From 8940649ecf6852223ff9d9e065bb707ce112a4f7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Juan=20Jos=C3=A9=20Martos?= Date: Fri, 1 Sep 2023 18:52:38 +0200 Subject: [PATCH] [bitnami/harbor-*] Update validation of permissions in harbor (#46975) [bitnami/harbor-*] Validate permissions in harbor Signed-off-by: Jota Martos --- .vib/harbor-adapter-trivy/goss/harbor-adapter-trivy.yaml | 2 +- .vib/harbor-core/goss/harbor-core.yaml | 2 +- .vib/harbor-exporter/goss/harbor-exporter.yaml | 2 +- .vib/harbor-jobservice/goss/harbor-jobservice.yaml | 2 +- .vib/harbor-notary-server/goss/harbor-notary-server.yaml | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.vib/harbor-adapter-trivy/goss/harbor-adapter-trivy.yaml b/.vib/harbor-adapter-trivy/goss/harbor-adapter-trivy.yaml index 8f4f4c1c24ae..a0fd99e78c0f 100644 --- a/.vib/harbor-adapter-trivy/goss/harbor-adapter-trivy.yaml +++ b/.vib/harbor-adapter-trivy/goss/harbor-adapter-trivy.yaml @@ -25,5 +25,5 @@ command: exit-status: 0 # Ensure permissions for Internal TLS check-permissions-system-certs: - exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w.*harbor" + exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w" exit-status: 0 diff --git a/.vib/harbor-core/goss/harbor-core.yaml b/.vib/harbor-core/goss/harbor-core.yaml index 589e7a7d0e23..f48a7f6e14d8 100644 --- a/.vib/harbor-core/goss/harbor-core.yaml +++ b/.vib/harbor-core/goss/harbor-core.yaml @@ -35,5 +35,5 @@ file: command: # Ensure permissions for Internal TLS check-permissions-system-certs: - exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w.*harbor" + exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w" exit-status: 0 diff --git a/.vib/harbor-exporter/goss/harbor-exporter.yaml b/.vib/harbor-exporter/goss/harbor-exporter.yaml index 475188c7ab50..d2730b3daf60 100644 --- a/.vib/harbor-exporter/goss/harbor-exporter.yaml +++ b/.vib/harbor-exporter/goss/harbor-exporter.yaml @@ -22,5 +22,5 @@ command: exit-status: 0 # Ensure permissions for Internal TLS check-permissions-system-certs: - exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w.*harbor" + exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w" exit-status: 0 diff --git a/.vib/harbor-jobservice/goss/harbor-jobservice.yaml b/.vib/harbor-jobservice/goss/harbor-jobservice.yaml index 95e0c5a61e6f..ef44fda8763e 100644 --- a/.vib/harbor-jobservice/goss/harbor-jobservice.yaml +++ b/.vib/harbor-jobservice/goss/harbor-jobservice.yaml @@ -22,5 +22,5 @@ command: exit-status: 0 # Ensure permissions for Internal TLS check-permissions-system-certs: - exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w.*harbor" + exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w" exit-status: 0 diff --git a/.vib/harbor-notary-server/goss/harbor-notary-server.yaml b/.vib/harbor-notary-server/goss/harbor-notary-server.yaml index 8b9b3547c7f7..43005c443c1e 100644 --- a/.vib/harbor-notary-server/goss/harbor-notary-server.yaml +++ b/.vib/harbor-notary-server/goss/harbor-notary-server.yaml @@ -16,7 +16,7 @@ file: command: # Ensure permissions for Internal TLS check-permissions-system-certs: - exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w.*harbor" + exec: ls -l /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep "^.\{5\}w" exit-status: 0 check-notary-server-binary: exec: notary-server -h