ocadotechnology / aimmo / 2836

push

travis-ci

<a href="https://github.com/ocadotechnology/aimmo/commit/<a class=hub.com/ocadotechnology/aimmo/commit/726f7ddf1fbdd845a83e2beb2a1fb377ffbe9370">726f7ddf1<a href="https://github.com/ocadotechnology/aimmo/commit/726f7ddf1fbdd845a83e2beb2a1fb377ffbe9370">&quot;&gt;C-001 solution (#848)

* get docker for mac working

change ingresses namespace

change get_game_url_base_path

use docker for desktop ip

* begun creation of roles

* C-001 fixed

Attempted to replicate the security flaw C-001 as per the test report after implementing RBAC. The console shows a 503 upon attempting to replicate the issue, the user&amp;#39;s consoles shows a 111 (connection refused). This leads to the conclusion the the issue has been resolved, however further testing may be needed.

* Moved role/account yamls to their own folder

Put them all in an rbac folder to keep the in one easy to find place

* Added a comment to describe the process

added a string to describe how to set up docker-desktop with extensions, and make use of RBAC. These steps may need to be automated, or included in the setup process. Minor issues still exist however.

* added reference to source of information

just so other&amp;#39;s can find it easily if needed.

* Update worker account

* updated game_creator_role and minor changes

moved the game creator to the nginx namespace and updated it&amp;#39;s role to reflect this, the ClusterRoleBinding gives the permissions of the game creator&amp;#39;s permissions scope of the whole cluster (hence why it was moved out of reach of the worker pods, just incase there is a way for workers to gain access outside of their pod)

* Fixed game creator rc yaml not applying role binding

* change role binding namespace

* updated version

* Delete nginx-ingress folder

* Revert &amp;quot;get docker for mac working&quot;

This reverts commit </a><a class="double-link" href="https://github.com/ocadotechnology/aimmo/commit/<a class="double-link" href="https://github.com/ocadotechnology/aimmo/commit/017620a59842adca44dca4ad1f999e1cae07d93f">017620a59</a>">017620a59</a><a href="https://github.com/ocadotechnology/aimmo/commit/726f7ddf1fbdd845a83e2beb2a1fb377ffbe9370">.

# Conflicts:
#	aimmo_runner/minikube.py

* Automate applying the accounts and... (continued)

1578 of 2104 relevant lines covered (75.0%)

0.75 hits per line