open-nomad/website/content/docs/configuration
Michael Schurter 7a28fcb8af template: disallow writeToFile by default
Resolves #12095 by WONTFIXing it.

This approach disables `writeToFile` as it allows arbitrary host
filesystem writes and is only a small quality of life improvement over
multiple `template` stanzas.

This approach has the significant downside of leaving people who have
altered their `template.function_denylist` *still vulnerable!* I added
an upgrade note, but we should have implemented the denylist as a
`map[string]bool` so that new funcs could be denied without overriding
custom configurations.

This PR also includes a bug fix that broke enabling all consul-template
funcs. We repeatedly failed to differentiate between a nil (unset)
denylist and an empty (allow all) one.
2022-03-28 17:05:42 -07:00
..
acl.mdx docs: note that clients need to have ACLs enabled (#11799) 2022-01-07 16:18:41 -05:00
audit.mdx Adds documentation for file mode to sink docs (#10972) 2021-07-29 16:09:18 -04:00
autopilot.mdx feat(website): migrates to new nav data format (#10264) 2021-03-31 08:43:17 -05:00
client.mdx template: disallow writeToFile by default 2022-03-28 17:05:42 -07:00
consul.mdx add go-sockaddr templating support to nomad consul address (#12084) 2022-02-24 09:34:54 -05:00
index.mdx docs: clairfy advertise.rpc effect 2022-02-25 16:02:29 -06:00
plugin.mdx feat(website): migrates to new nav data format (#10264) 2021-03-31 08:43:17 -05:00
search.mdx docs: Fix minor fuzzy search things (#10423) 2021-04-21 14:55:17 -05:00
sentinel.mdx feat(website): migrates to new nav data format (#10264) 2021-03-31 08:43:17 -05:00
server.mdx core: switch to go.etc.io/bbolt 2022-02-23 14:26:41 -06:00
server_join.mdx feat(website): migrates to new nav data format (#10264) 2021-03-31 08:43:17 -05:00
telemetry.mdx feat(website): migrates to new nav data format (#10264) 2021-03-31 08:43:17 -05:00
tls.mdx feat(website): migrates to new nav data format (#10264) 2021-03-31 08:43:17 -05:00
ui.mdx ui: change Consul/Vault base URL field name (#11589) 2021-11-30 13:20:29 -05:00
vault.mdx docs: clarify vault.token only required on servers 2021-11-18 16:34:59 -08:00