Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[installer] Fix server GitHub app cert mount #9799

Merged
merged 1 commit into from
May 6, 2022
Merged

Conversation

geropl
Copy link
Member

@geropl geropl commented May 5, 2022

Description

Related Issue(s)

Fixes a path from #9795

How to test

Release Notes

NONE

Documentation

@geropl geropl requested a review from a team May 5, 2022 19:44
@github-actions github-actions bot added the team: webapp Issue belongs to the WebApp team label May 5, 2022
@@ -201,7 +202,7 @@ func deployment(ctx *common.RenderContext) ([]runtime.Object, error) {

volumeMounts = append(volumeMounts, corev1.VolumeMount{
Name: githubAppCertSecret,
MountPath: cfg.WebApp.Server.GithubApp.CertPath,
MountPath: path.Dir(cfg.WebApp.Server.GithubApp.CertPath),
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we validate the path somewhere? If the path is empty, path.Dir() returns . which is unlikely what we want here. https://go.dev/play/p/P9N0NNBdfdq

Copy link
Member Author

@geropl geropl May 6, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thought about that as well, but I could not come up with anything sensible here.

As a reminder, we have a single client for this anyway, and we need to ensure config stability in general at a higher level anyway, so: I don't think it make sense to add tests for properties on the strings we pipe through. 🤷

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For SaaS yes, but if this is also used by self-hosted, chances are someone will misconfigure it. Perhaps just checking that the path is not empty and erroring when it is makes sense here to avoid unexpected behaviour.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, makes sense for now then. Thanks for the clarification.

@easyCZ easyCZ self-assigned this May 6, 2022
@roboquat roboquat merged commit d90e6ab into main May 6, 2022
@roboquat roboquat deleted the gpl/fix-gh-app-cert branch May 6, 2022 07:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release-note-none size/XS team: webapp Issue belongs to the WebApp team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants