Docker/portainer
Docker/portainer
1
0
Fork 0
mirror of https://github.com/portainer/portainer.git synced 2025-07-24 07:49:41 +02:00
Code Issues Releases Activity

fix(endpoints): set sysctl setting for new endpoints (#5028)

Browse source
This commit is contained in:
Chaim Lev-Ari 2021-06-03 11:36:54 +02:00 • committed by GitHub
parent 8bfa5132cd
commit 9ec1f2ed6d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
api/cmd/portainer/main.go
View file

@ -240,6 +240,7 @@ func createTLSSecuredEndpoint(flags *portainer.CLIFlags, dataStore portainer.Dat
AllowVolumeBrowserForRegularUsers: false, AllowVolumeBrowserForRegularUsers: false,
EnableHostManagementFeatures: false, EnableHostManagementFeatures: false,
AllowSysctlSettingForRegularUsers: true,
AllowBindMountsForRegularUsers: true, AllowBindMountsForRegularUsers: true,
AllowPrivilegedModeForRegularUsers: true, AllowPrivilegedModeForRegularUsers: true,
AllowHostNamespaceForRegularUsers: true, AllowHostNamespaceForRegularUsers: true,
@ -301,6 +302,7 @@ func createUnsecuredEndpoint(endpointURL string, dataStore portainer.DataStore,
AllowVolumeBrowserForRegularUsers: false, AllowVolumeBrowserForRegularUsers: false,
EnableHostManagementFeatures: false, EnableHostManagementFeatures: false,
AllowSysctlSettingForRegularUsers: true,
AllowBindMountsForRegularUsers: true, AllowBindMountsForRegularUsers: true,
AllowPrivilegedModeForRegularUsers: true, AllowPrivilegedModeForRegularUsers: true,
AllowHostNamespaceForRegularUsers: true, AllowHostNamespaceForRegularUsers: true,

1
api/http/handler/endpoints/endpoint_create.go
View file

@ -471,6 +471,7 @@ func (handler *Handler) saveEndpointAndUpdateAuthorizations(endpoint *portainer.
AllowVolumeBrowserForRegularUsers: false, AllowVolumeBrowserForRegularUsers: false,
EnableHostManagementFeatures: false, EnableHostManagementFeatures: false,
AllowSysctlSettingForRegularUsers: true,
AllowBindMountsForRegularUsers: true, AllowBindMountsForRegularUsers: true,
AllowPrivilegedModeForRegularUsers: true, AllowPrivilegedModeForRegularUsers: true,
AllowHostNamespaceForRegularUsers: true, AllowHostNamespaceForRegularUsers: true,