-
Notifications
You must be signed in to change notification settings - Fork 112
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix CSE bugs #1266
Merged
adambarreiro
merged 10 commits into
vmware:main
from
adambarreiro:mark-kubeconfig-sensitive
Jun 3, 2024
Merged
Fix CSE bugs #1266
adambarreiro
merged 10 commits into
vmware:main
from
adambarreiro:mark-kubeconfig-sensitive
Jun 3, 2024
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: abarreiro <[email protected]>
Signed-off-by: abarreiro <[email protected]>
Signed-off-by: abarreiro <[email protected]>
Signed-off-by: abarreiro <[email protected]>
Signed-off-by: abarreiro <[email protected]>
adambarreiro
changed the title
Mark vcd_cse_kubernetes_cluster attribute "kubeconfig" as sensitive
Fix CSE bugs
May 10, 2024
Signed-off-by: abarreiro <[email protected]>
Signed-off-by: abarreiro <[email protected]>
Signed-off-by: abarreiro <[email protected]>
adambarreiro
requested review from
lvirbalas,
Didainius and
dataclouder
as code owners
May 13, 2024 15:12
adambarreiro
commented
May 13, 2024
lvirbalas
approved these changes
May 13, 2024
Didainius
approved these changes
May 14, 2024
dataclouder
approved these changes
May 20, 2024
Signed-off-by: abarreiro <[email protected]>
Signed-off-by: abarreiro <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Overview
This PR fixes two bugs in
vcd_cse_kubernetes_cluster
:Closes #1265
When any user performs a change in a
vcd_cse_kubernetes_cluster
and runsterraform plan
, the output will always show the Kubeconfig, which can be used to access the cluster by unauthorized people.Closes #1258
When a user tries to create a
vcd_cse_kubernetes_cluster
with a network that belongs to a VDC Group, cluster creation fails as the network can't be found.Fix
Sensitive: true
to thekubeconfig
attribute.Extra changes
During the implementation of
vcd_cse_kubernetes_cluster
in previous release, I added some redundant validation functions that were already implemented in thevalidation
package. I've removed these functions and just used the available ones, to reduce boilerplate code.The removed functions are
matchRegex
andminimumValue
, replaced byvalidation. StringMatch
andvalidation.IntAtLeast
, respectively.Test
Tests passed in VCD 10.5.1 with CSE 4.2.1.
To test the fix about VDC Groups, one can create an extra VDC in their CSE environment, create a VDC Group, increase the scope of the existing Edge Gateway, then the cluster creation with the routed network should not fail anymore: