confd

There hasn't been a new release for a long time (v0.16.0 from May 5, 2018), maybe it makes sense to update the dependencies and build a new release? To at least reduce the security risks. Thanks!

After upgrading to confd version 8.0.13, users without admission permissions are able to copy to through the REST API. This presents a security risk as unauthorized users should not have the ability to perform this action. Steps to reproduce: 1. Upgrade to confd version 8.0.13 2. Attempt to copy to via the REST API as a user without admission permissions Expected behavior: The operation should be denied for users without admission permissions. Actual behavior: The operation is allowed even without the required permissions. Impact: Users without proper permissions can modify configuration, which may lead to security risks. Please investigate and address this issue. Logs:* [root@orro-bne3-slx1]# curl -v -u user:password -d 'running-configstartup-config' http://10.152.3.145/rest/operations/bna-config-cmd Trying 10.152.3.145... TCP_NODELAY set Connected to 10.152.3.145 (10.152.3.145) port 80 (#0) Server auth using Basic with user 'user' POST /rest/operations/bna-config-cmd HTTP/1.1 Host: 10.152.3.145 Authorization: Basic dXNlcjpwYXNzd29yZA== User-Agent: curl/7.61.0 Accept: /* Content-Length: 85 Content-Type: application/x-www-form-urlencoded upload completely sent off: 85 out of 85 bytes 5 in-progress Connection #0 to host 10.152.3.145 left intact [root@orro-bne3-slx1]#

Hi, Needing advanced functions to test the fact a string is numeric (key having a path starting by /0/), I miss sprig functions in confd, the one available with helm templating. This PR bring us sprig templating functions in confd, to avoid any collision between available in confd functions and the one brought by sprig, all the funcs are imported prefixed by sprig... Example: matches in sprig Thx for the consideration you will have for this PR.