Anthony Romano
43740a8d3c
Merge pull request #7318 from heyitsanthony/limit-doc
...
etcdserverpb, clientv3: clarify WithLimit documentation
2017-02-13 15:35:37 -08:00
Anthony Romano
fb7dd0f688
etcdserverpb, clientv3: clarify WithLimit documentation
...
Fixes #7316
2017-02-13 12:37:44 -08:00
fanmin shi
2925f02aac
Merge pull request #7305 from fanminshi/return_header_for_timetolive
...
lease: LeaseTimeToLive returns TTL=-1 resp on lease not found
2017-02-13 11:24:36 -08:00
fanmin shi
2ca1823a96
v3rpc: LeaseTimeToLive returns TTL=-1 resp on lease not found
2017-02-10 16:33:31 -08:00
Manjunath A Kumatagi
0914b8b707
test: Fix gosimple errors
...
Getting gosimple suggestion while running test script, so this PR is for fixing gosimple S1019 check.
raft/node_test.go:456:40: should use make([]raftpb.Entry, 1) instead (S1019)
raft/node_test.go:457:49: should use make([]raftpb.Entry, 1) instead (S1019)
raft/node_test.go:458:43: should use make([]raftpb.Message, 1) instead (S1019)
Refer https://github.com/dominikh/go-tools/blob/master/cmd/gosimple/README.md#checks for more information.
2017-02-09 08:01:28 -05:00
Hitoshi Mitake
0191509637
auth, etcdserver: authenticate clients based on certificate CommonName
...
This commit lets v3 auth mechanism authenticate clients based on
CommonName of certificate like v2 auth.
2017-01-31 17:22:12 +09:00
sharat
8a87769a09
etcdserver: use prev-lease for 'ignore_lease' writes
2017-01-25 03:05:55 +05:30
sharat
5ac4e4255a
v3rpc: error for non empty lease with 'ignore_lease'
2017-01-25 03:04:07 +05:30
sharat
508c9dfe5c
*: regenrate proto files with 'ignore_lease'
2017-01-25 03:01:47 +05:30
sharat
a9bf593bdc
*: 'ignore_lease' to detach value with PutRequest
2017-01-25 02:59:30 +05:30
Anthony Romano
7e31ddd32a
etcdserverpb: rework documentation for range request
2017-01-20 16:12:09 -08:00
Anthony Romano
1a962df596
Merge pull request #7176 from heyitsanthony/bump-lread-timeout
...
etcdserver: use ReqTimeout for linearized read
2017-01-17 16:08:50 -08:00
Anthony Romano
5c774ff571
etcdserver: use ReqTimeout for linearized read
...
Fixes #7136
2017-01-17 14:55:39 -08:00
Xiang Li
699b1e5b3a
Merge pull request #7160 from xiang90/snapshotcount
...
etcdserver: increase snapshot to 100,000
2017-01-14 16:53:44 -08:00
Xiang Li
26d99269c0
Merge pull request #6898 from mitake/auth-maintain
...
RFC, WIP: etcdserver: let maintenance services require root role
2017-01-14 11:22:14 -08:00
Hitoshi Mitake
9886e9448e
auth, etcdserver: let maintenance services require root role
...
This commit lets maintenance services require root privilege. It also
moves AuthInfoFromCtx() from etcdserver to auth pkg for cleaning purpose.
2017-01-14 19:36:24 +09:00
Xiang Li
c5a9d54835
etcdserver: increase snapshot to 100,000
...
Keep more wal entries in memory for fast follower recovery.
10,000 was a too small number that triggers quite a few snapshots.
ZK proves that 100,000 is a reasonable number for even old less prowerful
machines.
Eventually we should provide both count and max memory (for large entries).
2017-01-13 18:05:25 -08:00
Gyu-Ho Lee
8752ee52a5
etcdserver: use prev-value for ignore_value writes
2017-01-13 15:13:18 -08:00
Gyu-Ho Lee
e655420d33
v3rpc: error for non-empty value with ignore_value
2017-01-13 15:13:18 -08:00
Gyu-Ho Lee
7f8b5774a4
*: regenerate proto files with 'ignore_value'
2017-01-13 15:13:18 -08:00
Gyu-Ho Lee
8eea93942d
*: 'ignore_value' to detach lease with PutRequest
2017-01-13 15:13:18 -08:00
Gyu-Ho Lee
ea94aea136
etcdserver/api: add 3.2 in capability
2017-01-13 14:00:03 -08:00
Hitoshi Mitake
d431b64d97
etcdserver, clientv3: handle a case of expired auth token
...
This commit adds a mechanism of handling a case of expired auth token
to clientv3. If a server returns an error code
grpc.codes.Unauthenticated, newRetryWrapper() tries to get a new token
and use it as an option of PerRPCCredential.
Fixes https://github.com/coreos/etcd/issues/7012
2017-01-12 11:49:02 +09:00
Anthony Romano
a42b399f4e
Merge pull request #7094 from heyitsanthony/fix-duplicate-grant
...
auth: use quorum get for GetUser/GetRole for mutable operations
2017-01-05 11:28:33 -08:00
Gyu-Ho Lee
10d3b81c39
Merge pull request #7093 from gyuho/member
...
etcdserver: expose ErrMemberNotEnoughStarted
2017-01-04 12:09:29 -08:00
Anthony Romano
f9f691ef1f
auth: use quorum get for GetUser/GetRole for mutable operations
...
GetUser would not propagate to the minority node, causing TestCtlV2GetRoleUser to
run CreateUser instead of UpdateUser. Instead, use quorum get to fetch the
current state of auth.
Fixes #7069
2017-01-04 11:55:07 -08:00
vimalk78
5fac6b8d15
etcdserver: resume compactor only if leader
2017-01-04 05:01:14 +05:30
Gyu-Ho Lee
2b5f9e1c6b
etcdserver: expose ErrNotEnoughStartedMembers
...
Fix https://github.com/coreos/etcd/issues/7072 .
2017-01-03 15:23:06 -08:00
fanmin shi
2a1bae0c2a
etcdserver: consistent naming in raftReadyHandler
2016-12-29 11:27:16 -08:00
Anthony Romano
e2463569e7
v2http: submit QGET in health endpoint if no progress
...
Removing the periodic SYNC calls broke the health endpoint since the
raft index stops updating. Instead, don't bother monitoring the
raft index; issue a QGET directly to get a consensus response.
Fixes #6985
2016-12-28 12:20:56 -08:00
fanmin shi
89b18ff1af
Merge pull request #7015 from fanminshi/fix_lease_expired_too_soon
...
lease: force leader to apply its pending committed index for lease op…
2016-12-27 11:26:15 -08:00
fanmin shi
2faf72f47c
etcdserver: rework update committed index logic
2016-12-27 10:11:40 -08:00
Anthony Romano
17873f7be8
Merge pull request #7008 from heyitsanthony/fix-dns
...
retry on resolution failure for advertised peer DNS check
2016-12-27 10:03:01 -08:00
fanmin shi
fef4a79528
lease: force leader to apply its pending committed index for lease operations
...
suppose a lease granting request from a follower goes through and followed by a lease look up or renewal, the leader might not apply the lease grant request locally. So the leader might not find the lease from the lease look up or renewal request which will result lease not found error. To fix this issue, we force the leader to apply its pending commited index before looking up lease.
FIX #6978
2016-12-22 14:24:38 -08:00
Anthony Romano
87b1d9571f
v3api, rpctypes: add ErrTimeoutDueToConnectionLost
...
Lack of GRPC code was causing this to look like a halting error to the client.
2016-12-16 10:25:35 -08:00
Xiang Li
35fd5dc9fc
Merge pull request #6903 from mitake/auth-member
...
protect membership change RPCs with auth
2016-12-15 08:04:31 -08:00
Hitoshi Mitake
86d7390804
auth, etcdserver: protect membership change operations with auth
...
This commit protects membership change operations with auth. Only
users that have root role can issue the operations.
Implements https://github.com/coreos/etcd/issues/6899
2016-12-15 22:54:20 +09:00
Anthony Romano
26a3e9a740
membership: retry for 30s on advertise url check
2016-12-14 15:56:22 -08:00
Anthony Romano
29c30b2387
etcdserver: retry for 30s on advertise url check
2016-12-14 15:56:22 -08:00
Gyu-Ho Lee
eb8646a381
v3rpc: remove unused 'splitMethodName' function
2016-12-12 10:07:14 -08:00
Anthony Romano
2c06def8ca
etcdserver, embed, v2http: move pprof setup to embed
...
Seems like a better place for prof setup since it's not specific to v2.
2016-12-09 12:37:35 -08:00
Xiang Li
2f96a68a20
etcdserver: do not send v2 sync if ttl keys do not exist
2016-12-07 14:48:15 -08:00
Anthony Romano
da3b71b531
Merge pull request #6929 from heyitsanthony/ctx-lease-renew
...
etcdserver: use context for Renew
2016-12-07 00:05:14 -08:00
Anthony Romano
be1f36d97c
v3rpc, etcdserver, leasehttp: ctxize Renew with request timeout
...
Would retry a few times before returning a not primary error that
the client should never see. Instead, use proper timeouts and
then return a request timeout error on failure.
Fixes #6922
2016-12-06 14:09:57 -08:00
Gyu-Ho Lee
3fd1d951f8
etcdserver: time out when readStateC is blocking
...
Otherwise, it will block forever when the server is overloaded.
Fix https://github.com/coreos/etcd/issues/6891 .
2016-12-05 15:34:46 -08:00
Anthony Romano
7079bf9a75
Merge pull request #6574 from vimalk78/auth-simpletoken-not-removed#6554
...
auth/simple_token.go : token not removed when etcdctl session closes …
2016-11-30 11:33:23 -08:00
Vimal Kumar
dfe853ebff
auth: add a timeout mechanism to simple token
2016-11-28 17:21:13 +05:30
Anthony Romano
9a20743190
v3rpc: don't close watcher if client closes send
...
grpc-gateway will CloseSend but still want to receive updates.
2016-11-17 15:33:37 -08:00
Gyu-Ho Lee
5e810e30cc
v3rpc: replace grpc metrics w/ go-grpc-prometheus
...
And disable histogram
2016-11-14 15:20:09 -08:00
Gyu-Ho Lee
b8b72f80f9
*: revendor, update proto files
2016-11-10 12:02:00 -08:00