open-nomad/command/agent/consul
Michael Schurter 0a496c845e
Task API via Unix Domain Socket (#15864)
This change introduces the Task API: a portable way for tasks to access Nomad's HTTP API. This particular implementation uses a Unix Domain Socket and, unlike the agent's HTTP API, always requires authentication even if ACLs are disabled.

This PR contains the core feature and tests but followup work is required for the following TODO items:

- Docs - might do in a followup since dynamic node metadata / task api / workload id all need to interlink
- Unit tests for auth middleware
- Caching for auth middleware
- Rate limiting on negative lookups for auth middleware

---------

Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-02-06 11:31:22 -08:00
..
acl_testing.go consul: check for acceptable service identity on consul tokens (#15928) 2023-01-27 18:15:51 -06:00
catalog_testing.go consul: register checks along with service on initial registration (#14944) 2022-10-19 12:40:56 -05:00
config_entries_testing.go consul/connect: add initial support for ingress gateways 2020-08-21 16:21:54 -05:00
connect.go renamed stanza to block for consistency with other projects (#15941) 2023-01-30 15:48:43 +01:00
connect_proxies.go consul/connect: dynamically select envoy sidecar at runtime 2020-10-13 09:14:12 -05:00
connect_proxies_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
connect_proxies_testing.go consul/connect: dynamically select envoy sidecar at runtime 2020-10-13 09:14:12 -05:00
connect_test.go consul/connect: support for proxy upstreams opaque config (#15761) 2023-01-12 08:20:54 -06:00
group_test.go Add Namespace, Job and Group to envoy stats (#14311) 2022-09-22 10:38:21 -04:00
int_test.go Task API via Unix Domain Socket (#15864) 2023-02-06 11:31:22 -08:00
namespaces_client.go consul: allow stale namespace results (#12953) 2022-08-26 16:05:12 -07:00
namespaces_client_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
self.go build: run gofmt on all go source files 2022-08-16 11:14:11 -05:00
self_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
service_client.go renamed stanza to block for consistency with other projects (#15941) 2023-01-30 15:48:43 +01:00
service_client_test.go consul: fixup expected consul tagged_addresses when using ipv6 (#15411) 2022-12-01 07:38:30 -06:00
structs.go Add Namespace, Job and Group to envoy stats (#14311) 2022-09-22 10:38:21 -04:00
testing.go cleanup: consolidate interfaces for workload restarting 2022-09-09 08:59:04 -05:00
unit_test.go deps: bump shoenig for str func bugfixes (#14974) 2022-10-20 08:11:43 -05:00
version_checker.go cleanup: prevent leaks from time.After 2022-02-02 14:32:26 -06:00
version_checker_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00