Tim Gross ffb83e1ef1 client/template: configuration for function blacklist and sandboxing ...

When rendering a task template, the `plugin` function is no longer
permitted by default and will raise an error. An operator can opt-in
to permitting this function with the new `template.function_blacklist`
field in the client configuration.

When rendering a task template, path parameters for the `file`
function will be treated as relative to the task directory by
default. Relative paths or symlinks that point outside the task
directory will raise an error. An operator can opt-out of this
protection with the new `template.disable_file_sandbox` field in the
client configuration.

2019-08-12 16:34:48 -04:00

..

consul

Merge pull request #5975 from hashicorp/b-check-watcher-deadlock

2019-07-18 13:13:40 -07:00

test-resources

chore: Format hcl configurations

2019-07-20 16:55:07 +02:00

testdata

HostVolumeConfig: Source -> Path

2019-08-12 15:39:08 +02:00

acl_endpoint_test.go

spelling: bootstrap

2018-03-11 17:43:19 +00:00

acl_endpoint.go

Self token lookup

2017-10-13 13:12:20 -07:00

agent_endpoint_test.go

Use in-mem rpc

2018-02-15 13:59:01 -08:00

agent_endpoint.go

agent + consul

2018-09-13 10:43:40 -07:00

agent_test.go

Support for hot reloading log levels

2019-07-24 13:37:08 +02:00

agent.go

client/template: configuration for function blacklist and sandboxing

2019-08-12 16:34:48 -04:00

alloc_endpoint_test.go

api: return X-Nomad-Index header on allocation stop

2019-06-21 16:20:06 +00:00

alloc_endpoint.go

api: return X-Nomad-Index header on allocation stop

2019-06-21 16:20:06 +00:00

bindata_assetfs.go

Generate files for 0.9.4 release

2019-07-30 19:05:18 +00:00

command_test.go

refactored config validation into a new method, modified Meta.Client

2019-01-08 15:07:36 +00:00

command.go

agent config: cleaner VAULT_ env lookup

2019-04-10 10:34:10 -05:00

config_oss.go

Allow separate enterprise config overlay

2018-03-22 13:53:08 -07:00

config_parse_test.go

HostVolumeConfig: Source -> Path

2019-08-12 15:39:08 +02:00

config_parse.go

client: Add parsing and registration of HostVolume configuration

2019-08-12 15:39:08 +02:00

config_test.go

client/template: configuration for function blacklist and sandboxing

2019-08-12 16:34:48 -04:00

config.go

client/template: configuration for function blacklist and sandboxing

2019-08-12 16:34:48 -04:00

deployment_endpoint_test.go

Populate DisplayMessage in various http endpoints that return allocations, plus unit tests.

2017-11-17 14:53:26 -06:00

deployment_endpoint.go

Populate DisplayMessage in various http endpoints that return allocations, plus unit tests.

2017-11-17 14:53:26 -06:00

eval_endpoint_test.go

spelling: output

2018-03-11 18:35:30 +00:00

eval_endpoint.go

http: list results are never null

2015-09-07 10:03:10 -07:00

fs_endpoint_test.go

api: add follow param to file stream endpoint (#6049)

2019-08-01 08:32:43 -04:00

fs_endpoint.go

api: add follow param to file stream endpoint (#6049)

2019-08-01 08:32:43 -04:00

helpers_test.go

Refactor determining the handler for a node id call

2018-02-15 13:59:02 -08:00

helpers.go

client: expose task state to client

2018-10-16 16:56:55 -07:00

http_oss.go

sync

2017-10-13 14:36:02 -07:00

http_test.go

fixing up raft reload tests

2018-01-17 10:29:15 -05:00

http.go

agent: add websocket handler for nomad exec

2019-05-09 16:49:08 -04:00

job_endpoint_test.go

Merge pull request #6045 from hashicorp/f-connect-groupservice

2019-08-06 15:43:38 -07:00

job_endpoint.go

structs: Unify Volume and VolumeRequest

2019-08-12 15:39:08 +02:00

keyring_test.go

Standardize retrieving a free port into a helper package

2017-10-23 16:48:20 -07:00

keyring.go

Enable serf encryption (#1791)

2016-10-17 10:48:04 -07:00

log_levels_test.go

More parallel

2017-07-20 09:36:34 -07:00

log_levels.go

Support for hot reloading log levels

2019-07-24 13:37:08 +02:00

log_writer_test.go

More parallel

2017-07-20 09:36:34 -07:00

log_writer.go

Enable more linters

2017-09-26 15:26:33 -07:00

metrics_endpoint_test.go

test case for 5540 (#5590)

2019-04-30 10:31:35 -04:00

metrics_endpoint.go

agent + consul

2018-09-13 10:43:40 -07:00

node_endpoint_test.go

take NodeID from url in api for node eligibility

2019-07-15 18:34:53 +03:00

node_endpoint.go

take NodeID from url in api for node eligibility

2019-07-15 18:34:53 +03:00

operator_endpoint_test.go

nomad: disable service+batch preemption by default

2019-06-04 15:54:50 -07:00

operator_endpoint.go

Rename to match system scheduler config.

2019-05-03 14:06:12 -05:00

plugins.go

move pluginutils -> helper/pluginutils

2019-01-22 15:50:08 -08:00

region_endpoint_test.go

More parallel

2017-07-20 09:36:34 -07:00

region_endpoint.go

website: document regions endpoint

2015-11-24 09:38:07 -08:00

retry_join_test.go

agent + consul

2018-09-13 10:43:40 -07:00

retry_join.go

agent + consul

2018-09-13 10:43:40 -07:00

search_endpoint_test.go

add deployments to search api

2017-08-21 15:20:55 +00:00

search_endpoint.go

Sync namespace changes

2017-09-07 17:04:21 -07:00

stats_endpoint_test.go

Fix failing test TestClientStatusRequest

2018-05-30 15:11:54 -05:00

stats_endpoint.go

Server side impl + touch ups

2018-02-15 13:59:02 -08:00

status_endpoint_test.go

More parallel

2017-07-20 09:36:34 -07:00

status_endpoint.go

http: adding status APIs

2015-09-06 18:39:03 -07:00

stub_asset.go

sync

2017-09-19 10:08:23 -05:00

syslog_test.go

goimports

2019-01-22 15:44:31 -08:00

syslog.go

goimports

2019-01-22 15:44:31 -08:00

system_endpoint_test.go

More parallel

2017-07-20 09:36:34 -07:00

system_endpoint.go

Added an endpoint for users to reconcile job summaries

2016-08-03 16:12:47 -07:00

testagent.go

Move logger initialization to earlier step

2019-02-21 12:41:54 -06:00

testingutils_test.go

backfill region from job hcl in jobUpdate and jobPlan endpoints

2019-06-13 08:03:16 -07:00