Seth Hoenig 67554b8f91 exec2: implement dynamic workload users taskrunner hook (#20069) ...

* exec2: implement dynamic workload users taskrunner hook

This PR impelements a TR hook for allocating dynamic workload users from
a pool managed by the Nomad client. This adds a new task driver Capability,
DynamicWorkloadUsers - which a task driver must indicate in order to make
use of this feature.

The client config plumbing is coming in a followup PR - in the RFC we
realized having a client.users block would be nice to have, with some
additional unrelated options being moved from the deprecated client.options
config.

* learn to spell

2024-03-06 09:34:27 -06:00

..

getter

bubble up the error message from go-getter (#18444)

2023-09-13 09:36:39 -04:00

interfaces

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

restarts

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

state

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

template

template: sandbox template rendering

2024-02-08 10:40:24 -05:00

testdata

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

testing

vault: update task runner vault hook to support workload identity (#18534)

2023-10-16 19:37:57 -04:00

api_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

api_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

artifact_hook_test.go

vault: update task runner vault hook to support workload identity (#18534)

2023-10-16 19:37:57 -04:00

artifact_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

connect_native_hook_test.go

connect: rewrite envoy bootstrap on every restart (#19787)

2024-01-24 11:26:31 -08:00

connect_native_hook.go

connect: rewrite envoy bootstrap on every restart (#19787)

2024-01-24 11:26:31 -08:00

consul_hook.go

client: consul hook not called for templates (#19490)

2023-12-15 17:16:00 +01:00

device_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

device_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

dispatch_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

dispatch_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

driver_handle.go

update go1.21 (#18184)

2023-08-14 08:43:27 -05:00

dynamic_users_hook_test.go

exec2: implement dynamic workload users taskrunner hook (#20069)

2024-03-06 09:34:27 -06:00

dynamic_users_hook.go

exec2: implement dynamic workload users taskrunner hook (#20069)

2024-03-06 09:34:27 -06:00

envoy_bootstrap_hook_test.go

connect: rewrite envoy bootstrap on every restart (#19787)

2024-01-24 11:26:31 -08:00

envoy_bootstrap_hook.go

connect: rewrite envoy bootstrap on every restart (#19787)

2024-01-24 11:26:31 -08:00

envoy_version_hook_test.go

consul: add multi-cluster support to client constructors (#18624)

2023-10-17 13:46:49 -04:00

envoy_version_hook.go

config: remove old Vault/Consul config blocks from client (#18994)

2023-11-07 09:15:37 -05:00

errors_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

errors.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

identity_hook_test.go

identity: Implement change_mode (#18943)

2023-11-01 09:41:11 -05:00

identity_hook.go

identity: Implement change_mode (#18943)

2023-11-01 09:41:11 -05:00

lazy_handle.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

lifecycle.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

logmon_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

logmon_hook_unix_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

logmon_hook.go

client: split identity_hook across allocrunner and taskrunner (#18431)

2023-09-21 17:31:27 +02:00

plugin_supervisor_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

remotetask_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

script_check_hook_test.go

services: get Consul token from hook resources (#18600)

2023-10-04 08:35:18 -04:00

script_check_hook.go

script_check_hook: handle task-level Consul namespace (#19241)

2023-11-30 11:13:30 -05:00

service_hook_test.go

service_hook: ensure task-level consul.namespace is respected (#19224)

2023-11-29 16:46:27 -05:00

service_hook.go

service_hook: ensure task-level consul.namespace is respected (#19224)

2023-11-29 16:46:27 -05:00

sids_hook_test.go

revoke Consul tokens obtained via WI when alloc stops (#19034)

2023-11-09 10:08:09 -05:00

sids_hook.go

revoke Consul tokens obtained via WI when alloc stops (#19034)

2023-11-09 10:08:09 -05:00

stats_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

stats_hook.go

fix multiple overflow errors in exponential backoff (#18200)

2023-08-15 14:38:18 -04:00

task_dir_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

task_runner_getters.go

config: remove old Vault/Consul config blocks from client (#18994)

2023-11-07 09:15:37 -05:00

task_runner_hooks.go

exec2: implement dynamic workload users taskrunner hook (#20069)

2024-03-06 09:34:27 -06:00

task_runner_linux_test.go

vault: derive token using create_from_role (#18880)

2023-10-27 13:03:44 -04:00

task_runner_test.go

cni: add DNS set by CNI plugins to task configuration (#20007)

2024-02-20 10:17:27 -05:00

task_runner.go

exec2: implement dynamic workload users taskrunner hook (#20069)

2024-03-06 09:34:27 -06:00

tasklet_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

tasklet.go

Revert "deps: update go-metrics to v0.5.3 (#19190)" (#19374)

2023-12-08 08:46:55 -05:00

template_hook_test.go

template: sandbox template rendering

2024-02-08 10:40:24 -05:00

template_hook.go

template: sandbox template rendering

2024-02-08 10:40:24 -05:00

validate_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

validate_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

vault_hook_test.go

vault: support allowing tokens to expire without refresh (#19691)

2024-01-10 14:49:02 -05:00

vault_hook.go

vault: support allowing tokens to expire without refresh (#19691)

2024-01-10 14:49:02 -05:00

volume_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

volume_hook.go

Add granular control of SELinux labels for host mounts (#19839)

2024-02-05 10:05:33 +01:00

wrangler_hook.go

client: refactor cpuset partitioning (#18371)

2023-09-12 09:11:11 -05:00