Seth Hoenig 511d0c1e70 artifact: protect against unbounded artifact decompression (1.5.0) (#16151) ...

* artifact: protect against unbounded artifact decompression

Starting with 1.5.0, set defaut values for artifact decompression limits.

artifact.decompression_size_limit (default "100GB") - the maximum amount of
data that will be decompressed before triggering an error and cancelling
the operation

artifact.decompression_file_count_limit (default 4096) - the maximum number
of files that will be decompressed before triggering an error and
cancelling the operation.

* artifact: assert limits cannot be nil in validation

2023-02-14 09:28:39 -06:00

..

getter

artifact: protect against unbounded artifact decompression (1.5.0) (#16151)

2023-02-14 09:28:39 -06:00

interfaces

template: trigger change_mode for dynamic secrets on restore (#9636)

2020-12-16 13:36:19 -05:00

restarts

build: run gofmt on all go source files

2022-08-16 11:14:11 -05:00

state

cleanup more helper updates (#14638)

2022-09-21 14:53:25 -05:00

template

users: eliminate LookupGroupId and its one use case (#16093)

2023-02-08 14:57:09 -06:00

testdata

executor/linux: make chroot binary paths absolute

2019-04-01 15:45:31 -07:00

api_hook_test.go

Task API via Unix Domain Socket (#15864)

2023-02-06 11:31:22 -08:00

api_hook.go

Task API via Unix Domain Socket (#15864)

2023-02-06 11:31:22 -08:00

artifact_hook_test.go

client: sandbox go-getter subprocess with landlock (#15328)

2022-12-07 16:02:25 -06:00

artifact_hook.go

client: sandbox go-getter subprocess with landlock (#15328)

2022-12-07 16:02:25 -06:00

connect_native_hook_test.go

renamed stanza to block for consistency with other projects (#15941)

2023-01-30 15:48:43 +01:00

connect_native_hook.go

renamed stanza to block for consistency with other projects (#15941)

2023-01-30 15:48:43 +01:00

device_hook_test.go

ci: swap ci parallelization for unconstrained gomaxprocs

2022-03-15 12:58:52 -05:00

device_hook.go

Store device envs separately and pass to drivers

2018-12-19 14:23:09 -08:00

dispatch_hook_test.go

ci: swap ci parallelization for unconstrained gomaxprocs

2022-03-15 12:58:52 -05:00

dispatch_hook.go

client/state: support upgrading from 0.8->0.9

2018-12-19 10:39:27 -08:00

driver_handle.go

client: enforce max_kill_timeout client configuration

2022-07-06 15:29:38 -05:00

envoy_bootstrap_hook_test.go

docs: how to troubleshoot consul connect envoy (#15908)

2023-02-02 14:20:26 -06:00

envoy_bootstrap_hook.go

docs: how to troubleshoot consul connect envoy (#15908)

2023-02-02 14:20:26 -06:00

envoy_version_hook_test.go

cleanup: purge github.com/pkg/errors

2022-04-01 19:24:02 -05:00

envoy_version_hook.go

build: run gofmt on all go source files

2022-08-16 11:14:11 -05:00

errors_test.go

ci: swap ci parallelization for unconstrained gomaxprocs

2022-03-15 12:58:52 -05:00

errors.go

client: artifact errors are retry-able

2019-02-20 07:21:27 -08:00

identity_hook_test.go

Add option to expose workload token to task (#15755)

2023-02-02 10:59:14 -08:00

identity_hook.go

Add option to expose workload token to task (#15755)

2023-02-02 10:59:14 -08:00

lazy_handle.go

executor: implement streaming stats API

2019-01-12 12:18:22 -05:00

lifecycle.go

Task lifecycle restart (#14127)

2022-08-24 17:43:07 -04:00

logmon_hook_test.go

cleanup more helper updates (#14638)

2022-09-21 14:53:25 -05:00

logmon_hook_unix_test.go

test: use T.TempDir to create temporary test directory (#12853)

2022-05-12 11:42:40 -04:00

logmon_hook.go

address review comments

2019-12-13 11:21:00 -05:00

plugin_supervisor_hook.go

build: run gofmt on all go source files

2022-08-16 11:14:11 -05:00

remotetask_hook.go

build: run gofmt on all go source files

2022-08-16 11:14:11 -05:00

script_check_hook_test.go

Merge branch 'main' into f-1.3-boogie-nights

2022-03-23 09:41:25 +01:00

script_check_hook.go

client: refactor common service registration objects from Consul.

2022-03-15 09:38:30 +01:00

service_hook_test.go

Add Namespace, Job and Group to envoy stats (#14311)

2022-09-22 10:38:21 -04:00

service_hook.go

Add Namespace, Job and Group to envoy stats (#14311)

2022-09-22 10:38:21 -04:00

sids_hook_test.go

Task lifecycle restart (#14127)

2022-08-24 17:43:07 -04:00

sids_hook.go

cleanup: purge github.com/pkg/errors

2022-04-01 19:24:02 -05:00

stats_hook_test.go

ci: swap ci parallelization for unconstrained gomaxprocs

2022-03-15 12:58:52 -05:00

stats_hook.go

tests: deflake TestTaskRunner_StatsHook_Periodic (#9734)

2021-01-06 16:03:00 -05:00

task_dir_hook.go

update template and artifact interpolation to use client-relative paths

2021-01-04 22:25:34 +00:00

task_runner_getters.go

Add option to expose workload token to task (#15755)

2023-02-02 10:59:14 -08:00

task_runner_hooks.go

Task API via Unix Domain Socket (#15864)

2023-02-06 11:31:22 -08:00

task_runner_test.go

Add option to expose workload token to task (#15755)

2023-02-02 10:59:14 -08:00

task_runner.go

Add INFO task even log line and make logmon less noisy (#15842)

2023-01-20 14:35:00 -08:00

tasklet_test.go

ci: swap ci parallelization for unconstrained gomaxprocs

2022-03-15 12:58:52 -05:00

tasklet.go

comments: cleanup some leftover debug comments and such

2020-01-31 19:04:35 -06:00

template_hook.go

template: restore driver handle on update (#15915)

2023-01-27 10:55:59 -05:00

validate_hook_test.go

ci: swap ci parallelization for unconstrained gomaxprocs

2022-03-15 12:58:52 -05:00

validate_hook.go

improve error message on service length (#12012)

2022-02-04 19:39:34 -05:00

vault_hook_test.go

client: support graceful shutdowns

2018-11-19 16:39:30 -08:00

vault_hook.go

renamed stanza to block for consistency with other projects (#15941)

2023-01-30 15:48:43 +01:00

volume_hook_test.go

ci: swap ci parallelization for unconstrained gomaxprocs

2022-03-15 12:58:52 -05:00

volume_hook.go

volume: Add the missing option propagation_mode (#15626)

2023-01-30 09:32:07 -05:00