open-nomad/nomad/structs
Tim Gross 428e23043c
secure vars: limit maximum size of variable data (#13743)
To discourage accidentally DoS'ing the cluster with secure variables
data, we're providing a very low limit to the maximum size of a given
secure variable. This currently matches the limit for dispatch
payloads.

In future versions, we may increase this limit or make it
configurable, once we have better metrics from real-world operators.
2022-07-20 14:46:43 -04:00
..
config Merge pull request #13109 from hashicorp/merge-release-1.3.1-branch 2022-05-25 10:45:09 -04:00
alloc.go client: fixed a problem calculating a service namespace. (#13493) 2022-06-28 09:47:28 +02:00
alloc_test.go client: fixed a problem calculating a service namespace. (#13493) 2022-06-28 09:47:28 +02:00
batch_future.go
batch_future_test.go
bitmap.go
bitmap_test.go
connect.go
connect_test.go
consul.go
consul_oss.go
consul_oss_test.go
consul_test.go
csi.go CSI: make plugin health_timeout configurable in csi_plugin stanza (#13340) 2022-06-14 10:04:16 -04:00
csi_test.go
devices.go
devices_test.go
diff.go adding support for customized ingress tls (#13184) 2022-06-02 18:43:58 -04:00
diff_test.go adding support for customized ingress tls (#13184) 2022-06-02 18:43:58 -04:00
encoding.go
errors.go api: enable selecting subset of services using rendezvous hashing 2022-06-25 10:37:37 -05:00
errors_test.go
eval.go core: allow deleting of evaluations (#13492) 2022-07-06 16:30:11 +02:00
event.go events: fixup service events and rename topic to service. 2022-04-05 08:25:22 +01:00
extensions.go remove end-user algorithm selection (#13190) 2022-07-11 13:34:04 -04:00
funcs.go core: merge reserved_ports into host_networks (#13651) 2022-07-12 14:40:25 -07:00
funcs_test.go vault: revert support for entity aliases (#12723) 2022-04-22 10:46:34 -04:00
generate.sh workload identity (#13223) 2022-07-11 13:34:05 -04:00
handlers.go
job.go job_hooks: add implicit constraint when using Consul for services. (#12602) 2022-04-20 14:09:13 +02:00
job_test.go job_hooks: add implicit constraint when using Consul for services. (#12602) 2022-04-20 14:09:13 +02:00
network.go core: merge reserved_ports into host_networks (#13651) 2022-07-12 14:40:25 -07:00
network_test.go core: merge reserved_ports into host_networks (#13651) 2022-07-12 14:40:25 -07:00
node.go
node_class.go
node_class_test.go
node_test.go
operator.go core: allow pausing and un-pausing of leader broker routine (#13045) 2022-07-06 16:13:48 +02:00
search.go Implement HTTP search API for Variables (#13257) 2022-07-11 13:34:05 -04:00
secure_variables.go secure vars: limit maximum size of variable data (#13743) 2022-07-20 14:46:43 -04:00
secure_variables_test.go secure vars: rename automatically accessible vars path for jobs (#13848) 2022-07-19 16:17:34 -04:00
service_identities.go
service_registration.go api: enable selecting subset of services using rendezvous hashing 2022-06-25 10:37:37 -05:00
service_registration_test.go api: enable selecting subset of services using rendezvous hashing 2022-06-25 10:37:37 -05:00
services.go adding support for customized ingress tls (#13184) 2022-06-02 18:43:58 -04:00
services_test.go docs: add docs and tests for tagged_addresses 2022-05-31 13:02:48 -05:00
streaming_rpc.go
structs.go fsm: one-time token expiration should be deterministic (#13737) 2022-07-18 14:19:29 -04:00
structs_codegen.go
structs_oss.go
structs_periodic_test.go
structs_test.go client: enforce max_kill_timeout client configuration 2022-07-06 15:29:38 -05:00
testing.go
uuid.go core: allow deleting of evaluations (#13492) 2022-07-06 16:30:11 +02:00
vault.go vault: revert support for entity aliases (#12723) 2022-04-22 10:46:34 -04:00
volume_test.go
volumes.go