Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove CGroupV1 | Håkon Hallingstad | 2023-04-21 | 3 | -114/+14 |
| | |||||
* | Drop documents in node-admin if report is set | Valerij Fredriksen | 2023-04-18 | 1 | -0/+55 |
| | |||||
* | Merge pull request #26733 from vespa-engine/freva/propagate-created | Valerij Fredriksen | 2023-04-13 | 2 | -3/+24 |
|\ | | | | | Report core created timestamp as last modified time | ||||
| * | Report core created timestamp as last modified time | Valerij Fredriksen | 2023-04-13 | 2 | -3/+24 |
| | | |||||
* | | Rename non-rotated files on final sync | Valerij Fredriksen | 2023-04-13 | 1 | -2/+4 |
|/ | |||||
* | Set and propagate coredump type | Valerij Fredriksen | 2023-04-12 | 1 | -1/+4 |
| | |||||
* | Add cloud account to node spec | Valerij Fredriksen | 2023-03-13 | 1 | -1/+2 |
| | |||||
* | Follow API change | Valerij Fredriksen | 2023-02-24 | 1 | -1/+2 |
| | |||||
* | Add unit test for VersionedIpAddress. | gjoranv | 2023-02-19 | 1 | -0/+62 |
| | |||||
* | Make wg key non-optional in WireguardPeer. | gjoranv | 2023-02-18 | 2 | -3/+4 |
| | |||||
* | Filter exclave nodes without wg key from node repo client. | gjoranv | 2023-02-18 | 1 | -5/+4 |
| | |||||
* | Only include configservers with wg pubkey in wireguard response. | gjoranv | 2023-02-18 | 1 | -5/+2 |
| | |||||
* | Removed unused classes related to parameter store for wireguard. | gjoranv | 2023-02-17 | 2 | -45/+0 |
| | |||||
* | Remove debug log. | gjoranv | 2023-02-17 | 1 | -1/+0 |
| | | | Co-authored-by: Valerij Fredriksen <freva@users.noreply.github.com> | ||||
* | Rename to WireguardPeer | gjoranv | 2023-02-17 | 3 | -11/+10 |
| | |||||
* | Make wireguard peers comparable on hostname. | gjoranv | 2023-02-17 | 2 | -1/+35 |
| | |||||
* | Implement getting exclave nodes in node repo client. | gjoranv | 2023-02-17 | 2 | -13/+36 |
| | |||||
* | Update test. | gjoranv | 2023-02-16 | 1 | -2/+2 |
| | |||||
* | Add unit test for /nodes/v2/wireguard | gjoranv | 2023-02-16 | 1 | -0/+28 |
| | |||||
* | Implement nodes/v2/wireguard support in client. | gjoranv | 2023-02-16 | 1 | -0/+6 |
| | |||||
* | Allow getting and patching wg pubkey from/to node repo. | gjoranv | 2023-02-13 | 1 | -3/+16 |
| | | | | + Add missing 'trustStore' to NodeAttributes.hashCode | ||||
* | Use a list of wg tasks, instead of an optional. | gjoranv | 2023-02-08 | 2 | -2/+2 |
| | |||||
* | Remove 'ip' from TenantParameters, was not useful. | gjoranv | 2023-02-06 | 1 | -2/+1 |
| | |||||
* | Collect GPU metrics | Martin Polden | 2023-02-02 | 2 | -10/+61 |
| | |||||
* | Throw `ConvergenceException` instead of `IllegalStateException` | Tor Brede Vekterli | 2023-02-01 | 1 | -3/+4 |
| | |||||
* | Fail closed when no core dump encryption public key is found | Tor Brede Vekterli | 2023-02-01 | 1 | -12/+9 |
| | |||||
* | Upgrade to gcc 12 | Henning Baldersheim | 2023-01-19 | 1 | -1/+1 |
| | |||||
* | Just use Streams.toList as that is unmdifiable. | Henning Baldersheim | 2023-01-18 | 1 | -1/+1 |
| | |||||
* | Revert "Revert "open wireguard port for config servers"" | Andreas Eriksen | 2023-01-16 | 1 | -54/+61 |
| | |||||
* | Revert "open wireguard port for config servers (#25586)" | Henning Baldersheim | 2023-01-16 | 1 | -61/+54 |
| | | | | This reverts commit 2ee6905f0c6535fe95cc0516e4634f3ac37414b2. | ||||
* | open wireguard port for config servers (#25586) | Andreas Eriksen | 2023-01-16 | 1 | -54/+61 |
| | |||||
* | Resolve /proc/cpuinfo with test filesystem | Valerij Fredriksen | 2023-01-10 | 1 | -0/+2 |
| | |||||
* | Use Path.of() instead to avoid extra import | Valerij Fredriksen | 2023-01-10 | 3 | -12/+14 |
| | |||||
* | Update expected token with new token version | Tor Brede Vekterli | 2023-01-05 | 1 | -1/+1 |
| | |||||
* | Use ChaCha20-Poly1305 instead of AES-GCM for shared key-based crypto | Tor Brede Vekterli | 2023-01-05 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | This is to get around the limitation where AES GCM can only produce a maximum of 64 GiB of ciphertext for a particular <key, IV> pair before its security properties break down. ChaCha20-Poly1305 does not have any practical limitations here. ChaCha20-Poly1305 uses a 256-bit key whereas the shared key is 128 bits. A HKDF is used to internally expand the key material to 256 bits. To let token based decryption be fully backwards compatible, introduce a token version 2. V1 tokens will be decrypted with AES-GCM 128, while V2 tokens use ChaCha20-Poly1305. As a bonus, cryptographic operations will generally be _faster_ after this cipher change, as we use BouncyCastle ciphers and these do not use any native AES instructions. ChaCha20-Poly1305 is usually considerably faster when running without specialized hardware support. An ad-hoc experiment with a large ciphertext showed a near 70% performance increase over AES-GCM 128. | ||||
* | Avoid uploading metrics-proxy access logs | jonmv | 2023-01-03 | 1 | -0/+13 |
| | |||||
* | Merge pull request #25279 from ↵ | Håkon Hallingstad | 2022-12-21 | 2 | -8/+30 |
|\ | | | | | | | | | vespa-engine/revert-25274-revert-25247-bjormel/yum_--disablerepo Revert "Revert "support for disablerepo in yum command"" | ||||
| * | do not disable other repos by default | bjormel | 2022-12-19 | 1 | -4/+19 |
| | | |||||
| * | test for disable other repos | bjormel | 2022-12-19 | 1 | -0/+6 |
| | | |||||
| * | Revert "Revert "support for disablerepo in yum command"" | Bjørn Meland | 2022-12-16 | 2 | -13/+14 |
| | | |||||
* | | Clean up /opt/vespa/var/tmp in container | bjormel | 2022-12-18 | 1 | -0/+4 |
|/ | |||||
* | Revert "support for disablerepo in yum command" | Bjørn Meland | 2022-12-15 | 2 | -14/+13 |
| | |||||
* | default '--disablerepo=*' | bjormel | 2022-12-14 | 1 | -5/+5 |
| | |||||
* | Change order of enable and disable | bjormel | 2022-12-13 | 1 | -8/+8 |
| | |||||
* | yum --disablerepo | bjormel | 2022-12-13 | 1 | -8/+9 |
| | |||||
* | Wg parameter store (#25225) | gjoranv | 2022-12-13 | 2 | -0/+46 |
| | | | | | | | * Remove unused import * Add a parameter store for Wireguard and a model for its parameters Co-authored-by: gjoranv <gv@verizonmedia.com> | ||||
* | Create file with correct permissions | Håkon Hallingstad | 2022-12-06 | 2 | -4/+3 |
| | |||||
* | Revert "Revert collect(Collectors.toList())" | Henning Baldersheim | 2022-12-04 | 4 | -4/+4 |
| | |||||
* | Revert collect(Collectors.toList()) | Henning Baldersheim | 2022-12-04 | 4 | -4/+4 |
| | |||||
* | collect(Collectors.toList()) -> toList() | Henning Baldersheim | 2022-12-02 | 4 | -4/+4 |
| |