Add kube fetcher tests #32

eyalkraft · 2022-03-29T15:27:02Z

Relates https://github.com/elastic/security-team/issues/3130

github-actions · 2022-03-29T15:33:44Z

Cloudbeat CI 🤖

The integration test was completed successfully! 🏆

Exmaple findings from ElasticSearch:

file-system 💚

{
  "@timestamp": "2022-03-29T15:42:02.128Z",
  "result": {
    "evaluation": "passed",
    "evidence": {
      "filemode": "644"
    }
  },
  "ecs": {
    "version": "8.0.0"
  },
  "cluster_id": "6b9a87bf-4c90-435f-bc3d-e63cd53952f5",
  "rule": {
    "impact": "None",
    "name": "Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive",
    "remediation": "chmod 644 /var/lib/kubelet/config.yaml",
    "tags": [
      "CIS",
      "Kubernetes",
      "CIS 4.1.9",
      "Worker Node Configuration"
    ],
    "benchmark": {
      "name": "CIS Kubernetes V1.20",
      "version": "v1.0.0"
    },
    "description": "Ensure that if the kubelet refers to a configuration file with the --config argument, that file has permissions of 644 or more restrictive."
  },
  "host": {
    "mac": [
      "02:42:9e:87:01:1f",
      "f6:fa:9c:22:37:1a",
      "02:42:c0:a8:31:02"
    ],
    "hostname": "minikube",
    "architecture": "x86_64",
    "os": {
      "type": "linux",
      "platform": "debian",
      "version": "11 (bullseye)",
      "family": "debian",
      "name": "Debian GNU/Linux",
      "kernel": "5.11.0-1028-azure",
      "codename": "bullseye"
    },
    "name": "minikube",
    "containerized": true,
    "ip": [
      "172.17.0.1",
      "192.168.49.2"
    ]
  },
  "agent": {
    "name": "minikube",
    "type": "cloudbeat",
    "version": "8.2.0",
    "ephemeral_id": "82e20511-d0fb-40af-bfe3-6f49215baf94",
    "id": "e32dbf93-87e6-499c-9640-6f32eb41e391"
  },
  "cloud": {
    "machine": {
      "type": "Standard_DS2_v2"
    },
    "service": {
      "name": "Virtual Machines"
    },
    "region": "southcentralus",
    "provider": "azure",
    "account": {},
    "instance": {
      "name": "SCUS-GHEUS21U20SCUSC34-0207",
      "id": "df9c1df1-755e-4a82-bc84-450cfecc01e9"
    }
  },
  "resource_id": "1594339",
  "type": "file-system",
  "cycle_id": "6d66f8ec-1754-414f-a748-068f4ea41936",
  "resource": {
    "inode": "1594339",
    "filename": "config.yaml",
    "mode": "644",
    "gid": "root",
    "uid": "root",
    "path": "/hostfs/var/lib/kubelet/config.yaml"
  }
}

process 💚

{
  "@timestamp": "2022-03-29T15:42:01.464Z",
  "host": {
    "containerized": true,
    "ip": [
      "172.17.0.1",
      "192.168.49.2"
    ],
    "mac": [
      "02:42:9e:87:01:1f",
      "f6:fa:9c:22:37:1a",
      "02:42:c0:a8:31:02"
    ],
    "hostname": "minikube",
    "architecture": "x86_64",
    "name": "minikube",
    "os": {
      "family": "debian",
      "name": "Debian GNU/Linux",
      "kernel": "5.11.0-1028-azure",
      "codename": "bullseye",
      "type": "linux",
      "platform": "debian",
      "version": "11 (bullseye)"
    }
  },
  "agent": {
    "ephemeral_id": "82e20511-d0fb-40af-bfe3-6f49215baf94",
    "id": "e32dbf93-87e6-499c-9640-6f32eb41e391",
    "name": "minikube",
    "type": "cloudbeat",
    "version": "8.2.0"
  },
  "cluster_id": "6b9a87bf-4c90-435f-bc3d-e63cd53952f5",
  "resource_id": "1743",
  "result": {
    "evaluation": "failed",
    "evidence": {
      "process_config": {
        "config": {
          "cgroupDriver": "cgroupfs",
          "clusterDomain": "cluster.local",
          "failSwapOn": false,
          "healthzBindAddress": "127.0.0.1",
          "nodeStatusUpdateFrequency": "0s",
          "rotateCertificates": true,
          "apiVersion": "kubelet.config.k8s.io/v1beta1",
          "authorization": {
            "mode": "Webhook",
            "webhook": {
              "cacheAuthorizedTTL": "0s",
              "cacheUnauthorizedTTL": "0s"
            }
          },
          "shutdownGracePeriod": "0s",
          "evictionPressureTransitionPeriod": "0s",
          "healthzPort": 10248,
          "logging": {
            "flushFrequency": 0,
            "options": {
              "json": {
                "infoBufferSize": "0"
              }
            },
            "verbosity": 0
          },
          "cpuManagerReconcilePeriod": "0s",
          "evictionHard": {
            "imagefs.available": "0%",
            "nodefs.available": "0%",
            "nodefs.inodesFree": "0%"
          },
          "httpCheckFrequency": "0s",
          "shutdownGracePeriodCriticalPods": "0s",
          "runtimeRequestTimeout": "0s",
          "syncFrequency": "0s",
          "volumeStatsAggPeriod": "0s",
          "clusterDNS": [
            "10.96.0.10"
          ],
          "kind": "KubeletConfiguration",
          "staticPodPath": "/etc/kubernetes/manifests",
          "imageMinimumGCAge": "0s",
          "memorySwap": {},
          "streamingConnectionIdleTimeout": "0s",
          "imageGCHighThresholdPercent": 100,
          "nodeStatusReportFrequency": "0s",
          "authentication": {
            "anonymous": {
              "enabled": false
            },
            "webhook": {
              "enabled": true,
              "cacheTTL": "0s"
            },
            "x509": {
              "clientCAFile": "/var/lib/minikube/certs/ca.crt"
            }
          },
          "fileCheckFrequency": "0s"
        }
      },
      "process_args": {
        "--bootstrap-kubeconfig": "/etc/kubernetes/bootstrap-kubelet.conf",
        "--config": "/var/lib/kubelet/config.yaml",
        "--container-runtime": "docker",
        "--hostname-override": "minikube",
        "--housekeeping-interval": "5m",
        "--kubeconfig": "/etc/kubernetes/kubelet.conf",
        "--node-ip": "192.168.49.2",
        "/var/lib/minikube/binaries/v1.23.3/kubelet": "/var/lib/minikube/binaries/v1.23.3/kubelet"
      }
    }
  },
  "resource": {
    "command": "/var/lib/minikube/binaries/v1.23.3/kubelet --bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --config=/var/lib/kubelet/config.yaml --container-runtime=docker --hostname-override=minikube --housekeeping-interval=5m --kubeconfig=/etc/kubernetes/kubelet.conf --node-ip=192.168.49.2",
