Skip to content
This repository has been archived by the owner on Mar 16, 2024. It is now read-only.

Re-evaluate image permissions for failing apps #2218

Merged
merged 1 commit into from Oct 4, 2023

Conversation

thedadams
Copy link
Contributor

When an IRA is added or updated, this change will allow apps with failing image permissions to be re-evaluated in case the IRA now allows the app to run.

When an IRA is added or updated, this change will allow apps with
failing image permissions to be re-evaluated in case the IRA now allows
the app to run.

Signed-off-by: Donnie Adams <donnie@acorn.io>
@thedadams thedadams merged commit 23cb51d into acorn-io:main Oct 4, 2023
4 checks passed
@thedadams thedadams deleted the new-ira-bump-apps branch October 4, 2023 23:58
if !iraEnabled {
app.Status.Staged.ImagePermissionsDenied = nil
}
func CheckPermissions(req router.Request, _ router.Response) error {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we may have kept the transport here and passed it on to checkImageAllowed and also to getAuthorizedPermissions, since it's useful as a remoteOpts for the signature checks.
Just seeing that you dropped it reminded me, that I didn't use it here 🙄

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add it back if you think it is necessary. Since things were working and we weren't using it, I removed it.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants