Roberto Hidalgo a6f15ba0ac allow periodic jobs to use workload identity ACL policies (#17018) ...

When resolving ACL policies, we were not using the parent ID for the policy
lookup for dispatch/periodic jobs, even though the claims were signed for that
parent ID. This prevents all calls to the Task API (and other WI-authenticated
API calls) from a periodically-dispatched job failing with 403.

Fix this by using the parent job ID whenever it's available.

2023-05-22 09:19:16 -04:00

158 B

Raw Permalink Blame History

View Raw