Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable functions by default in values.yaml #483

Merged
merged 1 commit into from
Mar 26, 2024

Conversation

lhotari
Copy link
Member

@lhotari lhotari commented Mar 26, 2024

Motivation

Pulsar Functions impose a significant security risk and the default configuration for Pulsar Functions assumes trusted users.
Pulsar Functions shouldn't be enabled by default.

Modifications

  • Disable Pulsar Functions by default

Verifying this change

  • Make sure that the change passes the CI checks.

functions: true
# WARNING! Before enabling functions, make sure that all of your users are trusted since functions run user code
# and the current security sandbox is not sufficient to protect against malicious code.
functions: false
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there any documentation for function security that they could be pointed to?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No such documentation exists currently.

Copy link
Contributor

@eolivelli eolivelli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

@eolivelli eolivelli merged commit cc0a1ac into apache:master Mar 26, 2024
30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants