-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Fix(gcp): update cloudsql api and edge case configurations #1522
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
If an app is not accessible with an http url, we have a false positive on th http exposure
If we have no environment variable on cloud function AttributeError: 'NoneType' object has no attribute 'items' in get_environment_secrets function
|
Great find; give us some time to look at please! |
|
LGTM |
|
I should have Google'd https://cloud.google.com/logging/docs/reference/audit/appengine/rest/Shared.Types/SecurityLevel |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
| function_dict['docker_registry'] = raw_function['dockerRegistry'] | ||
| function_dict['url'] = raw_function.get('httpsTrigger', {}).get('url') | ||
| function_dict['security_level'] = raw_function.get('httpsTrigger', {}).get('securityLevel') | ||
| function_dict['security_level'] = 'SECURE_ALWAYS' if function_dict['url'] is None else raw_function.get('httpsTrigger', {}).get('securityLevel') |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What is SECURE_ALWAYS?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Description
fix(gcp): None as cloudfunctions environment_variables
If we have no environment variable on cloud function
AttributeError: 'NoneType' object has no attribute 'items'
in get_environment_secrets function
fix(gcp): False positive on pubsub only cloud functions
If an app is not accessible with an http url, we have a false positive
on the http exposure
fix(gcp): gke cluster subnetwork can be cross project
fix(gcp): sql-component api is deprecated
See https://cloud.google.com/sql/docs/mysql/admin-api/rest
Type of change
Select the relevant option(s):
Checklist: