Commit Graph

8527 Commits

Author SHA1 Message Date
Armon Dadgar
ce4ffe02f4 Adding a comment to address @dadgar 2017-09-04 13:05:53 -07:00
Armon Dadgar
e24fa79aab agent: thread ACLs for Job Register 2017-09-04 13:05:53 -07:00
Armon Dadgar
52d81f4165 nomad: enforce ACLs on job submit 2017-09-04 13:05:53 -07:00
Armon Dadgar
5415926763 nomad: allow getting policies which are subset of token, fixes client resolution 2017-09-04 13:05:53 -07:00
Armon Dadgar
5f04c0c2f1 nomad: adding policy subset check 2017-09-04 13:05:53 -07:00
Armon Dadgar
33f640dc38 client: fixing policy resolution after ACL endpoint enforcement 2017-09-04 13:05:53 -07:00
Armon Dadgar
48a176a163 nomad: forward DeleteToken requests for global tokens 2017-09-04 13:05:53 -07:00
Armon Dadgar
9edd215bb4 nomad: forward UpsertToken requests for global tokens 2017-09-04 13:05:53 -07:00
Armon Dadgar
b253ad5cfb agent: thread through token for ACL endpoint tests 2017-09-04 13:05:53 -07:00
Armon Dadgar
44fe0afc9f Passthrough replication token for token/policy replication 2017-09-04 13:05:53 -07:00
Armon Dadgar
b64d7d184a nomad: ACL endpoints enforce permissions 2017-09-04 13:05:53 -07:00
Armon Dadgar
0fcf618dfc Add ErrPermissionDenied, rename TokenNotFound 2017-09-04 13:05:53 -07:00
Armon Dadgar
79420d78cf agent: Adding X-Nomad-Token header parsing 2017-09-04 13:05:53 -07:00
Armon Dadgar
62a5580e53 nomad: Add SecretID to QueryOptions and WriteMeta 2017-09-04 13:05:53 -07:00
Armon Dadgar
ab5ce9b1a7 nomad: ACL endpoints check support enabled and redirect to authority 2017-09-04 13:05:53 -07:00
Armon Dadgar
d7f3b896cd nomad: adding ACL bootstrapping endpoint 2017-09-04 13:05:53 -07:00
Armon Dadgar
b324dd0f55 nomad: adding ACL bootstrap endpoints 2017-09-04 13:05:53 -07:00
Armon Dadgar
59bd491872 nomad: adding bootstrapping checks 2017-09-04 13:05:53 -07:00
Armon Dadgar
562ed141b1 nomad: adding bootstrap state store method 2017-09-04 13:05:53 -07:00
Armon Dadgar
bda7b36da3 Address @dadgar feedback 2017-09-04 13:05:53 -07:00
Armon Dadgar
9e716056aa nomad: Switch from SHA1 to Blake2 @chelseakomlo 2017-09-04 13:05:36 -07:00
Armon Dadgar
00833d69c4 structs: sort policies to avoid order dependence for caching 2017-09-04 13:05:36 -07:00
Armon Dadgar
5b43ea4bff client: adding token resolution logic 2017-09-04 13:05:36 -07:00
Armon Dadgar
032296f581 nomad: switch policy/token replication to use batch endpoints 2017-09-04 13:05:36 -07:00
Armon Dadgar
cce8839788 noamd: Adding batch fetch endpoints for ACL tokens and policies 2017-09-04 13:05:36 -07:00
Armon Dadgar
1b6979c8a5 nomad: Adding token resolution endpoint 2017-09-04 13:05:36 -07:00
Armon Dadgar
fb118b2dfb client: adding token cache for ACL resolution 2017-09-04 13:05:36 -07:00
Armon Dadgar
f12e3e90ee nomad: refactor to use CompileACLObject and handle anonymous token 2017-09-04 13:05:35 -07:00
Armon Dadgar
c9ebf0d325 structs: Adding ACL compilation helper 2017-09-04 13:05:35 -07:00
Armon Dadgar
8f52fb9c3b structs: cache key helper for policy list 2017-09-04 13:05:35 -07:00
Armon Dadgar
1da443f29a client: create ACL and Policy cache 2017-09-04 13:05:35 -07:00
Armon Dadgar
0dc6a1a9c7 agent: thread ACL config to client 2017-09-04 13:04:45 -07:00
Armon Dadgar
235f4d27ac Address @chelseakomlo comments 2017-09-04 13:04:45 -07:00
Armon Dadgar
9b6144d0d6 Moving shared ACL objects 2017-09-04 13:04:45 -07:00
Armon Dadgar
7b67692b15 nomad: adding ACL token resolution logic 2017-09-04 13:04:45 -07:00
Armon Dadgar
c81bafec16 acl: Adding IsManagement check 2017-09-04 13:04:45 -07:00
Armon Dadgar
428aea5094 Address @dadgar feedback 2017-09-04 13:04:45 -07:00
Armon Dadgar
998b04dd34 Fixing intent 2017-09-04 13:04:45 -07:00
Armon Dadgar
e2ed029cd4 nomad: adding global token replication 2017-09-04 13:04:45 -07:00
Armon Dadgar
7614c8fdb5 nomad: Adding ability to filter list of tokens to global only 2017-09-04 13:04:45 -07:00
Armon Dadgar
ddf276280e nomad: adding policy replication support 2017-09-04 13:04:45 -07:00
Armon Dadgar
2329fbcd28 agent: thread through ACL config to Server 2017-09-04 13:04:45 -07:00
Armon Dadgar
9fdea05804 agent: Adding ACL block configuration 2017-09-04 13:04:45 -07:00
Armon Dadgar
0d90ab3d09 Address @dadgar feedback 2017-09-04 13:04:45 -07:00
Armon Dadgar
db667d45e8 agent: fixing ACL endpoint, return updated tokens 2017-09-04 13:04:45 -07:00
Armon Dadgar
18eec0398f nomad: generate accessor/secret ID server side 2017-09-04 13:04:45 -07:00
Armon Dadgar
70cdccf643 agent: Adding HTTP endpoints for ACL tokens 2017-09-04 13:04:45 -07:00
Armon Dadgar
e9efe603dd nomad: renambe PublicID to AccessorID for consistency 2017-09-04 13:04:45 -07:00
Armon Dadgar
14f7e8166f nomad: implement ACL token endpoints 2017-09-04 13:04:45 -07:00
Armon Dadgar
0c8bb531cb nomad: Add ACL Token snapshot/restore to FSM 2017-09-04 13:04:45 -07:00