luxolus/open-nomad
2
0
Fork 0
Code Issues 1 Pull requests Packages Releases Wiki Activity
open-nomad/nomad/structs
History
Seth Hoenig 84176c9a41 consul/connect: make use of task kind to determine service name in consul token checks 
When consul.allow_unauthenticated is set to false, the job_endpoint hook validates
that a `-consul-token` is provided and validates the token against the privileges
inherent to a Consul Service Identity policy for all the Connect enabled services
defined in the job.

Before, the check was assuming the service was of type sidecar-proxy. This fixes the
check to use the type of the task so we can distinguish between the different connect
types.
2020-08-27 12:14:40 -05:00
..
config consul/connect: add support for running connect native tasks 2020-06-22 14:07:44 -05:00
batch_future.go drain: refactor batch_future into its own file 2018-04-02 16:40:06 -07:00
batch_future_test.go drain: refactor batch_future into its own file 2018-04-02 16:40:06 -07:00
bitmap.go assign names 2017-07-07 12:03:11 -07:00
bitmap_test.go assign names 2017-07-07 12:03:11 -07:00
csi.go csi: add unpublish RPC (#8572) 2020-08-06 13:51:29 -04:00
csi_test.go csi: ensure Read/WriteAllocs aren't released early (#7841) 2020-04-30 17:11:31 -04:00
devices.go Initial implementation of device preemption 2018-11-15 11:09:26 -06:00
devices_test.go Split device accounter and allocator 2018-11-07 10:32:03 -08:00
diff.go consul/connect: add initial support for ingress gateways 2020-08-21 16:21:54 -05:00
diff_test.go consul/connect: remove envoy dns option from gateway proxy config 2020-08-24 09:11:55 -05:00
errors.go csi: client RPCs should return wrapped errors for checking (#8605) 2020-08-07 11:01:36 -04:00
errors_test.go api: acl bootstrap errors aren't 500 2019-11-19 15:51:57 -05:00
funcs.go oss compoments for multi-vault namespaces 2020-07-24 10:14:59 -04:00
funcs_test.go ar: support opting into binding host ports to default network IP (#8321) 2020-07-06 18:51:46 -04:00
generate.sh When serializing msgpack, only consider codec tag 2020-05-11 14:14:10 -04:00
network.go fixed typo in output (#1) 2020-07-14 10:33:17 -06:00
network_test.go test: fix up testing around host networks 2020-06-19 13:53:31 -04:00
node.go docstring improvements and typo fixes (#7862) 2020-05-05 10:30:50 -04:00
node_class.go Device hook and devices affect computed node class 2018-11-27 17:25:33 -08:00
node_class_test.go Device hook and devices affect computed node class 2018-11-27 17:25:33 -08:00
node_test.go fix issue when updating node events 2018-03-21 15:15:26 -04:00
operator.go basic snapshot restore 2020-06-07 15:46:23 -04:00
service_identities.go consul/connect: use task kind to get service name 2020-05-18 13:46:00 -06:00
services.go consul/connect: fixup some comments and context timeout 2020-08-26 13:17:16 -05:00
services_test.go consul/connect: remove envoy dns option from gateway proxy config 2020-08-24 09:11:55 -05:00
streaming_rpc.go spelling: requested 2018-03-11 18:43:21 +00:00
structs.go consul/connect: make use of task kind to determine service name in consul token checks 2020-08-27 12:14:40 -05:00
structs_codegen.go Codecgen full package 2018-04-26 15:24:53 -07:00
structs_oss.go multiregion: validation should always return error for OSS (#8687) 2020-08-18 15:35:38 -04:00
structs_periodic_test.go tests for periodic job scheduling and DST 2020-05-07 17:36:59 -04:00
structs_test.go consul/connect: make use of task kind to determine service name in consul token checks 2020-08-27 12:14:40 -05:00
testing.go Split device accounter and allocator 2018-11-07 10:32:03 -08:00
volumes.go csi: add mount_options to volumes and volume requests (#7398) 2020-03-23 13:59:25 -04:00