Xiang Li
2e92779777
mvcc: attach keys to leases after recover all state
...
The previous logic is wrong. When we have hisotry like Put(foo, bar, lease1),
and Put(foo, bar, lease2), we will end up with attaching foo to two leases 1 and
2. Similar things can happen for deattach by clearing the lease of a key.
Now we try to fix this by starting to attach leases at the end of the recovery.
We use a map to keep the last lease attachment state.
2016-08-19 11:49:05 -07:00
Xiang Li
404415b1e3
lease: do lease delection in the kv txn
2016-08-19 11:49:05 -07:00
Xiang Li
07e421d245
lease: delete kvs in a txn
2016-08-19 11:49:05 -07:00
Xiang Li
a7d6e29275
etcdserver: always recover lessor first
2016-08-19 11:49:05 -07:00
Gyu-Ho Lee
1a8b295dab
vendor: update grpc/grpc-go for clientconn patch
2016-08-19 11:46:51 -07:00
Anthony Romano
ffc45cc066
rafthttp: fix race between streamReader.stop() and connection closer
2016-08-19 11:45:39 -07:00
Gyu-Ho Lee
0db1ba8093
version: bump to v3.0.5+git
2016-08-19 11:11:10 -07:00
Gyu-Ho Lee
43f7c94ac8
version: bump to v3.0.5
2016-08-19 10:20:37 -07:00
Hongchao Deng
93d13fb5b4
integration: NewClusterV3 should launch cluster before creating clients
2016-08-18 14:54:45 -07:00
Gyu-Ho Lee
6a1e3e73dd
vendor: boltdb/bolt v1.3.0 for Go 1.7
...
In case somebody wants to build this branch with Go 1.7
2016-08-18 14:41:34 -07:00
Xiang Li
ec576ee5ac
mvcc: fix count
2016-08-16 12:13:33 -07:00
Anthony Romano
606d79afc4
clientv3: use failfast and retry wrappers for at-most-once rpcs
2016-08-16 12:12:44 -07:00
Anthony Romano
f4d15a430c
integration: treat client TLS connecting to insecure server as timeout
2016-08-16 12:09:42 -07:00
Anthony Romano
4a841459f1
clientv3: respect up/down notifications from grpc
...
Fixes #5842
2016-08-16 12:09:38 -07:00
Gyu-Ho Lee
ee8c577fc0
vendor: update grpc
2016-08-16 12:09:16 -07:00
Anthony Romano
8ae0f94cd7
clientv3: only block on New() when DialTimeout > 0
...
Fixes #6162
2016-08-12 12:03:33 -07:00
Anthony Romano
69a97863a9
clientv3: handle watchGrpcStream shutdown if prior to goroutine start
...
Fixes #6141
2016-08-09 20:59:09 -07:00
Anthony Romano
12c7e4a9f8
clientv3: close watcher stream once all watchers detach
...
Fixes #6134
2016-08-09 10:44:21 -07:00
Anthony Romano
23cced240b
transport: add ServerName to TLSConfig and add ValidateSecureEndpoints
...
ServerName prevents accepting forged SRV records with cross-domain
credentials. ValidateSecureEndpoints prevents downgrade attacks from SRV
records.
2016-08-04 11:00:28 -07:00
Anthony Romano
e73c928d85
etcdctl: set ServerName for TLS when using --discovery-srv
2016-08-04 11:00:25 -07:00
Anthony Romano
779ad90f9a
Documentation: update clustering guide about PKI SRV record forging
2016-08-04 11:00:22 -07:00
Anthony Romano
dca1740be5
etcdmain: check TLS on gateway SRV records
2016-08-04 11:00:15 -07:00
Anthony Romano
487b34d857
embed: use ServerName on TLS DNS discovery w/o CA file
2016-08-04 10:56:11 -07:00
Gyu-Ho Lee
a31283cf51
v2http: use guest access in non-TLS mode
...
Fix https://github.com/coreos/etcd/issues/6075 .
2016-08-04 10:52:42 -07:00
Gyu-Ho Lee
b722bedf8a
version: bump to v3.0.4+git
2016-07-27 15:30:31 -07:00
Gyu-Ho Lee
d53923c636
version: bump to v3.0.4
2016-07-27 13:40:42 -07:00
Gyu-Ho Lee
9356665d60
*: regenerate proto files for grpc-gateway
2016-07-27 13:40:07 -07:00
Gyu-Ho Lee
0932d17395
scripts/genproto: use latest grpc-gateway c8ec92d0
2016-07-27 13:39:00 -07:00
Gyu-Ho Lee
2a3ea3f996
Dockerfile-release: add '/var/lib/etcd/'
...
We have '/var/etcd/' in Dockerfile for historical reason.
Most cases, user store data in '/var/lib/etcd/'.
2016-07-27 13:38:58 -07:00
Anthony Romano
e5a5e5f7c6
etcdserver, api, membership: don't race on setting version
...
Fixes #6029
2016-07-27 09:39:39 -07:00
Gyu-Ho Lee
00bdd907d5
Documentation: fix links in upgrades
2016-07-26 13:16:15 -07:00
Gyu-Ho Lee
8eab756d3f
*: regenerate proto
2016-07-25 21:36:07 -07:00
Xiang Li
3d9b1d1635
scripts:genproto.sh: update grpc-gateway
2016-07-25 21:31:33 -07:00
Xiang Li
4218193dd7
etcdserverpb: add missing deleterange annotation
2016-07-25 21:31:30 -07:00
Dongsu Park
6499d01c9b
etcdmain: correctly check return values from SdNotify()
...
SdNotify() now returns 2 values, sent and err. So startEtcdOrProxyV2()
needs to check the 2 return values correctly. As the 2 values are
independent of each other, error checking needs to be slightly updated
too.
SdNotifyNoSocket, which was previously provided by go-systemd, does not
exist any more. In that case (false, nil) will be returned instead.
2016-07-21 11:00:37 -07:00
Dongsu Park
83b39b4f6b
vendor: update go-systemd
...
Godeps.json and vendor need to be updated according to the newest
go-systemd, as SdNotify() in go-systemd has changed its API.
2016-07-21 11:00:34 -07:00
Anthony Romano
21092ca715
integration: change timeouts for TestWatchWithProgressNotify
...
a) 2 * progress interval was passing with dropped notifies
b) waitResponse was waiting so long that it expected a dropped notify
2016-07-21 10:59:54 -07:00
Anthony Romano
a4e79d7ebf
v3rpc: don't elide next progress notification on progress notification
...
Fixes #5878
2016-07-21 10:59:51 -07:00
Anthony Romano
846883a979
rpctypes, clientv3: retry RPC on EtcdStopped
...
Fixes #5983
2016-07-21 10:59:27 -07:00
Anthony Romano
c7a3edb90f
fileutil: rework purge tests so they don't poll
...
Fixes #5966
2016-07-21 10:57:06 -07:00
Gyu-Ho Lee
f308a27e91
e2e: test auth enabled with CN name cert
2016-07-21 10:55:56 -07:00
Gyu-Ho Lee
1d37154793
v2http: test with 'ClientCertAuthEnabled'
2016-07-21 10:55:54 -07:00
Gyu-Ho Lee
092d069d3e
v2http: set 'ClientCertAuthEnabled' in client.go
2016-07-21 10:55:51 -07:00
Gyu-Ho Lee
ab5c4e23bd
v2http: add 'ClientCertAuthEnabled' in handlers
2016-07-21 10:55:44 -07:00
Gyu-Ho Lee
59bf6693c7
embed: set 'ClientCertAuthEnabled'
2016-07-21 10:55:30 -07:00
Gyu-Ho Lee
affcbfbf06
etcdserver: add 'ClientCertAuthEnabled' option
2016-07-21 10:52:14 -07:00
Gyu-Ho Lee
e81df2648c
v2http: move 'testdata' from 'etcdhttp'
2016-07-21 10:52:09 -07:00
rob boll
27a450235a
v2http: client cert cn authentication
...
introduce client certificate authentication using certificate cn.
2016-07-21 10:52:06 -07:00
rob boll
42454f9ed8
v2http: refactor http basic auth
...
refactor http basic auth code to combine basic auth extraction and validation
2016-07-21 10:52:04 -07:00
Anthony Romano
7ea8860670
e2e: use a single member cluster in TestCtlV3Migrate
...
Occasionally migrate would fail because a minority node would be missing
v2 keys. Instead, just use a single member cluster.
Fixes #5992
2016-07-21 10:50:49 -07:00
