connect: redirect-traffic command should pass ACL token when ACL are …

…enabled (hashicorp#576) Fixes hashicorp#570,hashicorp#568
duckhan · Jul 30, 2021 · 4a50fda · 4a50fda
1 parent 81c05aa
commit 4a50fda
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/connect-inject/container_init.go b/connect-inject/container_init.go
@@ -313,6 +313,9 @@ consul-k8s connect-init -pod-name=${POD_NAME} -pod-namespace=${POD_NAMESPACE} \
 
 # Apply traffic redirection rules.
 /consul/connect-inject/consul connect redirect-traffic \
+  {{- if .AuthMethod }}
+  -token-file="/consul/connect-inject/acl-token" \
+  {{- end }}
   {{- if .ConsulNamespace }}
   -namespace="{{ .ConsulNamespace }}" \
   {{- end }}

diff --git a/connect-inject/container_init_test.go b/connect-inject/container_init_test.go
@@ -543,6 +543,7 @@ consul-k8s connect-init -pod-name=${POD_NAME} -pod-namespace=${POD_NAMESPACE} \
 
 # Apply traffic redirection rules.
 /consul/connect-inject/consul connect redirect-traffic \
+  -token-file="/consul/connect-inject/acl-token" \
   -namespace="k8snamespace" \
   -proxy-id="$(cat /consul/connect-inject/proxyid)" \
   -proxy-uid=5995`,