luxolus/open-nomad
2
0
Fork 0
Code Issues 1 Pull requests Packages Releases Wiki Activity

Merge pull request #6253 from hashicorp/docs-task-driver-security

Browse source 
docs: task driver resource isolation & security
This commit is contained in:
Mahmood Ali 2019-09-03 20:39:21 -04:00 committed by GitHub
parent 0f29dcc935 277e358489
commit 4da27c24ee
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
website/source/docs/drivers/index.html.md
View file

@ -29,6 +29,15 @@ used in, and the resource isolation mechanisms available.
For details on authoring a task driver plugin, please refer to the [plugin For details on authoring a task driver plugin, please refer to the [plugin
authoring guide][plugin_guide]. authoring guide][plugin_guide].
Task driver resource isolation is intended to provide a degree of separation of
Nomad client CPU / memory / storage between tasks. Resource isolation
effectiveness is dependent upon individual task driver implementations and
underlying client operating systems. Task drivers do include various
security-related controls, but the Nomad client to task interface should not be
considered a security boundary. See the [access control guide][acl_guide] for
more information on how to protect Nomad cluster operations.
[plugin]: /docs/configuration/plugin.html [plugin]: /docs/configuration/plugin.html
[docker_plugin]: /docs/drivers/docker.html#client-requirements [docker_plugin]: /docs/drivers/docker.html#client-requirements
[plugin_guide]: /docs/internals/plugins/index.html [plugin_guide]: /docs/internals/plugins/index.html
[acl_guide]: https://www.nomadproject.io/guides/security/acl.html