Armon Dadgar
|
ce4ffe02f4
|
Adding a comment to address @dadgar
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
e24fa79aab
|
agent: thread ACLs for Job Register
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
52d81f4165
|
nomad: enforce ACLs on job submit
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
5415926763
|
nomad: allow getting policies which are subset of token, fixes client resolution
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
5f04c0c2f1
|
nomad: adding policy subset check
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
33f640dc38
|
client: fixing policy resolution after ACL endpoint enforcement
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
48a176a163
|
nomad: forward DeleteToken requests for global tokens
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
9edd215bb4
|
nomad: forward UpsertToken requests for global tokens
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
b253ad5cfb
|
agent: thread through token for ACL endpoint tests
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
44fe0afc9f
|
Passthrough replication token for token/policy replication
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
b64d7d184a
|
nomad: ACL endpoints enforce permissions
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
0fcf618dfc
|
Add ErrPermissionDenied, rename TokenNotFound
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
79420d78cf
|
agent: Adding X-Nomad-Token header parsing
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
62a5580e53
|
nomad: Add SecretID to QueryOptions and WriteMeta
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
ab5ce9b1a7
|
nomad: ACL endpoints check support enabled and redirect to authority
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
d7f3b896cd
|
nomad: adding ACL bootstrapping endpoint
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
b324dd0f55
|
nomad: adding ACL bootstrap endpoints
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
59bd491872
|
nomad: adding bootstrapping checks
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
562ed141b1
|
nomad: adding bootstrap state store method
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
bda7b36da3
|
Address @dadgar feedback
|
2017-09-04 13:05:53 -07:00 |
|
Armon Dadgar
|
9e716056aa
|
nomad: Switch from SHA1 to Blake2 @chelseakomlo
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
00833d69c4
|
structs: sort policies to avoid order dependence for caching
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
5b43ea4bff
|
client: adding token resolution logic
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
032296f581
|
nomad: switch policy/token replication to use batch endpoints
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
cce8839788
|
noamd: Adding batch fetch endpoints for ACL tokens and policies
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
1b6979c8a5
|
nomad: Adding token resolution endpoint
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
fb118b2dfb
|
client: adding token cache for ACL resolution
|
2017-09-04 13:05:36 -07:00 |
|
Armon Dadgar
|
f12e3e90ee
|
nomad: refactor to use CompileACLObject and handle anonymous token
|
2017-09-04 13:05:35 -07:00 |
|
Armon Dadgar
|
c9ebf0d325
|
structs: Adding ACL compilation helper
|
2017-09-04 13:05:35 -07:00 |
|
Armon Dadgar
|
8f52fb9c3b
|
structs: cache key helper for policy list
|
2017-09-04 13:05:35 -07:00 |
|
Armon Dadgar
|
1da443f29a
|
client: create ACL and Policy cache
|
2017-09-04 13:05:35 -07:00 |
|
Armon Dadgar
|
0dc6a1a9c7
|
agent: thread ACL config to client
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
235f4d27ac
|
Address @chelseakomlo comments
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
9b6144d0d6
|
Moving shared ACL objects
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
7b67692b15
|
nomad: adding ACL token resolution logic
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
c81bafec16
|
acl: Adding IsManagement check
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
428aea5094
|
Address @dadgar feedback
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
998b04dd34
|
Fixing intent
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
e2ed029cd4
|
nomad: adding global token replication
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
7614c8fdb5
|
nomad: Adding ability to filter list of tokens to global only
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
ddf276280e
|
nomad: adding policy replication support
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
2329fbcd28
|
agent: thread through ACL config to Server
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
9fdea05804
|
agent: Adding ACL block configuration
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
0d90ab3d09
|
Address @dadgar feedback
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
db667d45e8
|
agent: fixing ACL endpoint, return updated tokens
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
18eec0398f
|
nomad: generate accessor/secret ID server side
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
70cdccf643
|
agent: Adding HTTP endpoints for ACL tokens
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
e9efe603dd
|
nomad: renambe PublicID to AccessorID for consistency
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
14f7e8166f
|
nomad: implement ACL token endpoints
|
2017-09-04 13:04:45 -07:00 |
|
Armon Dadgar
|
0c8bb531cb
|
nomad: Add ACL Token snapshot/restore to FSM
|
2017-09-04 13:04:45 -07:00 |
|