Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removing agent:read ACL permissions from mesh gateways #1255

Merged
merged 1 commit into from Oct 27, 2022

Conversation

lkysow
Copy link
Member

@lkysow lkysow commented Jun 2, 2022

Changes proposed in this PR:

  • Remove unnecessary agent_prefix ACL policy for mesh gateways.
    • This is only necessary to look up the gRPC port but since we're setting CONSUL_GRPC_ADDR we don't need this permission

How I've tested this PR:

  • acceptance tests

How I expect reviewers to test this PR:

  • code

Checklist:

  • Tests added
  • CHANGELOG entry added

    HashiCorp engineers only, community PRs should not add a changelog entry.
    Entries should use present tense (e.g. Add support for...)

@lkysow lkysow marked this pull request as ready for review September 2, 2022 18:14
@lkysow lkysow requested review from a team, kschoche and ishustava and removed request for a team September 2, 2022 18:14
@lkysow lkysow changed the title test removing agent read Removing agent:read ACL permissions from mesh gateways Sep 2, 2022
Copy link
Contributor

@kschoche kschoche left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice!

@kschoche
Copy link
Contributor

kschoche commented Sep 2, 2022

Do we need a changelog entry on this?

@david-yu
Copy link
Contributor

david-yu commented Oct 4, 2022

Yes a changelog is needed.

This is only necessary to look up the gRPC port,
but since we're setting CONSUL_GRPC_ADDR we don't need this permission
@lkysow lkysow merged commit e240f63 into main Oct 27, 2022
@lkysow lkysow deleted the lkysow/remove-agent-policy branch October 27, 2022 18:20
t-eckert pushed a commit that referenced this pull request Oct 31, 2022
This is only necessary to look up the gRPC port,
but since we're setting CONSUL_GRPC_ADDR we don't need this permission
thisisnotashwin pushed a commit that referenced this pull request Oct 31, 2022
This is only necessary to look up the gRPC port,
but since we're setting CONSUL_GRPC_ADDR we don't need this permission
thisisnotashwin pushed a commit that referenced this pull request Nov 1, 2022
This is only necessary to look up the gRPC port,
but since we're setting CONSUL_GRPC_ADDR we don't need this permission
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants