Anthony Romano
23cced240b
transport: add ServerName to TLSConfig and add ValidateSecureEndpoints
...
ServerName prevents accepting forged SRV records with cross-domain
credentials. ValidateSecureEndpoints prevents downgrade attacks from SRV
records.
2016-08-04 11:00:28 -07:00
Anthony Romano
e73c928d85
etcdctl: set ServerName for TLS when using --discovery-srv
2016-08-04 11:00:25 -07:00
Anthony Romano
779ad90f9a
Documentation: update clustering guide about PKI SRV record forging
2016-08-04 11:00:22 -07:00
Anthony Romano
dca1740be5
etcdmain: check TLS on gateway SRV records
2016-08-04 11:00:15 -07:00
Anthony Romano
487b34d857
embed: use ServerName on TLS DNS discovery w/o CA file
2016-08-04 10:56:11 -07:00
Gyu-Ho Lee
a31283cf51
v2http: use guest access in non-TLS mode
...
Fix https://github.com/coreos/etcd/issues/6075 .
2016-08-04 10:52:42 -07:00
Gyu-Ho Lee
b722bedf8a
version: bump to v3.0.4+git
2016-07-27 15:30:31 -07:00
Gyu-Ho Lee
d53923c636
version: bump to v3.0.4
2016-07-27 13:40:42 -07:00
Gyu-Ho Lee
9356665d60
*: regenerate proto files for grpc-gateway
2016-07-27 13:40:07 -07:00
Gyu-Ho Lee
0932d17395
scripts/genproto: use latest grpc-gateway c8ec92d0
2016-07-27 13:39:00 -07:00
Gyu-Ho Lee
2a3ea3f996
Dockerfile-release: add '/var/lib/etcd/'
...
We have '/var/etcd/' in Dockerfile for historical reason.
Most cases, user store data in '/var/lib/etcd/'.
2016-07-27 13:38:58 -07:00
Anthony Romano
e5a5e5f7c6
etcdserver, api, membership: don't race on setting version
...
Fixes #6029
2016-07-27 09:39:39 -07:00
Gyu-Ho Lee
00bdd907d5
Documentation: fix links in upgrades
2016-07-26 13:16:15 -07:00
Gyu-Ho Lee
8eab756d3f
*: regenerate proto
2016-07-25 21:36:07 -07:00
Xiang Li
3d9b1d1635
scripts:genproto.sh: update grpc-gateway
2016-07-25 21:31:33 -07:00
Xiang Li
4218193dd7
etcdserverpb: add missing deleterange annotation
2016-07-25 21:31:30 -07:00
Dongsu Park
6499d01c9b
etcdmain: correctly check return values from SdNotify()
...
SdNotify() now returns 2 values, sent and err. So startEtcdOrProxyV2()
needs to check the 2 return values correctly. As the 2 values are
independent of each other, error checking needs to be slightly updated
too.
SdNotifyNoSocket, which was previously provided by go-systemd, does not
exist any more. In that case (false, nil) will be returned instead.
2016-07-21 11:00:37 -07:00
Dongsu Park
83b39b4f6b
vendor: update go-systemd
...
Godeps.json and vendor need to be updated according to the newest
go-systemd, as SdNotify() in go-systemd has changed its API.
2016-07-21 11:00:34 -07:00
Anthony Romano
21092ca715
integration: change timeouts for TestWatchWithProgressNotify
...
a) 2 * progress interval was passing with dropped notifies
b) waitResponse was waiting so long that it expected a dropped notify
2016-07-21 10:59:54 -07:00
Anthony Romano
a4e79d7ebf
v3rpc: don't elide next progress notification on progress notification
...
Fixes #5878
2016-07-21 10:59:51 -07:00
Anthony Romano
846883a979
rpctypes, clientv3: retry RPC on EtcdStopped
...
Fixes #5983
2016-07-21 10:59:27 -07:00
Anthony Romano
c7a3edb90f
fileutil: rework purge tests so they don't poll
...
Fixes #5966
2016-07-21 10:57:06 -07:00
Gyu-Ho Lee
f308a27e91
e2e: test auth enabled with CN name cert
2016-07-21 10:55:56 -07:00
Gyu-Ho Lee
1d37154793
v2http: test with 'ClientCertAuthEnabled'
2016-07-21 10:55:54 -07:00
Gyu-Ho Lee
092d069d3e
v2http: set 'ClientCertAuthEnabled' in client.go
2016-07-21 10:55:51 -07:00
Gyu-Ho Lee
ab5c4e23bd
v2http: add 'ClientCertAuthEnabled' in handlers
2016-07-21 10:55:44 -07:00
Gyu-Ho Lee
59bf6693c7
embed: set 'ClientCertAuthEnabled'
2016-07-21 10:55:30 -07:00
Gyu-Ho Lee
affcbfbf06
etcdserver: add 'ClientCertAuthEnabled' option
2016-07-21 10:52:14 -07:00
Gyu-Ho Lee
e81df2648c
v2http: move 'testdata' from 'etcdhttp'
2016-07-21 10:52:09 -07:00
rob boll
27a450235a
v2http: client cert cn authentication
...
introduce client certificate authentication using certificate cn.
2016-07-21 10:52:06 -07:00
rob boll
42454f9ed8
v2http: refactor http basic auth
...
refactor http basic auth code to combine basic auth extraction and validation
2016-07-21 10:52:04 -07:00
Anthony Romano
7ea8860670
e2e: use a single member cluster in TestCtlV3Migrate
...
Occasionally migrate would fail because a minority node would be missing
v2 keys. Instead, just use a single member cluster.
Fixes #5992
2016-07-21 10:50:49 -07:00
jesse.millan
2fb72029ef
etcdctl: Add support for formating output of ls command in json
...
The ls command will check for and honor json or extended output formats.
Fixes #5993
2016-07-21 10:50:47 -07:00
Xiang Li
77af59796d
clientv3/integration: fix race in TestWatchCompactRevision
2016-07-21 10:50:46 -07:00
Anthony Romano
b732f96e07
integration: drain keepalives in TestLeaseKeepAliveCloseAfterDisconnectRevoke
...
Fixes #5900
2016-07-21 10:50:44 -07:00
Gyu-Ho Lee
602198105d
*: regenerate proto
2016-07-18 11:08:51 -07:00
Gyu-Ho Lee
e513cbd562
vendor: update 'gogo/protobuf'
2016-07-18 11:06:58 -07:00
Gyu-Ho Lee
4198369dd0
scripts: update gogo/protobuf, use 'gofast' plugin
...
- Fix https://github.com/coreos/etcd/issues/5942
- Partial fix for https://github.com/coreos/etcd/issues/5865
2016-07-18 11:06:55 -07:00
Gyu-Ho Lee
debecc1868
vendor: change to 'grpc-ecosystem' from 'gengo'
2016-07-18 11:06:33 -07:00
Gyu-Ho Lee
140fc04c62
*: regenerate proto files
2016-07-18 11:06:17 -07:00
Gyu-Ho Lee
7e34665774
scripts: update genproto with grpc-ecosystem
2016-07-18 11:03:54 -07:00
Gyu-Ho Lee
be541f3641
Documentation: change to grpc-ecosystem
2016-07-18 11:03:52 -07:00
Gyu-Ho Lee
e582416994
embed: change import path to 'grpc-ecosystem'
2016-07-18 11:03:50 -07:00
Xiang Li
842145ecb3
*: fix issue found in fast lease renew
2016-07-18 11:03:20 -07:00
Gyu-Ho Lee
d68936c4da
version: bump to v3.0.3+git
2016-07-15 11:51:50 -07:00
Gyu-Ho Lee
24a90baff8
version: bump to v3.0.3
2016-07-15 11:26:14 -07:00
Anthony Romano
6b7891d5f1
integration: add FailFast(false) to failing tests
2016-07-14 19:01:17 -07:00
Anthony Romano
129b271ff8
clientv3: use grpc.FailFast(false) for all calls
2016-07-14 19:00:46 -07:00
Anthony Romano
a11ee983c4
vendor: update grpc
...
Fixes #5871
2016-07-14 18:47:02 -07:00
Anthony Romano
bec58d5f58
integration: test grpc error equivalence with Error()
2016-07-14 18:47:00 -07:00
