Mirroristas/etcd
2
0
Fork 0
mirror of https://github.com/etcd-io/etcd.git synced 2024-09-27 06:25:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,620 Commits 15 Branches 491 Tags 148 MiB
Commit Graph

8620 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Xiang Li
c802c23e6d Merge pull request #5636 from xiang90/mt 
MAINTAINERS: add Hitoshi as a maintainer of auth pkg
 2016-06-10 16:07:04 -07:00
Xiang Li
43db5515e7 MAINTAINERS: add Hitoshi as a maintainer of auth pkg 2016-06-10 15:55:57 -07:00
Gyu-Ho Lee
c6fae5d566 Merge pull request #5631 from raoofm/patch-8 
Doc: Fault tolerance table
 2016-06-10 15:49:36 -07:00
Gyu-Ho Lee
175c67a552 Merge pull request #5634 from gyuho/wal 
wal: PrivateFileMode/DirMode as in pkg/fileutil
 2016-06-10 15:41:43 -07:00
Xiang Li
65ff76882b Merge pull request #5624 from xiang90/warn_apply 
etcdserver: warn heavy apply
 2016-06-10 15:28:27 -07:00
Gyu-Ho Lee
47d5257622 pkg/fileutil: expose PrivateFileMode/DirMode 2016-06-10 15:22:14 -07:00
Gyu-Ho Lee
4570eddc2c wal: PrivateFileMode/DirMode as in pkg/fileutil 
To make it consistent with pkg/fileutil
 2016-06-10 15:20:57 -07:00
Xiang Li
3210bb8181 Merge pull request #5632 from xiang90/auth_store_cleanup 
auth: cleanup store.go
 2016-06-10 14:49:56 -07:00
Xiang Li
a92ea417b4 Merge pull request #5534 from gyuho/readme 
README: minor fix in README
 2016-06-10 14:46:15 -07:00
Xiang Li
64eccd519d etcdserver: warn heavy apply 2016-06-10 14:43:34 -07:00
Hitoshi Mitake
bb6102c00c Merge pull request #5630 from xiang90/del_user 
auth: add del functions for user/role
 2016-06-10 14:28:36 -07:00
Xiang Li
f8c1a50195 auth: cleanup store.go 2016-06-10 14:19:29 -07:00
Hitoshi Mitake
2781553a9e Merge pull request #5615 from mitake/auth-v3-consistent-token 
auth, etcdserver: make auth tokens consistent for all nodes
 2016-06-10 14:19:21 -07:00
Raoof Mohammed
37ac90c419 Doc: Fault tolerance table 2016-06-10 17:12:36 -04:00
Xiang Li
8776962008 auth: add del functions for user/role 2016-06-10 14:11:00 -07:00
Hitoshi Mitake
ead5096fa9 auth, etcdserver: make auth tokens consistent for all nodes 
Currently auth tokens are generated in the replicated state machine
layer randomly. It means one auth token generated in node A cannot be
used for node B. It is problematic for load balancing and fail
over. This commit moves the token generation logic from the state
machine to API layer (before raft) and let all nodes share a single
token.

Log index of Raft is also added to a token for ensuring uniqueness of
the token and detecting activation of the token in the cluster (some
nodes can receive the token before generating and installing the token
in its state machine).

This commit also lets authStore have simple token related things. It
is required because of unit test. The test requires cleaning of the
state of the simple token things after one test (succeeding test can
create duplicated token and it causes panic).
 2016-06-10 13:55:37 -07:00
Xiang Li
65abcc1a59 Merge pull request #5629 from xiang90/put_role 
auth: cleanup
 2016-06-10 13:53:34 -07:00
Xiang Li
cf99d596f5 auth: cleanup get user and get role usage 2016-06-10 13:34:40 -07:00
Xiang Li
0914d65c1f auth: add put role 2016-06-10 13:20:48 -07:00
Anthony Romano
e854fa1856 Merge pull request #5622 from heyitsanthony/e2e-auth-keys 
e2e: auth key put test
 2016-06-10 12:17:38 -07:00
Gyu-Ho Lee
cd569d640b Merge pull request #5600 from lucab/to-upstream/armored-sigs 
doc: sign release artifacts in armor mode
 2016-06-10 12:11:53 -07:00
Xiang Li
aa56e47712 Merge pull request #5625 from xiang90/put_user 
auth: add put_user
 2016-06-10 12:10:21 -07:00
Anthony Romano
1e22137a9a e2e: test auth is respected for Puts 2016-06-10 11:43:06 -07:00
Anthony Romano
b3a0b0502c etcdserver: respect auth on serialized Range 2016-06-10 11:43:05 -07:00
Xiang Li
ae30ab7897 auth: add put_user 2016-06-10 11:27:42 -07:00
Xiang Li
247103c40b Merge pull request #5623 from xiang90/get_role 
auth: add getRole
 2016-06-10 11:17:59 -07:00
Xiang Li
1958598a18 auth: add getRole 2016-06-10 10:59:34 -07:00
Xiang Li
c459073c6d Merge pull request #5620 from xiang90/auth_recover 
auth: implement recover
 2016-06-10 10:35:03 -07:00
Gyu-Ho Lee
05f9d1b716 Merge pull request #5610 from gyuho/handle_timeout_error 
etcd-tester: do not exit for compaction timeout
 2016-06-10 09:47:54 -07:00
Gyu-Ho Lee
5631acdb8f etcd-tester: do not exit for compact timeout 
Temporary fix for https://github.com/coreos/etcd/issues/5606.
 2016-06-10 09:44:45 -07:00
Xiang Li
ca4e78687e auth: implement recover 2016-06-10 09:37:37 -07:00
Anthony Romano
bdc7035c10 Merge pull request #5617 from liggitt/preallocation 
fileutil: avoid double preallocation
 2016-06-09 22:27:17 -07:00
Jordan Liggitt
4f7622fb9a fileutil: avoid double preallocation 2016-06-10 00:27:59 -04:00
Gyu-Ho Lee
d4ac09de0f Merge pull request #5612 from gyuho/index_bench 
mvcc: add keyIndex, treeIndex Restore benchmark
 2016-06-09 16:09:56 -07:00
Xiang Li
6e32e8501a Merge pull request #5613 from xiang90/rootrole 
*: add admin permission checking
 2016-06-09 16:00:37 -07:00
Xiang Li
7da1940dce Merge pull request #5607 from xiang90/raft_user 
raft: add docker/swarmkit as notable raft users
 2016-06-09 15:39:09 -07:00
Xiang Li
f1c6fa48f5 *: add admin permission checking 2016-06-09 15:25:09 -07:00
Gyu-Ho Lee
6bbd8b7efb mvcc: add keyIndex benchmark test 
Useful later when trying to optimize our restore operations.
 2016-06-09 14:13:18 -07:00
Anthony Romano
a7c5058953 Merge pull request #5608 from heyitsanthony/clientv3-auth-opts 
clientv3: use separate dialopts for auth dial
 2016-06-09 12:56:59 -07:00
Anthony Romano
349eaf117a clientv3: use separate dialopts for auth dial 
Needs to use a different balancer from the main client connection
because of the way grpc uses the Notify channel.
 2016-06-09 10:38:57 -07:00
Xiang Li
ab65d2b848 raft: add docker/swarmkit as notable raft users 2016-06-09 10:10:44 -07:00
Anthony Romano
78c957df41 Merge pull request #5603 from heyitsanthony/clientv3-close-keepalive 
clientv3: close keepalive channel if TTL locally exceeded
 2016-06-09 09:44:32 -07:00
Anthony Romano
0554ef9c39 clientv3/integration: tests for closing lease channel 2016-06-09 09:12:59 -07:00
Anthony Romano
e534532523 clientv3: close keep alive channel if no response within TTL 2016-06-09 09:12:59 -07:00
Xiang Li
fb0df211f0 Merge pull request #5586 from xiang90/root 
auth: add root user and root role
 2016-06-09 00:23:45 -07:00
Xiang Li
da2f2a5189 auth: add root user and root role 2016-06-08 19:55:08 -07:00
Gyu-Ho Lee
a548cab828 Merge pull request #5602 from gyuho/get_leader 
clientv3/integration: WaitLeader to follower
 2016-06-08 17:03:25 -07:00
Gyu-Ho Lee
753073198f clientv3/integration: WaitLeader to follower 
Fix https://github.com/coreos/etcd/issues/5601.
 2016-06-08 16:45:32 -07:00
Xiang Li
77dee97c2f Merge pull request #5578 from mitake/auth-v3-range 
auth, etcdserver: permission of range requests
 2016-06-08 16:33:25 -07:00
Hitoshi Mitake
253e313c09 *: support granting and revoking range 
This commit adds a feature for granting and revoking range of keys,
not a single key.

Example:
$ ETCDCTL_API=3 bin/etcdctl role grant r1 readwrite k1 k3
Role r1 updated
$ ETCDCTL_API=3 bin/etcdctl role get r1
Role r1
KV Read:
        [a, b)
        [k1, k3)
        [k2, k4)
KV Write:
        [a, b)
        [k1, k3)
        [k2, k4)
$ ETCDCTL_API=3 bin/etcdctl --user u1:p get k1 k4
k1
v1
$ ETCDCTL_API=3 bin/etcdctl --user u1:p get k1 k5
Error:  etcdserver: permission denied
 2016-06-08 14:58:25 -07:00