vitalif
/
etcd
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
15,329 Commits
21 Branches
406 Tags
79 MiB
Commit Graph

518 Commits (324952c12ae7fd6f3a9136391dd6467d6272a446)

Author SHA1 Message Date
Gyuho Lee 46166ad733 vendor: update 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-07-24 14:09:50 -07:00
John Millikin 91472797ff
pkg: Remove stray printfs 2019-07-10 13:33:14 +09:00
John Millikin 5824421f8b
etcdman, pkg: Rename new flags to 'hostname' 2019-07-10 09:30:02 +09:00
John Millikin 9a53601a18
etcdmain, pkg: Support peer and client TLS auth based on SAN fields. 
Etcd currently supports validating peers based on their TLS certificate's
CN field. The current best practice for creation and validation of TLS
certs is to use the Subject Alternative Name (SAN) fields instead, so that
a certificate might be issued with a unique CN and its logical
identities in the SANs.

This commit extends the peer validation logic to use Go's
`(*"crypto/x509".Certificate).ValidateHostname` function for name
validation, which allows SANs to be used for peer access control.

In addition, it allows name validation to be enabled on clients as well.
This is used when running Etcd behind an authenticating proxy, or as
an internal component in a larger system (like a Kubernetes master).
 2019-07-10 09:30:02 +09:00
Gyuho Lee 1caaa9ed4a test: test update for Go 1.12.5 and related changes 
Update to Go 1.12.5 testing. Remove deprecated unused and gosimple
pacakges, and mask staticcheck 1006. Also, fix unconvert errors related
to unnecessary type conversions and following staticcheck errors:
- remove redundant return statements
- use for range instead of for select
- use time.Since instead of time.Now().Sub
- omit comparison to bool constant
- replace T.Fatal and T.Fatalf in tests with T.Error and T.Fatalf respectively because the goroutine calls T.Fatal must be called in the same goroutine as the test
- fix error strings that should not be capitalized
- use sort.Strings(...) instead of sort.Sort(sort.StringSlice(...))
- use he status code of Canceled instead of grpc.ErrClientConnClosing which is deprecated
- use use status.Errorf instead of grpc.Errorf which is deprecated

Related #10528 #10438
 2019-06-05 17:02:05 -04:00
Gyuho Lee 34bd797e67 *: revert module import paths 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-05-28 15:39:35 -07:00
shivaramr 9150bf52d6 go modules: Fix module path version to include version number 2019-04-26 15:29:50 -07:00
Gyuho Lee 52391e3be7 pkg/logutil: define default zap.Config 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-02-21 10:56:53 -08:00
Manjunath A Kumatagi 45d09f0508 pkg/transport: Limit InvalidCipherSuites to TLS12 2019-02-07 08:18:00 -06:00
Hitoshi Mitake 65887ae1b4 pkg, clientv3, etcdmain: let grpcproxy rise an error when its cert has non empty CN 
Fix https://github.com/etcd-io/etcd/issues/9521
 2019-01-25 00:43:57 +09:00
caoming 8f383852e2 pkg/testutil: add blankline between two functions 2019-01-04 09:44:57 +08:00
Shin'ya Ueoka aa4313a55a *: fix github links 2018-11-10 11:14:18 +09:00
Sam Batschelet fa35126ef8
*: add client support for discovery-srv-name 
Signed-off-by: Sam Batschelet <sbatsche@redhat.com>
 2018-11-09 10:13:04 -05:00
Gyuho Lee 7b32c07899 pkg/flags: fix "TestSetFlagsFromEnvParsingError" 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2018-10-31 10:44:38 -07:00
ping40 5a94f97a4f pkg/ioutil: n is equal or greater than cw.writeBytes 2018-10-27 16:13:33 +08:00
Gyuho Lee 07fcc26799 *: fix gofmt warnings with Go 1.11 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2018-08-28 21:45:24 -07:00
Gyuho Lee d37f1521b7 *: update import paths to "go.etcd.io/etcd" 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2018-08-28 17:47:55 -07:00
Gyuho Lee 15a81f2d5c pkg: clean up code format 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-07-21 15:49:58 -07:00
Gyuho Lee a3032d3d0b *: fix fmt tests, reenable "testEmbedEtcdGracefulStop" 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-06-15 13:41:28 -07:00
Joe Betz ed6bc2b554 clientv3: add load balancer unix socket test 2018-06-15 13:41:28 -07:00
Gyuho Lee f1aa428a38 pkg/mock/mockserver: support restart 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-06-15 13:41:28 -07:00
Joe Betz 657c2e15cc *: introduce mock server for testing load balancing and add a simple happy-path load balancer test 
Author:    Joe Betz <jpbetz@google.com>
Date:      Wed Mar 28 15:51:33 2018 -0700
 2018-06-15 13:41:28 -07:00
Gyuho Lee 3fb9cc84c6 pkg/transport: add "TLSInfo.CipherSuites" field 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-06-05 12:27:05 -07:00
Gyuho Lee 67313ff06f pkg/tlsutil: add "GetCipherSuite" 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-06-05 12:26:48 -07:00
Gyuho Lee fa6d2e2d71 pkg/fileutil: add "ReadDirOption" 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-05-18 10:28:27 -07:00
Gyuho Lee 3a80499da4 *: rename to "journal" 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-05-16 14:38:27 -07:00
Gyuho Lee 1e953bd187 pkg/logutil: error when it can't find journal socket 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-05-16 14:34:49 -07:00
Gyuho Lee a338816cb4 pkg/logutil: do not print error message on journaldWriter 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-05-16 11:34:33 -07:00
Gyuho Lee 7a92bbfed2 etcdserver/*: move internal v2 packages 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-05-14 12:49:49 -07:00
Gyuho Lee c862712c73 pkg/transport: remove unused parameter from "wrapTLS" 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-05-09 15:42:45 -07:00
Gyuho Lee 2bb1a268b3 pkg/fileutil: clarify flock errors 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-05-03 14:00:42 -07:00
Gyuho Lee 3ed6c967ce pkg/proxy: silence http server logs 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-05-02 12:59:29 -07:00
Gyuho Lee 1917e5c543 pkg/*: fix "unconvert" warnings 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-30 15:32:16 -07:00
Gyuho Lee 4baaf322fa pkg/netutil: create doc.go 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-27 11:41:50 -07:00
Gyuho Lee e8ba8feaed pkg/netutil: use structured logging for TCP resolve 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-27 11:40:13 -07:00
Gyuho Lee 2271db7552 pkg/logutil: add godoc on zap encoder field names 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-26 11:54:00 -07:00
Gyuho Lee 624f421d21
Merge pull request #9642 from lorneli/idutil-dev 
pkg/idutil: use count field as atomic variable
 2018-04-26 11:48:23 -07:00
lorneli 54827d47ee pkg/idutil: use count field as atomic variable 
Use atomic.AddUint64 instead of mutex lock to inc count field.

Bench result:
benchmark           old ns/op     new ns/op     delta
BenchmarkNext-4     163           26.3          -83.87%
 2018-04-27 00:44:45 +08:00
Gyuho Lee 9cd9ae284f pkg/logutil: do not build journald logger on windows 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-25 13:52:30 -07:00
Gyuho Lee a34dd272b0 pkg/logutil: change "NewRaftLogger" function signature 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-25 10:11:35 -07:00
Gyuho Lee 6df3179c06 pkg/logutil: add "NewRaftLoggerFromZapCore" 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-25 10:05:12 -07:00
Gyuho Lee 1fa80bf520 pkg/logutil: add "NewGRPCLoggerV2FromZapCore" 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-25 10:05:12 -07:00
Gyuho Lee fcbb30364a pkg/logutil: add "NewJournaldWriter" 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-25 10:05:12 -07:00
Gyuho Lee 0411b89d69 pkg/proxy: fix fmt 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-20 11:26:38 -07:00
Gyuho Lee 8006d3305e pkg/proxy: strip host on local listener 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-20 10:35:01 -07:00
Gyuho Lee d0847f4f25 *: clean up/fix server structured logs 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-18 12:54:43 -07:00
Gyuho Lee 2bd88e378c pkg/transport: check nil logger 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-16 17:36:00 -07:00
Gyuho Lee 0dad8abb6f pkg: support structured logger 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-16 17:36:00 -07:00
Gyuho Lee 82e84a09e1 pkg/logutil: add "NewGRPCLoggerV2FromZap", "NewRaftLogger" 
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
 2018-04-16 17:36:00 -07:00
Gyuho Lee ff6ff9d6e6
Merge pull request #9570 from gyuho/tls 
*: fix TLS reload when cert includes only IPs (no domain names in SAN field)
 2018-04-16 08:02:18 -07:00