kemko/nomad
1
0
Fork 0
mirror of https://github.com/kemko/nomad.git synced 2026-01-02 08:25:43 +03:00
Code Issues Packages Projects Releases Wiki Activity
27,215 Commits 1 Branch 0 Tags
26e16febad01cc7d78fac93694de5a07ca5c4267
Commit Graph

33 Commits

Author SHA1 Message Date
Deniz Onur Duzgun
22b7470ccf sec: fix alloc workload identity namespace permission (#24683) 
Sanitize the Allocations SignedIdentities to prevent privilege escalation within a namespace through unauthorized impersonation of [workload associated with ACL policies](https://developer.hashicorp.com/nomad/docs/concepts/workload-identity#workload-associated-acl-policies) in any workload within the namespace.

Ref: CVE-2024-12678.
Ref: https://github.com/hashicorp/nomad-enterprise/pull/2098
 2024-12-16 16:35:10 -05:00
hashicorp-copywrite[bot]
a9d61ea3fd Update copyright file headers to BUSL-1.1 2023-08-10 17:27:29 -05:00
Ville Vesilehto
2c463bb038 chore(lint): use Go stdlib variables for HTTP methods and status codes (#17968) 2023-07-26 15:28:09 +01:00
Luiz Aoqui
f0f4cbb848 node pools: list nodes in pool (#17413) 2023-06-06 10:43:43 -04:00
hashicorp-copywrite[bot]
f005448366 [COMPLIANCE] Add Copyright and License Headers 2023-04-10 15:36:59 +00:00
Shishir
c86642bae4 Add os to NodeListStub struct. (#12497) 
* Add os to NodeListStub struct.

Signed-off-by: Shishir Mahajan <smahajan@roblox.com>

* Add os as a query param to /v1/nodes.

Signed-off-by: Shishir Mahajan <smahajan@roblox.com>

* Add test: os as a query param to /v1/nodes.

Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2022-04-15 17:22:45 -07:00
Chris Baker
140e7b3aaa Node Drain Metadata (#10250) 2021-05-07 13:58:40 -04:00
Chris Baker
93d5187e7b removed deprecated fields from Drain structs and API 
node drain: use msgtype on txn so that events are emitted
wip: encoding extension to add Node.Drain field back to API responses

new approach for hiding Node.SecretID in the API, using `json` tag
documented this approach in the contributing guide
refactored the JSON handlers with extensions
modified event stream encoding to use the go-msgpack encoders with the extensions
 2021-03-21 15:30:11 +00:00
Kris Hicks
071f4c7596 Add gocritic to golangci-lint config (#9556) 2020-12-08 12:47:04 -08:00
Michael Schurter
0695801256 unify boolean parameter parsing 2020-10-14 12:23:25 -07:00
Michael Schurter
a55f46e9ba api: add field filters to /v1/{allocations,nodes} 
Fixes #9017

The ?resources=true query parameter includes resources in the object
stub listings. Specifically:

- For `/v1/nodes?resources=true` both the `NodeResources` and
  `ReservedResources` field are included.
- For `/v1/allocations?resources=true` the `AllocatedResources` field is
  included.

The ?task_states=false query parameter removes TaskStates from
/v1/allocations responses. (By default TaskStates are included.)
 2020-10-14 10:35:22 -07:00
Eli Shvartsman
b2d40e7ef7 take NodeID from url in api for node eligibility 2019-07-15 18:34:53 +03:00
Preetha Appan
4fa6688f73 Undo removal of node drain compat changes 
Decided to remove that in 0.10
 2019-07-01 15:12:01 -05:00
Preetha Appan
913427428a Remove compat code associated with many previous versions of nomad 
This removes compat code for namespaces (0.7), Drain(0.8) and other
older features from releases older than Nomad 0.7
 2019-06-25 19:05:25 -05:00
Wyatt Anderson
58a56d65b4 Add documentation for eligibility toggle endpoint 2018-08-24 10:50:12 -04:00
Preetha Appan
bcf34c3449 Set node eligibility to true when old client calls disable 2018-05-30 16:54:07 -05:00
Alex Dadgar
400cbcf128 Create evals for system jobs when drain is unset 
This PR creates evals for system jobs when:

* Drain is unset and mark eligible is true
* Eligibility is restored to the node
 2018-03-27 15:53:24 -07:00
Alex Dadgar
d15371405f Toggle Drain allows resetting eligibility 
This PR allows marking a node as eligible for scheduling while toggling
drain. By default the `nomad node drain -disable` commmand will mark it
as eligible but the drainer will maintain in-eligibility.
 2018-03-21 16:51:44 -07:00
Alex Dadgar
0fb9ba7732 HTTP and API 2018-03-21 16:51:44 -07:00
Alex Dadgar
a7833bc609 Upgrade path 2018-03-21 16:51:43 -07:00
Alex Dadgar
2bdeacebff Drain cli, api, http 2018-03-21 16:51:43 -07:00
Preetha Appan
bbeb658831 Populate DisplayMessage in various http endpoints that return allocations, plus unit tests. 2017-11-17 14:53:26 -06:00
Alex Dadgar
2464b02aa2 changelog + PUT 2017-10-27 10:43:57 -07:00
Diptanu Choudhury
fa2cbb6f0c Added the purge API on node endpoints 2017-10-25 23:51:53 -07:00
Alex Dadgar
ac1539d5d9 Sync namespace changes 2017-09-07 17:04:21 -07:00
Alex Dadgar
410ae593e7 Fix double pull with introduction of AllocModifyIndex 2016-02-01 15:43:59 -08:00
Ivo Verberk
60d8180279 Add additional API endpoint for requesting client specific node allocations. 2016-01-29 20:01:21 +01:00
Armon Dadgar
e5c7effaa9 http: list results are never null 2015-09-07 10:03:10 -07:00
Armon Dadgar
6ee7f111dc Rename client endpoint to node endpoint 2015-09-06 20:31:32 -07:00
Armon Dadgar
2d9c3fb9f3 http: adding the drain toggle endpoint 2015-09-06 20:03:59 -07:00
Armon Dadgar
63ae02a2f9 http: parsing flags for node drain 2015-09-06 19:35:05 -07:00
Armon Dadgar
60d32f218a http: Adding nodes list 2015-09-06 14:31:17 -07:00
Armon Dadgar
4893acf6fa http/node: adding a few node endpoints 2015-09-06 14:18:11 -07:00