Seth Hoenig
043b1a95a7
deps: bump go-set/v2 to alpha.3 ( #18844 )
...
fixes a rather critical bug in .Equals implementation
2023-10-24 08:23:25 -05:00
James Rasell
1a0d1efb0d
cli: use single dep func for opening URLs. ( #18808 )
2023-10-20 08:24:11 +01:00
dependabot[bot]
cb2363f2fb
chore(deps): bump github.com/hashicorp/go-bexpr from 0.1.12 to 0.1.13 ( #18758 )
2023-10-16 08:21:57 +01:00
dependabot[bot]
cecd9b0472
chore(deps): bump golang.org/x/net from 0.14.0 to 0.17.0 ( #18734 )
2023-10-12 07:58:59 +01:00
Tim Gross
7ca619fe97
deps: remove Vault SDK ( #18725 )
...
Nomad imports the Vault SDK to get testing helpers, but it turns out the only
thing actually in use was a single string constant for the Vault namespace
header. Remove this dependency and hardcode the constant to reduce dependency
churn.
2023-10-11 10:42:09 -04:00
Tim Gross
e22c5b82f3
WID manager: request signed identities for services ( #18650 )
...
Includes changes to WID Manager that make it request signed identities for
services, as well as a few improvements to WIHandle introduced in #18672 .
---------
Co-authored-by: Piotr Kazmierczak <470696+pkazmierczak@users.noreply.github.com >
2023-10-11 12:07:16 +02:00
dependabot[bot]
9a38a9c188
chore(deps): bump github.com/docker/cli ( #18565 )
2023-10-10 09:12:32 +01:00
dependabot[bot]
fbf792f895
chore(deps): bump github.com/docker/distribution ( #18693 )
2023-10-10 08:20:28 +01:00
dependabot[bot]
5945ed5cfd
chore(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 ( #18694 )
2023-10-09 11:39:51 +01:00
Seth Hoenig
e3c8700ded
deps: upgrade to go-set/v2 ( #18638 )
...
No functional changes, just cleaning up deprecated usages that are
removed in v2 and replace one call of .Slice with .ForEach to avoid
making the intermediate copy.
2023-10-05 11:56:17 -05:00
dependabot[bot]
ccafb94645
chore(deps): bump github.com/cyphar/filepath-securejoin ( #18545 )
2023-10-02 08:25:35 +01:00
Tim Gross
02a5aab359
consul: provide workload's Consul token to service client ( #18559 )
...
This is a work-in-progress changeset to provide workload-specific Consul tokens
that are created by the `consul_hook` and attached to workload registration
requests by the `group_service_hook` and `service_hook`.
This requires unreleased updates to Consul's `api` package, so this changeset
includes a temporary `replace` directive in the go.mod file.
2023-09-26 14:13:29 -04:00
James Rasell
d23ee134c5
deps: update hashicorp/go-set to v0.1.14 ( #18240 )
2023-08-17 15:03:15 +01:00
Seth Hoenig
77e139ea25
build: use modtool to format go.mod file ( #18195 )
2023-08-15 07:26:46 -05:00
Seth Hoenig
d9341f0664
update go1.21 ( #18184 )
...
* build: update to go1.21
* go: eliminate helpers in favor of min/max
* build: run go mod tidy
* build: swap depguard for semgrep
* command: fixup broken tls error check on go1.21
2023-08-14 08:43:27 -05:00
Seth Hoenig
a4cc76bd3e
numa: enable numa topology detection ( #18146 )
...
* client: refactor cgroups management in client
* client: fingerprint numa topology
* client: plumb numa and cgroups changes to drivers
* client: cleanup task resource accounting
* client: numa client and config plumbing
* lib: add a stack implementation
* tools: remove ec2info tool
* plugins: fixup testing for cgroups / numa changes
* build: update makefile and package tests and cl
2023-08-10 17:05:30 -05:00
Seth Hoenig
37dd4c4a69
e2e: modernize vaultcompat testing ( #18179 )
...
* e2e: modernize vaultcompat testing
* e2e: cr fixes for vaultcompat
2023-08-09 09:24:51 -05:00
dependabot[bot]
9551441dff
build(deps): bump github.com/hashicorp/go-kms-wrapping/v2 ( #17957 )
...
Bumps [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping ) from 2.0.8 to 2.0.12.
- [Commits](https://github.com/hashicorp/go-kms-wrapping/compare/v2.0.8...v2.0.12 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-kms-wrapping/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:43:14 -04:00
dependabot[bot]
02b572473b
build(deps): bump github.com/opencontainers/runc from 1.1.5 to 1.1.8 ( #18037 )
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.5 to 1.1.8.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.8/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.5...v1.1.8 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:37:04 -04:00
dependabot[bot]
0d3f976a8a
build(deps): bump github.com/hashicorp/consul/api from 1.18.0 to 1.23.0 ( #18038 )
...
Bumps [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul ) from 1.18.0 to 1.23.0.
- [Release notes](https://github.com/hashicorp/consul/releases )
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/consul/compare/api/v1.18.0...api/v1.23.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/consul/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:01:34 -04:00
Charlie Voiselle
585b0533c0
[dep] bump golang.org/x/exp ( #18102 )
...
There are some refactorings that have to be made in the getter and state
where the api changed in `slices`
* Bump golang.org/x/exp
* Bump golang.org/x/exp in api
* Update job_endpoint_test
* [feedback] unexport sort function
2023-08-01 11:50:17 -04:00
Michael Schurter
d14362ec19
core: add jwks rpc and http api ( #18035 )
...
Add JWKS endpoint to HTTP API for exposing the root public signing keys used for signing workload identity JWTs.
Part 1 of N components as part of making workload identities consumable by third party services such as Consul and Vault. Identity attenuation (audience) and expiration (+renewal) are necessary to securely use workload identities with 3rd parties, so this merge does not yet document this endpoint.
---------
Co-authored-by: Tim Gross <tgross@hashicorp.com >
2023-07-27 11:27:17 -07:00
Seth Hoenig
f06948fd64
deps: update cronexpr to capture license file in SBOM tools ( #17733 )
2023-06-27 07:58:20 -05:00
dependabot[bot]
f4385cc817
build(deps): bump github.com/containerd/go-cni from 1.1.7 to 1.1.9 ( #17582 )
2023-06-26 16:47:20 +01:00
dependabot[bot]
1d4f8869fd
build(deps): bump github.com/opencontainers/runtime-spec ( #17719 )
...
Bumps [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec ) from 1.0.3-0.20210326190908-1c3f411f0417 to 1.1.0-rc.3.
- [Release notes](https://github.com/opencontainers/runtime-spec/releases )
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog )
- [Commits](https://github.com/opencontainers/runtime-spec/commits/v1.1.0-rc.3 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runtime-spec
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 08:03:50 -05:00
dependabot[bot]
219f5dd532
build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.4 ( #17584 )
2023-06-19 08:21:45 +01:00
dependabot[bot]
ca86582f69
build(deps): bump github.com/hashicorp/go-plugin from 1.4.9 to 1.4.10 ( #17486 )
2023-06-12 14:22:33 +01:00
dependabot[bot]
b94cb322ee
build(deps): bump github.com/shoenig/go-m1cpu from 0.1.5 to 0.1.6 ( #17487 )
2023-06-12 12:08:16 +01:00
dependabot[bot]
1f1c0a1f20
build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0 ( #17485 )
2023-06-12 10:44:18 +01:00
dependabot[bot]
1e31268b85
build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 ( #16228 )
...
* build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
Bumps [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt ) from 1.3.6 to 1.3.7.
- [Release notes](https://github.com/etcd-io/bbolt/releases )
- [Commits](https://github.com/etcd-io/bbolt/compare/v1.3.6...v1.3.7 )
---
updated-dependencies:
- dependency-name: go.etcd.io/bbolt
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* cl: update cl for bbolt
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com >
2023-06-05 10:19:14 -05:00
dependabot[bot]
d17f19da24
build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1 ( #16227 )
...
Bumps [github.com/dustin/go-humanize](https://github.com/dustin/go-humanize ) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/dustin/go-humanize/releases )
- [Commits](https://github.com/dustin/go-humanize/compare/v1.0.0...v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/dustin/go-humanize
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 10:17:04 -05:00
dependabot[bot]
992b62028d
build(deps): bump github.com/hashicorp/raft from 1.3.11 to 1.5.0 ( #17421 )
...
* build(deps): bump github.com/hashicorp/raft from 1.3.11 to 1.5.0
Bumps [github.com/hashicorp/raft](https://github.com/hashicorp/raft ) from 1.3.11 to 1.5.0.
- [Release notes](https://github.com/hashicorp/raft/releases )
- [Changelog](https://github.com/hashicorp/raft/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/raft/compare/v1.3.11...v1.5.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/raft
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* cl: add cl for raft 1.5.0
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com >
2023-06-05 09:03:02 -05:00
dependabot[bot]
0596ae4975
build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 ( #17420 )
...
Bumps google.golang.org/protobuf from 1.28.1 to 1.30.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 08:57:33 -05:00
dependabot[bot]
91a3eb7012
build(deps): bump github.com/shirou/gopsutil/v3 from 3.23.1 to 3.23.4 ( #17338 )
...
Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil ) from 3.23.1 to 3.23.4.
- [Release notes](https://github.com/shirou/gopsutil/releases )
- [Commits](https://github.com/shirou/gopsutil/compare/v3.23.1...v3.23.4 )
---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-02 19:30:59 -04:00
dependabot[bot]
9362620da8
build(deps): bump github.com/elazarl/go-bindata-assetfs ( #17339 )
...
Bumps [github.com/elazarl/go-bindata-assetfs](https://github.com/elazarl/go-bindata-assetfs ) from 1.0.1-0.20200509193318-234c15e7648f to 1.0.1.
- [Release notes](https://github.com/elazarl/go-bindata-assetfs/releases )
- [Changelog](https://github.com/elazarl/go-bindata-assetfs/blob/master/.goreleaser.yml )
- [Commits](https://github.com/elazarl/go-bindata-assetfs/commits/v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/elazarl/go-bindata-assetfs
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 10:19:59 -04:00
dependabot[bot]
7d25b166b6
build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware ( #16551 )
...
Bumps [github.com/grpc-ecosystem/go-grpc-middleware](https://github.com/grpc-ecosystem/go-grpc-middleware ) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/grpc-ecosystem/go-grpc-middleware/releases )
- [Commits](https://github.com/grpc-ecosystem/go-grpc-middleware/compare/v1.3.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/go-grpc-middleware
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 09:01:26 -04:00
dependabot[bot]
cb7c016b28
build(deps): bump github.com/hashicorp/vault/sdk from 0.7.0 to 0.9.0 ( #17031 )
...
Bumps [github.com/hashicorp/vault/sdk](https://github.com/hashicorp/vault ) from 0.7.0 to 0.9.0.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.9.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 08:40:32 -04:00
dependabot[bot]
6bd22fb376
build(deps): bump github.com/docker/distribution ( #17162 )
...
Bumps [github.com/docker/distribution](https://github.com/docker/distribution ) from 2.8.1+incompatible to 2.8.2+incompatible.
- [Release notes](https://github.com/docker/distribution/releases )
- [Commits](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2 )
---
updated-dependencies:
- dependency-name: github.com/docker/distribution
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 08:40:18 -04:00
Charlie Voiselle
fc9076731c
[api] Return a shapely error for unexpected response ( #16743 )
...
* Add UnexpectedResultError to nomad/api
This allows users to perform additional status-based behavior by rehydrating the error using `errors.As` inside of consumers.
2023-05-22 11:45:31 -04:00
dependabot[bot]
85376af1b7
build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.6 in /api ( #17178 )
...
* build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.5 in /api
* deps: update shoenig/test to v0.6.5
* deps: update again to v0.6.6
---------
Co-authored-by: Tim Gross <tgross@hashicorp.com >
Co-authored-by: Seth Hoenig <shoenig@duck.com >
2023-05-22 07:53:12 -05:00
Luiz Aoqui
889a4e38e1
deps: update go-metrics to prevent panic ( #17133 )
...
nomad#15861 describes intermitent panics caused by go-metrics Prometheus
client. We have not been able to further debug this problem due to the
lack of information when the panic happens.
go-metrics#146 prevents the panic from happening and also logs
additional information that can help us understand the root cause of the
problem.
