-
Notifications
You must be signed in to change notification settings - Fork 427
Bug 1795312: initialize auth plugins #269
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
The --force flag is dangerous and potentially allows untrusted content to be upgraded to accidentally. Instead, introduce two new flags `--allow-explicit-upgrade` (for upgrading to something not in availableVersions) and `--allow-upgrade-with-warnigns` (for upgrading when another upgrade is in progress or the cluster is reporting an error) and remove those checks from `--force`. While this is an API change, it is necessary to ensure that users do not accidentally get access to untrusted content when performing upgrades across major versions in advance of graph updates, or when they are upgrading in disconnected environments.
Bug 1756454: Separate upgrade flags for safety instead of abusing force
We mirror the manifest list and blobs, but not the sub manifests. Correct that by registering those with the plan. We must then upload dependent manifests first, since the registry will not allow partial manifest lists.
Bug 1760269: UPSTREAM: 77874: fix CVE-2019-11244: kubectl --http-cache=<world-accessible dir>
In some cases the FROM statement on a Dockerfile may contain an extra alias, e.g.: FROM fedora:latest AS builder This commit fixes the parser to use only the second parsed node on the FROM statement(on this case "fedora:latest") instead of returning the last one(on this case "builder").
In order for console-operator deployment to succeed, cli-artifacts needs to be available on all arches for downloads-openshift-console. However, in that case, /usr/bin/oc (inherited from cli) is a native binary, and we want to provide all primary Linux architectures to match those on mirror.openshift.com. In order to do so, this provides cross-compiled Linux binaries for multiple architectures. Cross-compiling oc fails with gssapi enabled, therefore it is disabled in the cross builds. (cherry picked from commit e949088) (squashed commit 2510f47)
Bug 1771420: Update ruby-22-centos7 to ruby-25-centos7
Bug 1773807: Enable all Linux arches in cli-artifacts [4.2]
…ry-pick-124-to-release-4.2 Bug 1761922: Manifest lists can fail to mirror because dependent manifests are not uploaded
…ry-pick-136-to-release-4.2 Bug 1770741: Fixed Dockerfile FROM statement parser.
Bug 1772463: Set TypeSetter in get print flags, like we do everywhere elsewhere
[release-4.2] Bug 1776495: don't install quota CRDs
|
@soltysh: This pull request references Bugzilla bug 1795312, which is invalid:
Comment DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
Wrong branch 🤦♂️ |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: soltysh The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
@soltysh: PR needs rebase. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
1 similar comment
|
@soltysh: PR needs rebase. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
@soltysh: The following tests failed, say
Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
Manual cherry-pick of #266 b/c this is touching deps.
/assign @deads2k