04-14 15:24:55 -07:00
a81c387adf
Require TLS for server RPC when enabled
...
Fixes #2525
We used to be checking a RequireTLS field that was never set. Instead we
can just check the TLSConfig.EnableRPC field and require TLS if it's
enabled.
Added a few unfortunately slow integration tests to assert the intended
behavior of misconfigured RPC TLS.
Also disable a lot of noisy test logging when -v isn't specified.
2017-04-06 09:34:36 -07:00
78cfcd2724
Bump protocol version and update numOtherPeers
2017-02-02 13:52:31 -08:00
536c2921e9
Remove ServerName because we verify based on region
2016-11-01 14:17:31 -07:00
84722234b4
Fixed a bunch of TLS related failures
2016-10-26 14:08:46 -07:00
7c61e115bd
Moved tlsutil into helpers
2016-10-25 16:05:37 -07:00
cf35aeac84
Moving the TLSConfig to structs
2016-10-25 15:57:38 -07:00
e03927bb5c
Changed the way TLS config is parsed
2016-10-24 13:56:19 -07:00
2e3118e69c
Implemented TLS support for http and rpc
2016-10-23 22:22:00 -07:00
c913e4396f
Add Vault config to server
2016-08-17 16:23:29 -07:00
699c4fc68c
nomad: Add RPCHoldTimeout to tune RPC hold interval
2016-07-10 13:35:48 -04:00
46e2d54acf
Provide `nomad.Config` with a default `LogOutput` of `os.StdErr`
2016-06-17 06:44:10 -07:00
d17af396ca
Create config.DefaultConsulConfig()
2016-06-16 20:41:05 -07:00
b0fecbefc1
Define `BootstrapExepct` as an `int32` so it can be manipulated atomically.
2016-06-16 12:00:15 -07:00
f05514335b
Teach Nomad servers how to fall back to Consul.
2016-06-15 12:40:51 -07:00
6d162e1e03
Fix copy pasta comment.
...
These parameters are used to bootstrap Nomad servers, not Consul servers.
2016-06-10 15:48:36 -04:00
f1d88bdf86
Remove user-specifiable gc threshold
2015-12-16 15:00:45 -08:00
2218a79815
Add garbage collection to jobs
2015-12-16 15:00:45 -08:00
2ff133c0e6
nomad: rename region1 to global. Fixes #41
2015-09-13 18:18:40 -07:00
78bbad2d8d
Remove todo because there is no serf version 5
2015-09-11 11:22:36 -07:00
d93459b797
Change serf version to 4 so the entire test suite doesn't fail
2015-09-11 10:21:15 -07:00
ad681be59c
nomad: adding node GC
2015-09-07 11:01:29 -07:00
d84f959dd8
nomad: fixing tests
2015-08-30 18:10:12 -07:00
5155f2c8eb
nomad: parameterize heartbeat configuration
2015-08-29 14:14:19 -07:00
2ea99f211a
nomad: updating for new alloc representation
2015-08-25 17:36:52 -07:00
7e644b7cc9
nomad: use fast and slow exponential backoff in worker
2015-08-23 17:39:49 -07:00
b632173b81
nomad: default number of schedulers to number of cores
2015-08-23 13:59:26 -07:00
af891a50f5
nomad: adding simple client
2015-08-16 17:44:18 -07:00
1e36821bfd
changing default ports
2015-08-16 15:10:11 -07:00
79a1471b85
nomad: add delivery limit to eval broker
2015-08-16 10:55:55 -07:00
b75cc4b9fb
nomad: periodic dispatch of eval GC
2015-08-15 15:15:00 -07:00
8dfcb99e7f
nomad: rename SystemScheduler to CoreScheduler
2015-08-15 12:38:58 -07:00
5f1ebb9274
nomad: adding special 'system' scheduler
2015-08-06 17:04:35 -07:00
59d45bba4f
nomad: enable all builtin schedulers by default
2015-07-28 16:19:52 -07:00
3c2a16038b
nomad: first pass adding scheduling workers
2015-07-28 15:12:08 -07:00
fc11808fe9
nomad: add eval broker, configurable nack timeout
2015-07-23 21:44:17 -07:00
fa2ff7a324
nomad: increase serf reap to 72h
2015-06-06 00:32:28 +02:00
25aad83ea4
nomad: testing leader bridging of serf
2015-06-05 23:54:45 +02:00
e219bc1e71
nomad: adding Serf integration
2015-06-03 12:58:00 +02:00
d52122f041
nomad: more skeleton
2015-06-03 12:26:50 +02:00
4c554f14bb
nomad: support DevMode configuration
2015-06-01 21:11:40 +02:00
Chelsea Komlo