James Rasell
1a0d1efb0d
cli: use single dep func for opening URLs. ( #18808 )
2023-10-20 08:24:11 +01:00
dependabot[bot]
cb2363f2fb
chore(deps): bump github.com/hashicorp/go-bexpr from 0.1.12 to 0.1.13 ( #18758 )
2023-10-16 08:21:57 +01:00
dependabot[bot]
cecd9b0472
chore(deps): bump golang.org/x/net from 0.14.0 to 0.17.0 ( #18734 )
2023-10-12 07:58:59 +01:00
Tim Gross
7ca619fe97
deps: remove Vault SDK ( #18725 )
...
Nomad imports the Vault SDK to get testing helpers, but it turns out the only
thing actually in use was a single string constant for the Vault namespace
header. Remove this dependency and hardcode the constant to reduce dependency
churn.
2023-10-11 10:42:09 -04:00
Tim Gross
e22c5b82f3
WID manager: request signed identities for services ( #18650 )
...
Includes changes to WID Manager that make it request signed identities for
services, as well as a few improvements to WIHandle introduced in #18672 .
---------
Co-authored-by: Piotr Kazmierczak <470696+pkazmierczak@users.noreply.github.com >
2023-10-11 12:07:16 +02:00
dependabot[bot]
9a38a9c188
chore(deps): bump github.com/docker/cli ( #18565 )
2023-10-10 09:12:32 +01:00
dependabot[bot]
fbf792f895
chore(deps): bump github.com/docker/distribution ( #18693 )
2023-10-10 08:20:28 +01:00
dependabot[bot]
5945ed5cfd
chore(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 ( #18694 )
2023-10-09 11:39:51 +01:00
Seth Hoenig
e3c8700ded
deps: upgrade to go-set/v2 ( #18638 )
...
No functional changes, just cleaning up deprecated usages that are
removed in v2 and replace one call of .Slice with .ForEach to avoid
making the intermediate copy.
2023-10-05 11:56:17 -05:00
dependabot[bot]
ccafb94645
chore(deps): bump github.com/cyphar/filepath-securejoin ( #18545 )
2023-10-02 08:25:35 +01:00
Tim Gross
02a5aab359
consul: provide workload's Consul token to service client ( #18559 )
...
This is a work-in-progress changeset to provide workload-specific Consul tokens
that are created by the `consul_hook` and attached to workload registration
requests by the `group_service_hook` and `service_hook`.
This requires unreleased updates to Consul's `api` package, so this changeset
includes a temporary `replace` directive in the go.mod file.
2023-09-26 14:13:29 -04:00
James Rasell
d23ee134c5
deps: update hashicorp/go-set to v0.1.14 ( #18240 )
2023-08-17 15:03:15 +01:00
Seth Hoenig
77e139ea25
build: use modtool to format go.mod file ( #18195 )
2023-08-15 07:26:46 -05:00
Seth Hoenig
d9341f0664
update go1.21 ( #18184 )
...
* build: update to go1.21
* go: eliminate helpers in favor of min/max
* build: run go mod tidy
* build: swap depguard for semgrep
* command: fixup broken tls error check on go1.21
2023-08-14 08:43:27 -05:00
Seth Hoenig
a4cc76bd3e
numa: enable numa topology detection ( #18146 )
...
* client: refactor cgroups management in client
* client: fingerprint numa topology
* client: plumb numa and cgroups changes to drivers
* client: cleanup task resource accounting
* client: numa client and config plumbing
* lib: add a stack implementation
* tools: remove ec2info tool
* plugins: fixup testing for cgroups / numa changes
* build: update makefile and package tests and cl
2023-08-10 17:05:30 -05:00
Seth Hoenig
37dd4c4a69
e2e: modernize vaultcompat testing ( #18179 )
...
* e2e: modernize vaultcompat testing
* e2e: cr fixes for vaultcompat
2023-08-09 09:24:51 -05:00
dependabot[bot]
9551441dff
build(deps): bump github.com/hashicorp/go-kms-wrapping/v2 ( #17957 )
...
Bumps [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping ) from 2.0.8 to 2.0.12.
- [Commits](https://github.com/hashicorp/go-kms-wrapping/compare/v2.0.8...v2.0.12 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-kms-wrapping/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:43:14 -04:00
dependabot[bot]
02b572473b
build(deps): bump github.com/opencontainers/runc from 1.1.5 to 1.1.8 ( #18037 )
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.5 to 1.1.8.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.8/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.5...v1.1.8 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:37:04 -04:00
dependabot[bot]
0d3f976a8a
build(deps): bump github.com/hashicorp/consul/api from 1.18.0 to 1.23.0 ( #18038 )
...
Bumps [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul ) from 1.18.0 to 1.23.0.
- [Release notes](https://github.com/hashicorp/consul/releases )
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/consul/compare/api/v1.18.0...api/v1.23.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/consul/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:01:34 -04:00
Charlie Voiselle
585b0533c0
[dep] bump golang.org/x/exp ( #18102 )
...
There are some refactorings that have to be made in the getter and state
where the api changed in `slices`
* Bump golang.org/x/exp
* Bump golang.org/x/exp in api
* Update job_endpoint_test
* [feedback] unexport sort function
2023-08-01 11:50:17 -04:00
Michael Schurter
d14362ec19
core: add jwks rpc and http api ( #18035 )
...
Add JWKS endpoint to HTTP API for exposing the root public signing keys used for signing workload identity JWTs.
Part 1 of N components as part of making workload identities consumable by third party services such as Consul and Vault. Identity attenuation (audience) and expiration (+renewal) are necessary to securely use workload identities with 3rd parties, so this merge does not yet document this endpoint.
---------
Co-authored-by: Tim Gross <tgross@hashicorp.com >
2023-07-27 11:27:17 -07:00
Seth Hoenig
f06948fd64
deps: update cronexpr to capture license file in SBOM tools ( #17733 )
2023-06-27 07:58:20 -05:00
dependabot[bot]
f4385cc817
build(deps): bump github.com/containerd/go-cni from 1.1.7 to 1.1.9 ( #17582 )
2023-06-26 16:47:20 +01:00
dependabot[bot]
1d4f8869fd
build(deps): bump github.com/opencontainers/runtime-spec ( #17719 )
...
Bumps [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec ) from 1.0.3-0.20210326190908-1c3f411f0417 to 1.1.0-rc.3.
- [Release notes](https://github.com/opencontainers/runtime-spec/releases )
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog )
- [Commits](https://github.com/opencontainers/runtime-spec/commits/v1.1.0-rc.3 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runtime-spec
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 08:03:50 -05:00
dependabot[bot]
219f5dd532
build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.4 ( #17584 )
2023-06-19 08:21:45 +01:00
dependabot[bot]
ca86582f69
build(deps): bump github.com/hashicorp/go-plugin from 1.4.9 to 1.4.10 ( #17486 )
2023-06-12 14:22:33 +01:00
dependabot[bot]
b94cb322ee
build(deps): bump github.com/shoenig/go-m1cpu from 0.1.5 to 0.1.6 ( #17487 )
2023-06-12 12:08:16 +01:00
dependabot[bot]
1f1c0a1f20
build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0 ( #17485 )
2023-06-12 10:44:18 +01:00
dependabot[bot]
1e31268b85
build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 ( #16228 )
...
* build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
Bumps [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt ) from 1.3.6 to 1.3.7.
- [Release notes](https://github.com/etcd-io/bbolt/releases )
- [Commits](https://github.com/etcd-io/bbolt/compare/v1.3.6...v1.3.7 )
---
updated-dependencies:
- dependency-name: go.etcd.io/bbolt
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* cl: update cl for bbolt
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com >
2023-06-05 10:19:14 -05:00
dependabot[bot]
d17f19da24
build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1 ( #16227 )
...
Bumps [github.com/dustin/go-humanize](https://github.com/dustin/go-humanize ) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/dustin/go-humanize/releases )
- [Commits](https://github.com/dustin/go-humanize/compare/v1.0.0...v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/dustin/go-humanize
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 10:17:04 -05:00
dependabot[bot]
992b62028d
build(deps): bump github.com/hashicorp/raft from 1.3.11 to 1.5.0 ( #17421 )
...
