Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates Interceptors to use Lister to access secrets #1122

Merged
merged 4 commits into from
Jun 9, 2021

Conversation

sm43
Copy link
Member

@sm43 sm43 commented Jun 4, 2021

This updates all core interceptor to use lister to cache the secret
instead of using kubeclient, to prevent interceptor's calls to the API server
from being throttled.
This also moves the validation of event type before the secret validation
so that it reads the secret only when the event type matches.

Closes #1084

Signed-off-by: Shivam Mukhade smukhade@redhat.com

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

  • Includes tests (if functionality changed/added)
  • Includes docs (if user facing)
  • Commit messages follow commit message best practices
  • Release notes block has been filled in or deleted (only if no user facing changes)

See the contribution guide for more details.

Release Notes

This updates the github interceptor to use lister to cache the secret
instead of using kubeclient, to prevent interceptor's calls to the API server
from being throttled.
This also moves the validation of event type before the secret validation
so that it reads the secret only when the event type matches.

Issue: tektoncd#1084

Signed-off-by: Shivam Mukhade <smukhade@redhat.com>
@tekton-robot tekton-robot added do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. release-note Denotes a PR that will be considered when it comes time to generate release notes. labels Jun 4, 2021
@tekton-robot tekton-robot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Jun 4, 2021
@sm43
Copy link
Member Author

sm43 commented Jun 4, 2021

/cc @savitaashture @dibyom Could you please take a look if these changes looks good for GitHub Interceptor? If it does I can do similar for other interceptors :)

@sm43
Copy link
Member Author

sm43 commented Jun 4, 2021

/test pull-tekton-triggers-integration-tests

SM43 added 3 commits June 4, 2021 23:26
This updates the gitlab interceptor to use lister to cache the secret
instead of using kubeclient, to prevent interceptor's calls to the API server
from being throttled.
This also moves the validation of event type before the secret validation
so that it reads the secret only when the event type matches.

Issue: tektoncd#1084

Signed-off-by: Shivam Mukhade <smukhade@redhat.com>
This updates the bitbucket interceptor to use lister to cache the secret
instead of using kubeclient, to prevent interceptor's calls to the API server
from being throttled.
This also moves the validation of event type before the secret validation
so that it reads the secret only when the event type matches.

Issue: tektoncd#1084

Signed-off-by: Shivam Mukhade <smukhade@redhat.com>
This updates the cel interceptor to use lister to cache the secret
instead of using kubeclient, to prevent interceptor's calls to the API server
from being throttled.
This also moves the validation of event type before the secret validation
so that it reads the secret only when the event type matches.

Issue: tektoncd#1084

Signed-off-by: Shivam Mukhade <smukhade@redhat.com>
@sm43 sm43 changed the title [WIP] Updates Interceptors to use Lister to access secrets Updates Interceptors to use Lister to access secrets Jun 7, 2021
@tekton-robot tekton-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jun 7, 2021
@tekton-robot
Copy link

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: savitaashture

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 8, 2021
Copy link
Member

@dibyom dibyom left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice, thanks @sm43

(We'll have to make some updates to #1042 after this is merged)

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Jun 9, 2021
@tekton-robot tekton-robot merged commit b7678ad into tektoncd:main Jun 9, 2021
@sm43 sm43 deleted the use-lister-to-access-secrets branch June 9, 2021 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Cache secret fetches in interceptors
4 participants