kubevirt / containerized-data-importer / #6031

50%

push

travis-ci

cdi-deployment, cdi-operator: secure metrics endpoints with authentication (#4121)

* vendor: sigs.k8s.io/controller-runtime/pkg/metrics/filters/filters.go

Signed-off-by: Adi Aloni <aaloni@redhat.com>

* bazenl-generate: delete vendored BUILD.bazel to avoid gazelle conflicts

Delete vendored BUILD.bazel files that use external repo references
which are incompatible with vendored builds before gazelle runs so it
regenerates them with vendored-compatible paths.

Signed-off-by: Adi Aloni <aaloni@redhat.com>

* cdi: add metrics endpoint authentication

Use controller-runtime's WithAuthenticationAndAuthorization
FilterProvider to require authentication for the /metrics endpoints on
cdi-controller and cdi-operator. Requests are authenticated via
TokenReview and authorized via SubjectAccessReview against the k8s API
server.

Signed-off-by: Adi Aloni <aaloni@redhat.com>

---------

Signed-off-by: Adi Aloni <aaloni@redhat.com>

25 of 76 new or added lines in 6 files covered. (32.89%)

15018 of 30304 relevant lines covered (49.56%)

0.56 hits per line