ClearML/clearml-agent
1
0
Fork 0
mirror of https://github.com/clearml/clearml-agent synced 2025-06-26 18:16:15 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix role support

Browse Source
This commit is contained in:
allegroai 2024-03-17 19:00:59 +02:00
parent 10fb157d58
commit a4ebf8293d
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
clearml_agent/commands/worker.py
View File

@ -4505,10 +4505,15 @@ class Worker(ServiceCommandSection):
if self._session.feature_set == "basic": if self._session.feature_set == "basic":
raise ValueError("Server does not support --use-owner-token option") raise ValueError("Server does not support --use-owner-token option")
role = self._session.get_decoded_token(self._session.token).get("identity", {}).get("role", None) identity = self._session.get_decoded_token(self._session.token).get("identity", {})
if role and role not in ["admin", "root", "system"]: role = identity.get("role", None)
try:
service_account_type = int(identity.get("service_account_type", 0))
except ValueError:
service_account_type = 0
if role and (role not in ["admin", "root", "system"] and service_account_type < 2):
raise ValueError( raise ValueError(
"User role not suitable for --use-owner-token option (requires at least admin," "User role not suitable for --use-owner-token option (requires at least admin or service account,"
" found {})".format(role) " found {})".format(role)
) )