Xiang Li
f8c1a50195
auth: cleanup store.go
2016-06-10 14:19:29 -07:00
Xiang Li
65abcc1a59
Merge pull request #5629 from xiang90/put_role
...
auth: cleanup
2016-06-10 13:53:34 -07:00
Xiang Li
cf99d596f5
auth: cleanup get user and get role usage
2016-06-10 13:34:40 -07:00
Xiang Li
0914d65c1f
auth: add put role
2016-06-10 13:20:48 -07:00
Anthony Romano
e854fa1856
Merge pull request #5622 from heyitsanthony/e2e-auth-keys
...
e2e: auth key put test
2016-06-10 12:17:38 -07:00
Gyu-Ho Lee
cd569d640b
Merge pull request #5600 from lucab/to-upstream/armored-sigs
...
doc: sign release artifacts in armor mode
2016-06-10 12:11:53 -07:00
Xiang Li
aa56e47712
Merge pull request #5625 from xiang90/put_user
...
auth: add put_user
2016-06-10 12:10:21 -07:00
Anthony Romano
1e22137a9a
e2e: test auth is respected for Puts
2016-06-10 11:43:06 -07:00
Anthony Romano
b3a0b0502c
etcdserver: respect auth on serialized Range
2016-06-10 11:43:05 -07:00
Xiang Li
ae30ab7897
auth: add put_user
2016-06-10 11:27:42 -07:00
Xiang Li
247103c40b
Merge pull request #5623 from xiang90/get_role
...
auth: add getRole
2016-06-10 11:17:59 -07:00
Xiang Li
1958598a18
auth: add getRole
2016-06-10 10:59:34 -07:00
Xiang Li
c459073c6d
Merge pull request #5620 from xiang90/auth_recover
...
auth: implement recover
2016-06-10 10:35:03 -07:00
Gyu-Ho Lee
05f9d1b716
Merge pull request #5610 from gyuho/handle_timeout_error
...
etcd-tester: do not exit for compaction timeout
2016-06-10 09:47:54 -07:00
Gyu-Ho Lee
5631acdb8f
etcd-tester: do not exit for compact timeout
...
Temporary fix for https://github.com/coreos/etcd/issues/5606 .
2016-06-10 09:44:45 -07:00
Xiang Li
ca4e78687e
auth: implement recover
2016-06-10 09:37:37 -07:00
Anthony Romano
bdc7035c10
Merge pull request #5617 from liggitt/preallocation
...
fileutil: avoid double preallocation
2016-06-09 22:27:17 -07:00
Jordan Liggitt
4f7622fb9a
fileutil: avoid double preallocation
2016-06-10 00:27:59 -04:00
Gyu-Ho Lee
d4ac09de0f
Merge pull request #5612 from gyuho/index_bench
...
mvcc: add keyIndex, treeIndex Restore benchmark
2016-06-09 16:09:56 -07:00
Xiang Li
6e32e8501a
Merge pull request #5613 from xiang90/rootrole
...
*: add admin permission checking
2016-06-09 16:00:37 -07:00
Xiang Li
7da1940dce
Merge pull request #5607 from xiang90/raft_user
...
raft: add docker/swarmkit as notable raft users
2016-06-09 15:39:09 -07:00
Xiang Li
f1c6fa48f5
*: add admin permission checking
2016-06-09 15:25:09 -07:00
Gyu-Ho Lee
6bbd8b7efb
mvcc: add keyIndex benchmark test
...
Useful later when trying to optimize our restore operations.
2016-06-09 14:13:18 -07:00
Anthony Romano
a7c5058953
Merge pull request #5608 from heyitsanthony/clientv3-auth-opts
...
clientv3: use separate dialopts for auth dial
2016-06-09 12:56:59 -07:00
Anthony Romano
349eaf117a
clientv3: use separate dialopts for auth dial
...
Needs to use a different balancer from the main client connection
because of the way grpc uses the Notify channel.
2016-06-09 10:38:57 -07:00
Xiang Li
ab65d2b848
raft: add docker/swarmkit as notable raft users
2016-06-09 10:10:44 -07:00
Anthony Romano
78c957df41
Merge pull request #5603 from heyitsanthony/clientv3-close-keepalive
...
clientv3: close keepalive channel if TTL locally exceeded
2016-06-09 09:44:32 -07:00
Anthony Romano
0554ef9c39
clientv3/integration: tests for closing lease channel
2016-06-09 09:12:59 -07:00
Anthony Romano
e534532523
clientv3: close keep alive channel if no response within TTL
2016-06-09 09:12:59 -07:00
Xiang Li
fb0df211f0
Merge pull request #5586 from xiang90/root
...
auth: add root user and root role
2016-06-09 00:23:45 -07:00
Xiang Li
da2f2a5189
auth: add root user and root role
2016-06-08 19:55:08 -07:00
Gyu-Ho Lee
a548cab828
Merge pull request #5602 from gyuho/get_leader
...
clientv3/integration: WaitLeader to follower
2016-06-08 17:03:25 -07:00
Gyu-Ho Lee
753073198f
clientv3/integration: WaitLeader to follower
...
