Andrew Rynhard
a25cb09bf2
refactor: use os.Remove instead of unix.Unlink ( #648 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-05-13 08:05:02 -07:00
Andrew Rynhard
967e547d87
fix(init): unlink unix bind address ( #643 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-05-11 10:19:51 -07:00
Andrew Rynhard
f045b10dd4
fix: add support for trustd username and password auth back in ( #604 )
...
We should still support username and password for backwards compatibility.
This also sets us up for for implementing auth for users using something like LDAP in the future.
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-04-30 17:50:30 -07:00
Andrew Rynhard
ea99788ef1
feat(trustd): use a token instead of username and password ( #586 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-04-28 12:18:56 -07:00
Andrey Smirnov
ab2917e833
feat(init): implement init gRPC API, forward reboot to init ( #579 )
...
This implements insecure over-file-socket gRPC API for init with two
first simplest APIs: reboot and shutdown (poweroff).
File socket is mounted only to `osd` service, so it is the only service
which can access init API. Osd forwards reboot/shutdown already
implemented APIs to init which actually executes these.
This enables graceful shutdown/reboot with service shutdown, sync, etc.
Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2019-04-26 23:04:24 +03:00
Andrey Smirnov
7da7c8c2ff
refactor: add stub unit-tests to non-trivial Go packages ( #556 )
...
Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2019-04-17 13:25:22 -07:00
Andrew Rynhard
7688de6a3a
chore: upgrade golangci-lint to v1.16.0 ( #515 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-04-09 21:53:35 -07:00
Spencer Smith
1b0b3ae59c
chore: expose crypto package ( #512 )
...
Signed-off-by: Spencer Smith <robertspencersmith@gmail.com>
2019-04-09 17:47:47 -07:00
Andrew Rynhard
e18b5086a9
chore: update org to new name ( #480 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-04-03 18:29:21 -07:00
Andrew Rynhard
455aeb742c
chore: expose userdata and osctl client packages ( #471 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-04-02 17:11:17 -07:00
Andrew Rynhard
7528d892c4
fix: distribute PKI from initial master to joining masters ( #426 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-02-26 23:54:04 -08:00
Andrew Rynhard
b59f632ef4
feat: allow user specified IP addresses in SANs ( #425 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-02-26 17:44:51 -08:00
Andrew Rynhard
9e947c3fa5
feat: add automated PKI for joining nodes ( #406 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-02-23 23:17:56 -08:00
Tim Jones
52d2660c67
feat: add hostname to node certificate SAN ( #415 )
...
allows talos config to use hostnames as targets and releases
the need for static IPs for master nodes.
Signed-off-by: Tim Jones <timniverse@gmail.com>
2019-02-23 15:33:34 -08:00
Andrew Rynhard
b226f5f443
feat: disable session tickets ( #334 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-02-05 07:09:36 -08:00
Andrew Rynhard
ee226dddac
chore: enforce commit and license policies ( #304 )
...
Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2019-01-13 16:10:49 -08:00
Andrew Rynhard
72eb1b34f5
chore: use buildkit for builds ( #295 )
2018-12-19 22:22:05 -08:00
