Backport of consul: allow non-root Nomad to rewrite token into releas…

…e/1.9.x (#24488) Co-authored-by: Tim Gross <[email protected]>
hashicorp · Nov 19, 2024 · fedb7cf · fedb7cf
1 parent b0ff36e
commit fedb7cf
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.changelog/24410.txt b/.changelog/24410.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+consul: Fixed a bug where non-root Nomad agents could not recreate a task's Consul token on task restart
+```
diff --git a/client/allocrunner/taskrunner/consul_hook.go b/client/allocrunner/taskrunner/consul_hook.go
@@ -25,7 +25,7 @@ const (
 
 	// consulTokenFilePerms is the level of file permissions granted on the file in
 	// the secrets directory for the task
-	consulTokenFilePerms = 0440
+	consulTokenFilePerms = 0640
 )
 
 type consulHook struct {