mirror of https://github.com/kemko/nomad.git synced 2026-01-01 16:05:42 +03:00

Files

Tim Gross 9c2ecbf1d3 auth: refactor Authenticate into its own package (#18703 )

The RPC handlers expect to see `nil` ACL objects whenever ACLs are disabled. By
using `nil` as a sentinel value, we have the risk of nil pointer exceptions and
improper handling of `nil` when returned from our various auth methods that can
lead to privilege escalation bugs.

This patchset is the first in a series to eliminate the use of `nil` ACLs as a
sentinel value for when ACLs are disabled. This one is entirely refactoring to
reduce the burden of reviewing the final patchsets that have the functional
changes:

* Move RPC auth into a new `nomad/auth` package, injecting the dependencies
  required from the server. Expose only those public methods on `nomad/auth`
  that are intended for use in the RPC handlers.
* Keep the existing large authentication test as an integration test.
* Add unit tests covering the methods of `nomad/auth` we intend on keeping. The
  assertions for many of these will change once we have no `nil` sentinels and
  can make safe assertions about permissions on the resulting `ACL` objects.

2023-10-10 11:01:24 -04:00

ports.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

README.md

ci: use groups of tests in gha (#15018 )

2022-10-27 09:02:58 -05:00

skip_non_root.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:29 -05:00

slow.go

Update copyright file headers to BUSL-1.1