Anthony Romano
b3a0b0502c
etcdserver: respect auth on serialized Range
2016-06-10 11:43:05 -07:00
Anthony Romano
bdc7035c10
Merge pull request #5617 from liggitt/preallocation
...
fileutil: avoid double preallocation
2016-06-09 22:27:17 -07:00
Jordan Liggitt
4f7622fb9a
fileutil: avoid double preallocation
2016-06-10 00:27:59 -04:00
Gyu-Ho Lee
d4ac09de0f
Merge pull request #5612 from gyuho/index_bench
...
mvcc: add keyIndex, treeIndex Restore benchmark
2016-06-09 16:09:56 -07:00
Xiang Li
6e32e8501a
Merge pull request #5613 from xiang90/rootrole
...
*: add admin permission checking
2016-06-09 16:00:37 -07:00
Xiang Li
7da1940dce
Merge pull request #5607 from xiang90/raft_user
...
raft: add docker/swarmkit as notable raft users
2016-06-09 15:39:09 -07:00
Xiang Li
f1c6fa48f5
*: add admin permission checking
2016-06-09 15:25:09 -07:00
Gyu-Ho Lee
6bbd8b7efb
mvcc: add keyIndex benchmark test
...
Useful later when trying to optimize our restore operations.
2016-06-09 14:13:18 -07:00
Anthony Romano
a7c5058953
Merge pull request #5608 from heyitsanthony/clientv3-auth-opts
...
clientv3: use separate dialopts for auth dial
2016-06-09 12:56:59 -07:00
Anthony Romano
349eaf117a
clientv3: use separate dialopts for auth dial
...
Needs to use a different balancer from the main client connection
because of the way grpc uses the Notify channel.
2016-06-09 10:38:57 -07:00
Xiang Li
ab65d2b848
raft: add docker/swarmkit as notable raft users
2016-06-09 10:10:44 -07:00
Anthony Romano
78c957df41
Merge pull request #5603 from heyitsanthony/clientv3-close-keepalive
...
clientv3: close keepalive channel if TTL locally exceeded
2016-06-09 09:44:32 -07:00
Anthony Romano
0554ef9c39
clientv3/integration: tests for closing lease channel
2016-06-09 09:12:59 -07:00
Anthony Romano
e534532523
clientv3: close keep alive channel if no response within TTL
2016-06-09 09:12:59 -07:00
Xiang Li
fb0df211f0
Merge pull request #5586 from xiang90/root
...
auth: add root user and root role
2016-06-09 00:23:45 -07:00
Xiang Li
da2f2a5189
auth: add root user and root role
2016-06-08 19:55:08 -07:00
Gyu-Ho Lee
a548cab828
Merge pull request #5602 from gyuho/get_leader
...
clientv3/integration: WaitLeader to follower
2016-06-08 17:03:25 -07:00
Gyu-Ho Lee
753073198f
clientv3/integration: WaitLeader to follower
...
Fix https://github.com/coreos/etcd/issues/5601 .
2016-06-08 16:45:32 -07:00
Xiang Li
77dee97c2f
Merge pull request #5578 from mitake/auth-v3-range
...
auth, etcdserver: permission of range requests
2016-06-08 16:33:25 -07:00
Hitoshi Mitake
253e313c09
*: support granting and revoking range
...
This commit adds a feature for granting and revoking range of keys,
not a single key.
Example:
$ ETCDCTL_API=3 bin/etcdctl role grant r1 readwrite k1 k3
Role r1 updated
$ ETCDCTL_API=3 bin/etcdctl role get r1
Role r1
KV Read:
[a, b)
[k1, k3)
[k2, k4)
KV Write:
[a, b)
[k1, k3)
[k2, k4)
$ ETCDCTL_API=3 bin/etcdctl --user u1:p get k1 k4
k1
v1
$ ETCDCTL_API=3 bin/etcdctl --user u1:p get k1 k5
Error: etcdserver: permission denied
2016-06-08 14:58:25 -07:00
Gyu-Ho Lee
9dad78c68f
Merge pull request #5599 from gyuho/e2e_fix
...
e2e: fix race in ranging test tables
2016-06-08 14:46:02 -07:00
Gyu-Ho Lee
bd5e1ea1c0
e2e: fix race in ranging test tables
...
Fix https://github.com/coreos/etcd/issues/5598 .
race conditions were detected in iterating the test table
because the go func closure doesn't receive the 'puts' index
in the argument. This can cause the test to run wrong put
operations.
2016-06-08 13:44:05 -07:00
Anthony Romano
87d105c036
Merge pull request #5596 from heyitsanthony/wal-warn-slow-fsync
...
wal: warn if sync exceeds a second
2016-06-08 13:07:13 -07:00
Hitoshi Mitake
6bb96074da
auth, etcdserver: permission of range requests
...
