Waldemar Quevedo
d72dff4e0f
Merge pull request #1389 from wallyqs/tls-spiffe-auth
...
Support for SPIFFE x.509 SVIDs for client auth
2020-05-27 14:07:30 -07:00
Waldemar Quevedo
625dd18974
Add support for SPIFFE x.509 SVIDs for auth
...
This can be enabled by using `verify_and_map`.
```
tls {
cert_file: "server.pem"
key_file: "server.key"
ca_file: "ca.pem"
timeout: 5
verify_and_map: true
}
authorization {
users = [
{
user = "spiffe://localhost/my-nats-service/user-a"
},
{
user = "spiffe://localhost/my-nats-service/user-b",
permissions = { subscribe = { deny = ">" }}
},
]
}
```
Signed-off-by: Waldemar Quevedo <wally@synadia.com >
2020-05-27 13:10:42 -07:00
Derek Collison
a34fb0836b
Merge pull request #1419 from ripienaar/jetstream_options_consistency
...
improve consistency between top level and account js options
2020-05-27 07:50:05 -07:00
R.I.Pienaar
b7c79f66e4
improve consistency between top level and account js options
...
Signed-off-by: R.I.Pienaar <rip@devco.net >
2020-05-27 16:22:47 +02:00
Ivan Kozlovic
762bc84daf
Merge pull request #1408 from nats-io/ldm_send_info
...
[FIXED] LameDuckMode sends INFO to clients
2020-05-26 11:37:59 -06:00
Derek Collison
4c91b69c4f
Merge pull request #1413 from nats-io/fix_flappers
...
Fix flappers
2020-05-26 09:01:04 -07:00
Derek Collison
68473bfc45
Merge pull request #1417 from nats-io/jssys
...
Don't allow JetStream on system account.
2020-05-25 12:44:56 -07:00
Derek Collison
710ef00383
Don't allow JetStream on system account. Warn when accounts configured but no JS
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 12:17:18 -07:00
Derek Collison
0f6af4e452
Merge pull request #1416 from nats-io/econsumers
...
Properly recover ephemeral consumers after restart
2020-05-25 11:07:28 -07:00
Derek Collison
3caf6265d4
Properly recover ephemeral consumers after restart
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 11:06:55 -07:00
Derek Collison
54aa40b352
Wait a bit longer to get subs
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 09:30:36 -07:00
Derek Collison
e27f94eea2
Flush the sub interest
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 09:25:06 -07:00
Derek Collison
ceb7e723c9
Don't let bad rtt estimate fail tests
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 09:20:36 -07:00
Derek Collison
2a829ec34d
Force fixed capacity to not allow append to underlying buffer
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 08:37:47 -07:00
Derek Collison
f02ec860b6
Fix race when active state has not been updated yet
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 07:30:58 -07:00
Ivan Kozlovic
e5d6bf0c29
Wait for sub propagation on some NewRouteServiceImport
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-25 06:58:23 -07:00
Derek Collison
57d8cdb1d1
Fix flapper, wait for subs to propagate
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 06:58:23 -07:00
Derek Collison
9dae2cd80f
Fixed flapper, will fix bug in other PR
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 06:58:23 -07:00
Derek Collison
79ea95fe44
Fix flapper, wait for sub to propagate
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 06:58:23 -07:00
Derek Collison
b26d389d5e
Use old request style, no pause between new sends
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
46b45b3148
Ensure route INFO is processed before starting queue test
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
d20efffccb
Fix TestNoRaceRouteCache test
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
7d575e3af9
Remove a test that offers no value but keeps failing
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
f76f0df5ce
Remove update of start in readLoop
...
That broke sending async INFO in case where there was an update
between accepting the tcp connection and receiving the CONNECT
that indicates that client can receive async INFO.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-25 06:58:23 -07:00
Derek Collison
a693b677c6
Give a bit of room for slow proxy
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
c168369afe
Prevent TestWSFailureToStartServer from being stuck
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-25 06:58:23 -07:00
Derek Collison
ea31c6638f
Fix for flapper
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 06:58:23 -07:00
Derek Collison
413884d87f
Update start time for readloop started, check RTT on flapper test
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 06:58:23 -07:00
Derek Collison
a695d7aeb7
Ignore if we do not have minimum measurements
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-25 06:58:23 -07:00
Ivan Kozlovic
e976e63099
Fixing some flappers
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-25 06:58:23 -07:00
Derek Collison
f0bfbd176e
Merge pull request #1415 from nats-io/consumer_state
...
Write consumer state during stop if not deleting
2020-05-24 21:33:23 -07:00
Ivan Kozlovic
8678a61e3e
Move the send of INFO after client listener has been shutdown
...
