Armon Dadgar
|
cce2801469
|
nomad: fixing test
|
2017-09-04 13:21:01 -07:00 |
|
Armon Dadgar
|
425f0514a6
|
api: Fixing double region merge conflict
|
2017-09-04 13:20:51 -07:00 |
|
Armon Dadgar
|
ad4aeec085
|
nomad: use hashes for efficient token/policy diffing
|
2017-09-04 13:09:34 -07:00 |
|
Armon Dadgar
|
84d87948f6
|
nomad: compute hash for ACL policies and tokens
|
2017-09-04 13:09:34 -07:00 |
|
Armon Dadgar
|
04bcf3cb35
|
api: full CRUD for ACL token API
|
2017-09-04 13:09:34 -07:00 |
|
Armon Dadgar
|
02e97de7ab
|
api: support token listing
|
2017-09-04 13:09:34 -07:00 |
|
Armon Dadgar
|
7584b35558
|
api: support querying policies
|
2017-09-04 13:09:34 -07:00 |
|
Armon Dadgar
|
72b85c16b0
|
api: support policy delete
|
2017-09-04 13:09:34 -07:00 |
|
Armon Dadgar
|
d3a3575898
|
api: Adding support for ACL tokens
|
2017-09-04 13:09:34 -07:00 |
|
Armon Dadgar
|
49f9f0e26b
|
testutil: Allow enabling ACLs
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
e840bb1019
|
Address @dadgar feedback
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
8688e9210e
|
nomad: avoid replication consistency issues by setting MinQueryIndex
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
e9790c63b4
|
ACL RPCs allow stale reads for scalability
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
26af455da4
|
website: add missing space
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
9c21e76c1e
|
agent: fix routing for token-specific request
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
437483350e
|
website: complete ACL guide
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
f09af193f9
|
website: filling in ACL guide
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
8586781a6e
|
website: pointing to ACL guide
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
045e659390
|
website: Document ACL APIs and configuration
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
713bf743bf
|
vendoring blake2b
|
2017-09-04 13:07:44 -07:00 |
|
Armon Dadgar
|
ce4ffe02f4
|
Adding a comment to address @dadgar
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
e24fa79aab
|
agent: thread ACLs for Job Register
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
52d81f4165
|
nomad: enforce ACLs on job submit
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
5415926763
|
nomad: allow getting policies which are subset of token, fixes client resolution
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
5f04c0c2f1
|
nomad: adding policy subset check
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
33f640dc38
|
client: fixing policy resolution after ACL endpoint enforcement
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
48a176a163
|
nomad: forward DeleteToken requests for global tokens
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
9edd215bb4
|
nomad: forward UpsertToken requests for global tokens
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
b253ad5cfb
|
agent: thread through token for ACL endpoint tests
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
44fe0afc9f
|
Passthrough replication token for token/policy replication
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
b64d7d184a
|
nomad: ACL endpoints enforce permissions
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
0fcf618dfc
|
Add ErrPermissionDenied, rename TokenNotFound
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
79420d78cf
|
agent: Adding X-Nomad-Token header parsing
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
62a5580e53
|
nomad: Add SecretID to QueryOptions and WriteMeta
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
ab5ce9b1a7
|
nomad: ACL endpoints check support enabled and redirect to authority
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
d7f3b896cd
|
nomad: adding ACL bootstrapping endpoint
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
b324dd0f55
|
nomad: adding ACL bootstrap endpoints
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
59bd491872
|
nomad: adding bootstrapping checks
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
562ed141b1
|
nomad: adding bootstrap state store method
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
bda7b36da3
|
Address @dadgar feedback
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
9e716056aa
|
nomad: Switch from SHA1 to Blake2 @chelseakomlo
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
00833d69c4
|
structs: sort policies to avoid order dependence for caching
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
5b43ea4bff
|
client: adding token resolution logic
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
032296f581
|
nomad: switch policy/token replication to use batch endpoints
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
cce8839788
|
noamd: Adding batch fetch endpoints for ACL tokens and policies
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
1b6979c8a5
|
nomad: Adding token resolution endpoint
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
fb118b2dfb
|
client: adding token cache for ACL resolution
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
f12e3e90ee
|
nomad: refactor to use CompileACLObject and handle anonymous token
|
2017-09-04 13:05:35 -07:00 |
|
Armon Dadgar
|
c9ebf0d325
|
structs: Adding ACL compilation helper
|
2017-09-04 13:05:35 -07:00 |
|
Armon Dadgar
|
8f52fb9c3b
|
structs: cache key helper for policy list
|
2017-09-04 13:05:35 -07:00 |
|