-
Notifications
You must be signed in to change notification settings - Fork 7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(helm): prompt for password with helm repo add #8431
Conversation
Previously in Helm 2, 'helm repo add' would prompt for your password if you only provided the --username flag. This helps prevent someone's credentials from being logged in their shell's history, from showing up in process lists, and from being seen by others nearby. Closes helm#7174 Signed-off-by: Jack Weldon <jack.weldon.scm@gmail.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks for looking into this. I left one note for feedback.
Have you tested this yet to make sure it works?
Signed-off-by: Jack Weldon <jack.weldon.scm@gmail.com>
Yes, I have tested locally using a private repository. My |
Fix broken windows/amd64 build caused by helm#8431 https://golang.org/pkg/syscall/#pkg-variables indicated that `syscall.Stdin` should have been an `int`, though it's actually a `syscall.Handle` on Windows, which is a `uintptr`. In a similar issue posted to golang, a member of the Golang team stated that the fix would be to cast it to an int. Signed-off-by: Jack Weldon <jack.weldon.scm@gmail.com>
No longer using the 'syscall' package, as further reading into this issue has shown that 'syscall' is deprecated/locked down. Additional issues posted on Golang's github indicates that the newer preferred mechanism to get the file descriptor for stdin is: int(os.Stdin.Fd()) Signed-off-by: Jack Weldon <jack.weldon.scm@gmail.com>
fix windows build failure caused by #8431
No longer using the 'syscall' package, as further reading into this issue has shown that 'syscall' is deprecated/locked down. Additional issues posted on Golang's github indicates that the newer preferred mechanism to get the file descriptor for stdin is: int(os.Stdin.Fd()) Signed-off-by: Jack Weldon <jack.weldon.scm@gmail.com> Signed-off-by: Ashok Pon Kumar <ashokponkumar@in.ibm.com>
No longer using the 'syscall' package, as further reading into this issue has shown that 'syscall' is deprecated/locked down. Additional issues posted on Golang's github indicates that the newer preferred mechanism to get the file descriptor for stdin is: int(os.Stdin.Fd()) Signed-off-by: Jack Weldon <jack.weldon.scm@gmail.com> Signed-off-by: Ashok Pon Kumar <ashokponkumar@in.ibm.com>
Did this feature not make it into Helm 3.3.0? |
No, it was a few days after the 3.3 cutoff, it'll be in 3.4 |
No longer using the 'syscall' package, as further reading into this issue has shown that 'syscall' is deprecated/locked down. Additional issues posted on Golang's github indicates that the newer preferred mechanism to get the file descriptor for stdin is: int(os.Stdin.Fd()) Signed-off-by: Jack Weldon <jack.weldon.scm@gmail.com>
What this PR does / why we need it:
Closes #7174
Previously in Helm 2,
helm repo add
would prompt for your password if you only provided the--username
flag. This helps prevent someone's credentials from being logged in their shell's history, from showing up in process lists, and from being seen by others nearby.Special notes for your reviewer:
This is my first time contributing to a large open-source project, please let me know if anything else is needed or desired and I'll do my best to address the concerns as soon as possible.
If applicable: