-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
adding EKS Account ID for security measures when using for AMIs #733
adding EKS Account ID for security measures when using for AMIs #733
Conversation
It would be also great to not spoil the coverage, this package has pretty good coverage and we should keep it that way. So please take a look if you can add a meaningful test for this! |
502d1b4
to
cd5a4e6
Compare
Signed-off-by: Christopher Hein <[email protected]>
cd5a4e6
to
3d20b57
Compare
Once tests pass let me know what you think @errordeveloper |
@errordeveloper everything looks good now on this if you get a second to merge. |
LGTM |
Any update on this? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is better, just a few somewhat cosmetic things please! :)
pkg/ami/api.go
Outdated
input := &ec2.DescribeImagesInput{ | ||
Owners: []*string{aws.String(ImageFamilyToAccountID[imageFamily])}, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This a little too optimistic, we should check if the key exists, so we don't panic if it doesn't.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please move the look-up into the caller, and the map declaration should live in the same file also:
We should be able to include this in the next release, but due to undergoing API changes, we cannot cut it before all of milestone issues are closed, as we are half-way-through. |
@christopherhein I'll have to finish this up myself, as we are looking to cut 0.1.30 today. |
408df62
to
2390cac
Compare
Signed-off-by: Christopher Hein [email protected]
Description
closes #732
This checks the right Account ID for AL2 AMIs so that they always come from the EKS team.
Checklist
make build
)make test
)make integration-test
)