This project is mirrored from https://gitee.com/mirrors/nomad.git. Pull mirroring failed .
Repository mirroring has been paused due to too many failed attempts. It can be resumed by a project maintainer.
  1. 30 Sep, 2020 1 commit
  2. 31 Mar, 2020 2 commits
  3. 09 Dec, 2019 1 commit
    • Seth Hoenig's avatar
      tests: swap lib/freeport for tweaked helper/freeport · 94c60b4c
      Seth Hoenig authored
      Copy the updated version of freeport (sdk/freeport), and tweak it for use
      in Nomad tests. This means staying below port 10000 to avoid conflicts with
      the lib/freeport that is still transitively used by the old version of
      consul that we vendor. Also provide implementations to find ephemeral ports
      of macOS and Windows environments.
      
      Ports acquired through freeport are supposed to be returned to freeport,
      which this change now also introduces. Many tests are modified to include
      calls to a cleanup function for Server objects.
      
      This should help quite a bit with some flakey tests, but not all of them.
      Our port problems will not go away completely until we upgrade our vendor
      version of consul. With Go modules, we'll probably do a 'replace' to swap
      out other copies of freeport with the one now in 'nomad/helper/freeport'.
      94c60b4c
  4. 26 Nov, 2019 1 commit
  5. 08 Oct, 2019 1 commit
    • Mahmood Ali's avatar
      acl: check ACL against object namespace · 7a387842
      Mahmood Ali authored
      Fix a bug where a millicious user can access or manipulate an alloc in a
      namespace they don't have access to.  The allocation endpoints perform
      ACL checks against the request namespace, not the allocation namespace,
      and performs the allocation lookup independently from namespaces.
      
      Here, we check that the requested can access the alloc namespace
      regardless of the declared request namespace.
      
      Ideally, we'd enforce that the declared request namespace matches
      the actual allocation namespace.  Unfortunately, we haven't documented
      alloc endpoints as namespaced functions; we suspect starting to enforce
      this will be very disruptive and inappropriate for a nomad point
      release.  As such, we maintain current behavior that doesn't require
      passing the proper namespace in request.  A future major release may
      start enforcing checking declared namespace.
      7a387842
  6. 26 Sep, 2019 1 commit
  7. 29 Jun, 2019 1 commit
  8. 21 May, 2019 1 commit
  9. 19 Jan, 2019 1 commit
  10. 17 Jan, 2019 2 commits
  11. 10 Jan, 2019 1 commit
  12. 13 Nov, 2018 2 commits
  13. 17 Oct, 2018 1 commit
  14. 16 Oct, 2018 4 commits
  15. 13 Jun, 2018 2 commits
  16. 12 Jun, 2018 1 commit
  17. 15 Feb, 2018 7 commits