kemko/nomad
1
0
Fork 0
mirror of https://github.com/kemko/nomad.git synced 2026-01-06 18:35:44 +03:00
Code Issues Packages Projects Releases Wiki Activity

intro: Add node introduction flow for Nomad client registration. (#26405)

Browse Source 
This change implements the client -> server workflow for Nomad
node introduction. A Nomad node can optionally be started with an
introduction token, which is a signed JWT containing claims for
the node registration. The server handles this according to the
enforcement configuration.

The introduction token can be provided by env var, cli flag, or
by placing it within a default filesystem location. The latter
option does not override the CLI or env var.

The region claims has been removed from the initial claims set of
the intro identity. This boundary is guarded by mTLS and aligns
with the node identity.
This commit is contained in:
James Rasell
2025-08-05 09:23:44 +02:00
committed by GitHub
parent 20251b675d
commit 80a26306bf
17 changed files with 1063 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
command/agent/command.go
View File

@@ -118,6 +118,7 @@ func (c *Command) readConfig() *Config {
flags.StringVar(&cmdConfig.Client.NetworkInterface, "network-interface", "", "")
flags.StringVar((*string)(&cmdConfig.Client.PreferredAddressFamily), "preferred-address-family", "", "ipv4 or ipv6")
flags.IntVar(&cmdConfig.Client.NetworkSpeed, "network-speed", 0, "")
flags.StringVar(&cmdConfig.Client.IntroToken, "client-intro-token", "", "")
// General options
flags.Var((*flaghelper.StringFlag)(&configPath), "config", "config")
@@ -220,6 +221,12 @@ func (c *Command) readConfig() *Config {
}
}
// Perform an environment look for the client bootstrap token. If this is
// present, it will override the CLI flag.
if envToken, found := os.LookupEnv("NOMAD_CLIENT_INTRO_TOKEN"); found {
cmdConfig.Client.IntroToken = envToken
}
// Load the configuration
var config *Config