Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generate S3 server credentials on-the-fly #3114

Merged
merged 1 commit into from
Dec 8, 2022

Conversation

opudrovs
Copy link
Contributor

@opudrovs opudrovs commented Dec 6, 2022

Changes:

To improve the security of GitOps Run we now generate access and secret keys each time the gitops beta run command is run. These credentials are passed on to the S3 server and used in the client code for authentication.

@opudrovs opudrovs force-pushed the generate-secret-for-bucket-server-new branch 2 times, most recently from ca47019 to cdf9ae5 Compare December 7, 2022 01:45
@opudrovs opudrovs changed the title Generate secret for bucket server New Generate secret for bucket server Dec 7, 2022
@opudrovs opudrovs marked this pull request as ready for review December 7, 2022 09:51
@opudrovs opudrovs requested a review from a team December 7, 2022 09:51
@makkes makkes added the area/gitops-run Anything related to GitOps Run label Dec 7, 2022
Copy link
Member

@makkes makkes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

apart from the math/rand => crypto/rand transition this looks fine to me. I'd like @pjbgf to have a look, too.

pkg/run/watch/secret.go Outdated Show resolved Hide resolved
pkg/run/watch/secret.go Outdated Show resolved Hide resolved
@opudrovs opudrovs force-pushed the generate-secret-for-bucket-server-new branch 3 times, most recently from b9e3065 to cb2ffcc Compare December 7, 2022 13:37
chanwit
chanwit previously requested changes Dec 7, 2022
pkg/s3/auth_middleware_test.go Outdated Show resolved Hide resolved
@makkes makkes removed the team/denim label Dec 7, 2022
@opudrovs opudrovs force-pushed the generate-secret-for-bucket-server-new branch from cb2ffcc to dab0e6c Compare December 7, 2022 14:46
@makkes makkes force-pushed the generate-secret-for-bucket-server-new branch from e7049f6 to ff16ce9 Compare December 7, 2022 16:24
Copy link
Member

@makkes makkes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's make sure to squash the commits before merging

@opudrovs opudrovs force-pushed the generate-secret-for-bucket-server-new branch 2 times, most recently from 1c982a1 to 1998cd8 Compare December 7, 2022 17:15
@opudrovs opudrovs requested a review from chanwit December 7, 2022 17:28
@opudrovs opudrovs dismissed chanwit’s stale review December 7, 2022 17:35

changes addressed

@makkes makkes force-pushed the generate-secret-for-bucket-server-new branch 4 times, most recently from e4083d0 to 5eee0ae Compare December 8, 2022 09:16
@makkes makkes enabled auto-merge December 8, 2022 09:16
Copy link

@pjbgf pjbgf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@makkes makkes changed the title Generate secret for bucket server Generate S3 server credentials on-the-fly Dec 8, 2022
To improve the security of GitOps Run we now generate access and
secret keys each time the `gitops beta run` command is run. These
credentials are passed on to the S3 server and used in the client code
for authentication.
@makkes makkes disabled auto-merge December 8, 2022 09:24
@makkes makkes force-pushed the generate-secret-for-bucket-server-new branch from 5eee0ae to 75268c4 Compare December 8, 2022 09:25
@makkes makkes enabled auto-merge December 8, 2022 09:25
@makkes makkes merged commit 4a6a30d into main Dec 8, 2022
@makkes makkes deleted the generate-secret-for-bucket-server-new branch December 8, 2022 09:32
@makkes makkes mentioned this pull request Dec 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/gitops-run Anything related to GitOps Run exclude from release notes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants