From 54ed234fca72a5b4c3e171d0060c7b47f83fb04a Mon Sep 17 00:00:00 2001
From: clearml <>
Date: Thu, 26 Dec 2024 18:58:58 +0200
Subject: [PATCH] Add agent.docker_args_filters to configuration docs

---
 clearml_agent/backend_api/config/default/agent.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/clearml_agent/backend_api/config/default/agent.conf b/clearml_agent/backend_api/config/default/agent.conf
index 13f5c90..2af8949 100644
--- a/clearml_agent/backend_api/config/default/agent.conf
+++ b/clearml_agent/backend_api/config/default/agent.conf
@@ -200,6 +200,12 @@
     # allows the following task docker args to be overridden by the extra_docker_arguments
     # protected_docker_extra_args: ["privileged", "security-opt", "network", "ipc"]
 
+    # Enforce filter whitelist on docker arguments, allowing only those matching these filters to be used when running
+    # a task. These can also be provided using the CLEARML_AGENT_DOCKER_ARGS_FILTERS environment variable
+    # (using shlex.split whitespace-separated format).
+    # For example, allow only environment variables:
+    # docker_args_filters: ["^--env$", "^-e$"]
+
     # optional shell script to run in docker when started before the experiment is started
     # extra_docker_shell_script: ["apt-get install -y bindfs", ]