    "stat": {
      "UserTime": "330",
      "EffectiveUID": "",
      "SavedUID": "",
      "Parent": "1",
      "Nice": "0",
      "RealGID": "",
      "EffectiveGID": "",
      "State": "S",
      "StartTime": "24960",
      "SystemTime": "121",
      "RealUID": "",
      "SavedGID": "",
      "ResidentSize": "96184000",
      "Group": "1743",
      "Name": "kubelet",
      "TotalSize": "1977752000",
      "Threads": "15"
    },
    "external_data": {
      "config": {
        "cgroupDriver": "cgroupfs",
        "clusterDNS": [
          "10.96.0.10"
        ],
        "clusterDomain": "cluster.local",
        "fileCheckFrequency": "0s",
        "nodeStatusReportFrequency": "0s",
        "runtimeRequestTimeout": "0s",
        "authorization": {
          "mode": "Webhook",
          "webhook": {
            "cacheAuthorizedTTL": "0s",
            "cacheUnauthorizedTTL": "0s"
          }
        },
        "healthzBindAddress": "127.0.0.1",
        "memorySwap": {},
        "evictionHard": {
          "imagefs.available": "0%",
          "nodefs.available": "0%",
          "nodefs.inodesFree": "0%"
        },
        "evictionPressureTransitionPeriod": "0s",
        "staticPodPath": "/etc/kubernetes/manifests",
        "apiVersion": "kubelet.config.k8s.io/v1beta1",
        "failSwapOn": false,
        "healthzPort": 10248,
        "httpCheckFrequency": "0s",
        "nodeStatusUpdateFrequency": "0s",
        "shutdownGracePeriodCriticalPods": "0s",
        "authentication": {
          "x509": {
            "clientCAFile": "/var/lib/minikube/certs/ca.crt"
          },
          "anonymous": {
            "enabled": false
          },
          "webhook": {
            "enabled": true,
            "cacheTTL": "0s"
          }
        },
        "cpuManagerReconcilePeriod": "0s",
        "imageGCHighThresholdPercent": 100,
        "imageMinimumGCAge": "0s",
        "logging": {
          "flushFrequency": 0,
          "options": {
            "json": {
              "infoBufferSize": "0"
            }
          },
          "verbosity": 0
        },
        "volumeStatsAggPeriod": "0s",
        "kind": "KubeletConfiguration",
        "shutdownGracePeriod": "0s",
        "streamingConnectionIdleTimeout": "0s",
        "syncFrequency": "0s",
        "rotateCertificates": true
      }
    },
    "pid": "1743"
  },
  "ecs": {
    "version": "8.0.0"
  },
  "cloud": {
    "region": "southcentralus",
    "provider": "azure",
    "account": {},
    "instance": {
      "id": "df9c1df1-755e-4a82-bc84-450cfecc01e9",
      "name": "SCUS-GHEUS21U20SCUSC34-0207"
    },
    "machine": {
      "type": "Standard_DS2_v2"
    },
    "service": {
      "name": "Virtual Machines"
    }
  },
  "type": "process",
  "cycle_id": "6d66f8ec-1754-414f-a748-068f4ea41936",
  "rule": {
    "impact": "Kubelet would manage the iptables on the system and keep it in sync. If you are using any other iptables management solution, then there might be some conflicts.",
    "name": "Ensure that the --make-iptables-util-chains argument is set to true",
    "remediation": "If using a Kubelet config file, edit the file to set makeIPTablesUtilChains: true. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove the --make-iptables-util-chains argument from the KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service.",
    "tags": [
      "CIS",
      "Kubernetes",
      "CIS 4.2.7",
      "Kubelet"
    ],
    "benchmark": {
      "name": "CIS Kubernetes V1.20",
      "version": "v1.0.0"
    },
    "description": "Allow Kubelet to manage iptables."
  }
}

