Tim Gross 2eaf3d7270 allow ACL policies to be associated with workload identity (#14140) ...

The original design for workload identities and ACLs allows for operators to
extend the automatic capabilities of a workload by using a specially-named
policy. This has shown to be potentially unsafe because of naming collisions, so
instead we'll allow operators to explicitly attach a policy to a workload
identity.

This changeset adds workload identity fields to ACL policy objects and threads
that all the way down to the command line. It also a new secondary index to the
ACL policy table on namespace and job so that claim resolution can efficiently
query for related policies.

2022-08-22 16:41:21 -04:00

..

contexts

Implement HTTP search API for Variables (#13257)

2022-07-11 13:34:05 -04:00

internal/testutil

api: use errors.New not fmt.Errorf when error doesn't have format. (#14027)

2022-08-05 17:05:47 +02:00

acl_test.go

Allow Operator Generated bootstrap token (#12520)

2022-06-03 07:37:24 -04:00

acl.go

allow ACL policies to be associated with workload identity (#14140)

2022-08-22 16:41:21 -04:00

agent_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

agent.go

Make number of scheduler workers reloadable (#11593)

2022-01-06 11:56:13 -05:00

allocations_exec.go

cleanup: prevent leaks from time.After

2022-02-02 14:32:26 -06:00

allocations_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

allocations.go

cli: display nomad service check status output in CLI commands

2022-08-19 09:18:29 -05:00

api_test.go

api: use errors.New not fmt.Errorf when error doesn't have format. (#14027)

2022-08-05 17:05:47 +02:00

api.go

api: trim space of error response output

2022-08-16 15:00:38 -05:00

compose_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

constraint_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

constraint.go

Tag Job spec with HCLv2 tags

2020-10-21 14:05:46 -04:00

consul_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

consul.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

csi_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

csi.go

cli: do not import structs, use API package only. (#13938)

2022-08-02 16:33:08 +02:00

deployments.go

cli: do not import structs, use API package only. (#13938)

2022-08-02 16:33:08 +02:00

evaluations_test.go

core: allow deleting of evaluations (#13492)

2022-07-06 16:30:11 +02:00

evaluations.go

cli: do not import structs, use API package only. (#13938)

2022-08-02 16:33:08 +02:00

event_stream_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

event_stream.go

events: add API helpers for service events stream topics.

2022-04-05 08:26:02 +01:00

fs_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

fs.go

api: document warnings for setting api.ClientConnTimeout (#14122)

2022-08-15 16:06:02 -04:00

go.mod

build(deps): bump github.com/shoenig/test from 0.3.0 to 0.3.1 in /api (#14194)

2022-08-19 11:32:59 +02:00

go.sum

build(deps): bump github.com/shoenig/test from 0.3.0 to 0.3.1 in /api (#14194)

2022-08-19 11:32:59 +02:00

ioutil_test.go

api: use errors.New not fmt.Errorf when error doesn't have format. (#14027)

2022-08-05 17:05:47 +02:00

ioutil.go

api: use errors.New not fmt.Errorf when error doesn't have format. (#14027)

2022-08-05 17:05:47 +02:00

jobs_test.go

template: use pointer values for gid and uid (#14203)

2022-08-22 16:25:49 -04:00

jobs.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

keyring_test.go

core job for secure variables re-key (#13440)

2022-07-11 13:34:06 -04:00

keyring.go

keyring: use nanos for CreateTime in key metadata (#13849)

2022-07-20 14:46:57 -04:00

namespace_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

namespace.go

core: allow deleting of evaluations (#13492)

2022-07-06 16:30:11 +02:00

nodes_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

nodes.go

Add os to NodeListStub struct. (#12497)

2022-04-15 17:22:45 -07:00

operator_autopilot.go

implement MinQuorum

2020-02-16 16:04:59 -06:00

operator_ent_test.go

api: fix ENT-only test imports for moved testutil package (#12320)

2022-03-18 10:12:28 -04:00

operator_metrics_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

operator_metrics.go

Metrics gotemplate support, debug bundle features (#9067)

2020-10-14 15:16:10 -04:00

operator_test.go

core: allow pausing and un-pausing of leader broker routine (#13045)

2022-07-06 16:13:48 +02:00

operator.go

core: allow pausing and un-pausing of leader broker routine (#13045)

2022-07-06 16:13:48 +02:00

quota_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

quota.go

secure vars: enforce ENT quotas (OSS work) (#13951)

2022-08-02 09:32:09 -04:00

raw.go

core: allow deleting of evaluations (#13492)

2022-07-06 16:30:11 +02:00

recommendations.go

added new policy capabilities for recommendations API

2020-10-28 14:32:16 +00:00

regions_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

regions.go

cli: ensure -stale flag is respected by nomad operator debug (#11678)

2021-12-15 10:44:03 -05:00

resources_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

resources.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

scaling_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

scaling.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

search_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

search.go

api: implement fuzzy search API

2021-04-16 16:36:07 -06:00

secure_variables_test.go

SV: GO API: Secure Variables Go API (#13502)

2022-07-11 13:34:06 -04:00

secure_variables.go

SV: GO API: Secure Variables Go API (#13502)

2022-07-11 13:34:06 -04:00

sentinel_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

sentinel.go

api: use errors.New not fmt.Errorf when error doesn't have format. (#14027)

2022-08-05 17:05:47 +02:00

services_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

services.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

status_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

status.go

display server leaders per region

2016-03-17 16:04:09 -07:00

system_test.go

ci: use serial testing for api in CI

2022-03-17 08:35:01 -05:00

system.go

Add missing ReconcileSummaries API method

2017-08-24 11:55:10 +02:00

tasks_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

tasks.go

template: use pointer values for gid and uid (#14203)

2022-08-22 16:25:49 -04:00

util_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

utils_test.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00

utils.go

cleanup: replace TypeToPtr helper methods with pointer.Of (#14151)

2022-08-17 18:26:34 +02:00