Skip to content
This repository has been archived by the owner on Jan 8, 2024. It is now read-only.

Allow disabling exec only for the entrypoint #1973

Merged
merged 5 commits into from
Aug 3, 2021

Conversation

mitchellh
Copy link
Contributor

Fixes #1720

This allows the WAYPOINT_CEB_DISABLE_EXEC env var to be set to a truthy value to disable waypoint exec. This request is threaded through to the server so that the server should not ever assign an exec session to that instance, but also the entrypoint itself prevents any exec session if the server is poorly behaved or outdated.

Docs also updated.

This also removes the FindExecInstance API. @evanphx and I agreed to remove it since it was never used. And I had to remove it for this PR since it would've had to take into account whether exec was enabled or not and rather than enhancing that API, I'd rather remove it if we were going to remove it anyways.

@mitchellh mitchellh requested a review from a team August 2, 2021 21:36
@mitchellh mitchellh changed the title Allow disabling exec only in the entrypoint Allow disabling exec only for the entrypoint Aug 2, 2021
Copy link
Contributor

@catsby catsby left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

Copy link
Contributor

@krantzinator krantzinator left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Works great!

@mitchellh mitchellh merged commit 91c870f into main Aug 3, 2021
@mitchellh mitchellh deleted the improvement/exec-disable branch August 3, 2021 17:01
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Ability to disable waypoint exec to mitigate security risk.
5 participants