* build(deps): bump github.com/hashicorp/raft from 1.3.11 to 1.5.0
Bumps [github.com/hashicorp/raft](https://github.com/hashicorp/raft ) from 1.3.11 to 1.5.0.
- [Release notes](https://github.com/hashicorp/raft/releases )
- [Changelog](https://github.com/hashicorp/raft/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/raft/compare/v1.3.11...v1.5.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/raft
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* cl: add cl for raft 1.5.0
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com >
2023-06-05 09:03:02 -05:00
dependabot[bot]
0596ae4975
build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 ( #17420 )
...
Bumps google.golang.org/protobuf from 1.28.1 to 1.30.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 08:57:33 -05:00
dependabot[bot]
91a3eb7012
build(deps): bump github.com/shirou/gopsutil/v3 from 3.23.1 to 3.23.4 ( #17338 )
...
Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil ) from 3.23.1 to 3.23.4.
- [Release notes](https://github.com/shirou/gopsutil/releases )
- [Commits](https://github.com/shirou/gopsutil/compare/v3.23.1...v3.23.4 )
---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-02 19:30:59 -04:00
dependabot[bot]
9362620da8
build(deps): bump github.com/elazarl/go-bindata-assetfs ( #17339 )
...
Bumps [github.com/elazarl/go-bindata-assetfs](https://github.com/elazarl/go-bindata-assetfs ) from 1.0.1-0.20200509193318-234c15e7648f to 1.0.1.
- [Release notes](https://github.com/elazarl/go-bindata-assetfs/releases )
- [Changelog](https://github.com/elazarl/go-bindata-assetfs/blob/master/.goreleaser.yml )
- [Commits](https://github.com/elazarl/go-bindata-assetfs/commits/v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/elazarl/go-bindata-assetfs
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 10:19:59 -04:00
dependabot[bot]
7d25b166b6
build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware ( #16551 )
...
Bumps [github.com/grpc-ecosystem/go-grpc-middleware](https://github.com/grpc-ecosystem/go-grpc-middleware ) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/grpc-ecosystem/go-grpc-middleware/releases )
- [Commits](https://github.com/grpc-ecosystem/go-grpc-middleware/compare/v1.3.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/go-grpc-middleware
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 09:01:26 -04:00
dependabot[bot]
cb7c016b28
build(deps): bump github.com/hashicorp/vault/sdk from 0.7.0 to 0.9.0 ( #17031 )
...
Bumps [github.com/hashicorp/vault/sdk](https://github.com/hashicorp/vault ) from 0.7.0 to 0.9.0.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.9.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 08:40:32 -04:00
dependabot[bot]
6bd22fb376
build(deps): bump github.com/docker/distribution ( #17162 )
...
Bumps [github.com/docker/distribution](https://github.com/docker/distribution ) from 2.8.1+incompatible to 2.8.2+incompatible.
- [Release notes](https://github.com/docker/distribution/releases )
- [Commits](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2 )
---
updated-dependencies:
- dependency-name: github.com/docker/distribution
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 08:40:18 -04:00
Charlie Voiselle
fc9076731c
[api] Return a shapely error for unexpected response ( #16743 )
...
* Add UnexpectedResultError to nomad/api
This allows users to perform additional status-based behavior by rehydrating the error using `errors.As` inside of consumers.
2023-05-22 11:45:31 -04:00
dependabot[bot]
85376af1b7
build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.6 in /api ( #17178 )
...
* build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.5 in /api
* deps: update shoenig/test to v0.6.5
* deps: update again to v0.6.6
---------
Co-authored-by: Tim Gross <tgross@hashicorp.com >
Co-authored-by: Seth Hoenig <shoenig@duck.com >
2023-05-22 07:53:12 -05:00
Luiz Aoqui
889a4e38e1
deps: update go-metrics to prevent panic ( #17133 )
...
nomad#15861 describes intermitent panics caused by go-metrics Prometheus
client. We have not been able to further debug this problem due to the
lack of information when the panic happens.
go-metrics#146 prevents the panic from happening and also logs
additional information that can help us understand the root cause of the
problem.
This commits pins the go-metric dependency to this branch until we can
better debug the issue.
2023-05-10 21:33:15 -04:00
Michael Schurter
aabb1e8a09
dep: update from jwt/v4 to jwt/v5 ( #17062 )
...
Their release notes are here: https://github.com/golang-jwt/jwt/releases
Seemed wise to upgrade before we do even more with JWTs. For example
this upgrade *would* have mattered if we already implemented common JWT
claims such as expiration. Since we didn't rely on any claim
verification this upgrade is a noop...
...except for 1 test that called `Claims.Valid()`! Removing that
assertion *seems* scary, but it didn't actually do anything because we
didn't implement any of the standard claims it validated:
https://github.com/golang-jwt/jwt/blob/v4.5.0/map_claims.go#L120-L151
So functionally this major upgrade is a noop.
2023-05-03 11:17:38 -07:00
Charlie Voiselle
50f05416b1
[deps] Update consul-template to v0.31.0 ( #16908 )
...
* Update consul-template to v0.31.0
* Add changelog
2023-05-03 09:15:17 -04:00
Luiz Aoqui
ee5a08dbb2
Revert "hashicorp/go-msgpack v2 ( #16810 )" ( #17047 )
...
This reverts commit 8a98520d56 .
2023-05-01 17:18:34 -04:00
Michael Schurter
3dd9326843
deps: update go-bexpr from 0.1.11 to 0.1.12 ( #16991 )
...
Pulls in https://github.com/hashicorp/go-bexpr/pull/38
Fixes #16758
2023-04-27 09:01:42 -07:00
dependabot[bot]
76a0630f22
build(deps): bump github.com/shoenig/test from 0.6.3 to 0.6.4 in /api ( #16895 )
...
Bumps [github.com/shoenig/test](https://github.com/shoenig/test ) from 0.6.3 to 0.6.4.
- [Release notes](https://github.com/shoenig/test/releases )
- [Commits](https://github.com/shoenig/test/compare/v0.6.3...v0.6.4 )
---
updated-dependencies:
- dependency-name: github.com/shoenig/test
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 11:39:37 -05:00
dependabot[bot]
561b793cab
build(deps): bump github.com/hashicorp/vault/api from 1.8.3 to 1.9.1 ( #16966 )
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.8.3 to 1.9.1.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.8.3...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 09:00:54 -05:00
Ian Fijolek
8a98520d56
hashicorp/go-msgpack v2 ( #16810 )
...
* Upgrade from hashicorp/go-msgpack v1.1.5 to v2.1.0
Fixes #16808
* Update hashicorp/net-rpc-msgpackrpc to v2 to match go-msgpack
* deps: use go-msgpack v2.0.0
go-msgpack v2.1.0 includes some code changes that we will need to
investigate furthere to assess its impact on Nomad, so keeping this
dependency on v2.0.0 for now since it's no-op.
---------
Co-authored-by: Luiz Aoqui <luiz@hashicorp.com >
2023-04-17 17:02:05 -04:00
Seth Hoenig
74b16da272
deps: update docker to 23.0.3 ( #16862 )
...
* [no ci] deps: update docker to 23.0.3
This PR brings our docker/docker dependency (which is hosted at github.com/moby/moby)
up to 23.0.3 (forward about 2 years). Refactored our use of docker/libnetwork to
reference the package in its new home, which is docker/docker/libnetwork (it is
no longer an independent repository). Some minor nearby test case cleanup as well.
* add cl
2023-04-12 14:13:36 -05:00
Seth Hoenig
780fcf9043
deps: update go-m1cpu with fix for BigSur users ( #16793 )
...
https://github.com/shoenig/go-m1cpu/releases/tag/v0.1.5
which may also help with the Nix package for Nomad, which makes use of
the older IOKit framework version
https://github.com/shoenig/go-m1cpu/issues/5
2023-04-05 11:44:31 -05:00
James Rasell
4848bfadec
cli: stream both stdout and stderr when following an alloc. ( #16556 )
...
This update changes the behaviour when following logs from an
allocation, so that both stdout and stderr files streamed when the
operator supplies the follow flag. The previous behaviour is held
when all other flags and situations are provided.
Co-authored-by: Luiz Aoqui <luiz@hashicorp.com >
2023-04-04 10:42:27 +01:00