Skip to content

Conversation

@saez0pub
Copy link
Contributor

@saez0pub saez0pub commented Apr 5, 2023

Description

  • fix(gcp): None as cloudfunctions environment_variables
    If we have no environment variable on cloud function
    AttributeError: 'NoneType' object has no attribute 'items'
    in get_environment_secrets function

  • fix(gcp): False positive on pubsub only cloud functions
    If an app is not accessible with an http url, we have a false positive
    on the http exposure

  • fix(gcp): gke cluster subnetwork can be cross project

  • fix(gcp): sql-component api is deprecated
    See https://cloud.google.com/sql/docs/mysql/admin-api/rest

Type of change

Select the relevant option(s):

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works (optional)
  • New and existing unit tests pass locally with my changes

saez0pub added 4 commits April 5, 2023 09:39
If an app is not accessible with an http url, we have a false positive
on th http exposure
If we have no environment variable on cloud function
AttributeError: 'NoneType' object has no attribute 'items'
in get_environment_secrets function
@saez0pub saez0pub changed the title Fix/gcp audit Fix(gcp): update cloudsql api and edge case configurations Apr 5, 2023
@liyun-li liyun-li self-assigned this May 18, 2023
@liyun-li
Copy link
Contributor

Great find; give us some time to look at please!

@x4v13r64
Copy link
Collaborator

x4v13r64 commented Jun 1, 2023

LGTM

@liyun-li
Copy link
Contributor

liyun-li commented Jun 5, 2023

Copy link
Contributor

@liyun-li liyun-li left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

function_dict['docker_registry'] = raw_function['dockerRegistry']
function_dict['url'] = raw_function.get('httpsTrigger', {}).get('url')
function_dict['security_level'] = raw_function.get('httpsTrigger', {}).get('securityLevel')
function_dict['security_level'] = 'SECURE_ALWAYS' if function_dict['url'] is None else raw_function.get('httpsTrigger', {}).get('securityLevel')
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What is SECURE_ALWAYS?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@liyun-li liyun-li merged commit acf7bda into nccgroup:develop Jun 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants