Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow lookup of self ACL token when using workload identity #24663

Open
Mongey opened this issue Dec 13, 2024 · 1 comment
Open

Allow lookup of self ACL token when using workload identity #24663

Mongey opened this issue Dec 13, 2024 · 1 comment
Labels
hcc/jira stage/accepted Confirmed, and intend to work on. No timeline committment though. theme/api HTTP API and SDK issues theme/workload-identity type/bug

Comments

@Mongey
Copy link
Contributor

Mongey commented Dec 13, 2024

Nomad version

1.9.3

Operating system and Environment details

ubuntu

Issue

When using

identity {
  env = true
}

NOMAD_TOKEN is a JWT,

NOMAD_TOKEN=eyJhbGxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxg

When attempting to lookup what the token is capable of, nomad returns a 500

$ nomad acl token self
> Error fetching self token: Unexpected response code: 500 (rpc error: acl token lookup failed: index error: UUID must be 36 characters)
@tgross
Copy link
Member

tgross commented Dec 13, 2024

From our conversation on HangOps: this API is looking for an ACL token in the Nomad state store. The JWTs aren't ACL tokens, technically, so they don't work there. But this would be valuable to have when looking up workload-associated ACL policies.

Marking this for roadmapping. Thanks @Mongey!

@tgross tgross added theme/workload-identity theme/api HTTP API and SDK issues stage/accepted Confirmed, and intend to work on. No timeline committment though. labels Dec 13, 2024
@tgross tgross moved this from Needs Triage to Needs Roadmapping in Nomad - Community Issues Triage Dec 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
hcc/jira stage/accepted Confirmed, and intend to work on. No timeline committment though. theme/api HTTP API and SDK issues theme/workload-identity type/bug
Projects
Status: Needs Roadmapping
Development

No branches or pull requests

2 participants