Fix https://github.com/coreos/etcd/issues/5601 .
2016-06-08 16:45:32 -07:00
Xiang Li
77dee97c2f
Merge pull request #5578 from mitake/auth-v3-range
...
auth, etcdserver: permission of range requests
2016-06-08 16:33:25 -07:00
Hitoshi Mitake
253e313c09
*: support granting and revoking range
...
This commit adds a feature for granting and revoking range of keys,
not a single key.
Example:
$ ETCDCTL_API=3 bin/etcdctl role grant r1 readwrite k1 k3
Role r1 updated
$ ETCDCTL_API=3 bin/etcdctl role get r1
Role r1
KV Read:
[a, b)
[k1, k3)
[k2, k4)
KV Write:
[a, b)
[k1, k3)
[k2, k4)
$ ETCDCTL_API=3 bin/etcdctl --user u1:p get k1 k4
k1
v1
$ ETCDCTL_API=3 bin/etcdctl --user u1:p get k1 k5
Error: etcdserver: permission denied
2016-06-08 14:58:25 -07:00
Gyu-Ho Lee
9dad78c68f
Merge pull request #5599 from gyuho/e2e_fix
...
e2e: fix race in ranging test tables
2016-06-08 14:46:02 -07:00
Gyu-Ho Lee
bd5e1ea1c0
e2e: fix race in ranging test tables
...
Fix https://github.com/coreos/etcd/issues/5598 .
race conditions were detected in iterating the test table
because the go func closure doesn't receive the 'puts' index
in the argument. This can cause the test to run wrong put
operations.
2016-06-08 13:44:05 -07:00
Anthony Romano
87d105c036
Merge pull request #5596 from heyitsanthony/wal-warn-slow-fsync
...
wal: warn if sync exceeds a second
2016-06-08 13:07:13 -07:00
Hitoshi Mitake
6bb96074da
auth, etcdserver: permission of range requests
...
Currently the auth mechanism doesn't support permissions of range
request. It just checks exact matching of key names even for range
queries. This commit adds a mechanism for setting permission to range
queries. Range queries are allowed if a range of the query is [begin1,
end1) and the user has a permission of reading [begin2, range2) and
[begin1, end2) is a subset of [begin2, range2). Range delete requests
will follow the same rule.
2016-06-08 11:57:32 -07:00
Gyu-Ho Lee
35329a1674
Merge pull request #5597 from gyuho/btree_dep
...
*: update google/btree dependency
2016-06-08 11:39:29 -07:00
Gyu-Ho Lee
0b7e5c70a5
*: update google/btree dependency
2016-06-08 11:23:49 -07:00
Anthony Romano
39eaa37dcf
wal: warn if sync exceeds a second
2016-06-08 11:03:18 -07:00
Anthony Romano
ff2b24a8ac
Merge pull request #5583 from heyitsanthony/grpc-nuke-waitstate
...
clientv3: use grpc balancer
2016-06-08 09:45:44 -07:00
Anthony Romano
4a13c9f9b3
clientv3: use grpc balancer
2016-06-08 09:24:13 -07:00
Luca Bruno
e551aec339
doc: sign release artifacts in armor mode
...
Release guide steps to artifacts signing defaults to binary
signatures, while producing .asc files.
This commit changes to armored signatures, also matching appc
requirements.
Fixes #5594
2016-06-08 17:51:54 +02:00
Xiang Li
66a6ed63cb
Merge pull request #5585 from xiang90/token_cleanup
...
etcdserver: make usernameFromCtx more go style
2016-06-08 08:08:58 -07:00
Xiang Li
4d56f54898
Merge pull request #5590 from xiang90/user
...
auth: add getuser
2016-06-08 08:08:36 -07:00
Anthony Romano
7abc8f21eb
integration: update tests for new grpc reconnection interface
2016-06-08 01:04:59 -07:00
Anthony Romano
62f8ec25c0
clientv3: use grpc reconnection logic
2016-06-08 01:04:59 -07:00
Anthony Romano
1823702cc6
integration: bridge connections to grpc server
...
Tests need to disconnect the network connection for the client to check
reconnection paths but closing a grpc connection closes the logical connection.
To disconnect the client, instead have a bridge between the server and
the client which can monitor and reset connections.
2016-06-08 00:34:53 -07:00
