Skip to content

[Bug Bash] ReportActorCrashed is in registry.go but missing from the WorkerService table in authorization.md. #3234

Closed

Description

The WorkerService table in docs/authorization.md ("Checks per RPC" > "WorkerService") lists seven RPCs. defaultRPCPermissions in cmd/ateapi/internal/authz/registry.go has eight. ReportActorCrashed is missing from the doc:

ateapi.WorkerService_ReportActorCrashed_FullMethodName: inHandler("ateletauth: caller is atelet on the node of the Worker hosting the Actor"),

The handler in cmd/ateapi/internal/workerservice/crash.go calls ateletauth.Authenticate, then authorizeHostedActor for the worker and actor in the request.

Suggested row:

RPC The caller must be
ReportActorCrashed atelet on the node of the worker hosting the actor

Checked against main (ffed855) during the authorization bug bash, with help from an AI agent. On the cluster, a user calling ReportActorCrashed gets Unauthenticated: could not verify peer certificate, as expected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

bug-bashkind/docsImprovements or additions to documentation

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions