Find a file
Tim Gross 055434cca9
add metric for count of RPC requests (#15515)
Implement a metric for RPC requests with labels on the identity, so that
administrators can monitor the source of requests within the cluster. This
changeset demonstrates the change with the new `ACL.WhoAmI` RPC, and we'll wire
up the remaining RPCs once we've threaded the new pre-forwarding authentication
through the all.

Note that metrics are measured after we forward but before we return any
authentication error. This ensures that we only emit metrics on the server that
actually serves the request. We'll perform rate limiting at the same place.

Includes telemetry configuration to omit identity labels.
2023-01-24 11:54:20 -05:00
.changelog client: add disk_total_mb and disk_free_mb config options (#15852) 2023-01-24 09:14:22 -05:00
.circleci build: update to go 1.19.5 (#15769) 2023-01-13 09:57:32 -06:00
.github
.release
.semgrep ci: add semgrep update for known OIDC unauthenticated RPCs. 2023-01-18 10:18:35 +00:00
.tours
acl
api Merge branch 'main' into sso/gh-13120-oidc-login 2023-01-18 10:05:31 +00:00
ci
client implement pre-forwarding auth on select RPCs (#15513) 2023-01-24 10:52:07 -05:00
command add metric for count of RPC requests (#15515) 2023-01-24 11:54:20 -05:00
contributing build: update to go 1.19.5 (#15769) 2023-01-13 09:57:32 -06:00
demo
dev
drivers docker: configure restart policy for networking pause container (#15732) 2023-01-10 07:50:09 -06:00
e2e e2e: fixup reference to exported test type (#15786) 2023-01-17 12:13:57 -06:00
helper vault: configure user agent on Nomad vault clients (#15745) 2023-01-10 10:39:45 -06:00
integrations
internal/testing/apitests api: add OIDC HTTP API endpoints and SDK. 2023-01-13 13:15:58 +00:00
jobspec
jobspec2 consul/connect: use block not optional for opaque map (#15765) 2023-01-12 10:39:10 -06:00
lib cli: use localhost for default login callback address. (#15820) 2023-01-19 16:46:17 +01:00
nomad add metric for count of RPC requests (#15515) 2023-01-24 11:54:20 -05:00
plugins
scheduler scheduler: allow using device ID as attribute (#15455) 2023-01-10 14:28:23 -05:00
scripts build: update to go 1.19.5 (#15769) 2023-01-13 09:57:32 -06:00
terraform
testutil vault: configure user agent on Nomad vault clients (#15745) 2023-01-10 10:39:45 -06:00
tools
ui Merge branch 'main' into sso/gh-13120-oidc-login 2023-01-18 10:05:31 +00:00
version
website client: add disk_total_mb and disk_free_mb config options (#15852) 2023-01-24 09:14:22 -05:00
.git-blame-ignore-revs
.gitattributes
.gitignore
.go-version build: update to go 1.19.5 (#15769) 2023-01-13 09:57:32 -06:00
.golangci.yml
.semgrepignore
build_linux_arm.go
CHANGELOG.md
CODEOWNERS
GNUmakefile
go.mod build(deps): bump github.com/prometheus/common from 0.37.0 to 0.39.0 (#15793) 2023-01-19 11:01:28 -06:00
go.sum build(deps): bump github.com/prometheus/common from 0.37.0 to 0.39.0 (#15793) 2023-01-19 11:01:28 -06:00
LICENSE
main.go
main_test.go
README.md
Vagrantfile

Nomad License: MPL 2.0 Discuss

HashiCorp Nomad logo

Nomad is a simple and flexible workload orchestrator to deploy and manage containers (docker, podman), non-containerized applications (executable, Java), and virtual machines (qemu) across on-prem and clouds at scale.

Nomad is supported on Linux, Windows, and macOS. A commercial version of Nomad, Nomad Enterprise, is also available.

Nomad provides several key features:

  • Deploy Containers and Legacy Applications: Nomads flexibility as an orchestrator enables an organization to run containers, legacy, and batch applications together on the same infrastructure. Nomad brings core orchestration benefits to legacy applications without needing to containerize via pluggable task drivers.

  • Simple & Reliable: Nomad runs as a single binary and is entirely self contained - combining resource management and scheduling into a single system. Nomad does not require any external services for storage or coordination. Nomad automatically handles application, node, and driver failures. Nomad is distributed and resilient, using leader election and state replication to provide high availability in the event of failures.

  • Device Plugins & GPU Support: Nomad offers built-in support for GPU workloads such as machine learning (ML) and artificial intelligence (AI). Nomad uses device plugins to automatically detect and utilize resources from hardware devices such as GPU, FPGAs, and TPUs.

  • Federation for Multi-Region, Multi-Cloud: Nomad was designed to support infrastructure at a global scale. Nomad supports federation out-of-the-box and can deploy applications across multiple regions and clouds.

  • Proven Scalability: Nomad is optimistically concurrent, which increases throughput and reduces latency for workloads. Nomad has been proven to scale to clusters of 10K+ nodes in real-world production environments.

  • HashiCorp Ecosystem: Nomad integrates seamlessly with Terraform, Consul, Vault for provisioning, service discovery, and secrets management.

Quick Start

Testing

See Learn: Getting Started for instructions on setting up a local Nomad cluster for non-production use.

Optionally, find Terraform manifests for bringing up a development Nomad cluster on a public cloud in the terraform directory.

Production

See Learn: Nomad Reference Architecture for recommended practices and a reference architecture for production deployments.

Documentation

Full, comprehensive documentation is available on the Nomad website: https://www.nomadproject.io/docs

Guides are available on HashiCorp Learn.

Contributing

See the contributing directory for more developer documentation.