summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #24901 from vespa-engine/bratseth/deterministic-orderv8.86.28Morten Tokle2022-11-162-2/+6
|\ | | | | Deterministic host flavor order
| * Deterministic host flavor orderJon Bratseth2022-11-162-2/+6
|/
* Merge pull request #24894 from vespa-engine/bratseth/dynamic-shared-autoscalingValerij Fredriksen2022-11-1616-73/+108
|\ | | | | Support autoscaling in dynamic shared zones
| * Support autoscaling in dynamic shared zonesJon Bratseth2022-11-1616-73/+108
| |
* | Merge pull request #24896 from ↵Jon Marius Venstad2022-11-161-1/+1
|\ \ | | | | | | | | | | | | vespa-engine/jonmv/relax-cloud-account-requirements Fix test even more :'(
| * | Fix test even more :'(jonmv2022-11-161-1/+1
| | |
* | | Merge pull request #24895 from ↵Jon Marius Venstad2022-11-161-0/+3
|\| | | | | | | | | | | | | | vespa-engine/jonmv/relax-cloud-account-requirements Fix test response
| * | Fix test responsejonmv2022-11-161-0/+3
| | |
* | | Merge pull request #24893 from vespa-engine/arnej/add-detect-hostname-modeHarald Musum2022-11-161-1/+8
|\ \ \ | | | | | | | | add "detect-hostname" mode
| * | | add "detect-hostname" modeArne Juul2022-11-161-1/+8
| | | |
* | | | Merge pull request #24891 from ↵Tor Brede Vekterli2022-11-165-33/+96
|\ \ \ \ | |/ / / |/| | | | | | | | | | | vespa-engine/vekterli/use-bouncycastle-for-cipher-and-streaming Use BouncyCastle AES GCM cipher and I/O streams instead of JCA
| * | | Use BouncyCastle AES GCM cipher and I/O streams instead of JCATor Brede Vekterli2022-11-165-33/+96
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This resolves two issues: * `javax.crypto.OutputCipherStream` swallows MAC tag mismatch exceptions when the stream is closed, which means that corruptions (intentional or not) are not caught. This is documented behavior, but still very surprising and a rather questionable default. BC's interchangeable `CipherOutputStream` throws as expected. To avoid regressions, add an explicit test that both ciphertext and MAC tag corruptions are propagated. * The default-provided `AES/GCM/NoPadding` `Cipher` instance will not emit decrypted plaintext per `update()` chunk, but buffer everything until `doFinal()` is invoked when the stream is closed. This means that decrypting very large ciphertexts can blow up memory usage since internal output buffers are reallocated and increased per iteration...! Instead use an explicit BC `GCMBlockCipher` which has the expected behavior (and actually lets cipher streams, well, _stream_). Add an `AeadCipher` abstraction to avoid leaking BC APIs outside the security module.
* | | | Merge pull request #24885 from vespa-engine/toregge/handle-16g-word-bufferGeir Storli2022-11-161-3/+5
|\ \ \ \ | | | | | | | | | | Handle 16 GB word buffer.
| * | | | Handle 16 GB word buffer.Tor Egge2022-11-161-3/+5
| | | | |
* | | | | Merge pull request #24890 from vespa-engine/arnej/handle-access-symlinkHarald Musum2022-11-161-2/+17
|\ \ \ \ \ | | | | | | | | | | | | handle old leftover symlink
| * | | | | handle old leftover symlinkArne Juul2022-11-161-2/+17
| | | | | |
* | | | | | Merge pull request #24888 from ↵Jon Marius Venstad2022-11-167-5/+133
|\ \ \ \ \ \ | |_|_|/ / / |/| | | / / | | |_|/ / | |/| | | vespa-engine/jonmv/relax-cloud-account-requirements Enclave access service
| * | | | Rename forgotten thingsjonmv2022-11-166-11/+11
| | | | |
| * | | | Enclave access servicejonmv2022-11-167-5/+133
| | | | |
* | | | | Merge pull request #24887 from ↵Harald Musum2022-11-162-1/+1
|\ \ \ \ \ | |_|/ / / |/| | | | | | | | | | | | | | vespa-engine/revert-24874-arnej/use-new-configserver-startup Revert "switch configserver startup script"
| * | | | Revert "switch configserver startup script"Harald Musum2022-11-162-1/+1
|/ / / /
* | | | Merge pull request #24878 from ↵Martin Polden2022-11-1613-110/+219
|\| | | | | | | | | | | | | | | | | | | vespa-engine/jonmv/relax-cloud-account-requirements Collapse multiple regions to a single application endpoint
| * | | Address reviewjonmv2022-11-165-24/+19
| | | |
| * | | Add test for regional legacy dns names toojonmv2022-11-161-0/+35
| | | |
| * | | Support legacy regional app-endpoint URLs, to be revertedjonmv2022-11-1611-58/+130
| | | |
| * | | Clean up legacy parameter to only mean hiddenjonmv2022-11-162-13/+8
| | | |
| * | | Always hide regino part in application endpointsjonmv2022-11-1611-135/+95
| | | |
| * | | Collapse multiple regions to a single application endpointjonmv2022-11-168-141/+193
| | |/ | |/|
* | | Merge pull request #24886 from ↵Jon Marius Venstad2022-11-161-0/+7
|\ \ \ | | | | | | | | | | | | | | | | vespa-engine/hmusum/add-flag-for-using-locks-in-filedistribution Add flag for using locks in file distribution
| * | | Add flag for using locks in file distributionHarald Musum2022-11-161-0/+7
| | | |
* | | | Merge pull request #24884 from vespa-engine/bjorncs/filter-test-utilsJon Marius Venstad2022-11-1610-60/+147
|\ \ \ \ | |_|_|/ |/| | | Add test helper to construct filter request instance
| * | | Add test helper to construct filter request instanceBjørn Christian Seime2022-11-1610-60/+147
|/ / /
* | | Merge pull request #24883 from vespa-engine/mpolden/retire-armValerij Fredriksen2022-11-163-5/+7
|\ \ \ | |/ / |/| | Always retire arm64 hosts on OS upgrade
| * | Always retire arm64 hosts on OS upgradeMartin Polden2022-11-162-4/+7
| | |
| * | Remove printlnMartin Polden2022-11-161-1/+0
|/ /
* | Merge pull request #24874 from vespa-engine/arnej/use-new-configserver-startupArne H Juul2022-11-162-1/+1
|\ \ | |/ |/| switch configserver startup script
| * switch configserver startup scriptArne Juul2022-11-152-1/+1
| |
* | Merge pull request #24850 from vespa-engine/bratseth/ms-marco-testKristian Aune2022-11-163-3/+49
|\ \ | | | | | | Test the MS marco notebook app application package
| * | Test the MS marco notebook app application packageJon Bratseth2022-11-143-3/+49
| | |
* | | Merge pull request #24882 from ↵Henning Baldersheim2022-11-151-3/+3
|\ \ \ | | | | | | | | | | | | | | | | vespa-engine/toregge/use-entryref-in-hnsw-candidate Use vespalib::datastore::EntryRef in HnswCandidate.
| * | | Use vespalib::datastore::EntryRef in HnswCandidate.Tor Egge2022-11-151-3/+3
| | | |
* | | | Merge pull request #24881 from ↵Henning Baldersheim2022-11-155-9/+5
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | vespa-engine/toregge/remove-unused-argument-to-visited-trackers Remove unused argument to visited trackers.
| * | | | Remove unused argument to visited trackers.Tor Egge2022-11-155-9/+5
| |/ / /
* | | | Merge pull request #24875 from ↵Henning Baldersheim2022-11-152-3/+11
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | vespa-engine/balder/reduce-number-of-flush-threads - If less than 16G memory only use single flush thread.
| * | | | Update ↵Henning Baldersheim2022-11-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | config-model/src/main/java/com/yahoo/vespa/model/search/NodeResourcesTuning.java Co-authored-by: Geir Storli <geirst@yahooinc.com>
| * | | | Update ↵Henning Baldersheim2022-11-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | config-model/src/main/java/com/yahoo/vespa/model/search/NodeResourcesTuning.java Co-authored-by: Geir Storli <geirst@yahooinc.com>
| * | | | - If less than 16G memory only use single flush thread.Henning Baldersheim2022-11-152-3/+11
| | |_|/ | |/| | | | | | | | | | - No more than 1 flushtread per 8 vcpus.
* | | | Merge pull request #24879 from ↵Henning Baldersheim2022-11-152-6/+44
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | vespa-engine/hmusum/skip-adding-file-if-it-already-exists No need to add file if it already exists [run-systemtest]
| * | | | No need to add file if it already existsHarald Musum2022-11-152-6/+44
| | | | |
* | | | | Merge pull request #24880 from vespa-engine/bratseth/allow-host-sharingJon Bratseth2022-11-1517-36/+62
|\ \ \ \ \ | |_|_|/ / |/| | | | Separate dynamic provisioning and host sharing