Update db test secrets (opendatahub-io#86)

This commit will allow the test credentials for the postgress and mysql databases to pass prodsec scanning Signed-off-by: tonyxrmdavidson <[email protected]>
tonyxrmdavidson · Jul 1, 2024 · ef568eb · ef568eb
1 parent fb0f58e
commit ef568eb
Show file tree

Hide file tree

Showing 5 changed files with 20 additions and 8 deletions.
diff --git a/.gitleaks.toml b/.gitleaks.toml
@@ -0,0 +1,12 @@
+[allowlist]
+  description = "Global Allowlist"
+
+  # Ignore based on any subset of the line
+  regexes = [
+
+    # Ignore specific database password
+    '''database-password\s*:\s*"The BlurstOfTimes"''',
+
+    # Ignore specific database user
+    '''database-user\s*:\s*"mlmduser"'''
+  ]
diff --git a/openshift-ci/resources/model-registry-operator/mysql-db.yaml b/openshift-ci/resources/model-registry-operator/mysql-db.yaml
@@ -120,7 +120,7 @@ items:
     name: model-registry-db
   stringData:
     database-name: "model_registry"
-    database-password: "TheBlurstOfTimes"
-    database-user: "mlmduser"
+    database-password: "TheBlurstOfTimes" # notsecret
+    database-user: "mlmduser" # notsecret
 kind: List
 metadata: {}
diff --git a/openshift-ci/resources/samples/mysql/mysql-db.yaml b/openshift-ci/resources/samples/mysql/mysql-db.yaml
@@ -120,7 +120,7 @@ items:
     name: model-registry-db
   stringData:
     database-name: "model_registry"
-    database-password: "TheBlurstOfTimes"
-    database-user: "mlmduser"
+    database-password: "TheBlurstOfTimes" # notsecret
+    database-user: "mlmduser" # notsecret
 kind: List
 metadata: {}
diff --git a/openshift-ci/resources/samples/postgres/postgres-db.yaml b/openshift-ci/resources/samples/postgres/postgres-db.yaml
@@ -112,7 +112,7 @@ items:
     name: model-registry-db
   stringData:
     database-name: "model-registry"
-    database-password: "TheBlurstOfTimes"
-    database-user: "mlmduser"
+    database-password: "TheBlurstOfTimes" # notsecret
+    database-user: "mlmduser" # notsecret
 kind: List
 metadata: {}
diff --git a/openshift-ci/resources/samples/samples/postgres/postgres-db.yaml b/openshift-ci/resources/samples/samples/postgres/postgres-db.yaml
@@ -112,7 +112,7 @@ items:
     name: model-registry-db
   stringData:
     database-name: "model-registry"
-    database-password: "TheBlurstOfTimes"
-    database-user: "mlmduser"
+    database-password: "TheBlurstOfTimes" # notsecret
+    database-user: "mlmduser" # notsecret
 kind: List
 metadata: {}