You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by "VanDuy91 (via GitHub)" <gi...@apache.org> on 2023/06/10 04:52:21 UTC
[GitHub] [cloudstack] VanDuy91 opened a new issue, #7618: Get All Access Info Of a Cluster Kubernetes Through API Key's User
VanDuy91 opened a new issue, #7618:
URL: https://github.com/apache/cloudstack/issues/7618
<!--
Verify first that your issue/request is not already reported on GitHub.
Also test if the latest release and main branch are affected too.
Always add information AFTER of these HTML comments, but no need to delete the comments.
-->
##### ISSUE TYPE
<!-- Pick one below and delete the rest -->
* Bug Report
##### COMPONENT NAME
<!--
Categorize the issue, e.g. API, VR, VPN, UI, etc.
-->
~~~
API, Kubernetes
~~~
##### CLOUDSTACK VERSION
<!--
New line separated list of affected versions, commit ID for issues on main branch.
-->
~~~
4.18.0.0
~~~
##### CONFIGURATION
<!--
Information about the configuration if relevant, e.g. basic network, advanced networking, etc. N/A otherwise
-->
- Apply role to the user: User role(default role on Cloustack)
- Generate keys for the user
##### OS / ENVIRONMENT
<!--
Information about the environment if relevant, N/A otherwise
-->
Ubuntu 22.04
##### SUMMARY
<!-- Explain the problem/feature briefly -->
Any user can get access info of a cluster from another one if they have the ID of the cluster
##### STEPS TO REPRODUCE
<!--
For bugs, show exactly how to reproduce the problem, using a minimal test-case. Use Screenshots if accurate.
For new features, show how the feature would be used.
-->
<!-- Paste example playbooks or commands between quotes below -->
~~~
- Set role to a user: Default User role on Cloudstack
- Generate keys for the user
- Get access info of a cluster from another user (e.g. xxx is the ID cluster of user A, but user B can get info of xxx cluster through API of user B (B has the ID cluster of A) )
~~~
<!-- You can also paste gist.github.com links for larger files -->
##### EXPECTED RESULTS
<!-- What did you expect to happen when running the steps above? -->
~~~
Can't get info of a cluster Kubernetes if they not own
~~~
##### ACTUAL RESULTS
<!-- What actually happened? -->
<!-- Paste verbatim command output between quotes below -->
~~~
Get all of info of a cluster if we have ID of any cluster
~~~
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] kiranchavala commented on issue #7618: Get All Access Info Of a Cluster Kubernetes Through API Key's User
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
kiranchavala commented on issue #7618:
URL: https://github.com/apache/cloudstack/issues/7618#issuecomment-1594472852
@DaanHoogland could you please look into this
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] weizhouapache commented on issue #7618: Get All Access Info Of a Cluster Kubernetes Through API Key's User
Posted by "weizhouapache (via GitHub)" <gi...@apache.org>.
weizhouapache commented on issue #7618:
URL: https://github.com/apache/cloudstack/issues/7618#issuecomment-1676868467
fixed via #7854
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] weizhouapache closed issue #7618: Get All Access Info Of a Cluster Kubernetes Through API Key's User
Posted by "weizhouapache (via GitHub)" <gi...@apache.org>.
weizhouapache closed issue #7618: Get All Access Info Of a Cluster Kubernetes Through API Key's User
URL: https://github.com/apache/cloudstack/issues/7618
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] kiranchavala commented on issue #7618: Get All Access Info Of a Cluster Kubernetes Through API Key's User
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
kiranchavala commented on issue #7618:
URL: https://github.com/apache/cloudstack/issues/7618#issuecomment-1594468457
@VanDuy91 thanks for the information
i am able to reproduce the issue
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] kiranchavala commented on issue #7618: Get All Access Info Of a Cluster Kubernetes Through API Key's User
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
kiranchavala commented on issue #7618:
URL: https://github.com/apache/cloudstack/issues/7618#issuecomment-1587008699
@VanDuy91
I am not able to reproduce this issue, The steps that i followed are
Could you please cross check again if they are correct
```
1. Create account of role type user ( Lets say Account 1 > User1)
2. Login as user 1 > Launch a k8s cluster
3. Execute api call with user 1 apikey and secret key
https://cloudstack.apache.org/api/apidocs-4.18/apis/listKubernetesClusters.html
list kubernetesclusters
Able to get the output of the api call
4. Create account of role type user ( Lets say Account 2> User2)
5. Execute api call with user 1 apikey and secret key
https://cloudstack.apache.org/api/apidocs-4.18/apis/listKubernetesClusters.html
list kubernetesclusters
There is no response to the api call
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] VanDuy91 commented on issue #7618: Get All Access Info Of a Cluster Kubernetes Through API Key's User
Posted by "VanDuy91 (via GitHub)" <gi...@apache.org>.
VanDuy91 commented on issue #7618:
URL: https://github.com/apache/cloudstack/issues/7618#issuecomment-1590681556
> @VanDuy91
>
> I am not able to reproduce this issue, The steps that i followed are
>
> Could you please cross check again if they are correct
>
> ```
> 1. Create account of role type user ( Lets say Account 1 > User1)
> 2. Login as user 1 > Launch a k8s cluster
> 3. Execute api call with user 1 apikey and secret key
> https://cloudstack.apache.org/api/apidocs-4.18/apis/listKubernetesClusters.html
>
> list kubernetesclusters
>
> Able to get the output of the api call
>
> 4. Create account of role type user ( Lets say Account 2> User2)
>
> 5. Execute api call with user 2 apikey and secret key
> https://cloudstack.apache.org/api/apidocs-4.18/apis/listKubernetesClusters.html
>
> list kubernetesclusters
>
> There is no response to the api call
> ```
Hi @kiranchavala ,
Following steps were what I did:
~~~
1. Create an account of role type user (Let's say Account 1 > User1)
2. Login as user 1 > Launch a k8s cluster
3. Execute API call with user 1 API key and secret key
https://cloudstack.apache.org/api/apidocs-4.18/apis/getKubernetesClusterConfig.html
get Kubernetes clusters access
Able to get the output of the API call (including the Kubernetes cluster config)
4. Create an account of role type user ( Lets say Account 2> User2)
5. Execute API call with user 2 API key and secret key and k8s cluster's ID get from User1
https://cloudstack.apache.org/api/apidocs-4.18/apis/getKubernetesClusterConfig.html
Get Kubernetes clusters access
Able to get the output of the API call (including the Kubernetes cluster config)
~~~
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] weizhouapache commented on issue #7618: Get All Access Info Of a Cluster Kubernetes Through API Key's User
Posted by "weizhouapache (via GitHub)" <gi...@apache.org>.
weizhouapache commented on issue #7618:
URL: https://github.com/apache/cloudstack/issues/7618#issuecomment-1594554785
Maybe there is no access check in code
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org