luxolus
/
open-nomad
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity
open-nomad/command/agent
History
Seth Hoenig 9df33f622f nomad: proxy requests for Service Identity tokens between Clients and Consul 
Nomad jobs may be configured with a TaskGroup which contains a Service
definition that is Consul Connect enabled. These service definitions end
up establishing a Consul Connect Proxy Task (e.g. envoy, by default). In
the case where Consul ACLs are enabled, a Service Identity token is required
for these tasks to run & connect, etc. This changeset enables the Nomad Server
to recieve RPC requests for the derivation of SI tokens on behalf of instances
of Consul Connect using Tasks. Those tokens are then relayed back to the
requesting Client, which then injects the tokens in the secrets directory of
the Task.
 		2020-01-31 19:03:53 -06:00
..
consul nomad: proxy requests for Service Identity tokens between Clients and Consul 2020-01-31 19:03:53 -06:00
monitor unlock before returning, no need for label 2019-11-05 11:44:29 -05:00
pprof Rename profile package to pprof 2020-01-09 15:15:10 -05:00
test-resources chore: Format hcl configurations 2019-07-20 16:55:07 +02:00
testdata command, docs: create and document consul token configuration for connect acls (gh-6716) 2020-01-31 19:02:53 -06:00
acl_endpoint.go Self token lookup 2017-10-13 13:12:20 -07:00
acl_endpoint_test.go spelling: bootstrap 2018-03-11 17:43:19 +00:00
agent.go nomad: proxy requests for Service Identity tokens between Clients and Consul 2020-01-31 19:03:53 -06:00
agent_endpoint.go refactor api profile methods 2020-01-09 15:15:12 -05:00
agent_endpoint_test.go condense table test 2020-01-09 15:15:10 -05:00
agent_test.go core: add limits to unauthorized connections 2020-01-30 10:38:25 -08:00
alloc_endpoint.go api: return X-Nomad-Index header on allocation stop 2019-06-21 16:20:06 +00:00
alloc_endpoint_test.go acl: check ACL against object namespace 2019-10-08 12:59:22 -04:00
bindata_assetfs.go refactor api profile methods 2020-01-09 15:15:12 -05:00
command.go nomad: proxy requests for Service Identity tokens between Clients and Consul 2020-01-31 19:03:53 -06:00
command_test.go refactored config validation into a new method, modified Meta.Client 2019-01-08 15:07:36 +00:00
config.go nomad: proxy requests for Service Identity tokens between Clients and Consul 2020-01-31 19:03:53 -06:00
config_oss.go Allow separate enterprise config overlay 2018-03-22 13:53:08 -07:00
config_parse.go clientconfig: Fix parsing multiple host volumes 2019-08-21 22:19:58 +02:00
config_parse_test.go command, docs: create and document consul token configuration for connect acls (gh-6716) 2020-01-31 19:02:53 -06:00
config_test.go command, docs: create and document consul token configuration for connect acls (gh-6716) 2020-01-31 19:02:53 -06:00
deployment_endpoint.go Populate DisplayMessage in various http endpoints that return allocations, plus unit tests. 2017-11-17 14:53:26 -06:00
deployment_endpoint_test.go Populate DisplayMessage in various http endpoints that return allocations, plus unit tests. 2017-11-17 14:53:26 -06:00
eval_endpoint.go http: list results are never null 2015-09-07 10:03:10 -07:00
eval_endpoint_test.go spelling: output 2018-03-11 18:35:30 +00:00
fs_endpoint.go agent: report fs log errors as http errors 2019-10-04 16:33:58 -04:00
fs_endpoint_test.go tests: avoid using unnecessary pipe 2019-10-15 17:22:03 -04:00
helpers.go client: expose task state to client 2018-10-16 16:56:55 -07:00
helpers_test.go Refactor determining the handler for a node id call 2018-02-15 13:59:02 -08:00
http.go core: add limits to unauthorized connections 2020-01-30 10:38:25 -08:00
http_oss.go sync 2017-10-13 14:36:02 -07:00
http_test.go core: add limits to unauthorized connections 2020-01-30 10:38:25 -08:00
job_endpoint.go command, docs: create and document consul token configuration for connect acls (gh-6716) 2020-01-31 19:02:53 -06:00
job_endpoint_test.go command, docs: create and document consul token configuration for connect acls (gh-6716) 2020-01-31 19:02:53 -06:00
keyring.go Enable serf encryption (#1791) 2016-10-17 10:48:04 -07:00
keyring_test.go Standardize retrieving a free port into a helper package 2017-10-23 16:48:20 -07:00
log_file.go logging: Correctly track number of written bytes 2019-10-10 14:02:14 +02:00
log_file_test.go logging: Sort files when pruning old logs 2019-10-10 13:51:16 +02:00
log_levels.go Support for hot reloading log levels 2019-07-24 13:37:08 +02:00
log_levels_test.go More parallel 2017-07-20 09:36:34 -07:00
metrics_endpoint.go agent + consul 2018-09-13 10:43:40 -07:00
metrics_endpoint_test.go tests: deflake TestHTTP_FreshClientAllocMetrics 2019-11-22 18:41:21 -05:00
node_endpoint.go take NodeID from url in api for node eligibility 2019-07-15 18:34:53 +03:00
node_endpoint_test.go take NodeID from url in api for node eligibility 2019-07-15 18:34:53 +03:00
operator_endpoint.go Rename to match system scheduler config. 2019-05-03 14:06:12 -05:00
operator_endpoint_test.go nomad: disable service+batch preemption by default 2019-06-04 15:54:50 -07:00
plugins.go move pluginutils -> helper/pluginutils 2019-01-22 15:50:08 -08:00
region_endpoint.go website: document regions endpoint 2015-11-24 09:38:07 -08:00
region_endpoint_test.go More parallel 2017-07-20 09:36:34 -07:00
retry_join.go agent + consul 2018-09-13 10:43:40 -07:00
retry_join_test.go agent + consul 2018-09-13 10:43:40 -07:00
search_endpoint.go Sync namespace changes 2017-09-07 17:04:21 -07:00
search_endpoint_test.go add deployments to search api 2017-08-21 15:20:55 +00:00
stats_endpoint.go Server side impl + touch ups 2018-02-15 13:59:02 -08:00
stats_endpoint_test.go Fix failing test TestClientStatusRequest 2018-05-30 15:11:54 -05:00
status_endpoint.go http: adding status APIs 2015-09-06 18:39:03 -07:00
status_endpoint_test.go More parallel 2017-07-20 09:36:34 -07:00
stub_asset.go sync 2017-09-19 10:08:23 -05:00
syslog.go goimports 2019-01-22 15:44:31 -08:00
syslog_test.go goimports 2019-01-22 15:44:31 -08:00
system_endpoint.go Added an endpoint for users to reconcile job summaries 2016-08-03 16:12:47 -07:00
system_endpoint_test.go More parallel 2017-07-20 09:36:34 -07:00
testagent.go core: add limits to unauthorized connections 2020-01-30 10:38:25 -08:00
testingutils_test.go command/agent: Prune Dead Code (#6682) 2019-11-13 08:20:01 -05:00