open-nomad/helper
Michael Schurter 0a496c845e
Task API via Unix Domain Socket (#15864)
This change introduces the Task API: a portable way for tasks to access Nomad's HTTP API. This particular implementation uses a Unix Domain Socket and, unlike the agent's HTTP API, always requires authentication even if ACLs are disabled.

This PR contains the core feature and tests but followup work is required for the following TODO items:

- Docs - might do in a followup since dynamic node metadata / task api / workload id all need to interlink
- Unit tests for auth middleware
- Caching for auth middleware
- Rate limiting on negative lookups for auth middleware

---------

Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-02-06 11:31:22 -08:00
..
args address review comments 2018-10-30 13:58:52 -04:00
boltdd deps: update set and test (#14680) 2022-09-26 08:28:03 -05:00
broker core: allow pausing and un-pausing of leader broker routine (#13045) 2022-07-06 16:13:48 +02:00
bufconndialer test: test the buffered pipe used by nsd (#12563) 2022-04-14 08:38:25 -07:00
codec Provide mock secure variables implementation (#12980) 2022-07-11 13:34:03 -04:00
constraints/semver chore: fix incorrect docstring formatting. 2021-08-30 11:08:12 +02:00
crypto keyring: wrap root key in key encryption key (#14388) 2022-08-30 10:59:25 -04:00
discover chore: fix incorrect docstring formatting. 2021-08-30 11:08:12 +02:00
envoy ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
escapingfs cleanup: move fs helpers into escapingfs 2022-08-24 14:45:34 -05:00
escapingio build: run gofmt on all go source files 2022-08-16 11:14:11 -05:00
fields goimports 2019-01-22 15:44:31 -08:00
flags ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
flatmap Add gosimple linter (#9590) 2020-12-09 11:05:18 -08:00
gated-writer gatedwriter: Fix race condition (#9791) 2021-01-14 12:43:14 -08:00
grpc-middleware/logging Add gosimple linter (#9590) 2020-12-09 11:05:18 -08:00
ipaddr helper: add ipaddr pkg to check for any IP addresses. 2022-03-03 11:24:50 +01:00
logging cli Ui implementation that logs to a hclogger 2019-02-19 17:53:14 -06:00
mount deps: upgrade docker and runc 2022-01-18 08:35:26 -06:00
noxssrw lint: mark false positive or fix gocritic append lint errors. 2021-09-06 10:49:44 +02:00
pluginutils cleanup: replace TypeToPtr helper methods with pointer.Of (#14151) 2022-08-17 18:26:34 +02:00
pointer pointer: add Merge helper function for merging pointers (#15499) 2022-12-08 11:09:22 -06:00
pool ci: swap freeport for portal in packages (#15661) 2023-01-03 11:25:20 -06:00
raftutil acl: add binding rule object state schema and functionality. (#15511) 2022-12-14 08:48:18 +01:00
snapshot snapshot restore-from-archive streaming and filtering (#13658) 2022-07-11 10:48:00 -04:00
stats chore: fix incorrect docstring formatting. 2021-08-30 11:08:12 +02:00
subproc client: sandbox go-getter subprocess with landlock (#15328) 2022-12-07 16:02:25 -06:00
testlog tests: add a space between node name and timestamp (#13750) 2022-07-13 16:23:03 -04:00
testtask gofmt all the files 2021-10-01 10:14:28 -04:00
tlsutil Pre forwarding authentication (#15417) 2022-12-06 14:44:03 -05:00
useragent vault: configure user agent on Nomad vault clients (#15745) 2023-01-10 10:39:45 -06:00
users Task API via Unix Domain Socket (#15864) 2023-02-06 11:31:22 -08:00
uuid keyring: wrap root key in key encryption key (#14388) 2022-08-30 10:59:25 -04:00
winsvc gofmt all the files 2021-10-01 10:14:28 -04:00
cluster.go helper: guard against negative inputs into random stagger 2022-09-08 09:17:48 -05:00
cluster_test.go deps: update set and test (#14680) 2022-09-26 08:28:03 -05:00
eof.go feat: remove dependency to consul/lib 2022-04-09 13:22:44 +02:00
funcs.go acl: modify update endpoints behavior (#15580) 2022-12-20 11:22:19 +01:00
funcs_test.go client: avoid unconsumed channel in timer construction (#15215) 2022-11-11 09:31:34 -06:00