ClearML/clearml-agent
1
0
Fork 0
mirror of https://github.com/clearml/clearml-agent synced 2025-06-26 18:16:15 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix role support

Browse Source
This commit is contained in:
allegroai 2024-03-17 19:00:59 +02:00
parent 10fb157d58
commit a4ebf8293d
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
clearml_agent/commands/worker.py
View File

@ -4505,10 +4505,15 @@ class Worker(ServiceCommandSection):
if self._session.feature_set == "basic":
raise ValueError("Server does not support --use-owner-token option")
role = self._session.get_decoded_token(self._session.token).get("identity", {}).get("role", None)
if role and role not in ["admin", "root", "system"]:
identity = self._session.get_decoded_token(self._session.token).get("identity", {})
role = identity.get("role", None)
try:
service_account_type = int(identity.get("service_account_type", 0))
except ValueError:
service_account_type = 0
if role and (role not in ["admin", "root", "system"] and service_account_type < 2):
raise ValueError(
"User role not suitable for --use-owner-token option (requires at least admin,"
"User role not suitable for --use-owner-token option (requires at least admin or service account,"
" found {})".format(role)
)