restrict secret view to node level in controller

Signed-off-by: Evan Hazlett <ejhazlett@gmail.com> Upstream-commit: 8392123f303e55902ac42544f0e7e226855592f6 Component: engine
2017-03-14 09:53:02 -04:00
parent 5fe9aafe47
commit 402994850c
1 changed files with 1 additions and 1 deletions
@@ -152,7 +152,7 @@ func (e *executor) Controller(t *api.Task) (exec.Controller, error) {
 		return newNetworkAttacherController(e.backend, t, e.secrets)
 	}

-	ctlr, err := newController(e.backend, t, e.secrets)
+	ctlr, err := newController(e.backend, t, secrets.Restrict(e.secrets, t))
 	if err != nil {
 		return nil, err
 	}