Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Set reservation expiry to 20 minutes in all zones | Harald Musum | 2018-05-09 | 1 | -2/+1 |
| | | | | | Issues seen with too low value in staging and we need just as long time in non-prod zones as in prod zones | ||||
* | Merge pull request #5808 from ↵ | gjoranv | 2018-05-08 | 1 | -1/+1 |
|\ | | | | | | | | | vespa-engine/bratseth/remove-even-more-junit-framework-usage Use new junit API | ||||
| * | Use new junit API | Jon Bratseth | 2018-05-07 | 1 | -1/+1 |
| | | |||||
* | | Improve logging where authorization fails | Bjørn Christian Seime | 2018-05-07 | 2 | -3/+3 |
|/ | |||||
* | Improve error message for nodes with unknown openstack-id | Bjørn Christian Seime | 2018-05-07 | 1 | -1/+6 |
| | |||||
* | Don't lookup configserver nodes in NodeIdentifier | Bjørn Christian Seime | 2018-05-07 | 2 | -6/+1 |
| | |||||
* | Remove stray method | Håkon Hallingstad | 2018-05-06 | 1 | -5/+0 |
| | |||||
* | Support patching openstack ID | Håkon Hallingstad | 2018-05-05 | 6 | -1/+18 |
| | |||||
* | Merge pull request #5784 from vespa-engine/freva/infra-app-provision | Valerij Fredriksen | 2018-05-04 | 15 | -12/+611 |
|\ | | | | | Infrastructure app provision | ||||
| * | Code review fixes | Valerij Fredriksen | 2018-05-04 | 6 | -30/+42 |
| | | |||||
| * | Add InfrastructureProvisioner | Valerij Fredriksen | 2018-05-04 | 5 | -3/+262 |
| | | |||||
| * | Add REST API to update/view infrastructure versions | Valerij Fredriksen | 2018-05-04 | 6 | -6/+120 |
| | | |||||
| * | Create persistence for infrastructure versions | Valerij Fredriksen | 2018-05-04 | 5 | -3/+217 |
| | | |||||
* | | Add configserver Athenz identity as trusted service | Bjørn Christian Seime | 2018-05-04 | 3 | -9/+29 |
| | | |||||
* | | Create constants for identity names | Bjørn Christian Seime | 2018-05-04 | 1 | -18/+20 |
| | | |||||
* | | Identity proxy and configserver hosts in NodeIdentifier | Bjørn Christian Seime | 2018-05-04 | 2 | -0/+46 |
|/ | |||||
* | Remove usage of junit.framework | Jon Bratseth | 2018-04-30 | 3 | -13/+9 |
| | |||||
* | Replace 'Authentication' with 'Identification' for AuthenticationFilter and ↵ | Bjørn Christian Seime | 2018-04-25 | 5 | -42/+39 |
| | | | | friends | ||||
* | Make dependency on AuthenticationFilter more explicit | Bjørn Christian Seime | 2018-04-25 | 2 | -1/+5 |
| | |||||
* | Add unit test for AWS host certificates | Bjørn Christian Seime | 2018-04-25 | 2 | -7/+34 |
| | |||||
* | Modify AuthorizationFilter to assume AuthenticationFilter is part of filter ↵ | Bjørn Christian Seime | 2018-04-25 | 3 | -14/+11 |
| | | | | chain | ||||
* | Include both identity name and hostname in getName() | Bjørn Christian Seime | 2018-04-25 | 1 | -1/+5 |
| | |||||
* | Add separate node authentication filter | Bjørn Christian Seime | 2018-04-25 | 2 | -0/+54 |
| | |||||
* | Implement toString, equals and hashCode for NodePrincipal | Bjørn Christian Seime | 2018-04-24 | 1 | -0/+24 |
| | |||||
* | Allow us to reset hardwarefailure by passing 'null' over REST | toby | 2018-04-23 | 1 | -2/+2 |
| | |||||
* | Only remove node if docker container and tenant | Valerij Fredriksen | 2018-04-20 | 2 | -4/+24 |
| | |||||
* | Use NodePrincipal in Authorizer to distinguish between identity and hostname | Bjørn Christian Seime | 2018-04-20 | 3 | -79/+97 |
| | |||||
* | Accept Athenz certs from controller in HostAuthenticator | Bjørn Christian Seime | 2018-04-20 | 4 | -18/+77 |
| | | | | | - Change NodePrincipal to better distinguish between different types of identities - Change HostAuthenticator to allow any Athenz identity | ||||
* | Merge pull request #5636 from ↵ | Harald Musum | 2018-04-19 | 2 | -1/+27 |
|\ | | | | | | | | | vespa-engine/bratseth/load-models-in-use-only-in-dev Load the minimal set of models needed in dev | ||||
| * | Load the minimal set of models needed in dev | Jon Bratseth | 2018-04-19 | 2 | -1/+27 |
| | | |||||
* | | Merge pull request #5630 from vespa-engine/bjorncs/configserver-authz-filter | Bjørn Christian Seime | 2018-04-19 | 5 | -23/+322 |
|\ \ | |/ |/| | Bjorncs/configserver authz filter | ||||
| * | Rename TlsPrincipal -> NodePrincipal | Bjørn Christian Seime | 2018-04-19 | 4 | -11/+9 |
| | | |||||
| * | Allow Athenz AWS certificates | Bjørn Christian Seime | 2018-04-19 | 1 | -1/+1 |
| | | |||||
| * | Export package containing TlsPrincipal | Bjørn Christian Seime | 2018-04-19 | 1 | -0/+3 |
| | | |||||
| * | Support Athenz certs from Openstack and Vespa in authorization filter | Bjørn Christian Seime | 2018-04-19 | 4 | -23/+321 |
| | | | | | | | | | | | | - Add HostAuthenticator that resolves node (hostname) from certs - Add TlsPrincipal that represents an authenticated node - Rewrite Authorization filter to use HostAuthenticator | ||||
* | | Allow more than one node in a cluster on same parent host in cd and non-prod | Harald Musum | 2018-04-19 | 3 | -2/+52 |
|/ | |||||
* | Rename getCommonNames -> getSubjectCommonNames | Bjørn Christian Seime | 2018-04-17 | 1 | -1/+1 |
| | |||||
* | Remove apache dep | Valerij Fredriksen | 2018-04-17 | 1 | -2/+1 |
| | |||||
* | Whitelist hostnames in Authorizer | Valerij Fredriksen | 2018-04-17 | 4 | -21/+30 |
| | |||||
* | Merge pull request #5556 from vespa-engine/mpolden/remove-controllerdb | Martin Polden | 2018-04-16 | 1 | -1/+1 |
|\ | | | | | Move all controller persistence to ZooKeeper | ||||
| * | Fix typo | Martin Polden | 2018-04-12 | 1 | -1/+1 |
| | | |||||
* | | Merge pull request #5578 from ↵ | Martin Polden | 2018-04-13 | 1 | -3/+2 |
|\ \ | | | | | | | | | | | | | vespa-engine/mpolden/health-status-use-rotation-name Use rotation FQDN when checking health status | ||||
| * | | Simplify | Martin Polden | 2018-04-13 | 1 | -3/+2 |
| |/ | |||||
* / | Make set node to dirty recursive | Valerij Fredriksen | 2018-04-13 | 6 | -12/+90 |
|/ | |||||
* | Merge pull request #5513 from vespa-engine/smorgrav/aclmaintainer | Torbjørn Smørgrav | 2018-04-12 | 6 | -13/+45 |
|\ | | | | | AclMaintainer with dual stack and cfg/proxy container support | ||||
| * | tokenize arguments to docker exec, simplyfy ports for iptables | toby | 2018-04-11 | 1 | -7/+7 |
| | | |||||
| * | Update RestAPI with trusted ports | toby | 2018-04-10 | 4 | -5/+12 |
| | | |||||
| * | Add trusted ports to the NodeAcl object | toby | 2018-04-09 | 3 | -6/+31 |
| | | |||||
* | | Remove unnecessary override for CD now that cache is enabled by default | Harald Musum | 2018-04-10 | 1 | -2/+1 |
|/ | |||||
* | Merge pull request #5484 from vespa-engine/bratseth/nonfunctional-changes | gjoranv | 2018-04-09 | 2 | -3/+5 |
|\ | | | | | Nonfunctional changes |