Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove sprig's env and expandenv functions #68

Merged

Conversation

jake-ciolek
Copy link
Contributor

Both Helm and ArgoCD remove access to these two due to security implications. It's possible to retrieve the function's pod environmental values. Some of these might be sensitive.

See more:

https://masterminds.github.io/sprig/os.html
argoproj/argo-workflows#5850 https://github.com/helm/helm/blob/e81f6140ddb22bc99a08f7409522a8dbe5338ee3/pkg/engine/funcs.go#L45

Also ran a go fmt.

Description of your changes

Fixes #67

I have:

Both Helm and ArgoCD remove access to these two due to security implications.
It's possible to retrieve the function's pod environmental values.
Some of these might be sensitive.

See more:

https://masterminds.github.io/sprig/os.html
argoproj/argo-workflows#5850
https://github.com/helm/helm/blob/e81f6140ddb22bc99a08f7409522a8dbe5338ee3/pkg/engine/funcs.go#L45

Also ran a go fmt.

Signed-off-by: Jakub Ciolek <[email protected]>
Copy link
Collaborator

@ezgidemirel ezgidemirel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @jake-ciolek for taking care of this!

@ezgidemirel ezgidemirel merged commit 5d4ece0 into crossplane-contrib:main Jul 30, 2024
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Remove access to Sprigs env and expandenv functions
2 participants