Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

consul: check for acceptable service identity on consul tokens #15928

Merged
merged 1 commit into from
Jan 28, 2023
Merged

consul: check for acceptable service identity on consul tokens #15928

merged 1 commit into from
Jan 28, 2023
+29 −4

Commits on Jan 27, 2023

  1. consul: check for acceptable service identity on consul tokens 

    When registering a job with a service and 'consul.allow_unauthenticated=false',
we scan the given Consul token for an acceptable policy or role with an
acceptable policy, but did not scan for an acceptable service identity (which
is backed by an acceptable virtual policy). This PR updates our consul token
validation to also accept a matching service identity when registering a service
into Consul.

Fixes #15902
    @shoenig
    shoenig committed Jan 27, 2023
    Configuration menu
    Copy the full SHA
    e4fdccd View commit details
    Browse the repository at this point in the history