Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

override consul-template blacklist configuration #6075

Merged
merged 2 commits into from
Aug 12, 2019
Merged

override consul-template blacklist configuration #6075

merged 2 commits into from
Aug 12, 2019
+871 −1,014

Commits on Aug 12, 2019

  1. update consul-template to latest version 

    pulls in configuration option for blacklisting template functions from:
hashicorp/consul-template#1243
hashicorp/consul-template#1246

pulls in configuration option for file sandboxing from:
hashicorp/consul-template#1249
hashicorp/consul-template#1254

pulls in vault KVv2 read fixes from:
hashicorp/consul-template#1253
    @tgross
    tgross committed Aug 12, 2019
    Configuration menu
    Copy the full SHA
    c41d6ba View commit details
    Browse the repository at this point in the history

  2. client/template: configuration for function blacklist and sandboxing 

    When rendering a task template, the `plugin` function is no longer
permitted by default and will raise an error. An operator can opt-in
to permitting this function with the new `template.function_blacklist`
field in the client configuration.

When rendering a task template, path parameters for the `file`
function will be treated as relative to the task directory by
default. Relative paths or symlinks that point outside the task
directory will raise an error. An operator can opt-out of this
protection with the new `template.disable_file_sandbox` field in the
client configuration.
    @tgross
    tgross committed Aug 12, 2019
    Configuration menu
    Copy the full SHA
    af389da View commit details
    Browse the repository at this point in the history