Commit Graph

1748 Commits

Author SHA1 Message Date
Seth Hoenig
0040c75e8e command, docs: create and document consul token configuration for connect acls (gh-6716)
This change provides an initial pass at setting up the configuration necessary to
enable use of Connect with Consul ACLs. Operators will be able to pass in a Consul
Token through `-consul-token` or `$CONSUL_TOKEN` in the `job run` and `job revert`
commands (similar to Vault tokens).

These values are not actually used yet in this changeset.
2020-01-31 19:02:53 -06:00
Sebastián Ramírez
ac696a4981 Use secret ID for NOMAD_TOKEN
Use secret ID for NOMAD_TOKEN as the accessor ID doesn't seem to work.

I tried with a local micro cluster following the tutorials, and if I do:

```console
$ export NOMAD_TOKEN=85310d07-9afa-ef53-0933-0c043cd673c7
```

Using the accessor ID as in this example, I get an error:

```
Error querying jobs: Unexpected response code: 403 (ACL token not found)
```

But when using the secret ID in that env var it seems to work correctly.
2020-01-31 18:57:16 +01:00
Mahmood Ali
788f64e031 Merge pull request #7010 from hashicorp/doc-bulk-20200129
Docs and Changelog catch up
2020-01-31 10:51:07 -05:00
Michael Schurter
b97fecce17 docs: document limits
Taken more or less verbatim from Consul.
2020-01-30 10:38:42 -08:00
Mahmood Ali
278f2b5dcc incorporate review feedback 2020-01-29 21:56:26 -05:00
Mahmood Ali
70b0ec9e05 document docker's disable_log_collection flag 2020-01-29 21:44:05 -05:00
Mahmood Ali
afa26a864c Document default_scheduler_config option 2020-01-29 21:44:05 -05:00
Nick Ethier
018f0717e7 website: add canary meta to api docs 2020-01-27 09:53:30 -05:00
Nick Ethier
64f4e9e691 consul: add support for canary meta 2020-01-27 09:53:30 -05:00
Charlie Voiselle
126b865573 Upgrade -> Update 2020-01-13 17:36:49 -05:00
Danielle
2121d57281 cli: add system command and subcmds to interact with system API. (#6924)
cli: add system command and subcmds to interact with system API.
2020-01-13 16:16:08 +01:00
James Rasell
a672753f9f system CLI documentation fixes based on feedback from @angrycub 2020-01-13 15:45:14 +01:00
James Rasell
38adb4734b docs: add documentation for system command. 2020-01-13 11:35:24 +01:00
Nick Ethier
4b6f9e800b Merge pull request #6816 from hashicorp/b-multiple-envoy
connect: configure envoy to support multiple sidecars in the same alloc
2020-01-09 23:25:39 -05:00
Charlie Voiselle
bdaf9cda91 Change consul agent note to callout
Because this is such a common misconfig, it is probably worth
highlighting
2020-01-08 13:08:54 -05:00
Nick Ethier
a44490182b tr: expose envoy sidecar admin port as environment variable 2020-01-06 21:53:45 -05:00
Michael Schurter
34568d8e91 docs: add podman as an external task driver plugin
Tested using https://github.com/schmichael/nomad-podman-vagrant
2020-01-03 12:58:17 -08:00
Michael Schurter
4f95897c8d docs: fix lxc anchor link 2020-01-03 12:57:48 -08:00
Michael Schurter
3d48383ef0 docs: fix capitalization 2020-01-03 12:57:27 -08:00
Charlie Voiselle
ff501b4aaa [docs] Migrating Web-UI and Governance Guides to learn (#6876)
* [docs] Migrating Web-UI and Governance Guides to learn

* fix 404s caught in checks
2019-12-19 15:32:23 -05:00
Charlie Voiselle
0ff7c64e20 cli: Allow user to specify dest filename for nomad init (#6520)
* Allow user to specify dest filename for nomad init
* Create changelog entry for GH-6520
2019-12-19 14:59:12 -05:00
Drew Bailey
f57574287c Merge pull request #6746 from hashicorp/f-shutdown-delay-tg
Group shutdown_delay
2019-12-18 16:01:30 -05:00
John Schlederer
81592734b5 Making pull activity timeout configurable in Docker
* Making pull activity timeout configurable in Docker plugin config, first pass

* Fixing broken function call

* Fixing broken tests

* Fixing linter suggestion

* Adding documentation on new parameter in Docker plugin config

* Adding unit test

* Setting min value for pull_activity_timeout, making pull activity duration a private var
2019-12-18 12:58:53 +01:00
Drew Bailey
8c1f9b4128 docs for shutdown delay
update docs, address pr comments

ensure pointer is not nil

use pointer for diff tests, set vs unset
2019-12-16 11:38:35 -05:00
ebarriosjr
ba1e66c42b driver/pot: Added extra_hosts and args commands (#6577) 2019-12-12 16:29:45 -05:00
Tim Gross
8babbf4f1b doc: spread is inherited from job to group (#6837) 2019-12-11 09:59:26 -05:00
Tim Gross
5e3efbd3ec doc: explain ALLOC_INDEX uniqueness guarantees (#6830)
The `ALLOC_INDEX` isn't guaranteed to be unique, and this has caused
some user confusion. The servers make a best-effort attempt to make
this value unique from 0 to count-1 but when you have canaries on the
task group, there are reused indexes because you have multiple job
versions running at the same time. If a user needs a unique number for
interpolating a value in your application, they can get this by
combining the job version and the alloc index.

Co-Authored-By: Michael Schurter <mschurter@hashicorp.com>
2019-12-10 10:30:26 -05:00
abhip
ad2af255b1 Update consensus.html.md (#6813)
The url for raft algorithm pdf is no longer valid. Here is correct url - https://raft.github.io/raft.pdf  and website is https://raft.github.io/
2019-12-06 06:17:30 -08:00
Fredrik Hoem Grelland
641c9b7d7d Update network.html.md (#6782)
There is an undocumented way of mapping a dynamically allocated port to the container. This is applicable in bridge networking ( necessary for consul connect enabled services ) to expose the service *directly*. This is needed when using upstream connect services, but you need to expose the service by normal means. By referencing the current documentation you need to use static ports in order to do so. Introduced in #6189 but undocumented
2019-12-06 06:08:56 -08:00
Hugo Herter
ec9837fe16 docs: port name requires quotes in hcl
When trying to run this example, Nomad v0.10.2 raises the following error:
`Error getting job struct: Error parsing job file from example-ipv6.hcl: error parsing: At 33:22: Unknown token: 27:16 IDENT db`

Adding quotes around the port map `db` fixes the problem and the job works as expected.
2019-12-05 12:37:24 +01:00
Luiz Aoqui
e93252d61b docs: add reference to the drivir plugin skeleton project 2019-12-03 17:17:52 -05:00
Seth Hoenig
76c6437b69 Merge pull request #6752 from hashicorp/docs-vault-token_period
docs: vault integration docs should reference new token_period field
2019-12-02 16:21:17 -05:00
Seth Hoenig
7687ac0e3a docs: vault integration docs should reference new token_explicit_max_ttl field 2019-12-02 14:22:47 -06:00
Tim Gross
659e1d9a6d docs: show /etc/passwd in minimal chroot (#6769) 2019-11-25 13:47:18 -05:00
Mahmood Ali
41bf4e8ecf docs: address more GH-6762 review comments
Incorporate suggestions in https://github.com/hashicorp/nomad/pull/6762#pullrequestreview-321716747

[ci skip]
2019-11-22 13:22:14 -05:00
Mahmood Ali
cba071b5d8 address more review comments 2019-11-22 13:10:10 -05:00
Mahmood Ali
9da5a4f86d Apply suggestions from code review
Co-Authored-By: Michael Schurter <mschurter@hashicorp.com>
2019-11-22 13:03:20 -05:00
Mahmood Ali
bfe08cf887 document docker dangling container repeaper 2019-11-22 09:58:00 -05:00
Chris Baker
9062380c11 added the device plugin authoring guide, made minor formatting changes to task driver plugin authoring guide. 2019-11-22 00:38:46 +00:00
Seth Hoenig
4f1890b5fe docs: vault integration docs should reference new token_period field 2019-11-21 14:19:34 -06:00
Lang Martin
9210bde91a docs: update quota docs to include network limits 2019-11-20 18:44:06 -05:00
Lang Martin
82263f3b79 command: quota status reports network usage 2019-11-20 18:44:06 -05:00
Michael Schurter
9d571322d3 Merge pull request #6370 from pmcatominey/tls-server-name
command: add -tls-server-name flag
2019-11-20 08:44:54 -08:00
Buck Doyle
219fb500e8 Docs: fix broken alloc signal link (#6731) 2019-11-19 16:05:35 -06:00
Buck Doyle
57fd7489d5 Docs: add missing exec command to alloc listing (#6730) 2019-11-19 15:17:21 -06:00
Michael Schurter
62751321bf Merge pull request #6699 from hashicorp/f-semver-constraints
Add new "semver" constraint
2019-11-19 12:18:43 -08:00
Michael Schurter
88a9877a07 docs: document semver constraint operator 2019-11-19 10:26:25 -08:00
Buck Doyle
b228f4a51c Docs: correct that exec task flag is not optional (#6729)
The task is required, not optional, there’s no default as was described.
2019-11-19 11:20:07 -06:00
Drew Bailey
c87c6415eb DOCS: Spread stanza does not exist on task
Fixes documentation inaccuracy for spread stanza placement. Spreads can
only exist on the top level job struct or within a group.

comment about nil assumption
2019-11-19 08:26:36 -05:00
Drew Bailey
e46c41553d serverID to target remote leader or server
handle the case where we request a server-id which is this current server

update docs, error on node and server id params

more accurate names for tests

use shared no leader err, formatting

rm bad comment

remove redundant variable
2019-11-14 10:07:35 -05:00