From 9ec1f2ed6d3dd205e8afc2c18e5afb66f0a212b3 Mon Sep 17 00:00:00 2001 From: Chaim Lev-Ari Date: Thu, 3 Jun 2021 11:36:54 +0200 Subject: [PATCH] fix(endpoints): set sysctl setting for new endpoints (#5028) --- api/cmd/portainer/main.go | 2 ++ api/http/handler/endpoints/endpoint_create.go | 1 + 2 files changed, 3 insertions(+) diff --git a/api/cmd/portainer/main.go b/api/cmd/portainer/main.go index 91bfce5f3..89d1cee08 100644 --- a/api/cmd/portainer/main.go +++ b/api/cmd/portainer/main.go @@ -240,6 +240,7 @@ func createTLSSecuredEndpoint(flags *portainer.CLIFlags, dataStore portainer.Dat AllowVolumeBrowserForRegularUsers: false, EnableHostManagementFeatures: false, + AllowSysctlSettingForRegularUsers: true, AllowBindMountsForRegularUsers: true, AllowPrivilegedModeForRegularUsers: true, AllowHostNamespaceForRegularUsers: true, @@ -301,6 +302,7 @@ func createUnsecuredEndpoint(endpointURL string, dataStore portainer.DataStore, AllowVolumeBrowserForRegularUsers: false, EnableHostManagementFeatures: false, + AllowSysctlSettingForRegularUsers: true, AllowBindMountsForRegularUsers: true, AllowPrivilegedModeForRegularUsers: true, AllowHostNamespaceForRegularUsers: true, diff --git a/api/http/handler/endpoints/endpoint_create.go b/api/http/handler/endpoints/endpoint_create.go index 150391f38..770c599c9 100644 --- a/api/http/handler/endpoints/endpoint_create.go +++ b/api/http/handler/endpoints/endpoint_create.go @@ -471,6 +471,7 @@ func (handler *Handler) saveEndpointAndUpdateAuthorizations(endpoint *portainer. AllowVolumeBrowserForRegularUsers: false, EnableHostManagementFeatures: false, + AllowSysctlSettingForRegularUsers: true, AllowBindMountsForRegularUsers: true, AllowPrivilegedModeForRegularUsers: true, AllowHostNamespaceForRegularUsers: true,