open-nomad/website/content/docs
Michael Schurter 7a28fcb8af template: disallow writeToFile by default
Resolves #12095 by WONTFIXing it.

This approach disables `writeToFile` as it allows arbitrary host
filesystem writes and is only a small quality of life improvement over
multiple `template` stanzas.

This approach has the significant downside of leaving people who have
altered their `template.function_denylist` *still vulnerable!* I added
an upgrade note, but we should have implemented the denylist as a
`map[string]bool` so that new funcs could be denied without overriding
custom configurations.

This PR also includes a bug fix that broke enabling all consul-template
funcs. We repeatedly failed to differentiate between a nil (unset)
denylist and an empty (allow all) one.
2022-03-28 17:05:42 -07:00
..
commands Display OS name in nomad node status command. (#12388) 2022-03-28 09:28:14 -04:00
configuration template: disallow writeToFile by default 2022-03-28 17:05:42 -07:00
devices feat(website): extract /plugins /tools docs (#11584) 2021-12-09 14:25:18 -05:00
drivers docs: add note about docker DNS config when using bridge mode (#12229) 2022-03-08 11:59:20 -05:00
enterprise feat(website): extract /plugins /tools docs (#11584) 2021-12-09 14:25:18 -05:00
install
integrations DOCS: Update Consul Connect to Consul service mesh (#11362) 2021-10-26 15:10:21 -04:00
internals feat(website): extract /plugins /tools docs (#11584) 2021-12-09 14:25:18 -05:00
job-specification Add grpc and http2 listeners to gateway docs (#12367) 2022-03-24 17:09:19 -04:00
nomad-vs-kubernetes Adding link to interview form 2022-02-14 12:38:26 -08:00
operations core: switch to go.etc.io/bbolt 2022-02-23 14:26:41 -06:00
runtime client: Add AWS EC2 instance-life-cycle from metadata to client fingerprint (#12371) 2022-03-25 11:50:52 -04:00
upgrade template: disallow writeToFile by default 2022-03-28 17:05:42 -07:00
ecosystem.mdx feat(website): extract /plugins /tools docs (#11584) 2021-12-09 14:25:18 -05:00
faq.mdx
index.mdx Adding link to interview form 2022-02-14 12:38:26 -08:00
partnerships.mdx feat(website): extract /plugins /tools docs (#11584) 2021-12-09 14:25:18 -05:00
schedulers.mdx docs: add Nomad version requirement note for sysbatch (#11231) 2021-09-29 15:14:51 -04:00
who-uses-nomad.mdx