Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secret names can not container "," #1562

Merged
merged 1 commit into from
Jul 13, 2023

Conversation

rhatdan
Copy link
Member

@rhatdan rhatdan commented Jul 13, 2023

Podman run and podman create use the "," as a separator when parsing secrets. If a secretname contained a "," then this parsing would get confused.

Podman run and podman create use the "," as a separator when parsing
secrets. If a secretname contained a "," then this parsing would get
confused.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jul 13, 2023

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: rhatdan

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ashley-cui
Copy link
Member

LGTM

@mheon
Copy link
Member

mheon commented Jul 13, 2023

/lgtm

@edsantiago
Copy link
Collaborator

Where is this code even used? I think if there's a bug, it is elsewhere. Podman already enforces no-commas:

$ bin/podman secret create 'abc,def' /tmp/def.txt
Error: only 253 [a-zA-Z0-9-_.] characters allowed, and the start and end character must be [a-zA-Z0-9]: abc,def: invalid secret name

@edsantiago
Copy link
Collaborator

edsantiago commented Jul 13, 2023

And what's the "253" thing? [EDIT never mind, that's the string length]

@openshift-merge-robot openshift-merge-robot merged commit 9e5d4a6 into containers:main Jul 13, 2023
7 checks passed
@edsantiago
Copy link
Collaborator

I think this is broken. I think it broke in #1541, with no explanation. What is the purpose of this? Can I now create a secret with ^G (bell) in the name? colon? What possible use is that?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants