[ARVADOS] updated: 2.1.0-1489-gc8d252f51

Git user git at public.arvados.org
Mon Oct 18 13:30:10 UTC 2021


Summary of changes:
 lib/config/config.default.yml  | 11 ++++-------
 lib/config/generated_config.go | 11 ++++-------
 2 files changed, 8 insertions(+), 14 deletions(-)

       via  c8d252f51c23484484e4aa023fcd1f86ee961eab (commit)
      from  bda9093be4d24d45a6fff29148fbb5438e283897 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit c8d252f51c23484484e4aa023fcd1f86ee961eab
Author: Tom Clegg <tom at curii.com>
Date:   Mon Oct 18 09:25:04 2021 -0400

    16347: Remove config comment made obsolete by logging option.
    
    Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom at curii.com>

diff --git a/lib/config/config.default.yml b/lib/config/config.default.yml
index 106ecdfac..67286edfe 100644
--- a/lib/config/config.default.yml
+++ b/lib/config/config.default.yml
@@ -920,13 +920,10 @@ Clusters:
       #
       # A zero value disables this feature.
       #
-      # This feature has security implications. (1) Container logs
-      # will include keepstore log files, which typically reveal some
-      # volume configuration details, error messages from the cloud
-      # storage provider, etc., which are not otherwise visible to
-      # users. (2) The entire cluster configuration file, including
-      # the system root token, is copied to the worker node and held
-      # in memory for the duration of the container.
+      # Note that when this feature is enabled, the entire cluster
+      # configuration file, including the system root token, is copied
+      # to the worker node and held in memory for the duration of the
+      # container.
       LocalKeepBlobBuffersPerVCPU: 0
 
       # When running a dedicated keepstore process for a container
diff --git a/lib/config/generated_config.go b/lib/config/generated_config.go
index 4207e6e4d..d2a68f29f 100644
--- a/lib/config/generated_config.go
+++ b/lib/config/generated_config.go
@@ -926,13 +926,10 @@ Clusters:
       #
       # A zero value disables this feature.
       #
-      # This feature has security implications. (1) Container logs
-      # will include keepstore log files, which typically reveal some
-      # volume configuration details, error messages from the cloud
-      # storage provider, etc., which are not otherwise visible to
-      # users. (2) The entire cluster configuration file, including
-      # the system root token, is copied to the worker node and held
-      # in memory for the duration of the container.
+      # Note that when this feature is enabled, the entire cluster
+      # configuration file, including the system root token, is copied
+      # to the worker node and held in memory for the duration of the
+      # container.
       LocalKeepBlobBuffersPerVCPU: 0
 
       # When running a dedicated keepstore process for a container

-----------------------------------------------------------------------


hooks/post-receive
-- 




More information about the arvados-commits mailing list