summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Simplify and avoid default arguments.Henning Baldersheim2023-11-039-23/+31
|
* No need to specify your own namespace.Henning Baldersheim2023-11-034-8/+9
|
* Merge pull request #29208 from vespa-engine/vekterli/bump-openssl-spec-3-1-4Henning Baldersheim2023-11-021-2/+2
|\ | | | | Bump OpenSSL spec requirements to v3.1.4
| * Bump OpenSSL spec requirements to v3.1.4Tor Brede Vekterli2023-11-021-2/+2
| |
* | Merge pull request #29209 from vespa-engine/balder/add-noexceptHenning Baldersheim2023-11-024-41/+41
|\ \ | | | | | | Balder/add noexcept
| * | Use 8 bit enum.Henning Baldersheim2023-11-022-2/+2
| | |
| * | Add noexceptHenning Baldersheim2023-11-022-39/+39
| | |
* | | Merge pull request #29200 from vespa-engine/bjorncs/tosGjøran Voldengen2023-11-029-20/+131
|\ \ \ | | | | | | | | Extend `/application/v4` with API for approving terms of service
| * | | Extend `/application/v4` with API for approving terms of serviceBjørn Christian Seime2023-11-029-20/+131
| | | |
* | | | Merge pull request #29207 from ↵Håkon Hallingstad2023-11-025-4/+22
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | vespa-engine/hakonhall/retire-if-there-are-shared-hosts-dedicated-to-cluster-type Retire if there are shared hosts dedicated to cluster type
| * | | | Retire if there are shared hosts dedicated to cluster typeHåkon Hallingstad2023-11-025-4/+22
| | | | |
* | | | | Merge pull request #29206 from vespa-engine/bjorncs/stripeGjøran Voldengen2023-11-021-0/+5
|\ \ \ \ \ | | | | | | | | | | | | Extend `ConsoleUrls` with additional ctor and `tenantBilling(TenantName,Bill.Id)`
| * | | | | Extend `ConsoleUrls` with additional ctor and ↵Bjørn Christian Seime2023-11-021-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | `tenantBilling(TenantName,Bill.Id)`
* | | | | | Merge pull request #29205 from vespa-engine/vekterli/specify-metric-unitHenning Baldersheim2023-11-021-2/+2
|\ \ \ \ \ \ | | | | | | | | | | | | | | Specify metric unit in description string
| * | | | | | Specify metric unit in description stringTor Brede Vekterli2023-11-021-2/+2
| |/ / / / /
* | | | | | Merge pull request #29203 from ↵Henning Baldersheim2023-11-021-74/+91
|\ \ \ \ \ \ | |_|_|_|/ / |/| | | | | | | | | | | | | | | | | vespa-engine/renovate/vitejs-plugin-react-4.x-lockfile Update dependency @vitejs/plugin-react to v4.1.1
| * | | | | Update dependency @vitejs/plugin-react to v4.1.1renovate[bot]2023-11-021-74/+91
| | |_|_|/ | |/| | |
* | | | | Merge pull request #29204 from ↵Henning Baldersheim2023-11-021-1/+14
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | vespa-engine/vekterli/avoid-docstore-prealloc-when-sanitizer-instrumented Do not preallocate doc store based on node memory if sanitizers are enabled
| * | | | Do not preallocate doc store based on node memory if sanitizers are enabledTor Brede Vekterli2023-11-021-1/+14
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | If sanitizers are enabled, `mmap`-allocations may be intercepted and allocated pages may be implicitly touched+committed. This tends to explode when testing locally, so fall back to configured initial num-docs if this is the case.
* | | | Merge pull request #29185 from vespa-engine/havardpe/map-subspacesArne H Juul2023-11-0234-288/+951
|\ \ \ \ | |/ / / |/| | | map_subspaces operation
| * | | handle and test recursive issues with interpreted functionsHåvard Pettersen2023-11-027-13/+72
| | | | | | | | | | | | | | | | also disallow map_subspaces in compiled functions
| * | | map_subspaces operationHåvard Pettersen2023-11-0128-275/+879
| | | |
* | | | Merge pull request #29194 from ↵Henning Baldersheim2023-11-0220-115/+553
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | vespa-engine/vekterli/merge-memory-usage-soft-limiting Add configurable soft limiting of memory used by merge operations on a content node
| * | | | Less confusing namingTor Brede Vekterli2023-11-022-3/+3
| | | | |
| * | | | Wire HwInfo into MergeThrottler and use for auto-deduction of memory limitsTor Brede Vekterli2023-11-0212-69/+213
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add config for min/max capping of deduced limit, as well as a scaling factor based on the memory available to the process. Defaults have been chosen based on empirical observations over many years, but having these as config means we can tune things live if it should ever be required.
| * | | | Heuristically compute expected merge memory usage upper boundTor Brede Vekterli2023-11-023-10/+106
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The distributor only knows a limited amount of metadata per bucket replica (roughly: checksum, doc count, doc size). It therefore has no way to know if two replicas with different checksums, both with 1000 documents, have 999 or 0 documents in common. We therefore have to assume the worst and estimate the worst case memory usage as being the _sum_ of mutually divergent replica sizes. Estimates are bounded by the expected bucket merge chunk size, as we make the simplifying assumption that memory usage for a particular node is (roughly) limited to this value for any given bucket. One special-cased exception to this is single-document replicas, as one document can not be split across multiple chunks by definition. Here we track the largest single document replica.
| * | | | Add content node soft limit on max memory used by mergesTor Brede Vekterli2023-11-019-66/+264
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If configured, the active merge window is limited so that the sum of estimated memory usage for its merges does not go beyond the configured soft memory limit. The window can always fit a minimum of 1 merge regardless of its size to ensure progress in the cluster (thus this is a soft limit, not a hard limit).
* | | | | Merge pull request #29201 from vespa-engine/balder/deinline-foreachHenning Baldersheim2023-11-025-73/+113
|\ \ \ \ \ | | | | | | | | | | | | Balder/deinline foreach
| * | | | | Deinline foreach also for internal nodesHenning Baldersheim2023-11-022-46/+68
| | | | | |
| * | | | | - deinline foreach in btree leaf nodes.Henning Baldersheim2023-11-025-30/+48
| | | | | |
* | | | | | Merge pull request #29195 from ↵Geir Storli2023-11-027-32/+16
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | vespa-engine/toregge/dynamic-summary-fields-dont-require-tokenizer Dynamic summary fields don't require tokenizer.
| * | | | | | Dynamic summary fields don't require tokenizer.Tor Egge2023-11-027-32/+16
| | |_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | Tokenization is enabled by the presence of an index expression in the indexing script for the field, and the annotated strings containing the result of tokenization are written to the document field.
* | | | | | Merge pull request #29199 from vespa-engine/kkraune/linkcheckKristian Aune2023-11-021-0/+2
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | Exclude airlift from linkcheck
| * | | | | Exclude airlift from linkcheckKristian Aune2023-11-021-0/+2
| | | | | |
* | | | | | Merge pull request #29198 from ↵Bjørn Christian Seime2023-11-021-2/+45
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | vespa-engine/vekterli/test-openssl-integration-not-vulnerable-to-cred-stuffing Test that OpenSSL mTLS integration is not vulnerable to certificate stuffing
| * | | | | | Test that OpenSSL mTLS integration is not vulnerable to certificate stuffingTor Brede Vekterli2023-11-021-2/+45
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a test that our OpenSSL mTLS integration is not vulnerable to CVE-2023-2422-style certificate credential stuffing. Spoiler alert: we're not, and never have been vulnerable. But this test shall help to ensure we also never accidentally will be in the future. If a server is vulnerable to certificate stuffing, a sneaky client may include both a valid certificate chain (containing credential set A) as well as a self-signed peer certificate (containing credential set B). The vulnerable server thinks the latter cert has been verified, even though the mTLS implementation only verifies the first (actual) client cert as being signed by the CA. The server may then wrongfully choose to include set B as the client's credentials. We explicitly only consider certificates in the chain at OpenSSL "error depth zero", which means the "end entity certificate", i.e. the client peer.
* | | | | | Merge pull request #29196 from vespa-engine/use-value-when-creating-enumBjørn Christian Seime2023-11-021-1/+7
|\ \ \ \ \ \ | | | | | | | | | | | | | | Use 'value' when getting an enum object from a String.
| * | | | | | Use 'value' when getting an enum object from a String.gjoranv2023-11-021-1/+7
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | - Ensures that the correct value is returned even if the name and value does not match.
* | | | | | Merge pull request #29173 from vespa-engine/hmusum/minor-cleanupØyvind Grønnesby2023-11-023-11/+8
|\ \ \ \ \ \ | | | | | | | | | | | | | | Minor cleanup
| * | | | | | Minor cleanupHarald Musum2023-10-313-11/+8
| | | | | | |
* | | | | | | Merge pull request #29197 from ↵Harald Musum2023-11-021-0/+3
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | | | | | | | | | | | | | | | vespa-engine/aressem/use-plain-image-when-mirroring Use plain CentOS Stream 8 image for mirroring to avoid confusion with…
| * | | | | | Use plain CentOS Stream 8 image for mirroring to avoid confusion with ↵Arnstein Ressem2023-11-021-0/+3
|/ / / / / / | | | | | | | | | | | | | | | | | | preinstalled packages.
* | | | | | Merge pull request #29193 from ↵Geir Storli2023-11-022-9/+11
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | vespa-engine/toregge/dont-censor-map-indexes-that-starts-with-left-brace Don't censor map indexes that start with left bracket in
| * | | | | | Don't censor map indexes that start with left bracket inTor Egge2023-11-022-9/+11
| | |/ / / / | |/| | | | | | | | | | | | | | | | readAndCensorIndexes.
* | | | | | Merge pull request #29187 from vespa-engine/freva/flavor-upgraderHåkon Hallingstad2023-11-022-4/+13
|\ \ \ \ \ \ | |/ / / / / |/| | | | | HostFlavorUpgrader: Reprocess hosts with non-retiring nodes
| * | | | | HostFlavorUpgrader: Reprocess hosts with non-retiring nodesValerij Fredriksen2023-11-022-4/+13
| | | | | |
* | | | | | Merge pull request #29190 from vespa-engine/update-more-bill-statesBjørn Christian Seime2023-11-029-152/+209
|\ \ \ \ \ \ | | | | | | | | | | | | | | Update more bill states
| * | | | | | Add commentgjoranv2023-11-011-0/+1
| | | | | | |
| * | | | | | Restructure invoice updates and implement propagation of status from the ↵gjoranv2023-11-016-110/+161
| | | | | | | | | | | | | | | | | | | | | | | | | | | | external system into the database.
| * | | | | | Extract helpers for duplicate code.gjoranv2023-10-311-28/+26
| | | | | | |