#
# A zero value disables this feature.
#
- # This feature has security implications. (1) Container logs
- # will include keepstore log files, which typically reveal some
- # volume configuration details, error messages from the cloud
- # storage provider, etc., which are not otherwise visible to
- # users. (2) The entire cluster configuration file, including
- # the system root token, is copied to the worker node and held
- # in memory for the duration of the container.
+ # Note that when this feature is enabled, the entire cluster
+ # configuration file, including the system root token, is copied
+ # to the worker node and held in memory for the duration of the
+ # container.
LocalKeepBlobBuffersPerVCPU: 0
+ # When running a dedicated keepstore process for a container
+ # (see LocalKeepBlobBuffersPerVCPU), write keepstore log
+ # messages to keepstore.txt in the container's log collection.
+ #
+ # These log messages can reveal some volume configuration
+ # details, error messages from the cloud storage provider, etc.,
+ # which are not otherwise visible to users.
+ #
+ # Accepted values:
+ # * "none" -- no keepstore.txt file
+ # * "all" -- all logs, including request and response lines
+ # * "errors" -- all logs except "response" logs with 2xx
+ # response codes and "request" logs
+ LocalKeepLogsToContainerLog: none
+
Logging:
# When you run the db:delete_old_container_logs task, it will find
# containers that have been finished for at least this many seconds,
projects / arvados.git / blobdiff