From 8b7ff2ad4867ed208e9869cb040a3ea3b80549f2 Mon Sep 17 00:00:00 2001 From: "courtmanr@gmail.com" Date: Tue, 25 Nov 2025 08:00:08 +0000 Subject: [PATCH] Relax container SSH check for temperature monitoring (ref #727) --- internal/monitoring/temperature.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/internal/monitoring/temperature.go b/internal/monitoring/temperature.go index 4e53e6cfd..e5726f3ef 100644 --- a/internal/monitoring/temperature.go +++ b/internal/monitoring/temperature.go @@ -177,10 +177,11 @@ func (tc *TemperatureCollector) CollectTemperatureWithProxy(ctx context.Context, } if isContainer && !devModeAllowSSH { + // Warn but allow if key is present (legacy behavior restoration) + // We don't return here, allowing the code to fall through to the SSH key check log.Warn(). Str("node", nodeName). - Msg("Temperature collection disabled: containerized Pulse requires pulse-sensor-proxy. Mount /run/pulse-sensor-proxy or set PULSE_DEV_ALLOW_CONTAINER_SSH=true for development only") - return &models.Temperature{Available: false}, nil + Msg("Temperature collection using direct SSH from container. This is insecure. Recommend using pulse-sensor-proxy.") } if strings.TrimSpace(tc.sshKeyPath) == "" {