Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No need to list all secret in the namespace to find just one #5669

Merged
merged 4 commits into from
Apr 16, 2024

Conversation

jkremser
Copy link
Contributor

@jkremser jkremser commented Apr 9, 2024

There is no need to list all the secrets in the kedaNamespace and then iterate through them to find the one we are looking for. Instead, just get the one we are looking for -> this has an impact on the required RBAC since "list > get". If only get is required, we can restrict this even further using name allowlist for secrets.

Relates to kedacore/charts#624

@jkremser jkremser requested a review from a team as a code owner April 9, 2024 09:44
@jkremser jkremser changed the title No need to list all secret in the namespace to find one No need to list all secret in the namespace to find just one Apr 9, 2024
@zroubalik
Copy link
Member

zroubalik commented Apr 10, 2024

/run-e2e internal
Update: You can check the progress here

Copy link
Member

@zroubalik zroubalik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! Could you please add entry to Changelog (Other section), you can link just this PR there.

@tomkerkhove
Copy link
Member

We are planning release on Thursday, any chance we can incorporate the feedback?

@tomkerkhove tomkerkhove mentioned this pull request Apr 16, 2024
35 tasks
@jkremser
Copy link
Contributor Author

jkremser commented Apr 16, 2024

changelog: d3427f8
cc @zroubalik

Signed-off-by: Jirka Kremser <[email protected]>
@zroubalik
Copy link
Member

zroubalik commented Apr 16, 2024

/run-e2e internal
Update: You can check the progress here

@zroubalik zroubalik enabled auto-merge (squash) April 16, 2024 20:29
Copy link
Member

@zroubalik zroubalik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks a lot!

@zroubalik zroubalik merged commit ee4ab1b into kedacore:main Apr 16, 2024
20 checks passed
@jkremser jkremser deleted the more-love-4-rbac branch July 2, 2024 10:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants