-
Notifications
You must be signed in to change notification settings - Fork 257
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
⚠️ Convert APIServerPort to uint16 #2174
Conversation
✅ Deploy Preview for kubernetes-sigs-cluster-api-openstack ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
ed9e26f
to
b17b8fc
Compare
I decided to remove that commit from this PR anyway as I no longer need it for testing. |
/hold |
This is a TCP port, which is an unsigned 16 bit integer. We were previously allowing it to be any integer. This is a breaking change, but as any working configuration would have to have a value which passes the new validation it should not break any working configuration.
b17b8fc
to
033532e
Compare
/approve |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: EmilienM The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/lgtm |
/hold cancel |
This problem was highlighted by the updated gosec linter brought in by #2173, which pointed out the unsafe conversion from int to int32. CAPI's control plane endpoint port is an int32. We were using int, which can be larger. We also weren't validating it.
APIServerPort is a TCP port, which is an unsigned 16 bit integer. We were
previously allowing it to be any integer.
This is a breaking change, but as any working configuration would have
to have a value which passes the new validation it should not break any
working configuration.