Merge pull request #7051 from hashicorp/b-copy-jobs-oss

sentinel: copy jobs to prevent mutation
hashicorp · Feb 3, 2020 · 445d019 · 445d019
2 parents ce3d581 + 5dbccce
commit 445d019
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/nomad/job_endpoint.go b/nomad/job_endpoint.go
@@ -242,8 +242,9 @@ func (j *Job) Register(args *structs.JobRegisterRequest, reply *structs.JobRegis
 		}
 	}
 
-	// Enforce Sentinel policies
-	policyWarnings, err := j.enforceSubmitJob(args.PolicyOverride, args.Job)
+	// Enforce Sentinel policies. Pass a copy of the job to prevent
+	// sentinel from altering it.
+	policyWarnings, err := j.enforceSubmitJob(args.PolicyOverride, args.Job.Copy())
 	if err != nil {
 		return err
 	}