{"push_id":1870643657,"size":18,"distinct_size":18,"ref":"refs/heads/master","head":"b2addbcb18e65df2a5cb0e14a5305f7022dba3d4","before":"f452bbaff96499af33d2f81abe171ea294dc6428","commits":[{"sha":"4f8fb2b44594f5e3f0a37722440749171581f1ef","author":{"name":"Aaron Lehmann","email":"ab01047e91402f1a4542861b1076cf31bcc38777@docker.com"},"message":"template: Indicate which configs contain secret data\n\nThis changes the templated ConfigGetter to include an extra method,\nGetAndFlagSecretData, which returns an interpolated config and also a\nflag indicating whether it contains any data from a secret. This can be\nused downstream to avoid storing the config to disk.\n\nIdeally, there would be some kind of Sensitive method on a Config object\nitself, but since that type is automatically generated by protoc,\nincluding a private field is awkward to do. Thus this approach of\nreturning the flag along with the config. Note that I opted for a method\nthat returns the config and the flag at the same time instead of a\nmethod that just returns the flag, since a method that returns the flag\nstill needs to expand the config, and it seems most robust and\nperformant to just return the config and the flag at the same time\ninstead of relying on different code paths to generate consistent\nresults.\n\nSigned-off-by: Aaron Lehmann <aaron.lehmann@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/4f8fb2b44594f5e3f0a37722440749171581f1ef"},{"sha":"6ed29bb7f852a4b0fc871e820e489fb3971de608","author":{"name":"Riyaz Faizullabhoy","email":"93edd3fbff0397eb4e504743c2cf88e4e42c629e@docker.com"},"message":"proto: add ResourceReference to TaskSpec, and ResourceType enum\n\nSigned-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/6ed29bb7f852a4b0fc871e820e489fb3971de608"},{"sha":"fd085c7b15d79b15b2b18f2cf0808db331ecd7ea","author":{"name":"Aaron Lehmann","email":"ab01047e91402f1a4542861b1076cf31bcc38777@docker.com"},"message":"design: Add raft.md\n\nThis document explains how the Raft implementation works.\n\nSigned-off-by: Aaron Lehmann <aaron.lehmann@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/fd085c7b15d79b15b2b18f2cf0808db331ecd7ea"},{"sha":"84882b5309bdc231d2e29c830800d1a3972a78ed","author":{"name":"Riyaz Faizullabhoy","email":"93edd3fbff0397eb4e504743c2cf88e4e42c629e@docker.com"},"message":"dispatcher: send down and release secrets and configs by ResourceReference in TaskSpec\n\nSigned-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/84882b5309bdc231d2e29c830800d1a3972a78ed"},{"sha":"c0449b2fa443a5c8c5941e328b9c4e8094ca206b","author":{"name":"Riyaz Faizullabhoy","email":"93edd3fbff0397eb4e504743c2cf88e4e42c629e@docker.com"},"message":"dispatcher: include ResourceReferences in assignment tests\n\nSigned-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/c0449b2fa443a5c8c5941e328b9c4e8094ca206b"},{"sha":"dabf8ec59abaa5ae7113015e8a5eadf5108a6728","author":{"name":"Riyaz Faizullabhoy","email":"93edd3fbff0397eb4e504743c2cf88e4e42c629e@docker.com"},"message":"dispatcher: add tests for different combinations of resource references and direct secrets and configs in tasks\n\nSigned-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/dabf8ec59abaa5ae7113015e8a5eadf5108a6728"},{"sha":"35aa5b4cc1361501150743d5e090e2c35727b94f","author":{"name":"Aaron Lehmann","email":"ab01047e91402f1a4542861b1076cf31bcc38777@docker.com"},"message":"design: Add scheduler.md\n\nThis document describes how the scheduler works.\n\nSigned-off-by: Aaron Lehmann <aaron.lehmann@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/35aa5b4cc1361501150743d5e090e2c35727b94f"},{"sha":"76fabbc5fe555eed5b1696a71b63390bcc9b2ad5","author":{"name":"Diogo Mónica","email":"6d9811c7b8d659d0e2481f8284a829dcc906fac0@gmail.com"},"message":"Merge pull request #2305 from riyazdf/taskspec-resource-refs\n\nIntroduce ResourceReferences in TaskSpec","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/76fabbc5fe555eed5b1696a71b63390bcc9b2ad5"},{"sha":"de8e6ea5f7f53a5d1cb89b6eb5b08312377b2e9f","author":{"name":"Diogo Mónica","email":"6d9811c7b8d659d0e2481f8284a829dcc906fac0@gmail.com"},"message":"Merge pull request #2286 from aaronlehmann/mark-configs-with-secret-data\n\ntemplate: Indicate which configs contain secret data","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/de8e6ea5f7f53a5d1cb89b6eb5b08312377b2e9f"},{"sha":"e785072a9b7ab307b7092693c248ba490b9add1a","author":{"name":"Ying Li","email":"11f13b15d693b5b097e02b2b89c861141d737a60@docker.com"},"message":"Update ExternalCA to take intermediates to append to the signed certificate,\nrather than a RootCA object.\n\nSigned-off-by: Ying Li <ying.li@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/e785072a9b7ab307b7092693c248ba490b9add1a"},{"sha":"55c8bc67eaac99298e98abbb3739abe33fd8a728","author":{"name":"Ying Li","email":"11f13b15d693b5b097e02b2b89c861141d737a60@docker.com"},"message":"Extricate the external CA object from SecurityConfig as part of the first\nstep toward separating the root CA object used to sign certificates on the\nCA server from the SecurityConfig, which is mainly used to maintain client\nand server TLS credentials.\n\nSigned-off-by: Ying Li <ying.li@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/55c8bc67eaac99298e98abbb3739abe33fd8a728"},{"sha":"0d8d7c99e55524237476a4cb75b732dc35c73655","author":{"name":"Ying Li","email":"11f13b15d693b5b097e02b2b89c861141d737a60@docker.com"},"message":"Update the CA server's external CA's TLS credentials when the\nSecurityConfig's TLS credentials change.\n\nSigned-off-by: Ying Li <ying.li@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/0d8d7c99e55524237476a4cb75b732dc35c73655"},{"sha":"22b5c136408beb405b4e27b64d735fb591e68683","author":{"name":"Ying Li","email":"11f13b15d693b5b097e02b2b89c861141d737a60@docker.com"},"message":"Remove ExternalCA.Copy() since it's no longer needed\n\nSigned-off-by: Ying Li <ying.li@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/22b5c136408beb405b4e27b64d735fb591e68683"},{"sha":"64aab747595cf08e7eff141acebaae1e3a96ccb5","author":{"name":"Ying Li","email":"6706410ecd96c44789b604ad62da22ee35daf246@users.noreply.github.com"},"message":"Merge pull request #2262 from cyli/extricate-externalca-from-securityconfig\n\n[ca] Extricate `ExternalCA` from `SecurityConfig`","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/64aab747595cf08e7eff141acebaae1e3a96ccb5"},{"sha":"3fc9d0a59ecf87193f8347bc0ac25f0956511b03","author":{"name":"Aaron Lehmann","email":"ab01047e91402f1a4542861b1076cf31bcc38777@docker.com"},"message":"global: Allow updates of failed services with restart policy \"none\"\n\nThere is some tension around what to do when reconciling a service whose\nrestart policy is \"none\". On one hand, the restart policy says not to\nrestart a failed task. On the other hand, the declarative state of the\nservice says a certain number of replics of the service should run, or\nthe task should run on all possible nodes, and a change to the spec\nmight resolve the condition that caused the failure.\n\nCurrently, the replicated orchestrator chooses to favor the declarative\nstate when reconciling a service. This means that on a leader change or\nchange to the service, we effectively ignore the restart policy.\n\nThe global orchestrator, on the other hand, refuses to touch the task on\nany node where it has failed, if the restart policy says to do so. This\ncan lead to very unintuitive behavior, for example setting up a service\nthat fails because its command line is wrong, then updating the service\nto fix the command line, and seeing nothing happen.\n\nI believe the replicated orchestrator's behavior is a better choice, and\nless confusing to users. It's very bad for a service to get into a state\nwhere it can't be updated because it has already failed on all nodes and\ntherefore won't be touched on those nodes.\n\nThis changes the global orchestrator to behave like the replicated\norchestrator, and ignore the restart policy on startup, and when the\nservice is updated.\n\nNote that this means that on leader changes, failed global services will\nbe restarted, which might be contrary to expectations. But it also means\nthat a \"service update\" will be able to fix a broken global service\nregardless of the restart policy, which is very important.\n\nSigned-off-by: Aaron Lehmann <aaron.lehmann@docker.com>","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/3fc9d0a59ecf87193f8347bc0ac25f0956511b03"},{"sha":"a8de927c72fc00a1930475473341abe9c5416269","author":{"name":"Andrea Luzzardi","email":"235d21b3b32c6796a8bac0398830aedd44ed4d41@gmail.com"},"message":"Merge pull request #2315 from aaronlehmann/design-scheduler\n\ndesign: Add scheduler.md","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/a8de927c72fc00a1930475473341abe9c5416269"},{"sha":"b42631acbd3d312bfd03a29062d3d9eaafed1b3e","author":{"name":"Aaron Lehmann","email":"ab01047e91402f1a4542861b1076cf31bcc38777@docker.com"},"message":"Merge pull request #2288 from aaronlehmann/global-service-restart-none\n\nglobal: Allow updates of failed services with restart policy \"none\"","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/b42631acbd3d312bfd03a29062d3d9eaafed1b3e"},{"sha":"b2addbcb18e65df2a5cb0e14a5305f7022dba3d4","author":{"name":"Ying Li","email":"6706410ecd96c44789b604ad62da22ee35daf246@users.noreply.github.com"},"message":"Merge pull request #2318 from aaronlehmann/design-raft\n\ndesign: Add raft.md","distinct":true,"url":"https://api.github.com/repos/vdemeester/swarmkit/commits/b2addbcb18e65df2a5cb0e14a5305f7022dba3d4"}]}
{"actor":{"display_login":"vdemeester"}}