-
Notifications
You must be signed in to change notification settings - Fork 178
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add scripts to create platform identities for dev #3734
Conversation
/azp run ci, e2e |
Azure Pipelines successfully started running 2 pipeline(s). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
E2E failed, but it isn't relevant to this PR.
I wrote a ticket for the E2E flake that occurred: https://issues.redhat.com/browse/ARO-9445 |
Please rebase pull request. |
/azp run ci, e2e |
Azure Pipelines successfully started running 2 pipeline(s). |
/azp run ci, e2e |
Azure Pipelines successfully started running 2 pipeline(s). |
/azp run ci, e2e |
Azure Pipelines successfully started running 2 pipeline(s). |
/azp run ci, e2e |
Azure Pipelines successfully started running 2 pipeline(s). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ultimately OK to merge, although I'd prefer if we didn't print secrets to terminal, ever.
echo "Cluster MSI Client ID: $mockClientID" | ||
echo "Cluster MSI Tenant ID: $mockTenantID" | ||
echo "Cluster MSI Base64 Encoded Certificate: $base64EncodedCert" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: This isn't a change you introduced, but if we're here anyways... If I'm reading all this correctly - this is a private key? It's best to not print secrets to STDOUT even if it's obfuscated by base64 (encoding != encrypting; this string is effectively plaintext).
--------- Co-authored-by: Nicolas Ontiveros <[email protected]>
Which issue this PR addresses:
Fixes https://issues.redhat.com/browse/ARO-8997
What this PR does / why we need it:
Platform identities will be used for MIWI local dev cluster.
Test plan for issue:
I ran the scripts
Is there any documentation that needs to be updated for this PR?
Yes - see PR
How do you know this will function as expected in production?