Added by lnussel over 9 years ago. Updated about 4 years ago.
0%
Description
workers currently use user tokens and therefore have access to the full API. Workers should have differnt privileges that only allows them to grab jobs, set jobs to finish etc. That makes sure test code run by a worker cannot accidentally nor intentionally mess with the API.
And as dicussed in the hall earlier: every worker should have its own random token - and we should IMO offer an option to allow every worker to generate that token himself, i.e. plug&play.
coolo wrote:
And as dicussed in the hall earlier: every worker should have its own random token - and we should IMO offer an option to allow every worker to generate that token himself, i.e. plug&play.
Yes. As long as we rely on nfs anyways I think the idea with dropping a token to the shared space would be ok for now too.
I think by now the design has changed enough to make this whole thing obsolete, e.g. we do not rely on NFS anymore.
this has nothing to do with nfs
Changed the subject to reflect what I think you might want
-> #65271