Seth Hoenig ce71d2dc0d consul: check for acceptable service identity on consul tokens (#15928) ...

When registering a job with a service and 'consul.allow_unauthenticated=false',
we scan the given Consul token for an acceptable policy or role with an
acceptable policy, but did not scan for an acceptable service identity (which
is backed by an acceptable virtual policy). This PR updates our consul token
validation to also accept a matching service identity when registering a service
into Consul.

Fixes #15902

2023-01-27 18:15:51 -06:00

111 B

Raw Permalink Blame History

View Raw