ovn-kubernetes / ovn-kubernetes / 14664274934

push

github

cni: Do not expose the node's OVN bridge-mappings

In case the desired OVN bridge-mapping does not exist, the CNI will
return an error that includes the existing OVN bridge-mapping on the node.
The error is propagated by kubelet in form of event on the connected pod
which is accessible to non-admin users (using kubectl describe pod ...).

The existing OVN bridge-mapping on the node should not be exposed to
non-admin users.
Hence, omit the node existing OVN bridge-mapping from the error
message.

Log the error including the existing OVN mapping on the node to allow
troubleshooting.

Signed-off-by: Or Mergi <ormergi@redhat.com>

2 of 2 new or added lines in 1 file covered. (100.0%)

37895 of 69017 relevant lines covered (54.91%)

426.62 hits per line