mirror of https://github.com/hashicorp/consul
8f75d99299
This commit fixes an issue where trust bundles could not be read by services in a non-default namespace, unless they had excessive ACL permissions given to them. Prior to this change, `service:write` was required in the default namespace in order to read the trust bundle. Now, `service:write` to a service in any namespace is sufficient. |
||
|---|---|---|
| .. | ||
| config_entry.go | ||
| config_entry_test.go | ||
| discovery_chain.go | ||
| discovery_chain_test.go | ||
| exported_peered_services.go | ||
| exported_peered_services_test.go | ||
| federation_state_list_mesh_gateways.go | ||
| federation_state_list_mesh_gateways_test.go | ||
| gateway_services.go | ||
| gateway_services_test.go | ||
| glue.go | ||
| health.go | ||
| health_test.go | ||
| helpers_test.go | ||
| intention_upstreams.go | ||
| intention_upstreams_test.go | ||
| intentions.go | ||
| intentions_ent_test.go | ||
| intentions_oss.go | ||
| intentions_test.go | ||
| internal_service_dump.go | ||
| internal_service_dump_test.go | ||
| peered_upstreams.go | ||
| peered_upstreams_test.go | ||
| peering_list.go | ||
| peering_list_test.go | ||
| resolved_service_config.go | ||
| resolved_service_config_test.go | ||
| service_http_checks.go | ||
| service_http_checks_test.go | ||
| service_list.go | ||
| service_list_test.go | ||
| trust_bundle.go | ||
| trust_bundle_test.go | ||