File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -128,6 +128,8 @@ extremely critical but can expose some information that your service does not ne
128128- ` ALLOW_START ` (containers/` id ` /` start ` )
129129- ` ALLOW_STOP ` (containers/` id ` /` stop ` )
130130- ` ALLOW_RESTARTS ` (containers/` id ` /` stop ` |` restart ` |` kill ` )
131+ - ` ALLOW_PAUSE ` (containers/` id ` /` pause ` )
132+ - ` ALLOW_UNPAUSE ` (containers/` id ` /` unpause ` )
131133- ` DISTRIBUTION `
132134- ` EXEC `
133135- ` GRPC `
Original file line number Diff line number Diff line change @@ -51,6 +51,8 @@ frontend dockerfrontend
5151 http-request allow if { path,url_dec -m reg -i ^(/v[\ d\ .]+)?/containers/[a-zA-Z0-9_.-]+/((stop)|(restart)|(kill)) } { env(ALLOW_RESTARTS) -m bool }
5252 http-request allow if { path,url_dec -m reg -i ^(/v[\ d\ .]+)?/containers/[a-zA-Z0-9_.-]+/start } { env(ALLOW_START) -m bool }
5353 http-request allow if { path,url_dec -m reg -i ^(/v[\ d\ .]+)?/containers/[a-zA-Z0-9_.-]+/stop } { env(ALLOW_STOP) -m bool }
54+ http-request allow if { path,url_dec -m reg -i ^(/v[\ d\ .]+)?/containers/[a-zA-Z0-9_.-]+/pause } { env(ALLOW_PAUSE) -m bool }
55+ http-request allow if { path,url_dec -m reg -i ^(/v[\ d\ .]+)?/containers/[a-zA-Z0-9_.-]+/unpause } { env(ALLOW_UNPAUSE) -m bool }
5456 http-request allow if { path,url_dec -m reg -i ^(/v[\ d\ .]+)?/auth } { env(AUTH) -m bool }
5557 http-request allow if { path,url_dec -m reg -i ^(/v[\ d\ .]+)?/build } { env(BUILD) -m bool }
5658 http-request allow if { path,url_dec -m reg -i ^(/v[\ d\ .]+)?/commit } { env(COMMIT) -m bool }
You can’t perform that action at this time.
0 commit comments