Zac Bergquist bf6e8af33a Validate token for node join script (#14726) ...

The token value is provided via the HTTP request
and fed into the node join script. This could allow an attacker
to generate a node-join script with malicious code included.

Fix this by validating that tokens are valid and exist in the backend.

Additionally, we recently added the ability to specify labels via the
node-labels query parameter, which is also user-controlled. Since this
functionality was never integrated in the UI, we remove it here and
will add an alternative implementation in the future.

Also use single quotes in script to prevent expansion

2022-07-27 15:51:41 +00:00

..

node-join

Validate token for node join script (#14726)

2022-07-27 15:51:41 +00:00

install_node.go

Move the install.sh script into the oss version and import it on build instead of requiring a copy/paste to update. (#11352)

2022-03-24 19:22:48 +00:00