You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[Bug Bash] ReportActorCrashed is in registry.go but missing from the WorkerService table in authorization.md. #3234
The WorkerService table in docs/authorization.md ("Checks per RPC" > "WorkerService") lists seven RPCs. defaultRPCPermissions in cmd/ateapi/internal/authz/registry.go has eight. ReportActorCrashed is missing from the doc:
ateapi.WorkerService_ReportActorCrashed_FullMethodName: inHandler("ateletauth: caller is atelet on the node of the Worker hosting the Actor"),
The handler in cmd/ateapi/internal/workerservice/crash.go calls ateletauth.Authenticate, then authorizeHostedActor for the worker and actor in the request.
Suggested row:
RPC
The caller must be
ReportActorCrashed
atelet on the node of the worker hosting the actor
Checked against main (ffed855) during the authorization bug bash, with help from an AI agent. On the cluster, a user calling ReportActorCrashed gets Unauthenticated: could not verify peer certificate, as expected.
Activity
Document ReportActorCrashed in the WorkerService authz table (agent-s…