This will ensure that there is no race where clients are accepted
after the LDM INFO notification.
Also add to the test to make sure that we don't send INFO when
routes are disconnected due to internal closing of connections
during the shutdown process.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-24 11:38:49 -06:00
Derek Collison
51ebd92a90
Merge pull request #1411 from ripienaar/js_preview_banner
...
adds a warning banner about the preview status
2020-05-24 05:59:52 -07:00
Derek Collison
e42dc4915f
Write consumer state during stop if not deleting
...
Signed-off-by: Derek Collison <derek@nats.io >
2020-05-23 13:07:56 -07:00
Ivan Kozlovic
ac58e5de30
Merge pull request #1414 from nats-io/save_leafnode_conn_in_temp_map_until_connect
...
[FIXED] Possible stall on shutdown with leafnode setup
2020-05-22 17:14:28 -06:00
Ivan Kozlovic
76772e4a29
Merge pull request #1412 from nats-io/fix_gw_implicit_reconnect_race
...
[FIXED] Race condition during implicit Gateway reconnection
2020-05-22 17:14:13 -06:00
Ivan Kozlovic
8f05bc5c46
[FIXED] Possible stall on shutdown with leafnode setup
...
If a leafnode connection is accepted but the server is shutdown
before the connection is fully registered, the shutdown would
stall because read and write loop go routine would not be
stopped.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-22 15:26:04 -06:00
Ivan Kozlovic
5dba3cdd75
[FIXED] Race condition during implicit Gateway reconnection
...
Say server in cluster A accepts a connection from a server in
cluster B.
The gateway is implicit, in that A does not have a configured
remote gateway to B.
Then the server in B is shutdown, which A detects and initiate
a single reconnect attempt (since it is implicit and if the
reconnect retries is not set).
While this happens, a new server in B is restarted and connects
to A. If that happens before the initial reconnect attempt
failed, A will register that new inbound and do not attempt to
solicit because it has already a remote entry for gateway B.
At this point when the reconnect to old server B fails, then
the remote GW entry is removed, and A will not create an outbound
connection to the new B server.
We fix that by checking if there is a registered inbound when
we get to the point of removing the remote on a failed implicit
reconnect. If there is one, we try the reconnection.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-22 13:01:17 -06:00
R.I.Pienaar
5504c1212d
adds a warning banner about the preview status
...
Signed-off-by: R.I.Pienaar <rip@devco.net >
2020-05-22 18:32:24 +02:00
Derek Collison
0e3c73192d
Merge pull request #1410 from ripienaar/remove_advisory_config
...
removes the configuration from advisories
2020-05-22 07:12:51 -07:00
R.I.Pienaar
09dca63efe
removes the configuration from advisories
...
On reflection I think this is a bad idea,
it's enough to know there was a change we
do not need to expose this to potential 3rd
parties
Also since advisories are versioned but
configuration is not, this is awkward.
Signed-off-by: R.I.Pienaar <rip@devco.net >
2020-05-22 16:08:44 +02:00
Derek Collison
34faa65186
Merge pull request #1409 from ripienaar/js_action_advisories
...
create advisories for stream and consumer add/delete/modify
2020-05-22 06:34:52 -07:00
R.I.Pienaar
c407a3b9d7
create advisories for stream and consumer add/delete/modify
...
We now publish advisories when streams and consumers are added,
deleted and modified
Also rework how TypedEvents are created to be easier to use
Signed-off-by: R.I.Pienaar <rip@devco.net >
2020-05-22 15:20:16 +02:00
Ivan Kozlovic
dc0f688cbf
[FIXED] LameDuckMode sends INFO to clients
...
Also send an INFO to routes so that the remotes can remove the
LDM's server client URLs and notify their own clients of this
change.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2020-05-21 12:15:20 -06:00
Ivan Kozlovic
90c1fdf6f7
Merge pull request #1407 from nats-io/remove_trace
...
Disable logs in test
2020-05-21 10:25:49 -06:00
Matthias Hanel
251cdcbcef
Disable logs in test
...
Signed-off-by: Matthias Hanel <mh@synadia.com >
2020-05-21 11:37:53 -04:00
Derek Collison
a6761d0053
Remove GHA badge for now [ci skip]
2020-05-21 06:56:02 -07:00
Derek Collison
caa78a8284
Updated for link.
2020-05-21 05:22:44 -07:00
Derek Collison
f0d2947a74
Merge pull request #1406 from ripienaar/gh_actions
...
initial gh actions
2020-05-21 05:07:59 -07:00
R.I.Pienaar
119dc29d75
add a badge
2020-05-21 14:06:26 +02:00