fix CI job for leak-report

this MR refactors the whitelisting code to allow partial matches of following secret names after analyzed leaks report and Failed on the CI:

sensitive ones:

non sensitive ones:

  • "tls.crt"
  • "ca.crt"
  • "extra-ca-certs.pem"
  • "ca-file.pem"

the leak report format has been updated to have a report more usable in this MR.

now the leak are reported as followd in the report:

{'pod': 'metal3-metal3-ironic-bc4b98657-hhwhg', 'namespace': 'metal3-system', 'leak': {'secret': 'ironic-inspector-basic-auth', 'key': 'htpasswd'}, 'secret': 'ironic:$2a$10$4klNMCl7XUD847Ta3bj0Qu/WthBdt4V.uSYfCZXST5vxdQDY0IVmG'}

name of the pod

name of the namespace

the secret, its key and its value

Closes #1526 (closed)

Edited by Samuel Bartel

Merge request reports

Loading