Commit Graph

8542 Commits

Author SHA1 Message Date
Armon Dadgar
02e97de7ab api: support token listing 2017-09-04 13:09:34 -07:00
Armon Dadgar
7584b35558 api: support querying policies 2017-09-04 13:09:34 -07:00
Armon Dadgar
72b85c16b0 api: support policy delete 2017-09-04 13:09:34 -07:00
Armon Dadgar
d3a3575898 api: Adding support for ACL tokens 2017-09-04 13:09:34 -07:00
Armon Dadgar
49f9f0e26b testutil: Allow enabling ACLs 2017-09-04 13:07:44 -07:00
Armon Dadgar
e840bb1019 Address @dadgar feedback 2017-09-04 13:07:44 -07:00
Armon Dadgar
8688e9210e nomad: avoid replication consistency issues by setting MinQueryIndex 2017-09-04 13:07:44 -07:00
Armon Dadgar
e9790c63b4 ACL RPCs allow stale reads for scalability 2017-09-04 13:07:44 -07:00
Armon Dadgar
26af455da4 website: add missing space 2017-09-04 13:07:44 -07:00
Armon Dadgar
9c21e76c1e agent: fix routing for token-specific request 2017-09-04 13:07:44 -07:00
Armon Dadgar
437483350e website: complete ACL guide 2017-09-04 13:07:44 -07:00
Armon Dadgar
f09af193f9 website: filling in ACL guide 2017-09-04 13:07:44 -07:00
Armon Dadgar
8586781a6e website: pointing to ACL guide 2017-09-04 13:07:44 -07:00
Armon Dadgar
045e659390 website: Document ACL APIs and configuration 2017-09-04 13:07:44 -07:00
Armon Dadgar
713bf743bf vendoring blake2b 2017-09-04 13:07:44 -07:00
Armon Dadgar
ce4ffe02f4 Adding a comment to address @dadgar 2017-09-04 13:05:53 -07:00
Armon Dadgar
e24fa79aab agent: thread ACLs for Job Register 2017-09-04 13:05:53 -07:00
Armon Dadgar
52d81f4165 nomad: enforce ACLs on job submit 2017-09-04 13:05:53 -07:00
Armon Dadgar
5415926763 nomad: allow getting policies which are subset of token, fixes client resolution 2017-09-04 13:05:53 -07:00
Armon Dadgar
5f04c0c2f1 nomad: adding policy subset check 2017-09-04 13:05:53 -07:00
Armon Dadgar
33f640dc38 client: fixing policy resolution after ACL endpoint enforcement 2017-09-04 13:05:53 -07:00
Armon Dadgar
48a176a163 nomad: forward DeleteToken requests for global tokens 2017-09-04 13:05:53 -07:00
Armon Dadgar
9edd215bb4 nomad: forward UpsertToken requests for global tokens 2017-09-04 13:05:53 -07:00
Armon Dadgar
b253ad5cfb agent: thread through token for ACL endpoint tests 2017-09-04 13:05:53 -07:00
Armon Dadgar
44fe0afc9f Passthrough replication token for token/policy replication 2017-09-04 13:05:53 -07:00
Armon Dadgar
b64d7d184a nomad: ACL endpoints enforce permissions 2017-09-04 13:05:53 -07:00
Armon Dadgar
0fcf618dfc Add ErrPermissionDenied, rename TokenNotFound 2017-09-04 13:05:53 -07:00
Armon Dadgar
79420d78cf agent: Adding X-Nomad-Token header parsing 2017-09-04 13:05:53 -07:00
Armon Dadgar
62a5580e53 nomad: Add SecretID to QueryOptions and WriteMeta 2017-09-04 13:05:53 -07:00
Armon Dadgar
ab5ce9b1a7 nomad: ACL endpoints check support enabled and redirect to authority 2017-09-04 13:05:53 -07:00
Armon Dadgar
d7f3b896cd nomad: adding ACL bootstrapping endpoint 2017-09-04 13:05:53 -07:00
Armon Dadgar
b324dd0f55 nomad: adding ACL bootstrap endpoints 2017-09-04 13:05:53 -07:00
Armon Dadgar
59bd491872 nomad: adding bootstrapping checks 2017-09-04 13:05:53 -07:00
Armon Dadgar
562ed141b1 nomad: adding bootstrap state store method 2017-09-04 13:05:53 -07:00
Armon Dadgar
bda7b36da3 Address @dadgar feedback 2017-09-04 13:05:53 -07:00
Armon Dadgar
9e716056aa nomad: Switch from SHA1 to Blake2 @chelseakomlo 2017-09-04 13:05:36 -07:00
Armon Dadgar
00833d69c4 structs: sort policies to avoid order dependence for caching 2017-09-04 13:05:36 -07:00
Armon Dadgar
5b43ea4bff client: adding token resolution logic 2017-09-04 13:05:36 -07:00
Armon Dadgar
032296f581 nomad: switch policy/token replication to use batch endpoints 2017-09-04 13:05:36 -07:00
Armon Dadgar
cce8839788 noamd: Adding batch fetch endpoints for ACL tokens and policies 2017-09-04 13:05:36 -07:00
Armon Dadgar
1b6979c8a5 nomad: Adding token resolution endpoint 2017-09-04 13:05:36 -07:00
Armon Dadgar
fb118b2dfb client: adding token cache for ACL resolution 2017-09-04 13:05:36 -07:00
Armon Dadgar
f12e3e90ee nomad: refactor to use CompileACLObject and handle anonymous token 2017-09-04 13:05:35 -07:00
Armon Dadgar
c9ebf0d325 structs: Adding ACL compilation helper 2017-09-04 13:05:35 -07:00
Armon Dadgar
8f52fb9c3b structs: cache key helper for policy list 2017-09-04 13:05:35 -07:00
Armon Dadgar
1da443f29a client: create ACL and Policy cache 2017-09-04 13:05:35 -07:00
Armon Dadgar
0dc6a1a9c7 agent: thread ACL config to client 2017-09-04 13:04:45 -07:00
Armon Dadgar
235f4d27ac Address @chelseakomlo comments 2017-09-04 13:04:45 -07:00
Armon Dadgar
9b6144d0d6 Moving shared ACL objects 2017-09-04 13:04:45 -07:00
Armon Dadgar
7b67692b15 nomad: adding ACL token resolution logic 2017-09-04 13:04:45 -07:00