Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Agent improvements #14415

Merged
merged 5 commits into from
May 28, 2024
Merged

Agent improvements #14415

merged 5 commits into from
May 28, 2024

Commits on May 22, 2024

  1. DAOS-15686 gurt: Accept ERROR as a log mask string (#14211)

    A change further up in the stack revealed that "ERROR" wasn't
    accepted as a log mask string at the engine level.
    
    Signed-off-by: Kris Jacque <kris.jacque@intel.com>
    kjacque authored and mjmac committed May 22, 2024
    Configuration menu
    Copy the full SHA
    946bb72 View commit details
    Browse the repository at this point in the history
  2. DAOS-15849 control: Add client uid map to agent config

    Allow daos_agent to optionally handle unresolvable client
    uids via custom mapping. In deployments where the agent
    may not have access to the same user namespace as client
    applications (e.g. in containerized deployments), the
    client_user_map can provide a fallback mechanism for
    resolving the client uids to known usernames for the
    purpose of applying ACL permissions tests.
    
    Example agent config:
    
    credential_config:
      client_user_map:
        default:
          user: nobody
          group: nobody
        1000:
          user: joe
          group: blow
    
    Features: control
    Required-githooks: true
    Change-Id: I72905ccc5ddee27fc2101aa4358a14e352c86253
    Signed-off-by: Michael MacDonald <mjmac@google.com>
    mjmac committed May 22, 2024
    Configuration menu
    Copy the full SHA
    b2edc29 View commit details
    Browse the repository at this point in the history
  3. DAOS-15874 control: Add optional credential cache to agent

    On heavily-loaded client nodes where many processes are being
    launched by the same user or users, the admin may optionally
    enable the credential cache in the agent in order to lower
    agent overhead caused by generating identical credentials
    for each process owned by a user. The agent-generated
    credential is presented by the client process during pool/container
    connection and is used to evaluate ACL permissions for
    that connection.
    
    Example config:
    credential_config:
      cache_lifetime: 1m
    
    Features: control
    Required-githooks: true
    Change-Id: I6ae2a8be1dd97ef14e0ccef0283d65bc1fabc4ed
    Signed-off-by: Michael MacDonald <mjmac@google.com>
    mjmac committed May 22, 2024
    Configuration menu
    Copy the full SHA
    944c359 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    b48795b View commit details
    Browse the repository at this point in the history

Commits on May 28, 2024

  1. Configuration menu
    Copy the full SHA
    d470a3b View commit details
    Browse the repository at this point in the history