Commit Graph

2839 Commits

Author SHA1 Message Date
Waldemar Quevedo
d72dff4e0f Merge pull request #1389 from wallyqs/tls-spiffe-auth
Support for SPIFFE x.509 SVIDs for client auth
2020-05-27 14:07:30 -07:00
Waldemar Quevedo
625dd18974 Add support for SPIFFE x.509 SVIDs for auth
This can be enabled by using `verify_and_map`.

```
tls {
 cert_file: "server.pem"
 key_file: "server.key"
 ca_file: "ca.pem"
 timeout: 5
 verify_and_map: true
}

authorization {
  users = [
    {
      user = "spiffe://localhost/my-nats-service/user-a"
    },
    {
      user = "spiffe://localhost/my-nats-service/user-b",
      permissions = { subscribe = { deny = ">" }}
    },
  ]
}
```

Signed-off-by: Waldemar Quevedo <wally@synadia.com>
2020-05-27 13:10:42 -07:00
Derek Collison
a34fb0836b Merge pull request #1419 from ripienaar/jetstream_options_consistency
improve consistency between top level and account js options
2020-05-27 07:50:05 -07:00
R.I.Pienaar
b7c79f66e4 improve consistency between top level and account js options
Signed-off-by: R.I.Pienaar <rip@devco.net>
2020-05-27 16:22:47 +02:00
Ivan Kozlovic
762bc84daf Merge pull request #1408 from nats-io/ldm_send_info
[FIXED] LameDuckMode sends INFO to clients
2020-05-26 11:37:59 -06:00
Derek Collison
4c91b69c4f Merge pull request #1413 from nats-io/fix_flappers
Fix flappers
2020-05-26 09:01:04 -07:00
Derek Collison
68473bfc45 Merge pull request #1417 from nats-io/jssys
Don't allow JetStream on system account.
2020-05-25 12:44:56 -07:00
Derek Collison
710ef00383 Don't allow JetStream on system account. Warn when accounts configured but no JS
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 12:17:18 -07:00
Derek Collison
0f6af4e452 Merge pull request #1416 from nats-io/econsumers
Properly recover ephemeral consumers after restart
2020-05-25 11:07:28 -07:00
Derek Collison
3caf6265d4 Properly recover ephemeral consumers after restart
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 11:06:55 -07:00
Derek Collison
54aa40b352 Wait a bit longer to get subs
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 09:30:36 -07:00
Derek Collison
e27f94eea2 Flush the sub interest
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 09:25:06 -07:00
Derek Collison
ceb7e723c9 Don't let bad rtt estimate fail tests
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 09:20:36 -07:00
Derek Collison
2a829ec34d Force fixed capacity to not allow append to underlying buffer
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 08:37:47 -07:00
Derek Collison
f02ec860b6 Fix race when active state has not been updated yet
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 07:30:58 -07:00
Ivan Kozlovic
e5d6bf0c29 Wait for sub propagation on some NewRouteServiceImport
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-25 06:58:23 -07:00
Derek Collison
57d8cdb1d1 Fix flapper, wait for subs to propagate
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 06:58:23 -07:00
Derek Collison
9dae2cd80f Fixed flapper, will fix bug in other PR
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 06:58:23 -07:00
Derek Collison
79ea95fe44 Fix flapper, wait for sub to propagate
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 06:58:23 -07:00
Derek Collison
b26d389d5e Use old request style, no pause between new sends
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
46b45b3148 Ensure route INFO is processed before starting queue test
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
d20efffccb Fix TestNoRaceRouteCache test
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
7d575e3af9 Remove a test that offers no value but keeps failing
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
f76f0df5ce Remove update of start in readLoop
That broke sending async INFO in case where there was an update
between accepting the tcp connection and receiving the CONNECT
that indicates that client can receive async INFO.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-25 06:58:23 -07:00
Derek Collison
a693b677c6 Give a bit of room for slow proxy
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
c168369afe Prevent TestWSFailureToStartServer from being stuck
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-25 06:58:23 -07:00
Derek Collison
ea31c6638f Fix for flapper
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 06:58:23 -07:00
Derek Collison
413884d87f Update start time for readloop started, check RTT on flapper test
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 06:58:23 -07:00
Derek Collison
a695d7aeb7 Ignore if we do not have minimum measurements
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
e976e63099 Fixing some flappers
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-25 06:58:23 -07:00
Derek Collison
f0bfbd176e Merge pull request #1415 from nats-io/consumer_state
Write consumer state during stop if not deleting
2020-05-24 21:33:23 -07:00
Ivan Kozlovic
8678a61e3e Move the send of INFO after client listener has been shutdown
This will ensure that there is no race where clients are accepted
after the LDM INFO notification.

Also add to the test to make sure that we don't send INFO when
routes are disconnected due to internal closing of connections
during the shutdown process.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-24 11:38:49 -06:00
Derek Collison
51ebd92a90 Merge pull request #1411 from ripienaar/js_preview_banner
adds a warning banner about the preview status
2020-05-24 05:59:52 -07:00
Derek Collison
e42dc4915f Write consumer state during stop if not deleting
Signed-off-by: Derek Collison <derek@nats.io>
2020-05-23 13:07:56 -07:00
Ivan Kozlovic
ac58e5de30 Merge pull request #1414 from nats-io/save_leafnode_conn_in_temp_map_until_connect
[FIXED] Possible stall on shutdown with leafnode setup
2020-05-22 17:14:28 -06:00
Ivan Kozlovic
76772e4a29 Merge pull request #1412 from nats-io/fix_gw_implicit_reconnect_race
[FIXED] Race condition during implicit Gateway reconnection
2020-05-22 17:14:13 -06:00
Ivan Kozlovic
8f05bc5c46 [FIXED] Possible stall on shutdown with leafnode setup
If a leafnode connection is accepted but the server is shutdown
before the connection is fully registered, the shutdown would
stall because read and write loop go routine would not be
stopped.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-22 15:26:04 -06:00
Ivan Kozlovic
5dba3cdd75 [FIXED] Race condition during implicit Gateway reconnection
Say server in cluster A accepts a connection from a server in
cluster B.
The gateway is implicit, in that A does not have a configured
remote gateway to B.
Then the server in B is shutdown, which A detects and initiate
a single reconnect attempt (since it is implicit and if the
reconnect retries is not set).
While this happens, a new server in B is restarted and connects
to A. If that happens before the initial reconnect attempt
failed, A will register that new inbound and do not attempt to
solicit because it has already a remote entry for gateway B.
At this point when the reconnect to old server B fails, then
the remote GW entry is removed, and A will not create an outbound
connection to the new B server.

We fix that by checking if there is a registered inbound when
we get to the point of removing the remote on a failed implicit
reconnect. If there is one, we try the reconnection.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-22 13:01:17 -06:00
R.I.Pienaar
5504c1212d adds a warning banner about the preview status
Signed-off-by: R.I.Pienaar <rip@devco.net>
2020-05-22 18:32:24 +02:00
Derek Collison
0e3c73192d Merge pull request #1410 from ripienaar/remove_advisory_config
removes the configuration from advisories
2020-05-22 07:12:51 -07:00
R.I.Pienaar
09dca63efe removes the configuration from advisories
On reflection I think this is a bad idea,
it's enough to know there was a change we
do not need to expose this to potential 3rd
parties

Also since advisories are versioned but
configuration is not, this is awkward.

Signed-off-by: R.I.Pienaar <rip@devco.net>
2020-05-22 16:08:44 +02:00
Derek Collison
34faa65186 Merge pull request #1409 from ripienaar/js_action_advisories
create advisories for stream and consumer add/delete/modify
2020-05-22 06:34:52 -07:00
R.I.Pienaar
c407a3b9d7 create advisories for stream and consumer add/delete/modify
We now publish advisories when streams and consumers are added,
deleted and modified

Also rework how TypedEvents are created to be easier to use

Signed-off-by: R.I.Pienaar <rip@devco.net>
2020-05-22 15:20:16 +02:00
Ivan Kozlovic
dc0f688cbf [FIXED] LameDuckMode sends INFO to clients
Also send an INFO to routes so that the remotes can remove the
LDM's server client URLs and notify their own clients of this
change.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2020-05-21 12:15:20 -06:00
Ivan Kozlovic
90c1fdf6f7 Merge pull request #1407 from nats-io/remove_trace
Disable logs in test
2020-05-21 10:25:49 -06:00
Matthias Hanel
251cdcbcef Disable logs in test
Signed-off-by: Matthias Hanel <mh@synadia.com>
2020-05-21 11:37:53 -04:00
Derek Collison
a6761d0053 Remove GHA badge for now [ci skip] 2020-05-21 06:56:02 -07:00
Derek Collison
caa78a8284 Updated for link. 2020-05-21 05:22:44 -07:00
Derek Collison
f0d2947a74 Merge pull request #1406 from ripienaar/gh_actions
initial gh actions
2020-05-21 05:07:59 -07:00
R.I.Pienaar
119dc29d75 add a badge 2020-05-21 14:06:26 +02:00