Skip to content

[fips] Agent reports FIPS status#2587

Merged
nishanttotla merged 2 commits into
moby:masterfrom
cyli:fips-agent-reporting
Apr 10, 2018
Merged

[fips] Agent reports FIPS status#2587
nishanttotla merged 2 commits into
moby:masterfrom
cyli:fips-agent-reporting

Conversation

@cyli
Copy link
Copy Markdown
Contributor

@cyli cyli commented Apr 3, 2018

The agent will now report a node's FIPS status as part of the node description.

This is not based on #2562, but it will conflict with it, since this adds the node config FIPs bool in order to propagate it to the agent.

cyli added 2 commits April 3, 2018 12:05
Signed-off-by: Ying Li <ying.li@docker.com>
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 3, 2018

Codecov Report

Merging #2587 into master will decrease coverage by 0.03%.
The diff coverage is 100%.

@@            Coverage Diff             @@
##           master    #2587      +/-   ##
==========================================
- Coverage   61.38%   61.34%   -0.04%     
==========================================
  Files         134      134              
  Lines       21736    21738       +2     
==========================================
- Hits        13342    13335       -7     
- Misses       6956     6977      +21     
+ Partials     1438     1426      -12

@dperny
Copy link
Copy Markdown
Collaborator

dperny commented Apr 10, 2018

LGTM

Comment thread node/node.go
CertIssuerPublicKey: issuer.PublicKey,
CertIssuerSubject: issuer.Subject,
},
FIPS: n.config.FIPS,
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While this doesn't really affect this PR, I'd like for us to make sure that users know to set this in the node config.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@nishanttotla I agree - where would you suggest this be documented?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@cyli I'm not sure, but let me look this up. My hunch is that this would go into the Docker API documentation. cc @thaJeztah

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trying to grasp where / when it needs to be set; @cyli @nishanttotla feel free to ping me on Slack / drop by my desk to explain 😅

@nishanttotla nishanttotla merged commit 3c8283b into moby:master Apr 10, 2018
@cyli cyli deleted the fips-agent-reporting branch April 10, 2018 19:14
thaJeztah added a commit to thaJeztah/docker that referenced this pull request Apr 17, 2018
Relevant changes:

- moby/swarmkit#2551 RoleManager will remove deleted nodes from the cluster membership
- moby/swarmkit#2574 Scheduler/TaskReaper: handle unassigned tasks marked for shutdown
- moby/swarmkit#2561 Avoid predefined error log
- moby/swarmkit#2557 Task reaper should delete tasks with removed slots that were not yet assigned
- moby/swarmkit#2587 [fips] Agent reports FIPS status
- moby/swarmkit#2603 Fix manager/state/store.timedMutex

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
docker-jenkins pushed a commit to docker-archive/docker-ce that referenced this pull request Apr 18, 2018
Relevant changes:

- moby/swarmkit#2551 RoleManager will remove deleted nodes from the cluster membership
- moby/swarmkit#2574 Scheduler/TaskReaper: handle unassigned tasks marked for shutdown
- moby/swarmkit#2561 Avoid predefined error log
- moby/swarmkit#2557 Task reaper should delete tasks with removed slots that were not yet assigned
- moby/swarmkit#2587 [fips] Agent reports FIPS status
- moby/swarmkit#2603 Fix manager/state/store.timedMutex

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: 333b2f28fef4ba857905e7263e7b9bbbf7c522fc
Component: engine
thaJeztah added a commit to thaJeztah/docker-ce that referenced this pull request Apr 19, 2018
Relevant changes:

- moby/swarmkit#2551 RoleManager will remove deleted nodes from the cluster membership
- moby/swarmkit#2574 Scheduler/TaskReaper: handle unassigned tasks marked for shutdown
- moby/swarmkit#2561 Avoid predefined error log
- moby/swarmkit#2557 Task reaper should delete tasks with removed slots that were not yet assigned
- moby/swarmkit#2587 [fips] Agent reports FIPS status
- moby/swarmkit#2603 Fix manager/state/store.timedMutex

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 333b2f28fef4ba857905e7263e7b9bbbf7c522fc)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@cyli cyli mentioned this pull request May 7, 2018
@cyli cyli mentioned this pull request Jun 7, 2018
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants