Tim Gross 4d9cc73ed2 sids_hook: fix check for Consul token derived from WI (#18821) ...

The `sids_hook` serves the legacy Connect workflow, and we want to bypass it
when using workload identities. So the hook checks that there's not already a
Consul token in the alloc hook resources derived from the Workload
Identity. This check was looking for the wrong key. This would cause the hook to
ignore the Consul token we already have and then fail to derive a SI token
unless the Nomad agent has its own token with `acl:write` permission.

Fix the lookup and add tests covering the bypass behavior.

2023-10-23 08:57:02 -04:00

..

allocdir

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

allochealth

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

allocrunner

sids_hook: fix check for Consul token derived from WI (#18821)

2023-10-23 08:57:02 -04:00

allocwatcher

client: prevent watching stale alloc state (#18612)

2023-09-29 12:46:28 -07:00

config

consul: add multi-cluster support to client constructors (#18624)

2023-10-17 13:46:49 -04:00

consul

log: add Consul and Vault cluster name to output (#18817)

2023-10-20 14:03:56 -04:00

devicemanager

fix multiple overflow errors in exponential backoff (#18200)

2023-08-15 14:38:18 -04:00

dynamicplugins

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

fingerprint

core: plumbing to support numa aware scheduling (#18681)

2023-10-19 15:09:30 -05:00

hoststats

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

interfaces

client: refactor cpuset partitioning (#18371)

2023-09-12 09:11:11 -05:00

lib

core: port common code changes from ENT for numa scheduling (#18818)

2023-10-20 13:19:02 -05:00

logmon

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

pluginmanager

test: Refactor mock CSI manager (#18554)

2023-09-21 16:03:53 -05:00

servers

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

serviceregistration

consul: add multi-cluster support to client constructors (#18624)

2023-10-17 13:46:49 -04:00

state

WID manager: save and restore signed WIs from client state DB (#18661)

2023-10-09 09:16:23 -04:00

structs

Nomad Actions (#18794)

2023-10-20 13:05:55 -04:00

taskenv

core: plumbing to support numa aware scheduling (#18681)

2023-10-19 15:09:30 -05:00

testutil

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

vaultclient

log: add Consul and Vault cluster name to output (#18817)

2023-10-20 14:03:56 -04:00

widmgr

client: consul_hook tests (#18780)

2023-10-18 20:02:35 +02:00

acl_test.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00

acl.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00

agent_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

agent_endpoint.go

monitor: add log include location option on monitor CLI and API (#18795)

2023-10-20 07:55:22 +01:00

alloc_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

alloc_endpoint.go

Nomad Actions (#18794)

2023-10-20 13:05:55 -04:00

alloc_watcher_e2e_test.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00

client_interface_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

client_stats_endpoint_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

client_stats_endpoint.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00

client_test.go

core: plumbing to support numa aware scheduling (#18681)

2023-10-19 15:09:30 -05:00

client.go

core: plumbing to support numa aware scheduling (#18681)

2023-10-19 15:09:30 -05:00

csi_endpoint_test.go

test: Refactor mock CSI manager (#18554)

2023-09-21 16:03:53 -05:00

csi_endpoint.go

csi: implement NodeExpandVolume (#18522)

2023-09-18 10:30:15 -05:00

drain_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

drain.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

driver_manager_test.go

drivers: plumb hardware topology via grpc into drivers (#18504)

2023-09-18 08:58:07 -05:00

enterprise_client_ce.go

admin: rename _oss files to _ce (#18209)

2023-08-18 07:47:24 +01:00

fingerprint_manager_test.go

core: plumbing to support numa aware scheduling (#18681)

2023-10-19 15:09:30 -05:00

fingerprint_manager.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

fs_endpoint_test.go

client: 404 when accessing files for GC'ed alloc (#18232)

2023-08-21 16:09:24 -04:00

fs_endpoint.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00

gc_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

gc.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

heartbeatstop_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

heartbeatstop.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

meta_endpoint_test.go

client: remove null dynamic metadata keys (#18664)

2023-10-05 11:41:44 -04:00

meta_endpoint.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00

node_updater.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

rpc_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

rpc.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

testing.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

util.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

vaultclient_test.go

vault: use an importable const for Vault header string. (#18740)

2023-10-13 07:39:06 +01:00