Tim Gross a420732424 consul: allow non-root Nomad to rewrite token (#24410) ...

When a task restarts, the Nomad client may need to rewrite the Consul token, but
it's created with permissions that prevent a non-root agent from writing to
it. While Nomad clients should be run as root (currently), it's harmless to
allow whatever user the Nomad agent is running as to be able to write to it, and
that's one less barrier to rootless Nomad.

Ref: https://github.com/hashicorp/nomad/issues/23859#issuecomment-2465757392

2024-11-19 10:21:14 -05:00

129 B

Raw Permalink Blame History

View Raw