X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/4447b5a61f79edf2411ba94f4ad5d90e1ca7e220..9f32ba406d862fa0ad79ac7c23c6b0aced1bdf13:/lib/config/export.go diff --git a/lib/config/export.go b/lib/config/export.go index fc688d68dd..e1f5ff9ee1 100644 --- a/lib/config/export.go +++ b/lib/config/export.go @@ -37,8 +37,8 @@ func ExportJSON(w io.Writer, cluster *arvados.Cluster) error { return json.NewEncoder(w).Encode(m) } -// whitelist classifies configs as safe/unsafe to reveal to -// unauthenticated clients. +// whitelist classifies configs as safe/unsafe to reveal through the API +// endpoint. Note that endpoint does not require authentication. // // Every config entry must either be listed explicitly here along with // all of its parent keys (e.g., "API" + "API.RequestTimeout"), or @@ -65,12 +65,16 @@ var whitelist = map[string]bool{ "API.FreezeProjectRequiresDescription": true, "API.FreezeProjectRequiresProperties": true, "API.FreezeProjectRequiresProperties.*": true, - "API.LockBeforeUpdate": false, "API.KeepServiceRequestTimeout": false, + "API.LockBeforeUpdate": false, + "API.LogCreateRequestFraction": false, + "API.MaxConcurrentRailsRequests": false, "API.MaxConcurrentRequests": false, "API.MaxIndexDatabaseRead": false, "API.MaxItemsPerResponse": true, "API.MaxKeepBlobBuffers": false, + "API.MaxQueuedRequests": false, + "API.MaxQueueTimeForLockRequests": false, "API.MaxRequestAmplification": false, "API.MaxRequestSize": true, "API.MaxTokenLifetime": false, @@ -142,7 +146,6 @@ var whitelist = map[string]bool{ "Containers.ShellAccess.User": true, "Containers.SLURM": false, "Containers.StaleLockTimeout": false, - "Containers.SupervisorFraction": false, "Containers.SupportedDockerImageFormats": true, "Containers.SupportedDockerImageFormats.*": true, "Git": false, @@ -245,6 +248,12 @@ var whitelist = map[string]bool{ "Users.NewUsersAreActive": false, "Users.PreferDomainForUsername": false, "Users.RoleGroupsVisibleToAll": false, + "Users.SyncIgnoredGroups": true, + "Users.SyncRequiredGroups": true, + "Users.SyncUserAccounts": true, + "Users.SyncUserAPITokens": true, + "Users.SyncUserGroups": true, + "Users.SyncUserSSHKeys": true, "Users.UserNotifierEmailBcc": false, "Users.UserNotifierEmailFrom": false, "Users.UserProfileNotificationAddress": false,