Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SECURESIGN-1342 | Unable to delete upgraded Securesign object #604

Merged
merged 1 commit into from
Sep 16, 2024

Conversation

JasonPowr
Copy link
Contributor

The validation rules I removed here were stopping deletion after an upgrade, I tried to configure new rules however it just would not work reliable, validation for this particular rule is still done inside the controller here: https://github.com/securesign/secure-sign-operator/blob/main/internal/controller/tsa/utils/tsa_cert_chain.go#L238

@osmman
Copy link
Contributor

osmman commented Sep 9, 2024

Hi, I am thinking about making tsa optional in Securesign resource, by changing it to pointer. https://github.com/securesign/secure-sign-operator/blob/main/api/v1alpha1/securesign_types.go#L35

TimestampAuthority *TimestampAuthoritySpec `json:"tsa,omitempty"`

@JasonPowr @bouskaJ What do you think?

@JasonPowr
Copy link
Contributor Author

JasonPowr commented Sep 9, 2024

Hi, I am thinking about making tsa optional in Securesign resource, by changing it to pointer. https://github.com/securesign/secure-sign-operator/blob/main/api/v1alpha1/securesign_types.go#L35

TimestampAuthority *TimestampAuthoritySpec `json:"tsa,omitempty"`

@JasonPowr @bouskaJ What do you think?

Off the Top of my head, I can't see any major issue with this, making it a pointer, if I understand correctly may allow for a nil value so I should be able to do some better api validation with it, but I will let @bouskaJ comment before making changes.

@bouskaJ
Copy link
Collaborator

bouskaJ commented Sep 10, 2024

yes, I don't see any issue. @JasonPowr go ahead.

@JasonPowr JasonPowr force-pushed the resource-can-delete-after-upgrade branch from 8a6e07f to 5e79749 Compare September 13, 2024 07:31
@JasonPowr JasonPowr requested review from osmman and bouskaJ and removed request for osmman September 16, 2024 08:07
Copy link

openshift-ci bot commented Sep 16, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: JasonPowr, osmman

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@JasonPowr
Copy link
Contributor Author

/test tas-operator-e2e

@openshift-merge-bot openshift-merge-bot bot merged commit 0159bc9 into main Sep 16, 2024
17 checks passed
@osmman osmman deleted the resource-can-delete-after-upgrade branch September 17, 2024 12:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants