699b1e5b3a
Merge pull request #7160 from xiang90/snapshotcount
...
etcdserver: increase snapshot to 100,000
2017-01-14 16:53:44 -08:00
26d99269c0
Merge pull request #6898 from mitake/auth-maintain
...
RFC, WIP: etcdserver: let maintenance services require root role
2017-01-14 11:22:14 -08:00
9886e9448e
auth, etcdserver: let maintenance services require root role
...
This commit lets maintenance services require root privilege. It also
moves AuthInfoFromCtx() from etcdserver to auth pkg for cleaning purpose.
2017-01-14 19:36:24 +09:00
c5a9d54835
etcdserver: increase snapshot to 100,000
...
Keep more wal entries in memory for fast follower recovery.
10,000 was a too small number that triggers quite a few snapshots.
ZK proves that 100,000 is a reasonable number for even old less prowerful
machines.
Eventually we should provide both count and max memory (for large entries).
2017-01-13 18:05:25 -08:00
8752ee52a5
etcdserver: use prev-value for ignore_value writes
2017-01-13 15:13:18 -08:00
e655420d33
v3rpc: error for non-empty value with ignore_value
2017-01-13 15:13:18 -08:00
7f8b5774a4
*: regenerate proto files with 'ignore_value'
2017-01-13 15:13:18 -08:00
8eea93942d
*: 'ignore_value' to detach lease with PutRequest
2017-01-13 15:13:18 -08:00
ea94aea136
etcdserver/api: add 3.2 in capability
2017-01-13 14:00:03 -08:00
d431b64d97
etcdserver, clientv3: handle a case of expired auth token
...
This commit adds a mechanism of handling a case of expired auth token
to clientv3. If a server returns an error code
grpc.codes.Unauthenticated, newRetryWrapper() tries to get a new token
and use it as an option of PerRPCCredential.
Fixes https://github.com/coreos/etcd/issues/7012
2017-01-12 11:49:02 +09:00
a42b399f4e
Merge pull request #7094 from heyitsanthony/fix-duplicate-grant
...
auth: use quorum get for GetUser/GetRole for mutable operations
2017-01-05 11:28:33 -08:00
10d3b81c39
Merge pull request #7093 from gyuho/member
...
etcdserver: expose ErrMemberNotEnoughStarted
2017-01-04 12:09:29 -08:00
f9f691ef1f
auth: use quorum get for GetUser/GetRole for mutable operations
...
GetUser would not propagate to the minority node, causing TestCtlV2GetRoleUser to
run CreateUser instead of UpdateUser. Instead, use quorum get to fetch the
current state of auth.
Fixes #7069
2017-01-04 11:55:07 -08:00
5fac6b8d15
etcdserver: resume compactor only if leader
2017-01-04 05:01:14 +05:30
2b5f9e1c6b
etcdserver: expose ErrNotEnoughStartedMembers
...
Fix https://github.com/coreos/etcd/issues/7072 .
2017-01-03 15:23:06 -08:00
2a1bae0c2a
etcdserver: consistent naming in raftReadyHandler
2016-12-29 11:27:16 -08:00
e2463569e7
v2http: submit QGET in health endpoint if no progress
...
Removing the periodic SYNC calls broke the health endpoint since the
raft index stops updating. Instead, don't bother monitoring the
raft index; issue a QGET directly to get a consensus response.
Fixes #6985
2016-12-28 12:20:56 -08:00
89b18ff1af
Merge pull request #7015 from fanminshi/fix_lease_expired_too_soon
...
lease: force leader to apply its pending committed index for lease op…
2016-12-27 11:26:15 -08:00
2faf72f47c
etcdserver: rework update committed index logic
2016-12-27 10:11:40 -08:00
17873f7be8
Merge pull request #7008 from heyitsanthony/fix-dns
...
retry on resolution failure for advertised peer DNS check
2016-12-27 10:03:01 -08:00
fef4a79528
lease: force leader to apply its pending committed index for lease operations
...
suppose a lease granting request from a follower goes through and followed by a lease look up or renewal, the leader might not apply the lease grant request locally. So the leader might not find the lease from the lease look up or renewal request which will result lease not found error. To fix this issue, we force the leader to apply its pending commited index before looking up lease.
FIX #6978
2016-12-22 14:24:38 -08:00
87b1d9571f
v3api, rpctypes: add ErrTimeoutDueToConnectionLost
...
Lack of GRPC code was causing this to look like a halting error to the client.
2016-12-16 10:25:35 -08:00
35fd5dc9fc
Merge pull request #6903 from mitake/auth-member
...
protect membership change RPCs with auth
2016-12-15 08:04:31 -08:00
86d7390804
auth, etcdserver: protect membership change operations with auth
...
This commit protects membership change operations with auth. Only
users that have root role can issue the operations.
Implements https://github.com/coreos/etcd/issues/6899
2016-12-15 22:54:20 +09:00
26a3e9a740
membership: retry for 30s on advertise url check
2016-12-14 15:56:22 -08:00
29c30b2387
etcdserver: retry for 30s on advertise url check
2016-12-14 15:56:22 -08:00
eb8646a381
v3rpc: remove unused 'splitMethodName' function
2016-12-12 10:07:14 -08:00
2c06def8ca
etcdserver, embed, v2http: move pprof setup to embed
...
Seems like a better place for prof setup since it's not specific to v2.
2016-12-09 12:37:35 -08:00
2f96a68a20
etcdserver: do not send v2 sync if ttl keys do not exist
2016-12-07 14:48:15 -08:00
da3b71b531
Merge pull request #6929 from heyitsanthony/ctx-lease-renew
...
etcdserver: use context for Renew
2016-12-07 00:05:14 -08:00
be1f36d97c
v3rpc, etcdserver, leasehttp: ctxize Renew with request timeout
...
Would retry a few times before returning a not primary error that
the client should never see. Instead, use proper timeouts and
then return a request timeout error on failure.
Fixes #6922
2016-12-06 14:09:57 -08:00
3fd1d951f8
etcdserver: time out when readStateC is blocking
...
Otherwise, it will block forever when the server is overloaded.
Fix https://github.com/coreos/etcd/issues/6891 .
2016-12-05 15:34:46 -08:00
7079bf9a75
Merge pull request #6574 from vimalk78/auth-simpletoken-not-removed#6554
...
auth/simple_token.go : token not removed when etcdctl session closes …
2016-11-30 11:33:23 -08:00
dfe853ebff
auth: add a timeout mechanism to simple token
2016-11-28 17:21:13 +05:30
9a20743190
v3rpc: don't close watcher if client closes send
...
grpc-gateway will CloseSend but still want to receive updates.
2016-11-17 15:33:37 -08:00
5e810e30cc
v3rpc: replace grpc metrics w/ go-grpc-prometheus
...
And disable histogram
2016-11-14 15:20:09 -08:00
b8b72f80f9
*: revendor, update proto files
2016-11-10 12:02:00 -08:00
ab6b175a2a
Merge pull request #6828 from fanminshi/add_not_equal_to_compare
...
etcdserver, clientv3: add "!=" to txn
2016-11-09 15:27:08 -08:00
c2fd42b556
etcdserver, clientv3: add "!=" to txn
...
adding != to compare is a requested functionality from a etcd user
FIX #6719
2016-11-09 14:28:36 -08:00
c817df1d32
etcdserver: increase maxGapBetweenApplyAndCommitIndex
...
This exists to prevent sending too many requests that
would lead into applier falling behind Raft accepting-proposal.
Based on recent benchmarks, etcd was able to process high workloads
(2 million writes with 1K concurrent clients).
The limit 1000 is too conservative to test those high workloads.
2016-11-09 09:44:11 -08:00
67082e5bd1
v3rpc: add gRPC active streamsGauge
2016-11-04 11:09:20 -07:00
6a0a0a7ea1
etcdserver: make snaptest fail fast
2016-11-03 14:44:08 -07:00
bbc1cdafef
Merge pull request #6791 from gyuho/grpc-leader
...
etcdserver: translate EOF to ErrNoLeader for renew, timetolive
2016-11-02 22:54:46 -07:00
cc304ac03c
etcdserver: translate EOF to ErrNoLeader for renew, timetolive
...
Address https://github.com/coreos/etcd/issues/6754 .
In case there are network errors or unexpected EOF errors
in TimeToLive http requests to leader, we translate that into
ErrNoLeader, and expects the client to retry its request.
2016-11-02 22:22:05 -07:00
2fb2b463a3
Merge pull request #6786 from mitake/empty-user
...
auth, etcdserver: forbid adding a user with empty name
2016-11-02 22:10:58 -07:00
f85701a46f
auth, etcdserver: forbid adding a user with empty name
2016-11-03 13:45:39 +09:00
c33d04fb54
etcdserver: print out warning when waiting for file lock
2016-11-01 17:55:16 -07:00
fdf433024f
etcdserver: linearizable password checking at the API layer
...
For avoiding a schedule that can cause an inconsistent auth store [1],
password checking must be done in a linearizable manner.
Fixes https://github.com/coreos/etcd/issues/6675 and https://github.com/coreos/etcd/issues/6683
[1] https://github.com/coreos/etcd/issues/6675#issuecomment-255006389
2016-11-01 00:02:33 -07:00
136c02da71
Merge pull request #6738 from gyuho/raft-cleanup
...
etcdserver: move 'EtcdServer.send' to raft.go
2016-10-31 15:15:08 -07:00
5bd00ab1f6
*: fix minor typos
2016-10-31 09:47:15 -07:00
Xiang Li