Deniz Onur Duzgun 22b7470ccf sec: fix alloc workload identity namespace permission (#24683) ...

Sanitize the Allocations SignedIdentities to prevent privilege escalation within a namespace through unauthorized impersonation of [workload associated with ACL policies](https://developer.hashicorp.com/nomad/docs/concepts/workload-identity#workload-associated-acl-policies) in any workload within the namespace.

Ref: CVE-2024-12678.
Ref: https://github.com/hashicorp/nomad-enterprise/pull/2098

2024-12-16 16:35:10 -05:00

..

consul

consul: handle nil multierror pointer correctly (#24513)

2024-11-20 10:55:52 -05:00

event

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

host

security: a more comprehensive env.denylist (#24540)

2024-11-22 18:54:18 +01:00

monitor

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

pprof

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

test-resources

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

testdata

client: emit optional telemetry from prerun and prestart hooks. (#24556)

2024-12-12 14:43:14 +00:00

acl_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

acl_endpoint.go

build: update golangci-lint to 1.60.1 (#23807)

2024-08-14 10:09:31 -05:00

agent_ce.go

admin: rename _oss files to _ce (#18209)

2023-08-18 07:47:24 +01:00

agent_endpoint_test.go

Upgrade go-msgpack to v2 (#20173)

2024-03-21 11:44:23 -07:00

agent_endpoint.go

build: update golangci-lint to 1.60.1 (#23807)

2024-08-14 10:09:31 -05:00

agent_test.go

client: emit optional telemetry from prerun and prestart hooks. (#24556)

2024-12-12 14:43:14 +00:00

agent.go

client: emit optional telemetry from prerun and prestart hooks. (#24556)

2024-12-12 14:43:14 +00:00

alloc_endpoint_test.go

Upgrade go-msgpack to v2 (#20173)

2024-03-21 11:44:23 -07:00

alloc_endpoint.go

build: update golangci-lint to 1.60.1 (#23807)

2024-08-14 10:09:31 -05:00

bindata_assetfs.go

Generate files for 1.9.3 release

2024-11-11 19:40:44 +01:00

command_test.go

exec2: add client support for unveil filesystem isolation mode (#20115)

2024-03-13 08:24:17 -05:00

command.go

client: Add a preferred address family option for network-interface (#23389)

2024-07-12 15:30:38 -05:00

config_ce.go

admin: rename _oss files to _ce (#18209)

2023-08-18 07:47:24 +01:00

config_parse_test.go

client: emit optional telemetry from prerun and prestart hooks. (#24556)

2024-12-12 14:43:14 +00:00

config_parse.go

Allow client template config block to be parsed when using json config (#24007)

2024-10-01 15:44:36 -04:00

config_test.go

client: emit optional telemetry from prerun and prestart hooks. (#24556)

2024-12-12 14:43:14 +00:00

config.go

client: emit optional telemetry from prerun and prestart hooks. (#24556)

2024-12-12 14:43:14 +00:00

csi_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

csi_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

deployment_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

deployment_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

eval_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

eval_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

event_endpoint_test.go

auth: add client-only ACL (#18730)

2023-10-12 12:21:48 -04:00

event_endpoint.go

update ndjson links due to domain expiry/resale (#24306)

2024-10-28 09:06:50 +00:00

fs_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

fs_endpoint.go

Upgrade go-msgpack to v2 (#20173)

2024-03-21 11:44:23 -07:00

helpers_test.go

tests: swap testify for test in more places (#20028)

2024-02-29 12:11:35 -06:00

helpers.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

http_ce.go

admin: rename _oss files to _ce (#18209)

2023-08-18 07:47:24 +01:00

http_stdlog_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

http_stdlog.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

http_test.go

agent: set content type header explicitly (#24489)

2024-11-20 10:18:30 +01:00

http.go

agent: set content type header explicitly (#24489)

2024-11-20 10:18:30 +01:00

job_endpoint_statuses_test.go

api: new /v1/jobs/statuses endpoint for /ui/jobs page (#20130)

2024-05-03 15:01:40 -05:00

job_endpoint_statuses.go

api: new /v1/jobs/statuses endpoint for /ui/jobs page (#20130)

2024-05-03 15:01:40 -05:00

job_endpoint_test.go

api: new dispatch endpoint sends body as Payload (#24381)

2024-11-07 10:12:29 -06:00

job_endpoint.go

[gh-476] Sanitise HCL variables before storing on job submission (#24423)

2024-11-22 11:45:02 +01:00

keyring_endpoint_test.go

keyring: support prepublishing keys (#23577)

2024-07-19 13:29:41 -04:00

keyring_endpoint.go

keyring: support prepublishing keys (#23577)

2024-07-19 13:29:41 -04:00

keyring_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

keyring.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

log_file_bsd.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

log_file_linux.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

log_file_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

log_file_windows.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

log_file.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

log_levels_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

log_levels.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

meta_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

metrics_endpoint_test.go

Revert "deps: update go-metrics to v0.5.3 (#19190)" (#19374)

2023-12-08 08:46:55 -05:00

metrics_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

namespace_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

namespace_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

node_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

node_endpoint.go

sec: fix alloc workload identity namespace permission (#24683)

2024-12-16 16:35:10 -05:00

node_pool_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

node_pool_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

operator_endpoint_ce.go

autopilot: add Enterprise health information to API endpoint (#20153)

2024-03-18 11:38:17 -04:00

operator_endpoint_test.go

autopilot: add Enterprise health information to API endpoint (#20153)

2024-03-18 11:38:17 -04:00

operator_endpoint.go

Upgrade go-msgpack to v2 (#20173)

2024-03-21 11:44:23 -07:00

plugins_test.go

auth: add client-only ACL (#18730)

2023-10-12 12:21:48 -04:00

plugins.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

region_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

region_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

retry_join_test.go

agent: Fix a bug where retry_join was not retrying. (#24561)

2024-11-29 08:29:15 +00:00

retry_join.go

agent: Fix a bug where retry_join was not retrying. (#24561)

2024-11-29 08:29:15 +00:00

scaling_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

scaling_endpoint.go

scaling policy: use request namespace as target if unset in jobspec (#24065)

2024-10-01 11:41:40 -04:00

sdnotify_default.go

agent: add support for sdnotify protocol (#20528)

2024-05-03 13:42:07 -04:00

sdnotify_linux.go

agent: add support for sdnotify protocol (#20528)

2024-05-03 13:42:07 -04:00

search_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

search_endpoint.go

build: update golangci-lint to 1.60.1 (#23807)

2024-08-14 10:09:31 -05:00

service_registration_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

service_registration_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

stats_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

stats_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

status_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

status_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

stub_asset.go

docs: update all URLs to developer.hashicorp.com (#16247)

2023-10-24 11:00:11 -04:00

syslog_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

syslog.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

system_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

system_endpoint.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

testagent_ce.go

admin: rename _oss files to _ce (#18209)

2023-08-18 07:47:24 +01:00

testagent.go

Revert "deps: update go-metrics to v0.5.3 (#19190)" (#19374)

2023-12-08 08:46:55 -05:00

testingutils_test.go

action: add job action name validation (#19145)

2023-11-22 08:02:49 +00:00

variable_endpoint_test.go

[17449] Introduces a locking mechanism over variables (#18207)

2023-09-21 17:56:33 +02:00

variable_endpoint.go

[17449] Introduces a locking mechanism over variables (#18207)

2023-09-21 17:56:33 +02:00