Signed-off-by: Max Asnaashari <[email protected]>

…r/1.0

Untrusted systems should still be able to view this non-sensitive
information.

Signed-off-by: Max Asnaashari <[email protected]>

Returns a copy of the config so that the upcoming non-cluster member
support can utilize it, even though it's set to _ at the moment.

Signed-off-by: Max Asnaashari <[email protected]>

This moves some of the logic in StartAPI out into other helpers to make
it easier to read, and prevent duplication of those actions.

This includes detecting when a cluster is finished comparing its schema
version to other members, and obtaining clients for the whole cluster to
send a notification.

Signed-off-by: Max Asnaashari <[email protected]>

Signed-off-by: Max Asnaashari <[email protected]>

Moves the authentication handlers out into their own function that is
exported and can be used to facilitate finer control of authentication
per-endpoint.

Additionally adds a new RestrictNotification AccessHandler so that
untrusted endpoints that are re-used for cluster notifications can
restrict those communications only to trusted systems.

Signed-off-by: Max Asnaashari <[email protected]>

…ecords on join

Previously, local records weren't updated until the next heartbeat,
except on the system that handled the join request. This adds a new
method PUT to /cluster which will forward a request to every system,
instructing it to add the newly added node to its store.

As a result, the node forwarding a join request to a leader will no
longer also implicitly trust whoever sent the request, as the token
won't have been validated, and the endpoint does not have
authentication. Join requests now have the RestrictNotification
AccessHandler set so a request sent with the cluster notification flag
will go through authentication.

Lastly, as none of the methods on this endpoint should be called while
the node is uninitialied, `AllowedBeforeInit` is set to false.

Signed-off-by: Max Asnaashari <[email protected]>

…nNewMember

Ensures that each cluster member has actually recorded the joining node
in their local trust store before executing the new-member hooks.

Signed-off-by: Max Asnaashari <[email protected]>

Signed-off-by: Max Asnaashari <[email protected]>