summaryrefslogtreecommitdiffstats
path: root/node-repository
Commit message (Collapse)AuthorAgeFilesLines
* Set reservation expiry to 20 minutes in all zonesHarald Musum2018-05-091-2/+1
| | | | | Issues seen with too low value in staging and we need just as long time in non-prod zones as in prod zones
* Merge pull request #5808 from ↵gjoranv2018-05-081-1/+1
|\ | | | | | | | | vespa-engine/bratseth/remove-even-more-junit-framework-usage Use new junit API
| * Use new junit APIJon Bratseth2018-05-071-1/+1
| |
* | Improve logging where authorization failsBjørn Christian Seime2018-05-072-3/+3
|/
* Improve error message for nodes with unknown openstack-idBjørn Christian Seime2018-05-071-1/+6
|
* Don't lookup configserver nodes in NodeIdentifierBjørn Christian Seime2018-05-072-6/+1
|
* Remove stray methodHåkon Hallingstad2018-05-061-5/+0
|
* Support patching openstack IDHåkon Hallingstad2018-05-056-1/+18
|
* Merge pull request #5784 from vespa-engine/freva/infra-app-provisionValerij Fredriksen2018-05-0415-12/+611
|\ | | | | Infrastructure app provision
| * Code review fixesValerij Fredriksen2018-05-046-30/+42
| |
| * Add InfrastructureProvisionerValerij Fredriksen2018-05-045-3/+262
| |
| * Add REST API to update/view infrastructure versionsValerij Fredriksen2018-05-046-6/+120
| |
| * Create persistence for infrastructure versionsValerij Fredriksen2018-05-045-3/+217
| |
* | Add configserver Athenz identity as trusted serviceBjørn Christian Seime2018-05-043-9/+29
| |
* | Create constants for identity namesBjørn Christian Seime2018-05-041-18/+20
| |
* | Identity proxy and configserver hosts in NodeIdentifierBjørn Christian Seime2018-05-042-0/+46
|/
* Remove usage of junit.frameworkJon Bratseth2018-04-303-13/+9
|
* Replace 'Authentication' with 'Identification' for AuthenticationFilter and ↵Bjørn Christian Seime2018-04-255-42/+39
| | | | friends
* Make dependency on AuthenticationFilter more explicitBjørn Christian Seime2018-04-252-1/+5
|
* Add unit test for AWS host certificatesBjørn Christian Seime2018-04-252-7/+34
|
* Modify AuthorizationFilter to assume AuthenticationFilter is part of filter ↵Bjørn Christian Seime2018-04-253-14/+11
| | | | chain
* Include both identity name and hostname in getName()Bjørn Christian Seime2018-04-251-1/+5
|
* Add separate node authentication filterBjørn Christian Seime2018-04-252-0/+54
|
* Implement toString, equals and hashCode for NodePrincipalBjørn Christian Seime2018-04-241-0/+24
|
* Allow us to reset hardwarefailure by passing 'null' over RESTtoby2018-04-231-2/+2
|
* Only remove node if docker container and tenantValerij Fredriksen2018-04-202-4/+24
|
* Use NodePrincipal in Authorizer to distinguish between identity and hostnameBjørn Christian Seime2018-04-203-79/+97
|
* Accept Athenz certs from controller in HostAuthenticatorBjørn Christian Seime2018-04-204-18/+77
| | | | | - Change NodePrincipal to better distinguish between different types of identities - Change HostAuthenticator to allow any Athenz identity
* Merge pull request #5636 from ↵Harald Musum2018-04-192-1/+27
|\ | | | | | | | | vespa-engine/bratseth/load-models-in-use-only-in-dev Load the minimal set of models needed in dev
| * Load the minimal set of models needed in devJon Bratseth2018-04-192-1/+27
| |
* | Merge pull request #5630 from vespa-engine/bjorncs/configserver-authz-filterBjørn Christian Seime2018-04-195-23/+322
|\ \ | |/ |/| Bjorncs/configserver authz filter
| * Rename TlsPrincipal -> NodePrincipalBjørn Christian Seime2018-04-194-11/+9
| |
| * Allow Athenz AWS certificatesBjørn Christian Seime2018-04-191-1/+1
| |
| * Export package containing TlsPrincipalBjørn Christian Seime2018-04-191-0/+3
| |
| * Support Athenz certs from Openstack and Vespa in authorization filterBjørn Christian Seime2018-04-194-23/+321
| | | | | | | | | | | | - Add HostAuthenticator that resolves node (hostname) from certs - Add TlsPrincipal that represents an authenticated node - Rewrite Authorization filter to use HostAuthenticator
* | Allow more than one node in a cluster on same parent host in cd and non-prodHarald Musum2018-04-193-2/+52
|/
* Rename getCommonNames -> getSubjectCommonNamesBjørn Christian Seime2018-04-171-1/+1
|
* Remove apache depValerij Fredriksen2018-04-171-2/+1
|
* Whitelist hostnames in AuthorizerValerij Fredriksen2018-04-174-21/+30
|
* Merge pull request #5556 from vespa-engine/mpolden/remove-controllerdbMartin Polden2018-04-161-1/+1
|\ | | | | Move all controller persistence to ZooKeeper
| * Fix typoMartin Polden2018-04-121-1/+1
| |
* | Merge pull request #5578 from ↵Martin Polden2018-04-131-3/+2
|\ \ | | | | | | | | | | | | vespa-engine/mpolden/health-status-use-rotation-name Use rotation FQDN when checking health status
| * | SimplifyMartin Polden2018-04-131-3/+2
| |/
* / Make set node to dirty recursiveValerij Fredriksen2018-04-136-12/+90
|/
* Merge pull request #5513 from vespa-engine/smorgrav/aclmaintainerTorbjørn Smørgrav2018-04-126-13/+45
|\ | | | | AclMaintainer with dual stack and cfg/proxy container support
| * tokenize arguments to docker exec, simplyfy ports for iptablestoby2018-04-111-7/+7
| |
| * Update RestAPI with trusted portstoby2018-04-104-5/+12
| |
| * Add trusted ports to the NodeAcl objecttoby2018-04-093-6/+31
| |
* | Remove unnecessary override for CD now that cache is enabled by defaultHarald Musum2018-04-101-2/+1
|/
* Merge pull request #5484 from vespa-engine/bratseth/nonfunctional-changesgjoranv2018-04-092-3/+5
|\ | | | | Nonfunctional changes