grembo
6f04b91912
Add disable_file parameter to job's vault stanza ( #13343 )
...
This complements the `env` parameter, so that the operator can author
tasks that don't share their Vault token with the workload when using
`image` filesystem isolation. As a result, more powerful tokens can be used
in a job definition, allowing it to use template stanzas to issue all kinds of
secrets (database secrets, Vault tokens with very specific policies, etc.),
without sharing that issuing power with the task itself.
This is accomplished by creating a directory called `private` within
the task's working directory, which shares many properties of
the `secrets` directory (tmpfs where possible, not accessible by
`nomad alloc fs` or Nomad's web UI), but isn't mounted into/bound to the
container.
If the `disable_file` parameter is set to `false` (its default), the Vault token
is also written to the NOMAD_SECRETS_DIR, so the default behavior is
backwards compatible. Even if the operator never changes the default,
they will still benefit from the improved behavior of Nomad never reading
the token back in from that - potentially altered - location.
2023-06-23 15:15:04 -04:00
..
2023-06-23 15:15:04 -04:00
2023-06-19 11:41:46 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-05-30 09:20:32 -05:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-06-13 14:51:29 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-05-01 17:18:34 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-05-30 11:12:12 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-05-11 08:04:33 -05:00
2023-05-11 08:04:33 -05:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-20 17:33:29 -07:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-05-30 11:08:49 -04:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-06-16 17:08:36 -04:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-17 09:01:43 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-06-07 10:39:03 -04:00
2023-04-10 15:36:59 +00:00
2023-06-16 16:30:22 -04:00
2023-06-16 16:30:22 -04:00
2023-04-10 15:36:59 +00:00
2023-06-14 14:52:06 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-06-16 16:30:22 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-12 15:29:33 -07:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-06-02 15:49:57 -04:00
2023-06-14 15:58:53 -04:00
2023-06-02 15:49:57 -04:00
2023-06-14 15:58:53 -04:00
2023-06-19 11:41:46 -04:00
2023-06-19 11:41:46 -04:00
2023-06-13 14:51:29 -04:00
2023-06-13 14:51:29 -04:00
2023-06-06 15:02:26 -04:00
2023-06-06 15:02:26 -04:00
2023-06-02 15:49:57 -04:00
2023-06-02 15:49:57 -04:00
2023-06-07 10:37:27 -04:00
2023-06-07 10:37:27 -04:00
2023-06-02 15:49:57 -04:00
2023-06-06 15:02:26 -04:00
2023-04-10 15:36:59 +00:00
2023-06-02 17:50:50 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-17 20:08:55 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-05-18 16:43:57 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-11 08:45:08 -05:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-05-22 09:31:56 -04:00
2023-05-22 09:31:56 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-05-22 09:31:56 -04:00
2023-05-22 09:31:56 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-06-14 14:52:46 -04:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00
2023-04-10 15:36:59 +00:00