Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Eliminate unnecessary Seed decoding in SeedRestriction #4045

Merged
merged 1 commit into from
May 12, 2021

Conversation

rfranzke
Copy link
Member

How to categorize this PR?

/area security
/kind bug

What this PR does / why we need it:
For DELETE operations, the request.Object is nil (ref), only the request.OldObject is set.
However, decoding the entire Seed is not necessary as the SeedRestriction only requires the name which is already provided with request.Name.

Which issue(s) this PR fixes:
Fixes #4042

Special notes for your reviewer:
/cc @stoyanr @kris94

Release note:

A bug generally preventing `ManagedSeed` deletion has been fixed.

@rfranzke rfranzke requested a review from a team as a code owner May 12, 2021 10:52
@gardener-robot gardener-robot added area/security Security related kind/bug Bug needs/review size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels May 12, 2021
Copy link
Contributor

@stoyanr stoyanr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@timuthy timuthy merged commit b09f86b into gardener:master May 12, 2021
@ialidzhikov ialidzhikov added this to the v1.23 milestone May 12, 2021
@rfranzke rfranzke deleted the fix/seedauth-ms-deletion branch May 12, 2021 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/security Security related kind/bug Bug size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Deleting a managed seed fails because the seed deletion is denied by the seed-restriction webhook
7 participants