luxolus
/
open-nomad
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity
open-nomad/.changelog/17018.txt

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

4 lines
158 B
Plaintext
Raw Normal View History

allow periodic jobs to use workload identity ACL policies (#17018) When resolving ACL policies, we were not using the parent ID for the policy lookup for dispatch/periodic jobs, even though the claims were signed for that parent ID. This prevents all calls to the Task API (and other WI-authenticated API calls) from a periodically-dispatched job failing with 403. Fix this by using the parent job ID whenever it's available.
2023-05-22 13:19:16 +00:00
```release-note:bug
identity: Fixed a bug where workload identities for periodic and dispatch jobs would not have access to their parent job's ACL policy
```