Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Revert "Add identity type to unique instance id and signed identity document" | Jon Marius Venstad | 2018-06-03 | 1 | -2/+1 |
| | | | | This reverts commit cfa6d7bb63402b83c84a16411a207e946de33246. | ||||
* | Merge pull request #6037 from vespa-engine/bjorncs/new-unique-instance-id | Morten Tokle | 2018-06-01 | 1 | -1/+2 |
|\ | | | | | Bjorncs/new unique instance | ||||
| * | Add identity type to unique instance id and signed identity document | Bjørn Christian Seime | 2018-05-31 | 1 | -1/+2 |
| | | |||||
* | | Merge pull request #6031 from ↵ | Henning Baldersheim | 2018-05-31 | 1 | -6/+36 |
|\ \ | | | | | | | | | | | | | vespa-engine/balder/ensure-we-only-create-one-new-cache Ensure we do not race on cache creation and create many caches that w… | ||||
| * | | Throw IllegalStateException instead of returning null. | Henning Baldersheim | 2018-05-31 | 1 | -1/+6 |
| | | | |||||
| * | | Ensure we do not race on cache creation and create many caches that we just ↵ | Henning Baldersheim | 2018-05-31 | 1 | -6/+31 |
| |/ | | | | | | | throw away. | ||||
* | | Use guava supplier for node list | Morten Tokle | 2018-05-31 | 1 | -19/+6 |
| | | |||||
* | | Keep a copy of node repository to prevent frequent zk access | Morten Tokle | 2018-05-31 | 1 | -1/+21 |
|/ | |||||
* | Use lower expiry times and shorter intervals for non-main systems | Harald Musum | 2018-05-29 | 1 | -3/+5 |
| | |||||
* | Allow vespaVersion PATCH | Valerij Fredriksen | 2018-05-23 | 1 | -0/+1 |
| | |||||
* | Merge pull request #5860 from vespa-engine/freva/remove-cfg-special-handling | Martin Polden | 2018-05-22 | 14 | -115/+185 |
|\ | | | | | Remove special handling of config servers in ACL | ||||
| * | Use existing method to get config servers | Valerij Fredriksen | 2018-05-15 | 2 | -7/+1 |
| | | |||||
| * | Remove special handling of config servers in ACL | Valerij Fredriksen | 2018-05-14 | 15 | -115/+191 |
| | | |||||
* | | Simplify NodePatcher | Valerij Fredriksen | 2018-05-18 | 2 | -25/+22 |
| | | |||||
* | | Remove unneeded Jackson dependency from node-repository | Bjørn Christian Seime | 2018-05-16 | 1 | -15/+0 |
|/ | | | | - Dependency was transitively including jackson-databind with compile scope | ||||
* | Set reservation expiry to 20 minutes in all zones | Harald Musum | 2018-05-09 | 1 | -2/+1 |
| | | | | | Issues seen with too low value in staging and we need just as long time in non-prod zones as in prod zones | ||||
* | Merge pull request #5808 from ↵ | gjoranv | 2018-05-08 | 1 | -1/+1 |
|\ | | | | | | | | | vespa-engine/bratseth/remove-even-more-junit-framework-usage Use new junit API | ||||
| * | Use new junit API | Jon Bratseth | 2018-05-07 | 1 | -1/+1 |
| | | |||||
* | | Improve logging where authorization fails | Bjørn Christian Seime | 2018-05-07 | 2 | -3/+3 |
|/ | |||||
* | Improve error message for nodes with unknown openstack-id | Bjørn Christian Seime | 2018-05-07 | 1 | -1/+6 |
| | |||||
* | Don't lookup configserver nodes in NodeIdentifier | Bjørn Christian Seime | 2018-05-07 | 2 | -6/+1 |
| | |||||
* | Remove stray method | Håkon Hallingstad | 2018-05-06 | 1 | -5/+0 |
| | |||||
* | Support patching openstack ID | Håkon Hallingstad | 2018-05-05 | 6 | -1/+18 |
| | |||||
* | Merge pull request #5784 from vespa-engine/freva/infra-app-provision | Valerij Fredriksen | 2018-05-04 | 15 | -12/+611 |
|\ | | | | | Infrastructure app provision | ||||
| * | Code review fixes | Valerij Fredriksen | 2018-05-04 | 6 | -30/+42 |
| | | |||||
| * | Add InfrastructureProvisioner | Valerij Fredriksen | 2018-05-04 | 5 | -3/+262 |
| | | |||||
| * | Add REST API to update/view infrastructure versions | Valerij Fredriksen | 2018-05-04 | 6 | -6/+120 |
| | | |||||
| * | Create persistence for infrastructure versions | Valerij Fredriksen | 2018-05-04 | 5 | -3/+217 |
| | | |||||
* | | Add configserver Athenz identity as trusted service | Bjørn Christian Seime | 2018-05-04 | 3 | -9/+29 |
| | | |||||
* | | Create constants for identity names | Bjørn Christian Seime | 2018-05-04 | 1 | -18/+20 |
| | | |||||
* | | Identity proxy and configserver hosts in NodeIdentifier | Bjørn Christian Seime | 2018-05-04 | 2 | -0/+46 |
|/ | |||||
* | Remove usage of junit.framework | Jon Bratseth | 2018-04-30 | 3 | -13/+9 |
| | |||||
* | Replace 'Authentication' with 'Identification' for AuthenticationFilter and ↵ | Bjørn Christian Seime | 2018-04-25 | 5 | -42/+39 |
| | | | | friends | ||||
* | Make dependency on AuthenticationFilter more explicit | Bjørn Christian Seime | 2018-04-25 | 2 | -1/+5 |
| | |||||
* | Add unit test for AWS host certificates | Bjørn Christian Seime | 2018-04-25 | 2 | -7/+34 |
| | |||||
* | Modify AuthorizationFilter to assume AuthenticationFilter is part of filter ↵ | Bjørn Christian Seime | 2018-04-25 | 3 | -14/+11 |
| | | | | chain | ||||
* | Include both identity name and hostname in getName() | Bjørn Christian Seime | 2018-04-25 | 1 | -1/+5 |
| | |||||
* | Add separate node authentication filter | Bjørn Christian Seime | 2018-04-25 | 2 | -0/+54 |
| | |||||
* | Implement toString, equals and hashCode for NodePrincipal | Bjørn Christian Seime | 2018-04-24 | 1 | -0/+24 |
| | |||||
* | Allow us to reset hardwarefailure by passing 'null' over REST | toby | 2018-04-23 | 1 | -2/+2 |
| | |||||
* | Only remove node if docker container and tenant | Valerij Fredriksen | 2018-04-20 | 2 | -4/+24 |
| | |||||
* | Use NodePrincipal in Authorizer to distinguish between identity and hostname | Bjørn Christian Seime | 2018-04-20 | 3 | -79/+97 |
| | |||||
* | Accept Athenz certs from controller in HostAuthenticator | Bjørn Christian Seime | 2018-04-20 | 4 | -18/+77 |
| | | | | | - Change NodePrincipal to better distinguish between different types of identities - Change HostAuthenticator to allow any Athenz identity | ||||
* | Merge pull request #5636 from ↵ | Harald Musum | 2018-04-19 | 2 | -1/+27 |
|\ | | | | | | | | | vespa-engine/bratseth/load-models-in-use-only-in-dev Load the minimal set of models needed in dev | ||||
| * | Load the minimal set of models needed in dev | Jon Bratseth | 2018-04-19 | 2 | -1/+27 |
| | | |||||
* | | Merge pull request #5630 from vespa-engine/bjorncs/configserver-authz-filter | Bjørn Christian Seime | 2018-04-19 | 5 | -23/+322 |
|\ \ | |/ |/| | Bjorncs/configserver authz filter | ||||
| * | Rename TlsPrincipal -> NodePrincipal | Bjørn Christian Seime | 2018-04-19 | 4 | -11/+9 |
| | | |||||
| * | Allow Athenz AWS certificates | Bjørn Christian Seime | 2018-04-19 | 1 | -1/+1 |
| | | |||||
| * | Export package containing TlsPrincipal | Bjørn Christian Seime | 2018-04-19 | 1 | -0/+3 |
| | | |||||
| * | Support Athenz certs from Openstack and Vespa in authorization filter | Bjørn Christian Seime | 2018-04-19 | 4 | -23/+321 |
| | | | | | | | | | | | | - Add HostAuthenticator that resolves node (hostname) from certs - Add TlsPrincipal that represents an authenticated node - Rewrite Authorization filter to use HostAuthenticator |