luxolus/open-nomad
2
0
Fork 0
Code Issues 1 Pull requests Packages Releases Wiki Activity
open-nomad/client
History
Tim Gross 1fb1c9c5d4
artifact/template: make destination path absolute inside taskdir (#9149) 
Prior to Nomad 0.12.5, you could use `${NOMAD_SECRETS_DIR}/mysecret.txt` as
the `artifact.destination` and `template.destination` because we would always
append the destination to the task working directory. In the recent security
patch we treated the `destination` absolute path as valid if it didn't escape
the working directory, but this breaks backwards compatibility and
interpolation of `destination` fields.

This changeset partially reverts the behavior so that we always append the
destination, but we also perform the escape check on that new destination
after interpolation so the security hole is closed.

Also, ConsulTemplate test should exercise interpolation
2020-10-22 15:47:49 -04:00
..
allocdir close file when done reading 2020-08-24 20:22:42 -04:00
allochealth allochealth: Fix when check health preceeds task health 2020-05-13 07:44:39 -04:00
allocrunner artifact/template: make destination path absolute inside taskdir (#9149) 2020-10-22 15:47:49 -04:00
allocwatcher client/allocwatcher: fix dropped test error (#6592) 2019-10-31 08:29:25 -04:00
config removed backwards-compatible/untagged metrics deprecated in 0.7 2020-10-13 20:18:39 +00:00
consul consul/connect: dynamically select envoy sidecar at runtime 2020-10-13 09:14:12 -05:00
devicemanager nvidia: support disabling the nvidia plugin (#8353) 2020-07-21 10:11:16 -04:00
dynamicplugins csi: dynamically update plugin registration (#7386) 2020-03-23 13:59:25 -04:00
fingerprint env_aws: fixup test case node attr detection 2020-10-08 12:59:07 -05:00
interfaces Populate alloc stats API with device stats 2018-11-16 10:26:32 -05:00
lib ar: plumb client config for networking into the network hook 2019-07-31 01:04:06 -04:00
logmon only report tasklogger is running if both stdout and stderr are still running (#8155) 2020-06-12 09:17:35 -04:00
pluginmanager csi: client RPCs should return wrapped errors for checking (#8605) 2020-08-07 11:01:36 -04:00
servers client: drop unused DC field from servers list 2019-05-20 14:19:15 -07:00
state Implement 'batch mode' for persisting allocations on the client. (#9093) 2020-10-20 16:15:37 -04:00
stats Update gopsutil code 2020-03-15 09:37:05 +01:00
structs csi: support for VolumeContext and VolumeParameters (#7957) 2020-05-15 08:16:01 -04:00
taskenv client: add tests around meta and canarymeta interpolation 2020-10-20 12:50:29 -05:00
testutil fixup! vendor: explicit use of hashicorp/go-msgpack 2020-03-31 09:48:07 -04:00
vaultclient vendor: vault api and sdk 2020-03-21 17:57:48 +01:00
acl.go Audit config, seams for enterprise audit features 2020-03-23 13:47:42 -04:00
acl_test.go Audit config, seams for enterprise audit features 2020-03-23 13:47:42 -04:00
agent_endpoint.go fix params for Agent.Host client RPC (#8795) 2020-08-31 17:14:26 -04:00
agent_endpoint_test.go fix params for Agent.Host client RPC (#8795) 2020-08-31 17:14:26 -04:00
alloc_endpoint.go fixup! vendor: explicit use of hashicorp/go-msgpack 2020-03-31 09:48:07 -04:00
alloc_endpoint_test.go tests: Run a task long enough to be restartable 2020-05-31 10:33:03 -04:00
alloc_watcher_e2e_test.go tests: swap lib/freeport for tweaked helper/freeport 2019-12-09 08:37:32 -06:00
client.go s/0.13/1.0/g 2020-10-14 15:17:47 -07:00
client_stats_endpoint.go Server side impl + touch ups 2018-02-15 13:59:02 -08:00
client_stats_endpoint_test.go tests: swap lib/freeport for tweaked helper/freeport 2019-12-09 08:37:32 -06:00
client_test.go Events/msgtype cleanup (#9117) 2020-10-19 09:30:15 -04:00
csi_endpoint.go csi: client RPCs should return wrapped errors for checking (#8605) 2020-08-07 11:01:36 -04:00
csi_endpoint_test.go csi: client RPCs should return wrapped errors for checking (#8605) 2020-08-07 11:01:36 -04:00
driver_manager_test.go tests: fix data race in client TestDriverManager_Fingerprint_Periodic 2019-05-21 09:49:56 -04:00
enterprise_client_oss.go give enterpriseclient a logger (#8072) 2020-05-28 15:43:16 -04:00
fingerprint_manager.go s/0.13/1.0/g 2020-10-14 15:17:47 -07:00
fingerprint_manager_test.go use allow/deny instead of the colored alternatives (#9019) 2020-10-12 08:47:05 -04:00
fs_endpoint.go fixup! vendor: explicit use of hashicorp/go-msgpack 2020-03-31 09:48:07 -04:00
fs_endpoint_test.go client: fix test umask (#8987) 2020-09-30 08:09:41 -04:00
gc.go Plugins use parent loggers 2019-01-11 11:36:37 -08:00
gc_test.go Events/msgtype cleanup (#9117) 2020-10-19 09:30:15 -04:00
heartbeatstop.go Delayed evaluations for stop_after_client_disconnect can cause unwanted extra followup evaluations around job garbage collection (#8099) 2020-06-03 09:48:38 -04:00
heartbeatstop_test.go docs: s/hearbeat/heartbeat and fix link 2020-07-23 11:33:34 -07:00
node_updater.go client: use NewNodeEvent builder for consistency (#7559) 2020-03-31 10:02:16 -04:00
rpc.go RPC Timeout/Retries account for blocking requests (#8921) 2020-09-18 08:58:41 -04:00
rpc_test.go Simplify Bootstrap logic in tests 2020-03-02 13:47:43 -05:00
testing.go consul/connect: dynamically select envoy sidecar at runtime 2020-10-13 09:14:12 -05:00
util.go Revert "client: defensive against getting stale alloc updates" 2020-06-19 15:39:44 -04:00
util_test.go Update state with server 2018-10-16 16:53:29 -07:00