mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-13 08:05:23 +00:00
Ruben FiszelandClaude Opus 4.6
2646629194
* feat: add force_sandboxing global setting and #sandbox bash annotation Add a new global setting `force_sandboxing` to enable nsjail sandboxing for all jobs, overriding the DISABLE_NSJAIL environment variable. Also add a #sandbox annotation for bash scripts to enable sandboxing on a per-script basis. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * fix: decouple nsjail probing from DISABLE_NSJAIL and apply force_sandboxing to all executors NSJAIL_AVAILABLE now always probes for the nsjail binary at startup regardless of the DISABLE_NSJAIL policy flag, fixing #sandbox annotation and force_sandboxing being unusable in default (DISABLE_NSJAIL=true) configuration. All language executors now use is_sandboxing_enabled() instead of checking DISABLE_NSJAIL directly, so force_sandboxing applies to all job types, not just bash. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: clarify force_sandboxing and DISABLE_NSJAIL relationship Neither setting overrides the other — sandboxing is enabled when either force_sandboxing=true OR DISABLE_NSJAIL=false. Updated frontend description and backend comments to reflect this. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * all * all * revert typo * all * all --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
22 lines
459 B
Svelte
22 lines
459 B
Svelte
<script lang="ts">
|
|
import Tooltip from '$lib/components/meltComponents/Tooltip.svelte'
|
|
import Badge from './common/badge/Badge.svelte'
|
|
|
|
interface Props {
|
|
children?: import('svelte').Snippet
|
|
}
|
|
|
|
let { children = undefined }: Props = $props()
|
|
</script>
|
|
|
|
<Tooltip>
|
|
<Badge verySmall color="blue" class="px-2">EE</Badge>
|
|
{#snippet text()}
|
|
{#if children}
|
|
{@render children()}
|
|
{:else}
|
|
Enterprise Edition only feature
|
|
{/if}
|
|
{/snippet}
|
|
</Tooltip>
|