Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Nomad agent reload TLS configuration on SIGHUP #3479

Merged
merged 24 commits into from Nov 15, 2017
Merged

Nomad agent reload TLS configuration on SIGHUP #3479

merged 24 commits into from Nov 15, 2017

Commits on Nov 14, 2017

  1. Allow server TLS configuration to be reloaded via SIGHUP

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    25a86ac View commit details
    Browse the repository at this point in the history

  2. dynamic tls reloading for nomad agents

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    c65e23b View commit details
    Browse the repository at this point in the history

  3. code cleanup and refactoring

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    c9acc5f View commit details
    Browse the repository at this point in the history

  4. ensure keyloader is initialized, add comments

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    256f5a0 View commit details
    Browse the repository at this point in the history

  5. allow downgrading from TLS

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    cbd18ae View commit details
    Browse the repository at this point in the history

  6. initalize keyloader if necessary

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    50a1336 View commit details
    Browse the repository at this point in the history

  7. integration test for tls reload

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    ff1d0dd View commit details
    Browse the repository at this point in the history

  8. fix up test to assert success on reloaded TLS configuration

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    d7ff9f4 View commit details
    Browse the repository at this point in the history

  9. failure in loading a new TLS config should remain at current 

    Reload only the config if agent is already using TLS
    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    0be15b0 View commit details
    Browse the repository at this point in the history

  10. reload agent configuration before specific server/client 

    lock keyloader before loading/caching a new certificate
    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    0c4336e View commit details
    Browse the repository at this point in the history

  11. introduce a get-or-set method for keyloader

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    2990eb8 View commit details
    Browse the repository at this point in the history

  12. fixups from code review

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    b2ef194 View commit details
    Browse the repository at this point in the history

  13. fix up linting errors

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    fea24fe View commit details
    Browse the repository at this point in the history

  14. fixups from code review

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    a40aafb View commit details
    Browse the repository at this point in the history

  15. add lock for config updates; improve copy of tls config

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    2cade96 View commit details
    Browse the repository at this point in the history

  16. GetCertificate only reloads certificates dynamically for the server

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    12cb657 View commit details
    Browse the repository at this point in the history

  17. config updates/copies should be on agent

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    885c175 View commit details
    Browse the repository at this point in the history

  18. improve http integration test

    @chelseakomlo
    chelseakomlo committed Nov 14, 2017
    Configuration menu
    Copy the full SHA
    d46eb3b View commit details
    Browse the repository at this point in the history

Commits on Nov 15, 2017

  1. simplify agent reloading storing a local copy of config

    @dadgar
    dadgar committed Nov 15, 2017
    Configuration menu
    Copy the full SHA
    3c7bb25 View commit details
    Browse the repository at this point in the history

  2. reuse the same keyloader when reloading

    @dadgar
    dadgar committed Nov 15, 2017
    Configuration menu
    Copy the full SHA
    ae63199 View commit details
    Browse the repository at this point in the history

  3. Test that server and client get reloaded but keep keyloader

    @dadgar
    dadgar committed Nov 15, 2017
    Configuration menu
    Copy the full SHA
    d7d25b4 View commit details
    Browse the repository at this point in the history

  4. Keyloader exposes GetClientCertificate as well for outgoing connections

    @dadgar
    dadgar committed Nov 15, 2017
    Configuration menu
    Copy the full SHA
    9f954dc View commit details
    Browse the repository at this point in the history

  5. Fix spelling

    @dadgar
    dadgar committed Nov 15, 2017
    Configuration menu
    Copy the full SHA
    98d6358 View commit details
    Browse the repository at this point in the history

  6. correct changelog style

    @dadgar
    dadgar committed Nov 15, 2017
    Configuration menu
    Copy the full SHA
    75a0c60 View commit details
    Browse the repository at this point in the history