Only synthesize anonymous token in primary DC

2 years ago · 1e48592aaa
parent 134aac7c26
commit 1e48592aaa
1 changed files with 1 additions and 1 deletions
--- a/agent/consul/acl_server.go
+++ b/agent/consul/acl_server.go
@ -151,7 +151,7 @@ func (s *Server) ResolveIdentityFromToken(token string) (bool, structs.ACLIdenti
 	} else if aclToken != nil && !aclToken.IsExpired(time.Now()) {
 		return true, aclToken, nil
 	}
-	if aclToken == nil && token == acl.AnonymousTokenSecret {
+	if aclToken == nil && token == acl.AnonymousTokenSecret && s.InPrimaryDatacenter() {
 		// synthesize the anonymous token for early use, bootstrapping has not completed
 		s.insertAnonymousToken()
 		fallbackId := structs.ACLToken{