Commit Graph

17198 Commits

Author SHA1 Message Date
cfz
b12f8c12ce server/auth: enable tokenProvider if recoved store enables auth
we found a lease leak issue:
if a new member(by member add) is recovered by snapshot, and then
become leader, the lease will never expire afterwards. leader will
log the revoke failure caused by "invalid auth token", since the
token provider is not functional, and drops all generated token
from upper layer, which in this case, is the lease revoking
routine.
2021-07-11 01:17:08 +08:00
14c527f59a Merge pull request #13181 from gyuho/oss
workflows: disable ARM64 job for maintenance
2021-07-03 13:00:51 -07:00
7cb09ca552 workflows: disable ARM64 job for maintenance
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2021-07-03 12:59:52 -07:00
1c746c7f2f Merge pull request #13180 from nic-chen/fix-broken-links
docs: fix broken links in README
2021-07-03 14:04:23 -04:00
1c57287fc2 docs: fix broken links in README 2021-07-04 00:36:19 +08:00
ac0243bd70 Merge pull request #13160 from serathius/compact
etcdserver: Extract functions for setting and reading compaction information in backend
2021-07-03 11:37:09 +02:00
9530ff93a9 Merge pull request #13152 from serathius/junit
*: Upload test junit results
2021-07-03 11:35:15 +02:00
1208505290 Merge pull request #13161 from serathius/membership
etcdserver: Membership uses MembershipStorage interface instead of directly accessing Backend
2021-07-03 11:33:38 +02:00
33b2cdb957 Merge pull request #13162 from serathius/auth
etcdserver: Move read/update methods on Auth bucket to one place
2021-07-03 11:33:07 +02:00
a8e6016fc6 Merge pull request #13163 from serathius/authusers
etcdserver: Move all get/put/delete on AuthUsers and AuthRoles to buckets module
2021-07-03 11:32:24 +02:00
6825b4da61 Merge pull request #13164 from serathius/alarm
etcdserver: Move put/read/delete on Alarm bucket to bucket package
2021-07-03 11:31:37 +02:00
f7ad896691 Merge pull request #13165 from serathius/lease
etcdserver: Move get/put/delete on Lease bucket to bucket package
2021-07-03 11:31:04 +02:00
af9b5e726a Merge pull request #13143 from avorima/changelog-3.6
CHANGELOG: add 3.6, highlight completion commands
2021-07-01 19:49:44 -04:00
57a4896704 Merge pull request #13170 from gyuho/maintainers
README: explain "MAINTAINERS"
2021-07-01 09:12:30 -07:00
1b84b5e8df README: explain "MAINTAINERS"
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2021-07-01 09:08:39 -07:00
4c5efc970d *: Upload test junit results 2021-07-01 14:41:13 +02:00
e5a026822b etcdserver: Move put/read/delete on Alarm bucket to bucket package 2021-07-01 13:35:10 +02:00
9e511665c5 etcdserver: Move get/put/delete on Lease bucket to bucket package 2021-07-01 13:34:45 +02:00
0c701fb9f3 etcdserver: Move all get/put/delete on AuthUsers and AuthRoles to buckets module 2021-07-01 12:12:15 +02:00
221c887819 etcdserver: Extract functions for setting and reading compaction information in backend 2021-07-01 11:26:27 +02:00
40da254d68 Merge pull request #13146 from tklauser/filelock-x-sys-windows
client/pkg/fileutil: use `golang.org/x/sys/windows` for `FileLockEx`
2021-07-01 10:44:08 +02:00
7271adecc5 Merge pull request #12992 from awly/client-auth-bundle-overwrite
client/v3: do not overwrite authTokenBundle on dial
2021-07-01 10:40:18 +02:00
0d0b6f06fa Merge pull request #13142 from avorima/etcdutl-completion
etcdutl: add command to generate shell completion
2021-06-30 10:33:22 -04:00
2fb919bef9 Merge pull request #13158 from spacewander/blc
CHANGELOG-3.5: fix broken link
2021-06-29 09:36:04 -07:00
b2e08fbfd4 etcdserver: Move read/update methods on Auth bucket to one place 2021-06-29 18:02:11 +02:00
50507d5f3c etcdserver: Membership uses MembershipStorage interface instead of directly accessing Backend 2021-06-29 16:14:06 +02:00