Currently the auth mechanism doesn't support permissions of range
request. It just checks exact matching of key names even for range
queries. This commit adds a mechanism for setting permission to range
queries. Range queries are allowed if a range of the query is [begin1,
end1) and the user has a permission of reading [begin2, range2) and
[begin1, end2) is a subset of [begin2, range2). Range delete requests
will follow the same rule.
2016-06-08 11:57:32 -07:00
Gyu-Ho Lee
35329a1674
Merge pull request #5597 from gyuho/btree_dep
...
*: update google/btree dependency
2016-06-08 11:39:29 -07:00
Gyu-Ho Lee
0b7e5c70a5
*: update google/btree dependency
2016-06-08 11:23:49 -07:00
Anthony Romano
39eaa37dcf
wal: warn if sync exceeds a second
2016-06-08 11:03:18 -07:00
Anthony Romano
ff2b24a8ac
Merge pull request #5583 from heyitsanthony/grpc-nuke-waitstate
...
clientv3: use grpc balancer
2016-06-08 09:45:44 -07:00
Anthony Romano
4a13c9f9b3
clientv3: use grpc balancer
2016-06-08 09:24:13 -07:00
Xiang Li
66a6ed63cb
Merge pull request #5585 from xiang90/token_cleanup
...
etcdserver: make usernameFromCtx more go style
2016-06-08 08:08:58 -07:00
Xiang Li
4d56f54898
Merge pull request #5590 from xiang90/user
...
auth: add getuser
2016-06-08 08:08:36 -07:00
Anthony Romano
7abc8f21eb
integration: update tests for new grpc reconnection interface
2016-06-08 01:04:59 -07:00
Anthony Romano
62f8ec25c0
clientv3: use grpc reconnection logic
2016-06-08 01:04:59 -07:00
Anthony Romano
1823702cc6
integration: bridge connections to grpc server
...
Tests need to disconnect the network connection for the client to check
reconnection paths but closing a grpc connection closes the logical connection.
To disconnect the client, instead have a bridge between the server and
the client which can monitor and reset connections.
2016-06-08 00:34:53 -07:00
Anthony Romano
b382c2c86f
vendor: update grpc
2016-06-07 22:46:43 -07:00
Xiang Li
c6496dcff6
auth: add getuser
2016-06-07 22:43:04 -07:00
Gyu-Ho Lee
3e057129e2
Merge pull request #5588 from purpleidea/fix/test-typo
...
e2e: tests: fix small typo
2016-06-07 22:25:57 -07:00
James Shubin
0048782d97
e2e: tests: fix small typo
...
Found when trying to get the e2e tests to run on Fedora which they
don't because of https://github.com/kr/pty/issues/21
2016-06-08 01:14:11 -04:00
Gyu-Ho Lee
2da6fb6616
Merge pull request #5587 from gyuho/function
...
etcd-tester: retry for 'etcdserver: not capable'
2016-06-07 22:01:07 -07:00
Gyu-Ho Lee
350673f1f8
etcd-tester: retry for 'etcdserver: not capable'
...
Fix https://github.com/coreos/etcd/issues/5573 .
Currently stresser starts at the same time as cluster start.
If the stresser got launched too fast/early, all stressers
exit from the error 'etcdserver: not capable', which
means the cluster is not ready yet. This adds additional
error checking, so stresser can retry.
2016-06-07 21:56:04 -07:00
Xiang Li
cc1155c93b
etcdserver: make usernameFromCtx more go style
2016-06-07 21:17:32 -07:00
Gyu-Ho Lee
9a14b796e0
Merge pull request #5582 from gyuho/watch_range_end
...
etcdctl: support watch with range_end
2016-06-07 17:08:49 -07:00
Gyu-Ho Lee
7eaf73d273
e2e: test watch command with 2 args
2016-06-07 16:52:19 -07:00
Gyu-Ho Lee
624d5eb0cb
etcdctl: support range_end for watch command
...
Fix https://github.com/coreos/etcd/issues/5575 .
2016-06-07 16:52:15 -07:00
Gyu-Ho Lee
50ef8f148c
Merge pull request #5579 from gyuho/request_union
...
RequestOp, ResponseOp
2016-06-07 13:54:59 -07:00
Gyu-Ho Lee
1610391449
*: following changes for proto update
2016-06-07 13:33:03 -07:00
Gyu-Ho Lee
1e4d3603db
clientv3,ctlv3: following changes for proto change
2016-06-07 13:32:36 -07:00
Gyu-Ho Lee
6e149e3485
etcdserver: following updates for proto change
2016-06-07 13:32:07 -07:00
Gyu-Ho Lee
ca630a0803
etcdserverpb: RequestOp, ResponseOp
...
Fix https://github.com/coreos/etcd/issues/5504 .
2016-06-07 13:31:10 -07:00
Xiang Li
0d1133178f
Merge pull request #5574 from xiang90/auth
...
auth: make naming consistent
2016-06-07 11:24:29 -07:00