open-nomad/client/allocrunner/taskrunner
Seth Hoenig c68ed3b4c8
client: protect user lookups with global lock (#14742)
* client: protect user lookups with global lock

This PR updates Nomad client to always do user lookups while holding
a global process lock. This is to prevent concurrency unsafe implementations
of NSS, but still enabling NSS lookups of users (i.e. cannot not use osusergo).

* cl: add cl
2022-09-29 09:30:13 -05:00
..
getter client: recover from getter panics (#14696) 2022-09-26 15:16:26 -04:00
interfaces
restarts build: run gofmt on all go source files 2022-08-16 11:14:11 -05:00
state cleanup more helper updates (#14638) 2022-09-21 14:53:25 -05:00
template client: protect user lookups with global lock (#14742) 2022-09-29 09:30:13 -05:00
testdata
artifact_hook.go artifact: fix numerous go-getter security issues 2022-05-24 16:29:39 -04:00
artifact_hook_test.go cleanup more helper updates (#14638) 2022-09-21 14:53:25 -05:00
connect_native_hook.go cleanup: purge github.com/pkg/errors 2022-04-01 19:24:02 -05:00
connect_native_hook_test.go Vars: Update CT dependency to support variables. (#14399) 2022-08-30 15:26:01 -04:00
device_hook.go
device_hook_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
dispatch_hook.go
dispatch_hook_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
driver_handle.go client: enforce max_kill_timeout client configuration 2022-07-06 15:29:38 -05:00
envoy_bootstrap_hook.go connect: add nomad env to envoy bootstrap (#12959) 2022-09-22 13:18:18 -05:00
envoy_bootstrap_hook_test.go cleanup: replace TypeToPtr helper methods with pointer.Of (#14151) 2022-08-17 18:26:34 +02:00
envoy_version_hook.go build: run gofmt on all go source files 2022-08-16 11:14:11 -05:00
envoy_version_hook_test.go cleanup: purge github.com/pkg/errors 2022-04-01 19:24:02 -05:00
errors.go
errors_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
identity_hook.go workload identity (#13223) 2022-07-11 13:34:05 -04:00
lazy_handle.go
lifecycle.go Task lifecycle restart (#14127) 2022-08-24 17:43:07 -04:00
logmon_hook.go
logmon_hook_test.go cleanup more helper updates (#14638) 2022-09-21 14:53:25 -05:00
logmon_hook_unix_test.go test: use T.TempDir to create temporary test directory (#12853) 2022-05-12 11:42:40 -04:00
plugin_supervisor_hook.go build: run gofmt on all go source files 2022-08-16 11:14:11 -05:00
remotetask_hook.go build: run gofmt on all go source files 2022-08-16 11:14:11 -05:00
script_check_hook.go client: refactor common service registration objects from Consul. 2022-03-15 09:38:30 +01:00
script_check_hook_test.go Merge branch 'main' into f-1.3-boogie-nights 2022-03-23 09:41:25 +01:00
service_hook.go Add Namespace, Job and Group to envoy stats (#14311) 2022-09-22 10:38:21 -04:00
service_hook_test.go Add Namespace, Job and Group to envoy stats (#14311) 2022-09-22 10:38:21 -04:00
sids_hook.go cleanup: purge github.com/pkg/errors 2022-04-01 19:24:02 -05:00
sids_hook_test.go Task lifecycle restart (#14127) 2022-08-24 17:43:07 -04:00
stats_hook.go
stats_hook_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
task_dir_hook.go
task_runner.go cleanup more helper updates (#14638) 2022-09-21 14:53:25 -05:00
task_runner_getters.go workload identity (#13223) 2022-07-11 13:34:05 -04:00
task_runner_hooks.go Add Namespace, Job and Group to envoy stats (#14311) 2022-09-22 10:38:21 -04:00
task_runner_test.go e2e: convert chroot env unit tests into e2e tests (#14710) 2022-09-26 15:40:29 -05:00
tasklet.go
tasklet_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
template_hook.go template: custom change_mode scripts (#13972) 2022-08-24 17:43:01 +02:00
validate_hook.go improve error message on service length (#12012) 2022-02-04 19:39:34 -05:00
validate_hook_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00
vault_hook.go Merge pull request #11402 from hashicorp/document-client-initial-vault-renew 2022-01-13 16:21:58 +01:00
vault_hook_test.go
volume_hook.go
volume_hook_test.go ci: swap ci parallelization for unconstrained gomaxprocs 2022-03-15 12:58:52 -05:00