Sahdev P. Zala
ac37d3499e
pkg: consider umask when use MkdirAll
...
os.MkdirAll creates directory before umask so make sure that a desired
permission is set after creating a directory with MkdirAll. Use the
existing TouchDirAll function which checks for permission if dir is already
exist and when create a new dir.
2020-07-07 12:02:55 -04:00
Sahdev Zala
1255e3f0c8
Update grpc_proxy.go
...
Using the plog.Warningf instead of zap which was added from 3.4
2020-07-05 12:31:58 -04:00
Hitoshi Mitake
4ae0875b34
etcdmain: let grpc proxy warn about insecure-skip-tls-verify
2020-07-05 12:10:07 -04:00
cfc4n
ba7ff1eea9
auth: Customize simpleTokenTTL settings.
...
see https://github.com/etcd-io/etcd/issues/11978 for more detail.
2020-06-25 20:17:49 +08:00
Gyuho Lee
cdc1c8f02f
Merge pull request #12050 from spzala/automated-cherry-pick-of-#11845-upstream-release-3.3
...
Automated cherry pick of #11845
2020-06-24 20:42:14 -07:00
Gyuho Lee
56bf4c4779
Merge pull request #12053 from spzala/automated-cherry-pick-of-#11841-upstream-release-3.3
...
Automated cherry pick of #11841
2020-06-24 20:41:58 -07:00
Gyuho Lee
1a79fe3758
Merge pull request #12071 from spzala/automated-cherry-pick-of-#12060-upstream-release-3.3
...
Automated cherry pick of #12060
2020-06-24 20:39:25 -07:00
Sahdev P. Zala
bde76af5fa
pkg: check file stats
...
modify file util.
2020-06-24 21:28:16 -04:00
Xiang Li
b85fc84c26
doc: add TLS related warnings
2020-06-24 16:41:53 -04:00
Hitoshi Mitake
a89c2512ea
etcdctl, etcdmain: warn about --insecure-skip-tls-verify options
2020-06-22 19:53:45 -04:00
Xiang Li
f6b822dfe8
etcdmain: best effort detection of self pointing in tcp proxy
2020-06-22 19:39:34 -04:00
Andy Liu
a311a80699
helper document update.
2019-10-09 13:15:56 +08:00
Andy Liu
86b1686c7e
etcdserver: cherry-pick skip client san verification option for 3.3 version.
...
Co-authored-by: Martin Weindel <martin.weindel@sap.com>
Co-authored-by: Jingyi Hu <jingyih@google.com>
Co-authored-by: Liming Liu <andyliuliming@outlook.com>
2019-10-03 10:12:22 +08:00
Rohit Sardesai
8ed3e70d7c
etcd: Replace ghodss/yaml with sigs.k8s.io/yaml
2019-05-29 23:03:16 +05:30
Sam Batschelet
43386ac29b
*: Change gRPC proxy to expose etcd server endpoint /metrics
...
This PR resolves an issue where the `/metrics` endpoints exposed by the proxy were not returning metrics of the etcd members servers but of the proxy itself.
Signed-off-by: Sam Batschelet <sbatsche@redhat.com>
2019-04-11 17:07:40 -04:00
Gyuho Lee
13715724b8
etcdmain: add "--cipher-suites" flag
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-06-05 18:50:15 -07:00
Eric Chiang
f01d690e6f
etcdmain: document peer-cert-allowed-cn flag
2018-04-24 13:57:51 -07:00
Gyuho Lee
758203bd86
etcdmain: add "--initial-election-tick-advance"
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-04-23 10:58:57 -07:00
Gyuho Lee
afa01aaef0
etcdmain: define "defaultGRPCMaxCallSendMsgSize"
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-01-30 09:50:27 -08:00
Rene Zbinden
d7e6dd77bb
grpcproxy: configure --max-send-bytes and --max-recv-bytes for grpc proxy
2018-01-30 09:33:16 -08:00
Quentin MACHU
70ba0518f1
embed: enable extensive metrics if specified
2018-01-07 18:48:59 -08:00
Gyuho Lee
e330f5004f
etcdmain: unset ETCD_UNSUPPORTED_ARCH after arch check
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-01-05 03:38:35 +00:00
Gyuho Lee
bdc508cadf
grpc-proxy: add "--debug" flag to "etcd grpc-proxy start" command
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2017-12-21 14:44:10 -08:00
Gyuho Lee
0133d77f0a
etcdmain: display default --enable-v2, --strict-reconfig-check value ("true")
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2017-12-14 11:25:20 -08:00
Gyu-Ho Lee
c8277e1b02
etcdmain: test wrong heartbeat-interval, election-timeout in TestConfigFileElectionTimeout
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-11-28 09:53:35 -08:00
Gyu-Ho Lee
3db5ad8d57
embed,etcdmain: add "--experimental-initial-corrupt-check"
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-11-22 15:27:14 -08:00
Gyu-Ho Lee
15bfc1b361
Merge pull request #8893 from dahefanteng/fix-typo
...
