Juanadelacuesta
8752bb0a65
func: move the user lookup into the validation, it's used everywhere the function is called
2024-10-31 10:34:26 +01:00
Juana De La Cuesta
3449056cd6
Update website/content/docs/drivers/raw_exec.mdx
...
Co-authored-by: Michael Smithhisler <michael.smithhisler@hashicorp.com >
2024-10-31 10:26:26 +01:00
Juana De La Cuesta
3f32557f1e
Update website/content/docs/drivers/exec.mdx
...
Co-authored-by: Michael Smithhisler <michael.smithhisler@hashicorp.com >
2024-10-31 09:43:49 +01:00
Juana De La Cuesta
f1439f54f7
Update drivers/shared/validators/validators.go
...
Co-authored-by: James Rasell <jrasell@users.noreply.github.com >
2024-10-31 09:32:51 +01:00
Juanadelacuesta
3f884bb3fa
fix: remove the setConfig and modify the test driver to include idValidator to avoid panics
2024-10-30 17:38:54 +01:00
Juanadelacuesta
f954a1a5e8
fix: remove the setConfig and modify the test driver to include idValidator to avoid panics
2024-10-30 16:16:42 +01:00
Juanadelacuesta
a86e951f03
style: rename DeniedHostGidsStr to reflect refactor
2024-10-30 15:22:50 +01:00
Juanadelacuesta
a90eda628d
func: implement mock validator to avoid changes on the rawexec tests
2024-10-30 15:07:47 +01:00
Juanadelacuesta
088417163b
fix: add set config to populate idValidator on tests
2024-10-30 13:40:19 +01:00
Juanadelacuesta
445b19ce3e
docs: update func docs
2024-10-30 12:35:06 +01:00
Juanadelacuesta
f707a02f4d
fix: update test to force recreation of idvalidator
2024-10-30 12:28:59 +01:00
Juanadelacuesta
bba0407250
style: remove unused code and duplicated test
2024-10-30 11:43:04 +01:00
Juanadelacuesta
3fa2717195
style: remove unused code
2024-10-30 11:36:25 +01:00
Juanadelacuesta
a491ceff5f
fix: put back MSL license header
2024-10-30 11:25:27 +01:00
Juanadelacuesta
e1a0c7cb43
fix: move exclusive unix test back from driver tests
2024-10-30 11:22:41 +01:00
Juanadelacuesta
9a6d2648c8
style: improve debug logging
2024-10-30 11:21:51 +01:00
Juanadelacuesta
2b9bb7a289
license: change missing file to BUSL
2024-10-30 10:24:35 +01:00
Juanadelacuesta
1751b618e4
func: Add conditional to validation init, to allow for easy testing
2024-10-29 16:45:33 +01:00
Juanadelacuesta
a9a452341c
license: update headers to BUSL
2024-10-29 15:54:09 +01:00
Juanadelacuesta
0227788e22
fix: update tests configuration
2024-10-29 15:24:12 +01:00
Juanadelacuesta
0cd1b5ff13
func: move the validation to a dependency and use id sets
2024-10-28 18:59:51 +01:00
Juanadelacuesta
65be613be9
fix: rename test to avoid conflict
2024-10-28 12:17:57 +01:00
Juanadelacuesta
d77dc7dfa4
style: format
2024-10-28 11:46:51 +01:00
Juanadelacuesta
60a856fd0c
add changelog entry
2024-10-28 11:36:50 +01:00
Juanadelacuesta
ed04b1bf64
style: remove print
2024-10-28 11:35:03 +01:00
Mike Nomitch
fd7e81dbce
Fixing accidental move of helper fn to unix only validators file
2024-10-28 11:15:41 +01:00
Mike Nomitch
c4f2a41da6
Splitting validators unix functions into own file
2024-10-28 11:15:41 +01:00
Mike Nomitch
ff5ab3776c
Tweaking user lookup code
2024-10-28 11:15:41 +01:00
Mike Nomitch
e1c226e633
Restructuring IDRange