kube-api 💚

{
  "@timestamp": "2022-03-29T15:42:01.936Z",
  "resource": {
    "kind": "ClusterRole",
    "apiVersion": "rbac.authorization.k8s.io/v1",
    "metadata": {
      "name": "system:controller:horizontal-pod-autoscaler",
      "uid": "710d22e7-052a-4eb4-9235-6f3b861441a0",
      "resourceVersion": "129",
      "creationTimestamp": "2022-03-29T15:37:36Z",
      "labels": {
        "kubernetes.io/bootstrapping": "rbac-defaults"
      },
      "annotations": {
        "rbac.authorization.kubernetes.io/autoupdate": "true"
      }
    },
    "rules": [
      {
        "verbs": [
          "get",
          "list",
          "watch"
        ],
        "apiGroups": [
          "autoscaling"
        ],
        "resources": [
          "horizontalpodautoscalers"
        ]
      },
      {
        "verbs": [
          "update"
        ],
        "apiGroups": [
          "autoscaling"
        ],
        "resources": [
          "horizontalpodautoscalers/status"
        ]
      },
      {
        "verbs": [
          "get",
          "update"
        ],
        "apiGroups": [
          "*"
        ],
        "resources": [
          "*/scale"
        ]
      },
      {
        "verbs": [
          "list"
        ],
        "apiGroups": [
          ""
        ],
        "resources": [
          "pods"
        ]
      },
      {
        "verbs": [
          "get"
        ],
        "apiGroups": [
          ""
        ],
        "resources": [
          "services/proxy"
        ],
        "resourceNames": [
          "http:heapster:",
          "https:heapster:"
        ]
      },
      {
        "resources": [
          "pods"
        ],
        "verbs": [
          "list"
        ],
        "apiGroups": [
          "metrics.k8s.io"
        ]
      },
      {
        "verbs": [
          "get",
          "list"
        ],
        "apiGroups": [
          "custom.metrics.k8s.io"
        ],
        "resources": [
          "*"
        ]
      },
      {
        "verbs": [
          "create",
          "patch",
          "update"
        ],
        "apiGroups": [
          "",
          "events.k8s.io"
        ],
        "resources": [
          "events"
        ]
      }
    ]
  },
  "rule": {
    "benchmark": {
      "name": "CIS Kubernetes V1.20",
      "version": "v1.0.0"
    },
    "description": "Kubernetes Roles and ClusterRoles provide access to resources based on sets of objects and actions that can be taken on those objects.\nIt is possible to set either of these to be the wildcard \"*\" which matches all items.\nUse of wildcards is not optimal from a security perspective as it may allow for inadvertent access to be granted when new resources are added to the Kubernetes API either as CRDs or in later versions of the product.",
    "impact": "None",
    "name": "Minimize wildcard use in Roles and ClusterRoles",
    "remediation": "Where possible replace any use of wildcards in clusterroles and roles with specific objects or actions.",
    "tags": [
      "CIS",
      "Kubernetes",
      "CIS 5.1.3",
      "RBAC and Service Accounts"
    ]
  },
  "type": "kube-api",
  "host": {
    "ip": [
      "172.17.0.1",
      "192.168.49.2"
    ],
    "mac": [
      "02:42:9e:87:01:1f",
      "f6:fa:9c:22:37:1a",
      "02:42:c0:a8:31:02"
    ],
    "name": "minikube",
    "hostname": "minikube",
    "architecture": "x86_64",
    "os": {
      "name": "Debian GNU/Linux",
      "kernel": "5.11.0-1028-azure",
      "codename": "bullseye",
      "type": "linux",
      "platform": "debian",
      "version": "11 (bullseye)",
      "family": "debian"
    },
    "containerized": true
  },
  "agent": {
    "type": "cloudbeat",
    "version": "8.2.0",
    "ephemeral_id": "82e20511-d0fb-40af-bfe3-6f49215baf94",
    "id": "e32dbf93-87e6-499c-9640-6f32eb41e391",
    "name": "minikube"
  },
  "cluster_id": "6b9a87bf-4c90-435f-bc3d-e63cd53952f5",
  "resource_id": "710d22e7-052a-4eb4-9235-6f3b861441a0",
  "cycle_id": "6d66f8ec-1754-414f-a748-068f4ea41936",
  "result": {
    "evaluation": "failed",
    "evidence": {
      "cluster_roles": {
        "apiVersion": "rbac.authorization.k8s.io/v1",
        "kind": "ClusterRole",
        "metadata": {
          "creationTimestamp": "2022-03-29T15:37:36Z",
          "labels": {
            "kubernetes.io/bootstrapping": "rbac-defaults"
          },
          "name": "system:controller:horizontal-pod-autoscaler",
          "resourceVersion": "129",
          "uid": "710d22e7-052a-4eb4-9235-6f3b861441a0",
          "annotations": {
            "rbac.authorization.kubernetes.io/autoupdate": "true"
          }
        },
        "rules": [
          {
            "apiGroups": [
              "autoscaling"
            ],
            "resources": [
              "horizontalpodautoscalers"
            ],
            "verbs": [
              "get",
              "list",
              "watch"
            ]
          },
          {
            "apiGroups": [
              "autoscaling"
            ],
            "resources": [
              "horizontalpodautoscalers/status"
            ],
            "verbs": [
              "update"
            ]
          },
          {
            "apiGroups": [
              "*"
            ],
            "resources": [
              "*/scale"
            ],
            "verbs": [
              "get",
              "update"
            ]
          },
          {
            "apiGroups": [
              ""
            ],
            "resources": [
              "pods"
            ],
            "verbs": [
              "list"
            ]
          },
          {
            "apiGroups": [
              ""
            ],
            "resourceNames": [
              "http:heapster:",
              "https:heapster:"
            ],
            "resources": [
              "services/proxy"
            ],
            "verbs": [
              "get"
            ]
          },
          {
            "apiGroups": [
              "metrics.k8s.io"
            ],
            "resources": [
              "pods"
            ],
            "verbs": [
              "list"
            ]
          },
          {
            "apiGroups": [
              "custom.metrics.k8s.io"
            ],
            "resources": [
              "*"
            ],
            "verbs": [
              "get",
              "list"
            ]
          },
          {
            "apiGroups": [
              "",
              "events.k8s.io"
            ],
            "resources": [
              "events"
            ],
            "verbs": [
              "create",
              "patch",
              "update"
            ]
          }
        ]
      }
    }
  },
  "ecs": {
    "version": "8.0.0"
  },
  "cloud": {
    "instance": {
      "name": "SCUS-GHEUS21U20SCUSC34-0207",
      "id": "df9c1df1-755e-4a82-bc84-450cfecc01e9"
    },
    "machine": {
      "type": "Standard_DS2_v2"
    },
    "service": {
      "name": "Virtual Machines"
    },
    "region": "southcentralus",
    "provider": "azure",
    "account": {}
  }
}

