kemko/nomad
1
0
Fork 0
mirror of https://github.com/kemko/nomad.git synced 2026-01-06 10:25:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #978 from hashicorp/f-enforce-user

Browse Source 
Operator specifiable blacklist for task's using certain users
This commit is contained in:
Alex Dadgar
2016-03-25 12:44:05 -07:00
parent 9e7d0d93a1 a1ff98a69a
commit aaff02ca49
7 changed files with 163 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
website/source/docs/agent/config.html.md
View File

@@ -381,6 +381,21 @@ documentation [here](/docs/drivers/index.html)
* `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_SESSION_TOKEN`
* `GOOGLE_APPLICATION_CREDENTIALS`
* `user.blacklist`: An operator specifiable blacklist of users which a task is
not allowed to run as when using a driver in `user.checked_drivers`.
Defaults to:
* `root`
* `Administrator`
* `user.checked_drivers`: An operator specifiable list of drivers to enforce
the the `user.blacklist`. For drivers using containers, this enforcement often
doesn't make sense and as such the default is set to:
* `exec`
* `qemu`
* `java`
* `fingerprint.whitelist`: A comma separated list of whitelisted fingerprinters.
If specified, fingerprinters not in the whitelist will be disabled. If the
whitelist is empty, all fingerprinters are used.