This project is mirrored from https://gitee.com/mirrors/nomad.git. Pull mirroring failed .
Repository mirroring has been paused due to too many failed attempts. It can be resumed by a project maintainer.
  1. 28 Oct, 2020 1 commit
    • Chris Baker's avatar
      added new policy capabilities for recommendations API · 9e2eadc7
      Chris Baker authored
      state store: call-out to generic update of job recommendations from job update method
      recommendations API work, and http endpoint errors for OSS
      support for scaling polices in task block of job spec
      add query filters for ScalingPolicy list endpoint
      command: nomad scaling policy list: added -job and -type
      9e2eadc7
  2. 25 Aug, 2020 1 commit
    • Mahmood Ali's avatar
      handle when hcl parser panics · 1479f353
      Mahmood Ali authored
      Apparently `\` followed by a digit number can cause hcl parser to panic!
      Will fix in hcl library, but using a hammer to squash any similar issue
      here.
      1479f353
  3. 24 Mar, 2020 2 commits
  4. 23 Mar, 2020 2 commits
    • Lang Martin's avatar
      csi: ACLs for plugin endpoints (#7380) · 2dc95485
      Lang Martin authored
      * acl/policy: add PolicyList for global ACLs
      
      * acl/acl: plugin policy
      
      * acl/acl: maxPrivilege is required to allow "list"
      
      * nomad/csi_endpoint: enforce plugin access with PolicyPlugin
      
      * nomad/csi_endpoint: check job ACL swapped params
      
      * nomad/csi_endpoint_test: test alloc filtering
      
      * acl/policy: add namespace csi-register-plugin
      
      * nomad/job_endpoint: check csi-register-plugin ACL on registration
      
      * nomad/job_endpoint_test: add plugin job cases
      2dc95485
    • Lang Martin's avatar
      csi: implement volume ACLs (#7339) · 4573cbee
      Lang Martin authored
      * acl/policy: add the volume ACL policies
      
      * nomad/csi_endpoint: enforce ACLs for volume access
      
      * nomad/search_endpoint_oss: volume acls
      
      * acl/acl: add plugin read as a global policy
      
      * acl/policy: add PluginPolicy global cap type
      
      * nomad/csi_endpoint: check the global plugin ACL policy
      
      * nomad/mock/acl: PluginPolicy
      
      * nomad/csi_endpoint: fix list rebase
      
      * nomad/core_sched_test: new test since #7358
      
      * nomad/csi_endpoint_test: use correct permissions for list
      
      * nomad/csi_endpoint: allowCSIMount keeps ACL checks together
      
      * nomad/job_endpoint: check mount permission for jobs
      
      * nomad/job_endpoint_test: need plugin read, too
      4573cbee
  5. 21 Aug, 2019 1 commit
  6. 12 Aug, 2019 1 commit
    • Danielle Lancashire's avatar
      acl: Add HostVolume ACLs · 065688da
      Danielle Lancashire authored
      This adds an initial implementation of ACLs for HostVolumes.
      
      Because HostVolumes are a cluster-wide resource, they cannot be tied to
      a namespace, thus here we allow similar wildcard definitions based on
      their names, tied to a set of capabilities.
      
      Initially, the only available capabilities are deny, or mount. These
      may be extended in the future to allow read-fs, mount-readonly and
      similar capabilities.
      065688da
  7. 30 Apr, 2019 1 commit
    • Mahmood Ali's avatar
      Add ACL capabilities for nomad exec · 4f7bd68f
      Mahmood Ali authored
      This adds `alloc-exec` capability to allow operator to execute command into a
      running task.  Furthermore, it adds `alloc-node-exec` capability, required when
      the alloc task is raw_exec or a driver with no FSIsolation.
      4f7bd68f
  8. 01 Apr, 2019 1 commit
  9. 17 Oct, 2017 2 commits
  10. 13 Oct, 2017 1 commit
  11. 29 Sep, 2017 1 commit
  12. 26 Sep, 2017 1 commit
  13. 19 Sep, 2017 1 commit
  14. 04 Sep, 2017 2 commits