github-actions · 2022-05-01T09:13:21Z

Cloudbeat CI 🤖

Integration tests status: success
Tests Summary:

=========================== short test summary info ============================
PASSED integration/tests/test_output_to_elasticsearch.py::test_elastic_index_exists[file-system]
PASSED integration/tests/test_output_to_elasticsearch.py::test_elastic_index_exists[process]
PASSED integration/tests/test_output_to_elasticsearch.py::test_elastic_index_exists[kube-api]
PASSED product/tests/test_cloudbeat.py::test_cloudbeat_pod_exist
PASSED product/tests/test_cloudbeat.py::test_cloudbeat_pods_running
================= 5 passed, 4 deselected, 6 warnings in 1.40s ==================

Link to detailed report: https://elastic.github.io/cloudbeat/411

mergify · 2022-05-26T11:49:37Z

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b add-kube-fetcher-tests upstream/add-kube-fetcher-tests
git merge upstream/main
git push upstream add-kube-fetcher-tests

mergify · 2022-05-26T15:01:13Z

This pull request does not have a backport label. Could you fix it @eyalkraft? 🙏
To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

backport-v./d./d./d is the label to automatically backport to the 8./d branch. /d is the digit
NOTE: backport-skip has been added to this pull request.

uri-weisman

Thank you for adding those tests 💪
Few minor comments...

uri-weisman · 2022-06-28T07:02:33Z

resources/fetchers/kube_factory.go

 }

-func (f *KubeFactory) CreateFrom(log *logp.Logger, cfg KubeApiFetcherConfig, ch chan fetching.ResourceInfo) (fetching.Fetcher, error) {
+func (f *KubeFactory) CreateFrom(log *logp.Logger, cfg KubeApiFetcherConfig, ch chan fetching.ResourceInfo, provider func(kubeconfig string, opt kubernetes.KubeClientOptions) (k8s.Interface, error)) (fetching.Fetcher, error) {


It would be nice if you could create a type for this func, will be more readable.
Something like: type K8sProviderFunc func(string, kubernetes.KubeClientOptions) (k8s.Interface, error)

uri-weisman · 2022-06-28T07:43:36Z

resources/fetchers/kube_fetcher_test.go

+	f := reflect.Indirect(r).FieldByName("Items")
+	items := f.Interface()
+	// Finding a way to avoid this switch case could be nice
+	switch items := items.(type) {


Might do the trick

Suggested change

switch items := items.(type) {

return PtrMap(items.([]any)

Doesn't work.

panic: interface conversion: interface {} is []v1.Pod, not []interface {} [recovered]

uri-weisman · 2022-06-28T07:45:29Z

resources/fetchers/kube_fetcher_test.go

+	for i, tt := range tests {
+		s.Run(fmt.Sprintf("Kube api test %v", i), func() {
+			client := k8sfake.NewSimpleClientset(tt)
+			provider := MockProvider(client)


Can be part of the suite if you want to.
can utilize SetupTest and TearDownTest for this purpose.

I use tt so seems not possible

uri-weisman · 2022-06-28T07:49:05Z

resources/fetchers/kube_fetcher_test.go

+
+func (s *KubeFetcherTestSuite) TestKubeFetcher_TestFetch() {
+	empty := v1.PodList{}
+	pod := v1.PodList{Items: []v1.Pod{{


Can we reuse pod in pods?

uri-weisman · 2022-06-28T10:03:06Z

resources/fetchers/kube_fetcher_test.go

+	close(s.resourceCh)
+}
+
+func MockProvider(client *k8sfake.Clientset) func(s string, options kubernetes.KubeClientOptions) (k8s.Interface, error) {


Can it be used here as well?

Suggested change

func MockProvider(client *k8sfake.Clientset) func(s string, options kubernetes.KubeClientOptions) (k8s.Interface, error) {

func MockProvider(client *k8sfake.Clientset) KubeClientProvider {

eyalkraft added 4 commits March 28, 2022 20:02

in progress

c55542d

move out from config

a6b6535

some fixes

de42f36

Merge branch 'main' into add-kube-fetcher-tests

eb1164f

eyalkraft and others added 6 commits April 18, 2022 14:16

Merge branch 'main' into add-kube-fetcher-tests

19ee2be

some more tests

152d297

Merge branch 'main' into add-kube-fetcher-tests

85ce6d2

add tests

d91affa

Merge branch 'main' into add-kube-fetcher-tests

6531b79

Merge branch 'main' into add-kube-fetcher-tests

6ededa0

mergify bot assigned eyalkraft May 26, 2022

mergify bot added the backport-skip label May 26, 2022

eyalkraft and others added 6 commits June 27, 2022 14:38

Merge branch 'main' into add-kube-fetcher-tests

bc3d37d

updated

caec6c4

fix tests

6d6a3d6

table test

588610c

Merge branch 'main' into add-kube-fetcher-tests

d1852e5

fix lint

c0c3801

eyalkraft marked this pull request as ready for review June 27, 2022 17:26

eyalkraft requested a review from a team as a code owner June 27, 2022 17:26

uri-weisman self-requested a review June 28, 2022 06:56

uri-weisman reviewed Jun 28, 2022

View reviewed changes

eyalkraft added 2 commits June 28, 2022 12:38

add type

f8dcc7f

reuse pod

574cbd0

uri-weisman approved these changes Jun 28, 2022

View reviewed changes

fix nit

3a921d3

eyalkraft enabled auto-merge (squash) June 28, 2022 11:30

eyalkraft merged commit 980ac1f into elastic:main Jun 28, 2022

orouz referenced this pull request in orouz/cloudbeat Sep 6, 2023

process input refactoring (#32)

c5562f2

orestisfl pushed a commit to orestisfl/cloudbeat that referenced this pull request Oct 11, 2023

[Security Policies] process input refactoring (elastic#32)

bd4968e

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add kube fetcher tests #32

Add kube fetcher tests #32

eyalkraft commented Mar 29, 2022 •

edited

Loading

github-actions bot commented Mar 29, 2022 •

edited

Loading

github-actions bot commented May 1, 2022

mergify bot commented May 26, 2022

mergify bot commented May 26, 2022

uri-weisman left a comment

uri-weisman Jun 28, 2022

eyalkraft Jun 28, 2022

uri-weisman Jun 28, 2022

eyalkraft Jun 28, 2022

uri-weisman Jun 28, 2022

eyalkraft Jun 28, 2022

uri-weisman Jun 28, 2022

eyalkraft Jun 28, 2022

uri-weisman Jun 28, 2022

	func MockProvider(client *k8sfake.Clientset) func(s string, options kubernetes.KubeClientOptions) (k8s.Interface, error) {
	func MockProvider(client *k8sfake.Clientset) KubeClientProvider {

Add kube fetcher tests #32

Add kube fetcher tests #32

Conversation

eyalkraft commented Mar 29, 2022 • edited Loading

github-actions bot commented Mar 29, 2022 • edited Loading

Cloudbeat CI 🤖

Exmaple findings from ElasticSearch:

github-actions bot commented May 1, 2022

Cloudbeat CI 🤖

mergify bot commented May 26, 2022

mergify bot commented May 26, 2022

uri-weisman left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

eyalkraft commented Mar 29, 2022 •

edited

Loading

github-actions bot commented Mar 29, 2022 •

edited

Loading