You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Matt Keeler 118adbb123 ACL Token Persistence and Reloading (#5328) ... This PR adds two features which will be useful for operators when ACLs are in use. 1. Tokens set in configuration files are now reloadable. 2. If `acl.enable_token_persistence` is set to `true` in the configuration, tokens set via the `v1/agent/token` endpoint are now persisted to disk and loaded when the agent starts (or during configuration reload) Note that token persistence is opt-in so our users who do not want tokens on the local disk will see no change. Some other secondary changes: * Refactored a bunch of places where the replication token is retrieved from the token store. This token isn't just for replicating ACLs and now it is named accordingly. * Allowed better paths in the `v1/agent/token/` API. Instead of paths like: `v1/agent/token/acl_replication_token` the path can now be just `v1/agent/token/replication`. The old paths remain to be valid. * Added a couple new API functions to set tokens via the new paths. Deprecated the old ones and pointed to the new names. The names are also generally better and don't imply that what you are setting is for ACLs but rather are setting ACL tokens. There is a minor semantic difference there especially for the replication token as again, its no longer used only for ACL token/policy replication. The new functions will detect 404s and fallback to using the older token paths when talking to pre-1.4.3 agents. * Docs updated to reflect the API additions and to show using the new endpoints. * Updated the ACL CLI set-agent-tokens command to use the non-deprecated APIs.		6 years ago
..
file	ACL Token Persistence and Reloading (#5328)	6 years ago
freeport	Bumps freeport's block size.	7 years ago
semaphore	connect: tame thundering herd of CSRs on CA rotation (#5228)	6 years ago
cluster.go	Update cluster.go	7 years ago
cluster_test.go	Integer division rounding to zero for rate scaling	7 years ago
eof.go	Makes RPC handling more robust when rolling servers. (#3561)	7 years ago
math.go	…
math_test.go	…
path.go	…
rand.go	…
rtt.go	remove golint warnings	7 years ago
rtt_test.go	remove golint warnings	7 years ago
serf.go	New ACLs (#4791)	6 years ago
stop_context.go	New ACLs (#4791)	6 years ago
string.go	…
string_test.go	…
telemetry.go	Refactor to use embedded struct.	7 years ago
telemetry_test.go	Refactor to use embedded struct.	7 years ago
useragent.go	Add a helper for generating Consul's user-agent string	7 years ago
useragent_test.go	Add a helper for generating Consul's user-agent string	7 years ago
uuid.go	New ACLs (#4791)	6 years ago