Juana De La Cuesta 120c3ca3c9 Add granular control of SELinux labels for host mounts (#19839) ...

Add new configuration option on task's volume_mounts, to give a fine grained control over SELinux "z" label

* Update website/content/docs/job-specification/volume_mount.mdx

Co-authored-by: Luiz Aoqui <luiz@hashicorp.com>

* fix: typo

* func: make volume mount verification happen even on  mounts with no volume

---------

Co-authored-by: Luiz Aoqui <luiz@hashicorp.com>
Co-authored-by: Tim Gross <tgross@hashicorp.com>

2024-02-05 10:05:33 +01:00

..

getter

bubble up the error message from go-getter (#18444)

2023-09-13 09:36:39 -04:00

interfaces

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

restarts

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

state

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

template

template: run template tests on Windows where possible (#19856)

2024-02-02 09:22:03 -05:00

testdata

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

testing

vault: update task runner vault hook to support workload identity (#18534)

2023-10-16 19:37:57 -04:00

api_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

api_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

artifact_hook_test.go

vault: update task runner vault hook to support workload identity (#18534)

2023-10-16 19:37:57 -04:00

artifact_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

connect_native_hook_test.go

connect: rewrite envoy bootstrap on every restart (#19787)

2024-01-24 11:26:31 -08:00

connect_native_hook.go

connect: rewrite envoy bootstrap on every restart (#19787)

2024-01-24 11:26:31 -08:00

consul_hook.go

client: consul hook not called for templates (#19490)

2023-12-15 17:16:00 +01:00

device_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

device_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

dispatch_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

dispatch_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

driver_handle.go

update go1.21 (#18184)

2023-08-14 08:43:27 -05:00

envoy_bootstrap_hook_test.go

connect: rewrite envoy bootstrap on every restart (#19787)

2024-01-24 11:26:31 -08:00

envoy_bootstrap_hook.go

connect: rewrite envoy bootstrap on every restart (#19787)

2024-01-24 11:26:31 -08:00

envoy_version_hook_test.go

consul: add multi-cluster support to client constructors (#18624)

2023-10-17 13:46:49 -04:00

envoy_version_hook.go

config: remove old Vault/Consul config blocks from client (#18994)

2023-11-07 09:15:37 -05:00

errors_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

errors.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

identity_hook_test.go

identity: Implement change_mode (#18943)

2023-11-01 09:41:11 -05:00

identity_hook.go

identity: Implement change_mode (#18943)

2023-11-01 09:41:11 -05:00

lazy_handle.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

lifecycle.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

logmon_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

logmon_hook_unix_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

logmon_hook.go

client: split identity_hook across allocrunner and taskrunner (#18431)

2023-09-21 17:31:27 +02:00

plugin_supervisor_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

remotetask_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

script_check_hook_test.go

services: get Consul token from hook resources (#18600)

2023-10-04 08:35:18 -04:00

script_check_hook.go

script_check_hook: handle task-level Consul namespace (#19241)

2023-11-30 11:13:30 -05:00

service_hook_test.go

service_hook: ensure task-level consul.namespace is respected (#19224)

2023-11-29 16:46:27 -05:00

service_hook.go

service_hook: ensure task-level consul.namespace is respected (#19224)

2023-11-29 16:46:27 -05:00

sids_hook_test.go

revoke Consul tokens obtained via WI when alloc stops (#19034)

2023-11-09 10:08:09 -05:00

sids_hook.go

revoke Consul tokens obtained via WI when alloc stops (#19034)

2023-11-09 10:08:09 -05:00

stats_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

stats_hook.go

fix multiple overflow errors in exponential backoff (#18200)

2023-08-15 14:38:18 -04:00

task_dir_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

task_runner_getters.go

config: remove old Vault/Consul config blocks from client (#18994)

2023-11-07 09:15:37 -05:00

task_runner_hooks.go

client: consul hook not called for templates (#19490)

2023-12-15 17:16:00 +01:00

task_runner_linux_test.go

vault: derive token using create_from_role (#18880)

2023-10-27 13:03:44 -04:00

task_runner_test.go

fix taskrunner test after broken signature (#19056)

2023-11-09 15:53:25 -05:00

task_runner.go

Revert "deps: update go-metrics to v0.5.3 (#19190)" (#19374)

2023-12-08 08:46:55 -05:00

tasklet_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

tasklet.go

Revert "deps: update go-metrics to v0.5.3 (#19190)" (#19374)

2023-12-08 08:46:55 -05:00

template_hook_test.go

vault: load default config for tasks without vault (#19439)

2023-12-12 14:06:55 -05:00

template_hook.go

vault: load default config for tasks without vault (#19439)

2023-12-12 14:06:55 -05:00

validate_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

validate_hook.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

vault_hook_test.go

vault: support allowing tokens to expire without refresh (#19691)

2024-01-10 14:49:02 -05:00

vault_hook.go

vault: support allowing tokens to expire without refresh (#19691)

2024-01-10 14:49:02 -05:00

volume_hook_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

volume_hook.go

Add granular control of SELinux labels for host mounts (#19839)

2024-02-05 10:05:33 +01:00

wrangler_hook.go

client: refactor cpuset partitioning (#18371)

2023-09-12 09:11:11 -05:00