Documentation: change "key file" to "cert file"
2017-11-20 23:55:27 -08:00
Manjunath A Kumatagi
e1b1ec8348
etcdmain: Fix go fmt for gotip
2017-11-21 11:37:09 +05:30
dahefanteng
a4c407ece4
Documentation: change "key file" to "cert file"
...
when refered "--trusted-ca-file",what we need provide should be a CA cert file,not the CA private key file.
2017-11-20 00:44:32 -05:00
Frederic Branczyk
627cffd6f8
*: initialize gRPC server metrics with zero values
2017-11-15 11:21:29 +01:00
Gyu-Ho Lee
370ff6b670
etcdmain: do not embed structs (fix go vet warnings)
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-11-08 14:20:52 -08:00
Gyu-Ho Lee
adc3cea8cf
etcdmain: use embed.DefaultLogOutput for flags
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-11-02 14:43:06 -07:00
Gyu-Ho Lee
1fa295e3ba
etcdmain: move SetupLogging to embed
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-11-02 13:19:49 -07:00
Gyu-Ho Lee
863dfd1f0e
Merge pull request #8616 from mitake/peer-cn-auth
...
RFC: etcdmain, pkg: CN based auth for inter peer connection
2017-10-04 10:00:53 -07:00
Hitoshi Mitake
70018e9207
etcdmain, pkg: CN based auth for inter peer connection
...
This commit adds an authentication mechanism to inter peer connection
(rafthttp). If the cert based peer auth is enabled and a new option
`--peer-cert-allowed-cn` is passed, an etcd process denies a peer
connection whose CN doesn't match.
2017-10-02 15:59:17 +09:00
fanmin shi
bcef78c665
Merge pull request #8563 from fanminshi/make_auto_compaction_granular
...
*: support auto-compaction with finer granularity
2017-09-29 11:18:51 -07:00
fanmin shi
733de98cfb
*: modify etcd flags to support finner compaction retention
2017-09-28 17:22:44 -07:00
Gyu-Ho Lee
4b3d4000af
etcdmain: add 'grpc-keepalive-*' flags
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-09-28 11:24:02 -07:00
Hitoshi Mitake
94b5071c30
etcdmain, proxy: handle authed watch in grpcproxy
...
This commit lets grpcproxy handle authed watch. The main changes are:
1. forwrading a token of a new broadcast client
2. checking permission of a new client that participates to an
existing broadcast
2017-09-20 15:27:26 +09:00
Hitoshi Mitake
e709f83253
etcdmain, proxy: support authed RPCs with grpcproxy
...
This commit lets grpcproxy support authed RPCs. Auth tokens supplied
by clients are now forwarded to etcdserver by grpcproxy.
2017-09-20 11:14:45 +09:00
Anthony Romano
a0adee5209
etcdmain: add command line flag to etcdmain
2017-08-31 11:47:41 -07:00
blueblue
9b92e1b2d0
flag: improve StringFlags by support set default value when init ( #8447 )
...
* flag: improve StringFlags by support set default value when init
when init flagSet, set default value should be moved to StringFlags init
func, which is more friendly
personal proposal
* flag: code improved for StringFlags
2017-08-28 00:02:11 -07:00
Anthony Romano
35c5dcefc2
*: cockroachdb/cmux -> soheilhy/cmux
...
Has fixes not in fork. Includes SetReadTimeout.
2017-08-22 09:59:59 -07:00
Anthony Romano
86aeaad924
etcdmain: support experimental-corrupt-check-time flag
2017-08-22 09:59:59 -07:00
Anthony Romano
126e91c449
leasing, integration, etcdmain: closer function for leasing kv
...
Semaphore was seeing goroutine leaks
2017-08-18 14:05:57 -07:00
visheshnp
9be715bb66
etcdmain: support key leasing in grpcproxy
2017-08-04 11:35:36 -07:00
Gyu-Ho Lee
b8fd5c3dba
etcdmain: add '/health' endpoint to grpc-proxy
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-07-31 14:07:59 -07:00
Anthony Romano
f6acd0316c
etcdmain: add --experimental-serializable-ordering to grpc proxy
...
Connect to another endpoint on stale reads.
2017-07-27 12:39:30 -07:00
Gyu-Ho Lee
74c8050adc
*: use etcdhttp.Handle* for health, prometheus handlers
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-07-26 06:23:55 -07:00
Anthony Romano
51d7786050
etcdmain: create self-signed certs when listening on https for httpproxy
...
Fixes failures from TestCtlV3PutClientAutoTLS in proxy coverage tests.
2017-07-24 15:37:05 -07:00