engineering/sshpiper
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: skel.go - Add check for no CA public key before retrieving public key certs (#579)

Browse source
This commit is contained in:
Boshi Lian 2025-05-07 00:26:38 -07:00 • committed by GitHub
parent 52e8f9afc4
commit c93e3c2f4a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

14
plugin/kubernetes/skel.go
View file

@ -199,12 +199,14 @@ func (s *skelpipeToPrivateKeyWrapper) PrivateKey(conn libplugin.ConnMetadata) ([
}
}
for _, k := range []string{anno["publickey_field_name"], "ssh-publickey-cert", "publickey-cert", "ssh-publickey", "publickey"} {
data := secret.Data[k]
if data != nil {
log.Debugf("found publickey key cert in secret %v/%v", s.to.PrivateKeySecret.Name, k)
publicKey = data
break
if anno["no_ca_publickey"] != "true" {
for _, k := range []string{anno["publickey_field_name"], "ssh-publickey-cert", "publickey-cert", "ssh-publickey", "publickey"} {
data := secret.Data[k]
if data != nil {
log.Debugf("found publickey key cert in secret %v/%v", s.to.PrivateKeySecret.Name, k)
publicKey = data
break
}
}
}