2024-10-28 11:15:41 +01:00
Mike Nomitch
0fbf592131
moving user out of validators
2024-10-28 11:15:41 +01:00
Mike Nomitch
d8545fa262
Adds CL
2024-10-28 11:15:41 +01:00
Mike Nomitch
916af5a948
Moving idrange struct location
2024-10-28 11:15:41 +01:00
Mike Nomitch
9565dde138
Only parsing id ranges once
2024-10-28 11:15:41 +01:00
Mike Nomitch
d0049b1e63
Fixed error in denied_uids spec
2024-10-28 11:15:41 +01:00
Mike Nomitch
6b6a1b5bc4
Fixed windows build error
2024-10-28 11:15:41 +01:00
Mike Nomitch
cf36509474
Removing unnecessary int conversion
2024-10-28 11:15:40 +01:00
Mike Nomitch
9cc3992ca6
Adds ability to restrict uid and gids in exec and raw_exec
2024-10-28 11:15:37 +01:00
Jamie Finnigan
dec1bf51c0
update ndjson links due to domain expiry/resale ( #24306 )
2024-10-28 09:06:50 +00:00
Martijn Vegter
6236f354a5
consul: add support for service weight ( #24186 )
2024-10-25 11:21:38 -04:00
Tim Gross
a1ede9765c
docs: warn about UID overlap between workload and Envoy tproxy ( #24291 )
...
When using transparent proxy mode with the `connect` block, the UID of the
workload cannot be the same as the UID of the Envoy sidecar (currently 101 in
the default Envoy container image).
Fixes: https://github.com/hashicorp/nomad/issues/23508
2024-10-24 08:45:44 -04:00
R.B. Boyer
4e8f596311
docs: update broken consul acl token links ( #24287 )
2024-10-23 13:34:21 -04:00
Tim Gross
10358cc911
docs: warn about Consul auth method locality ( #24275 )
...
* docs: warn about Consul auth method locality
The locality of Consul tokens we mint via Workload Identity is governed by the
Consul auth method configuration. By default tokens are local to the Consul
datacenter, which typically maps 1:1 with a Nomad region. Cluster administrators
who need cross-datacenter tokens can get them by setting the locality to global,
at the risk of placement problems if the primary DC isn't available.
Ref: https://github.com/hashicorp/consul/issues/21863
Fixes: https://github.com/hashicorp/nomad/issues/23505
2024-10-23 11:44:03 -04:00
Aimee Ukasick
6a2e1e4216
Docs: Update CLI job tag unset ( #24273 )
...
* Docs: Update CLI job tag unset
CLI help order was wrong, so updating the docs.
* change usage to [options]. Move general options into expanable.
* change "to see" to "for"
2024-10-23 10:20:45 -05:00
Juana De La Cuesta
3aeb2545a3
Merge pull request #24169 from channable/rzl/gce-preemptible-fingerprint
...
fingerprint gce: collect preemptibility
2024-10-23 17:15:42 +02:00
Rodrigo Lourenço
cdebf96b0e
fingerprint gce: collect preemptibility
2024-10-23 15:19:20 +02:00
Phil Renaud
cfba3edaab
Fixed an error in job tag unset help text ( #24272 )
2024-10-22 16:02:20 -04:00
Juana De La Cuesta
aaf7936bb2
Merge pull request #24270 from hashicorp/post-1.9.1-release
...
Post 1.9.1 release
2024-10-22 17:22:18 +02:00
Juanadelacuesta
f5ca542d2e
Merge release 1.9.1 files
2024-10-22 16:15:16 +02:00
Habibi Mustafa
c5aa77e012
CLI: fix leadership transfer title docs ( #24263 )
2024-10-21 16:18:59 -04:00
hc-github-team-nomad-core
1b1d823fe0
Prepare for next release
2024-10-21 21:51:05 +02:00