This commits pins the go-metric dependency to this branch until we can
better debug the issue.
2023-05-10 21:33:15 -04:00
Michael Schurter
aabb1e8a09
dep: update from jwt/v4 to jwt/v5 ( #17062 )
...
Their release notes are here: https://github.com/golang-jwt/jwt/releases
Seemed wise to upgrade before we do even more with JWTs. For example
this upgrade *would* have mattered if we already implemented common JWT
claims such as expiration. Since we didn't rely on any claim
verification this upgrade is a noop...
...except for 1 test that called `Claims.Valid()`! Removing that
assertion *seems* scary, but it didn't actually do anything because we
didn't implement any of the standard claims it validated:
https://github.com/golang-jwt/jwt/blob/v4.5.0/map_claims.go#L120-L151
So functionally this major upgrade is a noop.
2023-05-03 11:17:38 -07:00
Charlie Voiselle
50f05416b1
[deps] Update consul-template to v0.31.0 ( #16908 )
...
* Update consul-template to v0.31.0
* Add changelog
2023-05-03 09:15:17 -04:00
Luiz Aoqui
ee5a08dbb2
Revert "hashicorp/go-msgpack v2 ( #16810 )" ( #17047 )
...
This reverts commit 8a98520d56 .
2023-05-01 17:18:34 -04:00
Michael Schurter
3dd9326843
deps: update go-bexpr from 0.1.11 to 0.1.12 ( #16991 )
...
Pulls in https://github.com/hashicorp/go-bexpr/pull/38
Fixes #16758
2023-04-27 09:01:42 -07:00
dependabot[bot]
76a0630f22
build(deps): bump github.com/shoenig/test from 0.6.3 to 0.6.4 in /api ( #16895 )
...
Bumps [github.com/shoenig/test](https://github.com/shoenig/test ) from 0.6.3 to 0.6.4.
- [Release notes](https://github.com/shoenig/test/releases )
- [Commits](https://github.com/shoenig/test/compare/v0.6.3...v0.6.4 )
---
updated-dependencies:
- dependency-name: github.com/shoenig/test
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 11:39:37 -05:00
dependabot[bot]
561b793cab
build(deps): bump github.com/hashicorp/vault/api from 1.8.3 to 1.9.1 ( #16966 )
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.8.3 to 1.9.1.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.8.3...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 09:00:54 -05:00
Ian Fijolek
8a98520d56
hashicorp/go-msgpack v2 ( #16810 )
...
* Upgrade from hashicorp/go-msgpack v1.1.5 to v2.1.0
Fixes #16808
* Update hashicorp/net-rpc-msgpackrpc to v2 to match go-msgpack
* deps: use go-msgpack v2.0.0
go-msgpack v2.1.0 includes some code changes that we will need to
investigate furthere to assess its impact on Nomad, so keeping this
dependency on v2.0.0 for now since it's no-op.
---------
Co-authored-by: Luiz Aoqui <luiz@hashicorp.com >
2023-04-17 17:02:05 -04:00
Seth Hoenig
74b16da272
deps: update docker to 23.0.3 ( #16862 )
...
* [no ci] deps: update docker to 23.0.3
This PR brings our docker/docker dependency (which is hosted at github.com/moby/moby)
up to 23.0.3 (forward about 2 years). Refactored our use of docker/libnetwork to
reference the package in its new home, which is docker/docker/libnetwork (it is
no longer an independent repository). Some minor nearby test case cleanup as well.
* add cl
2023-04-12 14:13:36 -05:00
Seth Hoenig
780fcf9043
deps: update go-m1cpu with fix for BigSur users ( #16793 )
...
https://github.com/shoenig/go-m1cpu/releases/tag/v0.1.5
which may also help with the Nix package for Nomad, which makes use of
the older IOKit framework version
https://github.com/shoenig/go-m1cpu/issues/5
2023-04-05 11:44:31 -05:00