Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: curl proxy cse vars; e2e for noProxy #2814

Merged
merged 4 commits into from
Feb 28, 2023
Merged

fix: curl proxy cse vars; e2e for noProxy #2814

merged 4 commits into from
Feb 28, 2023

Conversation

alexeldeib
Copy link
Contributor

What type of PR is this?

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

Requirements:

Special notes for your reviewer:

Release note:

none

@alexeldeib alexeldeib temporarily deployed to test February 28, 2023 14:41 — with GitHub Actions Inactive
@alexeldeib alexeldeib temporarily deployed to test February 28, 2023 14:55 — with GitHub Actions Inactive
@alexeldeib alexeldeib temporarily deployed to test February 28, 2023 15:06 — with GitHub Actions Inactive
@alexeldeib alexeldeib temporarily deployed to test February 28, 2023 15:25 — with GitHub Actions Inactive
@alexeldeib alexeldeib temporarily deployed to test February 28, 2023 16:46 — with GitHub Actions Inactive
@alexeldeib alexeldeib temporarily deployed to test February 28, 2023 17:32 — with GitHub Actions Inactive
@alexeldeib alexeldeib temporarily deployed to test February 28, 2023 17:50 — with GitHub Actions Inactive
@@ -141,7 +141,9 @@
"ContainerdPackageURL": "",
"RuncPackageURL": "",
"FIPSEnabled": false,
"HTTPProxyConfig": null,
"HTTPProxyConfig": {
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

doesn't do anything but tests var syntax in bash

@@ -76,6 +76,9 @@ if [[ "${SHOULD_CONFIGURE_CUSTOM_CA_TRUST}" == "true" ]]; then
fi

if [[ -n "${OUTBOUND_COMMAND}" ]]; then
if [[ -n "${PROXY_VARS}" ]]; then
eval $PROXY_VARS
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

kinda annoying to form this export string properly without eval...

don't love eval, but pretty sure we sanitize this reasonably well in RP

and if we don't...congratulations, you're paying to hack your own VMs via shell script injection

@@ -63,6 +63,9 @@ if [[ "${DISABLE_SSH}" == "true" ]]; then
disableSSH || exit $ERR_DISABLE_SSH
fi

apt update && apt install -yq tinyproxy
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this works but doesn't handle https serving endpoint for HTTPS_PROXY

you can set HTTPS_PROXY to http://url, but it's not testing full scenario

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants