Tim Gross 55fe05d353 heartbeat: use leader's ACL token when failing heartbeat (#24241) ...

In #23838 we updated the `Node.Update` RPC handler we use for heartbeats to be
more strict about requiring node secrets. But when a node goes down, it's the
leader that sends the request to mark the node down via `Node.Update` (to
itself), and this request was missing the leader ACL needed to authenticate to
itself.

Add the leader ACL to the request and update the RPC handler test for
disconnected-clients to use ACLs, which would have detected this bug. Also added
a note to the `Authenticate` comment about how that authentication path requires
the leader ACL.

Fixes: https://github.com/hashicorp/nomad/issues/24231
Ref: https://hashicorp.atlassian.net/browse/NET-11384

2024-10-17 13:48:20 -04:00

..

container_images.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

file.go

identity: support jwt expiration and rotation (#18262)

2023-09-08 14:50:34 -07:00

mock_calls.go

CSI: include volume namespace in staging path (#20532)

2024-05-13 11:24:09 -04:00

responsewriter.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

server.go

workload identity: add support for extra claims config for Vault (#23675)

2024-08-05 15:01:54 -04:00

tls.go

tests: swap testify for test in more places (#20028)

2024-02-29 12:11:35 -06:00

vault.go

test: add missing checks for vault binary in unit tests (#23986)

2024-09-18 17:12:29 -04:00

wait_test.go

tests: swap testify for test in more places (#20028)

2024-02-29 12:11:35 -06:00

wait.go

heartbeat: use leader's ACL token when failing heartbeat (#24241)

2024-10-17 13:48:20 -04:00