Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consul UI authorization issue on v1.10.0 #10944

Closed
yilmazo opened this issue Aug 27, 2021 · 1 comment · Fixed by #10916
Closed

Consul UI authorization issue on v1.10.0 #10944

yilmazo opened this issue Aug 27, 2021 · 1 comment · Fixed by #10916
Labels
theme/kv Issues related to the key value store theme/ui Anything related to the UI type/bug Feature does not function as expected

Comments

@yilmazo
Copy link

yilmazo commented Aug 27, 2021

Consul UI stopped showing the Key/Value menu button after upgrading from 1.7.2 to 1.10.0 when using tokens with key_prefix write policy.

Steps to reproduce;

  1. Create a cluster with version 1.10.0 and acl enabled
  2. Create a policy like below and create a token with this policy
key_prefix "foo/bar" {
    policy = "write"
}
  1. Put a value to this path: foo/bar/baz
  2. Open Consul UI and login with the token created on step 2.
  3. Visit http://<consul_addr>/ui and you won't see Key/Value button on the left menu.
  4. Visit http://<consul_addr>/ui/<dc>/kv and you will see foo/ folder. Clicking it will result with 403 error.
  5. Visit http://<consul_addr>/ui/<dc>/kv/foo/bar and you will see baz key now. You can click it and edit its value.
@johncowen johncowen added theme/ui Anything related to the UI type/bug Feature does not function as expected labels Aug 27, 2021
@johncowen
Copy link
Contributor

Hi @yilmazo ,

Thanks for the report!

There's a PR (#10916) up that should go some way to fixing this problem, there is a larger problem we need to look at tho, so the fix there is "revert to previous functionality", which would unblock folks like yourself in the short term.

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
theme/kv Issues related to the key value store theme/ui Anything related to the UI type/bug Feature does not function as expected
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants