kemko/nomad
1
0
Fork 0
mirror of https://github.com/kemko/nomad.git synced 2026-01-04 09:25:46 +03:00
Code Issues Packages Projects Releases Wiki Activity

docs: fixup title formatting in upgrade guide

Browse Source
This commit is contained in:
Seth Hoenig
2022-04-08 11:50:54 -05:00
parent c3e36bb367
commit be80a63584
1 changed files with 13 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
website/content/docs/upgrade/upgrade-specific.mdx
View File

@@ -94,6 +94,19 @@ be removed in future releases.
The previous `Protocol` value can be viewed using the `-verbose` flag.
#### Changes to `client.template.function_denylist` configuration
consul-template v0.28 added a new function
[`writeToFile`](https://github.com/hashicorp/consul-template/blob/v0.28.0/docs/templating-language.md#writeToFile)
which can write to arbitrary files on the host.
Nomad 1.3.0 disables this function by default in its
[`function_denylist`](/docs/configuration/client#function_denylist).
However *if you have overridden the default `template.function_denylist` in
your client configuration, you must add `writeToFile` to your denylist.*
Failing to do so allows templates to write to arbitrary paths on the host.
#### Linux Control Groups Version 2
Starting with Nomad 1.3.0, Linux systems configured to use [cgroups v2][cgroups2]
@@ -124,19 +137,6 @@ The new cgroup file system layout will look like the following:
└── a8c8e495-83c8-311b-4657-e6e3127e98bc.example.scope
```
#### `client.template.function_denylist` Change
consul-template v0.28 added a new function
[`writeToFile`](https://github.com/hashicorp/consul-template/blob/v0.28.0/docs/templating-language.md#writeToFile)
which can write to arbitrary files on the host.
Nomad 1.3.0 disables this function by default in its
[`function_denylist`](/docs/configuration/client#function_denylist).
However *if you have overridden the default `template.function_denylist` in
your client configuration, you must add `writeToFile` to your denylist.*
Failing to do so allows templates to write to arbitrary paths on the host.
## Nomad 1.2.6, 1.1.12, and 1.0.18
#### ACL requirement for the job parse endpoint