Skip to content
This repository was archived by the owner on Jul 11, 2023. It is now read-only.

Fix failing e2es with GinkgoRecover and resolve CVE-2022-28948 #4832

Merged
merged 4 commits into from
Jun 21, 2022

Conversation

jaellio
Copy link
Contributor

@jaellio jaellio commented Jun 20, 2022

Description:

  • Resolves CVE-2022-28948 by upgrading gopkg.in/yaml.v3 from v3.0.0 to v3.0.1.
  • Adds GinkgoRecover() to e2e go routines. Cleanup will
    be skipped and test will exit bypassing cleanup if a
    different context goroutine panics or asserts without
    deferring the ginkgo recover function.

Testing done:

  • CI

Affected area:

Functional Area
Tests [x]
Other [x]

Please answer the following questions with yes/no.

  1. Does this change contain code from or inspired by another project?

    • Did you notify the maintainers and provide attribution?
  2. Is this a breaking change?

  3. Has documentation corresponding to this change been updated in the osm-docs repo (if applicable)?

Cleanup will be skipped and test will exit bypassing cleanup
if a different context goroutine panics or asserts without
deferring the ginkgo recover function.

Related to openservicemesh#3119

Signed-off-by: jaellio <[email protected]>
@codecov-commenter
Copy link

codecov-commenter commented Jun 20, 2022

Codecov Report

Merging #4832 (ed42595) into main (30885c9) will decrease coverage by 0.01%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #4832      +/-   ##
==========================================
- Coverage   69.47%   69.46%   -0.02%     
==========================================
  Files         218      218              
  Lines       15766    15766              
==========================================
- Hits        10954    10952       -2     
- Misses       4760     4762       +2     
  Partials       52       52              
Flag Coverage Δ
unittests 69.46% <ø> (-0.02%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
pkg/certificate/manager.go 77.43% <0.00%> (-1.03%) ⬇️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 30885c9...ed42595. Read the comment docs.

@jaellio jaellio changed the title tests: add ginko panic recovery to retry policy e2e tests: add missing ginko panic recovery to e2e goroutines Jun 20, 2022
@jaellio jaellio changed the title tests: add missing ginko panic recovery to e2e goroutines Fix failing e2es with GinkgoRecover and resolve CVE-2022-28948 Jun 20, 2022
@jaellio jaellio marked this pull request as ready for review June 20, 2022 22:05
@trstringer trstringer merged commit 8da8732 into openservicemesh:main Jun 21, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants