open-nomad/command/agent/consul
Seth Hoenig 9df33f622f nomad: proxy requests for Service Identity tokens between Clients and Consul
Nomad jobs may be configured with a TaskGroup which contains a Service
definition that is Consul Connect enabled. These service definitions end
up establishing a Consul Connect Proxy Task (e.g. envoy, by default). In
the case where Consul ACLs are enabled, a Service Identity token is required
for these tasks to run & connect, etc. This changeset enables the Nomad Server
to recieve RPC requests for the derivation of SI tokens on behalf of instances
of Consul Connect using Tasks. Those tokens are then relayed back to the
requesting Client, which then injects the tokens in the secrets directory of
the Task.
2020-01-31 19:03:53 -06:00
..
acl_testing.go nomad: proxy requests for Service Identity tokens between Clients and Consul 2020-01-31 19:03:53 -06:00
catalog_testing.go nomad: proxy requests for Service Identity tokens between Clients and Consul 2020-01-31 19:03:53 -06:00
check_watcher.go client: improve group service stanza interpolation and check_re… (#6586) 2019-11-18 13:04:01 -05:00
check_watcher_test.go consul: add test for check watcher deadlock 2019-07-18 08:24:09 -07:00
client.go nomad: proxy requests for Service Identity tokens between Clients and Consul 2020-01-31 19:03:53 -06:00
group_test.go client: improve group service stanza interpolation and check_re… (#6586) 2019-11-18 13:04:01 -05:00
int_test.go Remove old comment; it's been fixed! 2019-01-14 09:56:53 -08:00
structs.go client: improve group service stanza interpolation and check_re… (#6586) 2019-11-18 13:04:01 -05:00
testing.go client: improve group service stanza interpolation and check_re… (#6586) 2019-11-18 13:04:01 -05:00
unit_test.go consul: fix var name from rebase 2020-01-27 14:00:19 -05:00
version_checker.go agent + consul 2018-09-13 10:43:40 -07:00
version_checker_test.go Replace Consul TLSSkipVerify handling 2018-03-14 17:43:06 -07:00