Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DATAGO-79385: update opentofu and solace provider #203

Merged
merged 6 commits into from
Sep 18, 2024

Conversation

moodiRealist
Copy link
Collaborator

@moodiRealist moodiRealist commented Sep 16, 2024

What is the purpose of this change?

To address MEND vulnerability reports

How was this change implemented?

Replaced openTofu and solace's terraform provider with newer versions.

How was this change tested?

From the latest changes of this PR, test configPush and Scans on macbook, windows, and cloudManaged:
Screenshot 2024-09-17 at 3 33 21 PM

Screenshot 2024-09-17 152410

Screenshot 2024-09-17 at 2 48 31 PM

Is there anything the reviewers should focus on/be aware of?

Nope.

Comment on lines +32 to +33
ADD terraform-provider-solacebroker_${SOLACE_PROVIDER_VERSION}_${PLATFORM}.zip /opt/ema/terraform

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why zip file?
you could use .tar and just use add (I think add also works with zip)

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Because this version 1.0.1 only had the zip format available.

As for the command I followed the steps from this confluence page. Please let me know if that's wrong instruction!

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The ADD command already extracts content no?
the point I am trying to make is most likely, you do not need the unzip command https://docs.docker.com/build/building/best-practices/#add-or-copy

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I tested removing the unzip command:
Screenshot 2024-09-17 at 11 43 16 AM

The result was that I will be missing the terraform-provider if I do that:
Screenshot 2024-09-17 at 11 18 17 AM
Screenshot 2024-09-17 at 11 42 17 AM

Copy link
Contributor

@rudraneel-chakraborty rudraneel-chakraborty left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added a comment

Copy link

SonarQube Quality Gate

Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@moodiRealist moodiRealist merged commit 3bfd50d into main Sep 18, 2024
6 checks passed
@moodiRealist moodiRealist deleted the moodiRealist/DATAGO-79385-update-opentofu branch September 18, 2024 14:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants