In absence of ingress filter, use directly connected worker (#2757)

* directly connected ingress filtering

internal/daemon/controller/handler.go

@@ -197,6 +197,7 @@ func (c *Controller) registerGrpcServices(s *grpc.Server) error {
 			c.StaticHostRepoFn,
 			c.VaultCredentialRepoFn,
 			c.StaticCredentialRepoFn,
+			c.downstreamWorkers,
 			c.workerStatusGracePeriod)
 		if err != nil {
 			return fmt.Errorf("failed to create target handler service: %w", err)