github
/
portainer
mirror of https://github.com/portainer/portainer
1
0
Fork 0
Code Issues Releases Wiki Activity

fix(endpoints): set sysctl setting for new endpoints (#5028)

pull/5146/head
Chaim Lev-Ari 2021-06-03 11:36:54 +02:00 committed by GitHub
parent 8bfa5132cd
commit 9ec1f2ed6d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/cmd/portainer/main.go
View File

@ -240,6 +240,7 @@ func createTLSSecuredEndpoint(flags *portainer.CLIFlags, dataStore portainer.Dat
AllowVolumeBrowserForRegularUsers: false, AllowVolumeBrowserForRegularUsers: false,
EnableHostManagementFeatures: false, EnableHostManagementFeatures: false,
AllowSysctlSettingForRegularUsers: true,
AllowBindMountsForRegularUsers: true, AllowBindMountsForRegularUsers: true,
AllowPrivilegedModeForRegularUsers: true, AllowPrivilegedModeForRegularUsers: true,
AllowHostNamespaceForRegularUsers: true, AllowHostNamespaceForRegularUsers: true,
@ -301,6 +302,7 @@ func createUnsecuredEndpoint(endpointURL string, dataStore portainer.DataStore,
AllowVolumeBrowserForRegularUsers: false, AllowVolumeBrowserForRegularUsers: false,
EnableHostManagementFeatures: false, EnableHostManagementFeatures: false,
AllowSysctlSettingForRegularUsers: true,
AllowBindMountsForRegularUsers: true, AllowBindMountsForRegularUsers: true,
AllowPrivilegedModeForRegularUsers: true, AllowPrivilegedModeForRegularUsers: true,
AllowHostNamespaceForRegularUsers: true, AllowHostNamespaceForRegularUsers: true,

1
api/http/handler/endpoints/endpoint_create.go
View File

@ -471,6 +471,7 @@ func (handler *Handler) saveEndpointAndUpdateAuthorizations(endpoint *portainer.
AllowVolumeBrowserForRegularUsers: false, AllowVolumeBrowserForRegularUsers: false,
EnableHostManagementFeatures: false, EnableHostManagementFeatures: false,
AllowSysctlSettingForRegularUsers: true,
AllowBindMountsForRegularUsers: true, AllowBindMountsForRegularUsers: true,
AllowPrivilegedModeForRegularUsers: true, AllowPrivilegedModeForRegularUsers: true,
AllowHostNamespaceForRegularUsers: true, AllowHostNamespaceForRegularUsers: true,