-
Notifications
You must be signed in to change notification settings - Fork 256
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
🌱 Mount ironic credentials as plain-text volumes instead of the ironic htpasswd environment variable #1685
Conversation
(This PR is work continued from #1616) |
/test-centos-e2e-integration-main |
1 similar comment
/test-centos-e2e-integration-main |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
70ce5dc
to
e0b507b
Compare
/test metal3-bmo-e2e-test-pull |
/retest |
/test ? |
@mboukhalfa: The following commands are available to trigger required jobs:
The following commands are available to trigger optional jobs:
Use
In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
/test metal3-centos-e2e-integration-test-main |
@mboukhalfa: mboukhalfa unauthorized: /override is restricted to Repo administrators, approvers in top level OWNERS file. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
I think the github branch protection here is not yet updated
The approver can skip the old check with: |
/override test-centos-e2e-integration-main |
@dtantsur: Overrode contexts on behalf of dtantsur: test-centos-e2e-integration-main In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
/test metal3-bmo-e2e-test-pull |
e0b507b
to
2e86a90
Compare
/test metal3-bmo-e2e-test-pull |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/hold
I don't think we should change from htpasswd to plaintext passwords!
/cc @tuminoid
ironic-deployment/overlays/e2e-release-24.0-with-inspector/kustomization.yaml
Outdated
Show resolved
Hide resolved
9b62461
to
d62f720
Compare
/test metal3-bmo-e2e-test-pull |
/test metal3-bmo-e2e-test-optional-pull |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some nits.
2f419b7
to
610cd19
Compare
/test metal3-bmo-e2e-test-optional-pull |
1 similar comment
/test metal3-bmo-e2e-test-optional-pull |
610cd19
to
a54767b
Compare
/retest |
/test metal3-bmo-e2e-test-optional-pull |
/test metal3-centos-e2e-integration-test-main metal3-bmo-e2e-test-optional-pull |
/test metal3-bmo-e2e-test-optional-pull |
/retest |
Seems like an actual issue with the PR, unless it is timing out due CI slowness on the background. |
/retest |
/retest |
a54767b
to
c40d5ed
Compare
/test metal3-bmo-e2e-test-optional-pull |
/test metal3-bmo-e2e-test-pull |
c40d5ed
to
75d13de
Compare
/test metal3-bmo-e2e-test-optional-pull |
@MahnoorAsghar: The following test failed, say
Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
Mount the ironic and inspector htpasswds as volumes into the ironic-image pod, instead of the IRONIC_HTPASSWD and INSPECTOR_HTPASSWD environment variables. Signed-off-by: Mahnoor Asghar <masghar@redhat.com>
75d13de
to
c9d0264
Compare
/lgtm |
/test metal3-bmo-e2e-test-optional-pull |
Security baselines do not recommend using secrets as environment variables but using files instead. Therefore, the Ironic and Inspector usernames and passwords will now be mounted as plain-text volumes into the ironic-image pod, instead of the IRONIC_HTPASSWD and INSPECTOR_HTPASSWD environment variables.