diff --git a/docs/reference/cli/boundary.md b/docs/reference/cli/boundary.md index 9b18c8a493..79af765679 100644 --- a/docs/reference/cli/boundary.md +++ b/docs/reference/cli/boundary.md @@ -118,6 +118,16 @@ Jail type to use for network isolation. Options: nsjail (default), landjail. Use real DNS in the jail instead of the dummy DNS (allows DNS exfiltration). Default: false. +### --no-user-namespace + +| | | +|-------------|------------------------------------------| +| Type | bool | +| Environment | $BOUNDARY_NO_USER_NAMESPACE | +| YAML | no_user_namespace | + +Do not create a user namespace. Use in restricted environments that disallow user NS (e.g. Bottlerocket in EKS auto-mode). + ### --disable-audit-logs | | | diff --git a/enterprise/cli/testdata/coder_boundary_--help.golden b/enterprise/cli/testdata/coder_boundary_--help.golden index 257981b3fe..74f46947c1 100644 --- a/enterprise/cli/testdata/coder_boundary_--help.golden +++ b/enterprise/cli/testdata/coder_boundary_--help.golden @@ -37,6 +37,10 @@ OPTIONS: Path to the socket where the boundary log proxy server listens for audit logs. + --no-user-namespace bool, $BOUNDARY_NO_USER_NAMESPACE + Do not create a user namespace. Use in restricted environments that + disallow user NS (e.g. Bottlerocket in EKS auto-mode). + --pprof bool, $BOUNDARY_PPROF Enable pprof profiling server. diff --git a/go.mod b/go.mod index 34311c1d63..cf003256d0 100644 --- a/go.mod +++ b/go.mod @@ -475,7 +475,7 @@ require ( github.com/coder/agentapi-sdk-go v0.0.0-20250505131810-560d1d88d225 github.com/coder/aibridge v1.0.6 github.com/coder/aisdk-go v0.0.9 - github.com/coder/boundary v0.8.0 + github.com/coder/boundary v0.8.3 github.com/coder/preview v1.0.4 github.com/danieljoos/wincred v1.2.3 github.com/dgraph-io/ristretto/v2 v2.4.0 diff --git a/go.sum b/go.sum index c6d0bc82a4..908a7aa4c6 100644 --- a/go.sum +++ b/go.sum @@ -932,8 +932,8 @@ github.com/coder/aibridge v1.0.6 h1:RVcJCutgWAd8MOxNI5MNVBl+ttqShVsmMQvUAkfuU9Q= github.com/coder/aibridge v1.0.6/go.mod h1:c7Of2xfAksZUrPWN180Eh60fiKgzs7dyOjniTjft6AE= github.com/coder/aisdk-go v0.0.9 h1:Vzo/k2qwVGLTR10ESDeP2Ecek1SdPfZlEjtTfMveiVo= github.com/coder/aisdk-go v0.0.9/go.mod h1:KF6/Vkono0FJJOtWtveh5j7yfNrSctVTpwgweYWSp5M= -github.com/coder/boundary v0.8.0 h1:g/H6VIGY4IoWeKkbvao7zhO1BAQe7upSHfHzoAZxdik= -github.com/coder/boundary v0.8.0/go.mod h1:7LXg454okcxIQm08GouuvoWjH1uGkHdbEXiPbZgzcQk= +github.com/coder/boundary v0.8.3 h1:QOb5WYKieRH/gwyUgofC9FDHSSJHpdw1jTrB5zsHovA= +github.com/coder/boundary v0.8.3/go.mod h1:7LXg454okcxIQm08GouuvoWjH1uGkHdbEXiPbZgzcQk= github.com/coder/bubbletea v1.2.2-0.20241212190825-007a1cdb2c41 h1:SBN/DA63+ZHwuWwPHPYoCZ/KLAjHv5g4h2MS4f2/MTI= github.com/coder/bubbletea v1.2.2-0.20241212190825-007a1cdb2c41/go.mod h1:I9ULxr64UaOSUv7hcb3nX4kowodJCVS7vt7VVJk/kW4= github.com/coder/clistat v1.2.0 h1:37KJKqiCllJsRvWqTHf3qiLIXX0JB6oqE5oxcqgdLkY=