Mirroristas/etcd
2
0
Fork 0
mirror of https://github.com/etcd-io/etcd.git synced 2024-09-27 06:25:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,984 Commits 15 Branches 491 Tags 148 MiB
Commit Graph

1307 Commits

Author SHA1 Message Date
Chao Chen
f31d0eafb9 tests/e2e: add graceful shutdown test 
Signed-off-by: Chao Chen <chaochn@amazon.com>
 2023-05-09 17:08:53 -07:00
Benjamin Wang
b404d25d84
Merge pull request #15741 from AngstyDuck/set-default-value-for-AutoCompactionMode 
server: default value for config file field auto-compaction-mode is n…
 2023-05-10 05:44:16 +08:00
AngstyDuck
a7344da7d3 server: default value for config file field auto-compaction-mode is now 'periodic'; added additional checks if auto-compaction-mode is undefined 
Signed-off-by: AngstyDuck <solsticedante@gmail.com>
 2023-05-09 23:10:44 +08:00
Prasad Chandrasekaran
c863f1f8c0 dependency: bump dependabot dependencies 
Signed-off-by: Prasad Chandrasekaran <prasadc@vmware.com>
 2023-05-09 18:38:35 +05:30
Benjamin Wang
b7ad0382ad
Merge pull request #15844 from mitake/style 
server/etcdserver: swap order of return types
 2023-05-09 06:34:34 +08:00
Hitoshi Mitake
a0cffb6a1f server/etcdserver: swap order of return types 
Signed-off-by: Hitoshi Mitake <h.mitake@gmail.com>
 2023-05-08 22:53:04 +09:00
qsyqian
0cd1b7beaa log time when open backend db took too long 
Signed-off-by: qsyqian <qsyqian@gmail.com>
 2023-05-08 15:23:29 +08:00
Hitoshi Mitake
49b59cc8e5
Merge pull request #15656 from mitake/lease-timetolive-auth 
protect LeaseTimeToLive with RBAC
 2023-05-02 23:02:29 +09:00
Benjamin Wang
0deaec0e4f
Merge pull request #15762 from aimuz/fix-logger 
refactor(util): remove duplicate lg check
 2023-04-30 05:52:11 +08:00
aimuz
b052092297
refactor(util): remove duplicate lg check 
lg always has a value

Signed-off-by: aimuz <mr.imuz@gmail.com>
 2023-04-28 10:43:30 +08:00
Benjamin Wang
6d11f8ceb5
Merge pull request #15785 from Mskxn/fix_session 
close the session to avoid leak goroutine
 2023-04-27 04:24:17 +08:00
Msk233
26fdf46001 close the session to avoid leak goroutine 
Signed-off-by: Mskxn <118117161+Mskxn@users.noreply.github.com>
 2023-04-26 20:45:13 +08:00
Hitoshi Mitake
975854f07f etcdserver: protect lease timetilive with auth 
Signed-off-by: Hitoshi Mitake <h.mitake@gmail.com>
Co-authored-by: Benjamin Wang <wachao@vmware.com>
 2023-04-26 20:35:20 +09:00
Benjamin Wang
8c5e9ad455
Merge pull request #15759 from fuweid/deflake-TestAuthMemberRemove 
server/etcdserver: togRPCError for maintenance API
 2023-04-25 09:26:28 +08:00
Benjamin Wang
211b4320c3
Merge pull request #15752 from sharathsivakumar/main 
fixes for "improve description of --initial-cluster-state flag" #15743
 2023-04-23 07:17:37 +08:00
sharathsivakumar
32c83becf5
fix review: Updated description of --initial-cluster-state flag 
Signed-off-by: sharathsivakumar <mailssr9@gmail.com>
 2023-04-22 23:16:33 +02:00
Wei Fu
1ba577e499 server/etcdserver: togRPCError for maintenance API 
It's to deflake TestAuthMemberRemove.

When the client has multiple endpoints, the client might send a request
with valid token to the follower member which hasn't received token
replicated log yet. The member will reject the request.

For instance, the maintenance.Status API will return "auth: invalid auth
token". But the client doesn't identify the error. The client won't retry to
refresh auth token. The maintenance.Status should togRPCError before return
so that the client can reflesh token. It's align with existing API.

Since the maintenance client always creates one connection to target
member, the member will have the token after refresh auth.

Maybe we can introduce a sync to wait for member is ready with token,
instead of refreshing.

Fixes: #15758

Signed-off-by: Wei Fu <fuweid89@gmail.com>
 2023-04-22 18:35:53 +08:00
Benjamin Wang
63c9fe1d00
Merge pull request #15751 from owayss/auth_store_unit_test_coverage 
tests: increases unit test coverage for etcd/server/auth isRangeOpPermitted
 2023-04-21 07:29:35 +08:00
Benjamin Wang
4a8817bfb0
Merge pull request #15737 from jmhbnz/update-dependencies 
Bump dependencies identified by dependabot
 2023-04-21 06:35:08 +08:00
James Blair
04f3e9cb9a
dependency: bump golang.org/x/crypto from 0.7.0 to 0.8.0 
Signed-off-by: James Blair <mail@jamesblair.net>
 2023-04-21 05:34:21 +12:00
James Blair
042e2e9a57
dependency: bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0 
Signed-off-by: James Blair <mail@jamesblair.net>
 2023-04-21 05:14:40 +12:00
Owayss Kabtoul
1c18c86e18 tests: increases unit test coverage for etcd/server/auth isRangeOpPermitted 
Signed-off-by: Owayss Kabtoul <owayssk@gmail.com>
 2023-04-20 13:39:08 +02:00
cui fliter
57908723f4 fix some comments 
Signed-off-by: cui fliter <imcusg@gmail.com>
 2023-04-20 14:26:17 +08:00
Marcondes Viana
9d14ae43c2 fix review: remove if on error check 
Signed-off-by: Marcondes Viana <marju10@gmail.com>
 2023-04-18 10:43:13 -03:00
Marcondes Viana
ecc7441ba1 fix review: use assert lib 
Signed-off-by: Marcondes Viana <marju10@gmail.com>
 2023-04-18 10:02:03 -03:00
Marcondes Viana
3654552fe8 fix review: move setup and vars 
Signed-off-by: Marcondes Viana <marju10@gmail.com>
 2023-04-17 08:19:10 -03:00
Marcondes Viana
7a7e09d3a5 fix review: group calls 
Signed-off-by: Marcondes Viana <marju10@gmail.com>
 2023-04-16 19:59:47 -03:00
Marcondes Viana
41b1d36bd9 fix review 
Signed-off-by: Marcondes Viana <marju10@gmail.com>
 2023-04-16 17:44:46 -03:00
Marcondes Viana
a1a2f43f2f fix review 
Signed-off-by: Marcondes Viana <marju10@gmail.com>
 2023-04-16 17:41:59 -03:00
Marcondes Viana
8fb839eac1 Update server/etcdserver/txn/txn_test.go 
Signed-off-by: Marcondes Viana <marju10@gmail.com>
Co-authored-by: Marek Siarkowicz <marek.siarkowicz@protonmail.com>
 2023-04-16 17:09:02 -03:00
Marcondes Viana
4c63611768 tests: cover txn.CheckTxnAuth logic with unit tests 
Signed-off-by: Marcondes Viana <marju10@gmail.com>
 2023-04-16 13:24:12 -03:00
Marek Siarkowicz
6519a15db4
Merge pull request #15639 from ArkaSaha30/add-unit-test-malformed-jwt 
server/auth: fix panic a malformed jwt generation and add test-cases
 2023-04-11 12:19:28 +02:00
Benjamin Wang
dae1d70189 test: workaround the breaking change in jonboulle/clockwork 
See
- https://github.com/jonboulle/clockwork/pull/55
- https://github.com/jonboulle/clockwork/blob/v0.3.0/clockwork.go#L42

Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-11 12:01:09 +08:00
Benjamin Wang
dddd4780c2 dependency: bump github.com/spf13/cobra from 1.6.1 to 1.7.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-11 08:51:26 +08:00
Benjamin Wang
eb9b15bf49 dependency: bump golang.org/x/net from 0.8.0 to 0.9.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-11 08:44:26 +08:00
Benjamin Wang
8a27dd4db4 dependency: bump github.com/jonboulle/clockwork from 0.3.0 to 0.4.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-11 08:36:44 +08:00
ArkaSaha30
a1fa3bfe51 Add test cases for malformed jwt fix 
Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
 2023-04-10 09:38:49 +05:30
Benjamin Wang
8b1cd036ff security: remove password after authenticating the user 
fix https://nvd.nist.gov/vuln/detail/CVE-2021-28235

Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-06 17:11:54 +08:00
Peter Wortmann
74feb229c7 etcdserver: Guarantee order of requested progress notifications 
Progress notifications requested using ProgressRequest were sent
directly using the ctrlStream, which means that they could race
against watch responses in the watchStream.

This would especially happen when the stream was not synced - e.g. if
you requested a progress notification on a freshly created unsynced
watcher, the notification would typically arrive indicating a revision
for which not all watch responses had been sent.

This changes the behaviour so that v3rpc always goes through the watch
stream, using a new RequestProgressAll function that closely matches
the behaviour of the v3rpc code - i.e.

1. Generate a message with WatchId -1, indicating the revision for
   *all* watchers in the stream

2. Guarantee that a response is (eventually) sent

The latter might require us to defer the response until all watchers
are synced, which is likely as it should be. Note that we do *not*
guarantee that the number of progress notifications matches the number
of requests, only that eventually at least one gets sent.

Signed-off-by: Peter Wortmann <peter.wortmann@skao.int>
 2023-04-05 11:54:10 +01:00
Lanre Adelowo
386aedef51
[WIP]server/auth:fix panic on identical JWT token generation and auth 
Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
 2023-04-04 18:01:55 +05:30
Benjamin Wang
32acc662c9
Merge pull request #15638 from ahrtr/dependency_20230404 
Bump some dependencies
 2023-04-04 17:11:26 +08:00
Marek Siarkowicz
8b6bf90c0d
Merge pull request #15580 from chaochn47/fix_flaking_auth_member_remove_test 
fix flaking auth member remove test
 2023-04-04 09:34:16 +02:00
Benjamin Wang
072c5cb5da dependency: bump google.golang.org/protobuf from 1.28.1 to 1.30.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-04 15:28:09 +08:00
Benjamin Wang
56284d5dfe dependency: bump github.com/golang/protobuf from 1.5.2 to 1.5.3 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-04 15:21:22 +08:00
Benjamin Wang
0c66fc9f29 dependency: bump go.uber.org/multierr from 1.9.0 to 1.11.0 
Signed-off-by: Benjamin Wang <wachao@vmware.com>
 2023-04-04 15:15:32 +08:00
Chao Chen
caed563e08 fix flaking auth member remove test 
Signed-off-by: Chao Chen <chaochn@amazon.com>
 2023-04-03 17:41:08 -07:00
Hitoshi Mitake
4da39e4b1e
Merge pull request #15294 from mitake/range-check 
server/auth: disallow creating empty permission ranges
 2023-04-03 09:03:50 +09:00
Marek Siarkowicz
be7be34800 client: Hide v2 client package 
Signed-off-by: Marek Siarkowicz <siarkowicz@google.com>
 2023-03-31 10:26:11 +02:00
Marek Siarkowicz
549087cd69 server: Fix defer function closure escape 
Signed-off-by: Marek Siarkowicz <siarkowicz@google.com>
 2023-03-30 13:37:31 +02:00
Marek Siarkowicz
0bd0b6b0b5
Merge pull request #15446 from serathius/separate-grpc-server 
Allow user to separate http and grpc server
 2023-03-30 11:52:25 +02:00