Skip to content
GitLab
Switch branch/tag
This project is mirrored from https://gitee.com/mirrors/nomad.git. Pull mirroring failed .
Repository mirroring has been paused due to too many failed attempts. It can be resumed by a project maintainer.
  1. 19 Oct, 2022 12 commits
  3. 18 Oct, 2022 9 commits
  5. 17 Oct, 2022 4 commits
    • Tim Gross's avatar
      make version checks specific to region (1.4.x) (#14912) · 1b434184
      Tim Gross authored 
      * One-time tokens are not replicated between regions, so we don't want to enforce
  that the version check across all of serf, just members in the same region.
* Scheduler: Disconnected clients handling is specific to a single region, so we
  don't want to enforce that the version check across all of serf, just members in
  the same region.
* Variables: enforce version check in Apply RPC
* Cleans up a bunch of legacy checks.

This changeset is specific to 1.4.x and the changes for previous versions of
Nomad will be manually backported in a separate PR.
      1b434184
    • Seth Hoenig's avatar
      cleanup: remove another string-set helper function (#14902) · aa9790cf
      Seth Hoenig authored
      aa9790cf
    • Tim Gross's avatar
      keyring: filter by region before checking version (#14901) · f6838f6c
      Tim Gross authored 
      In #14821 we fixed a panic that can happen if a leadership election happens in
the middle of an upgrade. That fix checks that all servers are at the minimum
version before initializing the keyring (which blocks evaluation processing
during trhe upgrade). But the check we implemented is over the serf membership,
which includes servers in any federated regions, which don't necessarily have
the same upgrade cycle.

Filter the version check by the leader's region.

Also bump up log levels of major keyring operations
      f6838f6c
    • Kevin Wang's avatar
      fix: website broken links (#14904) · 57dc7c2a
      Kevin Wang authored 
      
* fix: website broken links

* fix up keyring-rotate link
Co-authored-by: default avatarTim Gross <tgross@hashicorp.com>
      57dc7c2a
  7. 14 Oct, 2022 2 commits
    • Michael Schurter's avatar
      test: extend timing and output of overlap e2e test (#14894) · 9cdbbbb5
      Michael Schurter authored 
      Keeps failing in the nightly e2e test with unhelpful output like:
```
Failed
=== RUN   TestOverlap
    overlap_test.go:92: Followup job overlap93ee1d2b blocked. Sleeping for the rest of overlap48c26c39's shutdown_delay (9.2/10s)
    overlap_test.go:105: 1500/2000 retries reached for github.com/hashicorp/nomad/e2e/overlap.TestOverlap (err=timed out before an allocation was found for overlap93ee1d2b)
    overlap_test.go:105: timeout: timed out before an allocation was found for overlap93ee1d2b
--- FAIL: TestOverlap (38.96s)
```

I have not been able to replicate it in my own e2e cluster, so I added
the EvalDump helper to add detailed eval information like:

```
=== RUN   TestOverlap
1/1 Job overlap7b0e90ec Eval c38c9919-a4f0-5baf-45f7-0702383c682a
  Type:         service
  TriggeredBy:  job-register
  Deployment:
  Status:       pending ()
  NextEval:
  PrevEval:
  BlockedEval:
   -- No placement failures --
  QueuedAllocs:
  SnapshotIdx:  0
  CreateIndex:  96
  ModifyIndex:  96

...
```

Hopefully helpful when debugging other tests as well!
      9cdbbbb5
    • Mike Nomitch's avatar
      Merge pull request #14879 from hashicorp/mnomitch/job-purge-ui · dca28796
      Mike Nomitch authored 
      Adds purge job button to UI
      dca28796
  9. 13 Oct, 2022 1 commit
  11. 12 Oct, 2022 2 commits
  13. 11 Oct, 2022 4 commits
    • Tim Gross's avatar
      docker_logger: reorder imports to save memory (#14875) · b3baaa2f
      Tim Gross authored 
      Nomad runs one logmon process and also one docker_logger process for each
running allocation. A naive look at memory usage shows 10-30 MB of RSS, but a
closer look shows that most of this memory (ex. all but ~2MB for logmon) is
shared (`Shared_Clean` in Linux pmap).

But a heap dump of docker_logger shows that it currently has an extra ~2500 KiB
of heap (anonymously-mapped unshared memory) used for init blocks coming from
the agent code (ex. mostly regexes from go-version, structs, and the Consul
SDK). The packages for running logmon, docker_logger, and executor have an init
block that parses `os.Args` to drop into their own logic, which prevents them
from loading all the rest of the agent code and saves on memory, so this was
unexpected.

It looks like we accidentally reordered the imports in main to undo some of the
work originally done in 404d2d4c. This changeset
restores the ordering. A follow-up heap dump shows this saves ~2MB of unshared
RSS per docker_logger process.
      b3baaa2f
    • Michael Schurter's avatar
      client: remove unused LogOutput and LogLevel (#14867) · f91100bd
      Michael Schurter authored 
      * client: remove unused LogOutput

* client: remove unused config.LogLevel
      f91100bd
    • Seth Hoenig's avatar
      helpers: lockfree lookup of nobody user on unix systems (#14866) · 9e9ddbdd
      Seth Hoenig authored 
      * helpers: lockfree lookup of nobody user on linux and darwin

This PR continues the nobody user lookup saga, by making the nobody
user lookup lock-free on linux and darwin.

By doing the lookup in an init block this originally broke on Windows,
where we must avoid doing the lookup at all. We can get around that
breakage by only doing the lookup on linux/darwin where the nobody
user is going to exist.

Also return the nobody user by value so that a copy is created that
cannot be modified by callers of Nobody().

* helper: move nobody code into unix file
      9e9ddbdd
    • Seth Hoenig's avatar
      servicedisco: implicit constraint for nomad v1.4 when using nsd checks (#14868) · 41be9cc2
      Seth Hoenig authored 
      This PR adds a jobspec mutator to constrain jobs making use of checks
in the nomad service provider to nomad clients of at least v1.4.0.

Before, in a mixed client version cluster it was possible to submit
an NSD job making use of checks and for that job to land on an older,
incompatible client node.

Closes #14862
      41be9cc2
  15. 10 Oct, 2022 3 commits
  17. 07 Oct, 2022 2 commits
  19. 06 Oct, 2022 1 commit

免费DevSecOps平台，让您的项目体验完整的DevSecOps流程，让项目更安全