You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When enumerating services as an administrator using the management api, such as ziti edge list services -j, if the identity doesn't have permissions because no service policy exists to grant the admin access, the permissions array returns "Invalid":
"permissions": [
"Invalid"
]
This causes problems with generated clients because "Invalid" doesn't appear in the spec
The text was updated successfully, but these errors were encountered:
Tracing it through the code is because of the change to admin access where dial/bind is no longer assumed, and instead, Invalid is purposefully returned.
The downside is that the spec was never updated, and any admin client accessing the service list will encounter similar errors. Most OpenAPI clients are generated with value checking for enumerations and will not accept unknown values.
The workaround is to hand patch the dialBind enum and add —Invalid and then regenerate your client.
Once a new version of ziti is released with this issue fixed, upgrading and regenerating from the spec the controller provides will also fix the issue.
When enumerating services as an administrator using the management api, such as
ziti edge list services -j
, if the identity doesn't have permissions because no service policy exists to grant the admin access, the permissions array returns "Invalid":This causes problems with generated clients because "Invalid" doesn't appear in the spec
The text was updated successfully, but these errors were encountered: