luxolus
/
open-nomad
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity
open-nomad/client/allocrunner
History
Tim Gross 1fb1c9c5d4
artifact/template: make destination path absolute inside taskdir (#9149) 
Prior to Nomad 0.12.5, you could use `${NOMAD_SECRETS_DIR}/mysecret.txt` as
the `artifact.destination` and `template.destination` because we would always
append the destination to the task working directory. In the recent security
patch we treated the `destination` absolute path as valid if it didn't escape
the working directory, but this breaks backwards compatibility and
interpolation of `destination` fields.

This changeset partially reverts the behavior so that we always append the
destination, but we also perform the escape check on that new destination
after interpolation so the security hole is closed.

Also, ConsulTemplate test should exercise interpolation
 		2020-10-22 15:47:49 -04:00
..
interfaces client: add NetworkStatus to Allocation (#8657) 2020-10-12 13:43:04 -04:00
state client: add NetworkStatus to Allocation (#8657) 2020-10-12 13:43:04 -04:00
taskrunner artifact/template: make destination path absolute inside taskdir (#9149) 2020-10-22 15:47:49 -04:00
alloc_runner.go Implement 'batch mode' for persisting allocations on the client. (#9093) 2020-10-20 16:15:37 -04:00
alloc_runner_hooks.go Consul with CNI and host_network addresses (#9095) 2020-10-15 15:32:21 -04:00
alloc_runner_test.go task lifecycle poststart: code review fixes 2020-08-31 13:22:41 -07:00
alloc_runner_unix_test.go tests: restart restartpolicy for all tasks in tests 2020-03-24 21:52:48 -04:00
allocdir_hook.go client: cleanup and document context uses 2019-03-12 15:03:54 -07:00
config.go consul/connect: dynamically select envoy sidecar at runtime 2020-10-13 09:14:12 -05:00
consul_grpc_sock_hook.go consul/connect: add initial support for ingress gateways 2020-08-21 16:21:54 -05:00
consul_grpc_sock_hook_test.go consul/connect: add support for bridge networks with connect native tasks 2020-07-29 09:26:01 -05:00
consul_http_sock_hook.go consul/connect: fixup some spelling, comments, consts 2020-07-29 09:26:01 -05:00
consul_http_sock_hook_test.go consul/connect: add support for bridge networks with connect native tasks 2020-07-29 09:26:01 -05:00
csi_hook.go csi: fix incorrect comment on csi_hook context lifetime 2020-10-09 11:03:51 -04:00
groupservice_hook.go Consul with CNI and host_network addresses (#9095) 2020-10-15 15:32:21 -04:00
groupservice_hook_test.go consul/connect: fixup tests to use new consul sdk 2020-08-24 12:02:41 -05:00
health_hook.go add default update stanza and max_parallel=0 disables deployments (#6191) 2019-09-02 10:30:09 -07:00
health_hook_test.go health: fail health if any task is pending 2020-03-22 11:13:41 -04:00
migrate_hook.go client: cleanup and document context uses 2019-03-12 15:03:54 -07:00
network_hook.go client: add NetworkStatus to Allocation (#8657) 2020-10-12 13:43:04 -04:00
network_hook_test.go client: add NetworkStatus to Allocation (#8657) 2020-10-12 13:43:04 -04:00
network_manager_linux.go ar: support opting into binding host ports to default network IP (#8321) 2020-07-06 18:51:46 -04:00
network_manager_linux_test.go ar: rearrange network hook to support building on windows 2019-07-31 01:03:19 -04:00
network_manager_nonlinux.go ar: refactor network bridge config to use go-cni lib (#6255) 2019-09-04 16:33:25 -04:00
networking.go client: add NetworkStatus to Allocation (#8657) 2020-10-12 13:43:04 -04:00
networking_bridge_linux.go client: add NetworkStatus to Allocation (#8657) 2020-10-12 13:43:04 -04:00
networking_cni.go client: add NetworkStatus to Allocation (#8657) 2020-10-12 13:43:04 -04:00
task_hook_coordinator.go client: remove shortcircuit preventing poststart hooks from running 2020-08-11 09:48:24 -07:00
task_hook_coordinator_test.go test: add allocrunner test for poststart hooks 2020-08-12 09:54:14 -07:00
testing.go client: enable nomad client to request and set SI tokens for tasks 2020-01-31 19:03:38 -06:00
upstream_allocs_hook.go client: cleanup and document context uses 2019-03-12 15:03:54 -07:00
util.go
…