open-nomad/client/allocrunner
Michael Schurter 0a496c845e
Task API via Unix Domain Socket (#15864)
This change introduces the Task API: a portable way for tasks to access Nomad's HTTP API. This particular implementation uses a Unix Domain Socket and, unlike the agent's HTTP API, always requires authentication even if ACLs are disabled.

This PR contains the core feature and tests but followup work is required for the following TODO items:

- Docs - might do in a followup since dynamic node metadata / task api / workload id all need to interlink
- Unit tests for auth middleware
- Caching for auth middleware
- Rate limiting on negative lookups for auth middleware

---------

Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-02-06 11:31:22 -08:00
..
interfaces Task API via Unix Domain Socket (#15864) 2023-02-06 11:31:22 -08:00
state
tasklifecycle test: remove flaky Gate test (#14575) 2022-09-19 11:31:03 -04:00
taskrunner Task API via Unix Domain Socket (#15864) 2023-02-06 11:31:22 -08:00
alloc_runner.go client: always run alloc cleanup hooks on final update (#15855) 2023-01-27 09:59:31 -06:00
alloc_runner_hooks.go client: always run alloc cleanup hooks on final update (#15855) 2023-01-27 09:59:31 -06:00
alloc_runner_test.go client: Add option to enable hairpinMode on Nomad bridge (#15961) 2023-02-02 10:12:15 -05:00
alloc_runner_unix_test.go client: always run alloc cleanup hooks on final update (#15855) 2023-01-27 09:59:31 -06:00
allocdir_hook.go
cgroup_hook.go
checks_hook.go client: updates from pr feedback 2022-07-21 09:54:27 -05:00
checks_hook_test.go client: add support for checks in nomad services 2022-07-12 17:09:50 -05:00
config.go client: add support for checks in nomad services 2022-07-12 17:09:50 -05:00
consul_grpc_sock_hook.go renamed stanza to block for consistency with other projects (#15941) 2023-01-30 15:48:43 +01:00
consul_grpc_sock_hook_test.go client: accommodate Consul 1.14.0 gRPC and agent self changes. (#15309) 2022-11-21 09:19:09 -06:00
consul_http_sock_hook.go
consul_http_sock_hook_test.go
csi_hook.go
csi_hook_test.go cleanup: replace TypeToPtr helper methods with pointer.Of (#14151) 2022-08-17 18:26:34 +02:00
group_service_hook.go nsd: block on removal of services (#15862) 2023-01-26 08:17:57 -06:00
group_service_hook_test.go cleanup: replace TypeToPtr helper methods with pointer.Of (#14151) 2022-08-17 18:26:34 +02:00
health_hook.go client: add support for checks in nomad services 2022-07-12 17:09:50 -05:00
health_hook_test.go client: add support for checks in nomad services 2022-07-12 17:09:50 -05:00
migrate_hook.go
network_hook.go
network_hook_test.go
network_manager_linux.go client: Add option to enable hairpinMode on Nomad bridge (#15961) 2023-02-02 10:12:15 -05:00
network_manager_linux_test.go
network_manager_nonlinux.go
networking.go
networking_bridge_linux.go Update networking_bridge_linux.go (#16025) 2023-02-02 14:03:02 -05:00
networking_bridge_linux_test.go client: Add option to enable hairpinMode on Nomad bridge (#15961) 2023-02-02 10:12:15 -05:00
networking_cni.go client: manually cleanup leaked iptables rules (#15407) 2022-11-28 11:32:16 -06:00
networking_cni_test.go client: manually cleanup leaked iptables rules (#15407) 2022-11-28 11:32:16 -06:00
testing.go client: sandbox go-getter subprocess with landlock (#15328) 2022-12-07 16:02:25 -06:00
upstream_allocs_hook.go