Tim Gross 04ad7165e7 services: reject node secret for Read/List RPC (#23910) ...

As of Nomad 1.6.0, Nomad clients never make RPC requests to the
ServiceRegistrationList/Read RPC without using a specific Workload Identity
rather than the node secret. Tighten the ACL permissions on these RPCs so that
node secrets are no longer valid tokens.

Ref: https://hashicorp.atlassian.net/browse/NET-10009
Ref: https://developer.hashicorp.com/nomad/docs/release-notes/nomad/upcoming#nomad-1-9-0

2024-09-05 13:52:32 -04:00

..

acl_test.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00

acl.go

services: reject node secret for Read/List RPC (#23910)

2024-09-05 13:52:32 -04:00

policy_test.go

acl: disallow leading / on variable paths (#23757)

2024-08-07 09:26:18 -04:00

policy.go

acl: disallow leading / on variable paths (#23757)

2024-08-07 09:26:18 -04:00

virtual.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00