Repurpose dispatch-job capability to dispatch periodic jobs #9205
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR repurpose
dispatch-job
for periodic job force invocation in addition to parameterized jobs.Currently, force evaluating a periodic job requires
submit-job
capability, a too powerful capability as it allows submitting arbitrary jobs to the cluster. In contrast, submitting a new parameterized job requiresubmit-job
capability, but manually invoking it only requiresdispatch-job
. Having a lower-scoped capability allow delegating debugging or recovery handling to operators or tools with less privileges.I've considered introducing a new capability just for periodic jobs, but I thought such fine-grain capability seems unwarranted. In both the periodic and parameterized job, we'd want operators to invoke jobs that are already registered and allowed in the cluster.
Closes #7703