a6317392f4 Merge pull request #13159 from serathius/license
*: Add missing file licenses and Fix the static analysis to prevent skipping them
2021-06-29 13:49:05 +02:00
86f68b9374 *: Add missing file licenses and Fix static analysis prevent skipping them in future 2021-06-29 12:52:02 +02:00
164a1c80f0 CHANGELOG-3.5: fix broken link 2021-06-29 17:18:05 +08:00
6ef7629ec6 Merge pull request #13151 from serathius/buckets
etcdserver: Move all named keys to buckets module
2021-06-29 10:18:42 +02:00
f79d09d48b etcdserver: Move all named keys to buckets module 2021-06-28 16:40:50 +02:00
2a0f8f0738 Merge pull request #13145 from tangcong/fix-endpoint-health
fix health endpoint not usable when authentication is enabled
2021-06-25 18:33:46 -07:00
c3fe63a658 client/pkg/fileutil: use golang.org/x/sys/windows for FileLockEx
Use the FileLockEx wrapper and the corresponding LOCKFILE_* and error
constants from the golang.org/x/sys/windows package rather than
implementing these in the fileutil package.
2021-06-25 14:44:30 +02:00
dcf60888bc Merge pull request #13094 from serathius/etcd-version
[Version in Snapshot] Preserve etcd version in backend allowing etcdutl to read it from snapshot
2021-06-25 14:29:32 +02:00
e2740b4afa server,etcdutl: Preserve etcd version in backend allowing etcdutl to read it from snapshot 2021-06-25 14:06:56 +02:00
3f02686619 Merge pull request #13112 from Rajalakshmi-Girish/junit__test_report
scripts: add option to generate junit xml reports
2021-06-25 10:46:31 +02:00
dd62aebfb5 fix health endpoint not usable when authentication is enabled 2021-06-25 14:02:45 +08:00
bcab57ce00 CHANGELOG: add 3.6, highlight completion commands 2021-06-24 15:12:01 +02:00
8f9829cd2d Merge pull request #13114 from lilic/fix-api-version
Bump etcd version to 3.5.0 and 3.6.0-pre
2021-06-24 14:26:17 +02:00
3c6ace066a etcdutl: add command to generate shell completion
Follow up of #13133.
2021-06-24 12:22:40 +02:00
72cb652332 Merge pull request #13132 from serathius/refactor-monitor
etcdserver: Move version monitor logic to separate module
2021-06-24 10:40:01 +02:00
69fadd41b0 Merge pull request #13133 from avorima/shell-completion
etcdctl: add command to generate shell completion
2021-06-24 10:30:18 +02:00
96b8049d81 Write test for for bash completion 2021-06-23 23:16:47 +02:00
823f85dfc9 etcdserver: Move version monitor logic to separate module 2021-06-23 19:27:29 +02:00
ab8e5a4f8e client/v3: do not overwrite authTokenBundle on dial
`Client.dial` can be called multiple times. For example, from regular
`NewClient` and [from the `Maintenance`
wrapper](6d451ab61d/client/v3/maintenance.go (L81-L84)).

This ends up creating two (if `Client.dial` is called twice) independent
`credentials.Bundle` instances:
- the first one is wired into `PerRPCCredentials` callback in gRPC
  client.
- the second one is in `Client.authTokenBundle` and receives the latest
  auth token updates.

When using username/password authentication and the server is configured
to issue JWTs, token rotation logic breaks because of the above
`credentials.Bundle` confusion.
2021-06-23 09:44:27 -07:00
c44d89f469 Merge pull request #13127 from lilic/fix-grpc-req-alert
contrib/mixin/mixin.libsonnet: Adjust gRPC failed requests
2021-06-23 12:21:41 -04:00
6eabc41aee etcdctl: add command to generate shell completion
To improve the UX of etcdctl. Completion is generated by cobra
according to defined commands and flags.

Fixes #13111
2021-06-22 13:29:23 +02:00
4e060dc127 tests/e2e/ctl_v3_snapshot_test.go: Adjust version to 3.6.0 2021-06-22 12:26:24 +02:00
b9d837183a server/etcdserver/api: Add 3.6 to supported version 2021-06-22 12:25:39 +02:00
5d6be34838 api/version/version.go: Fix the api version 2021-06-22 12:25:39 +02:00