Skip to content

add secret to runner overridable parameters list #5744

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

jonathangull
Copy link

Add secret to the list of overridable parameters to avoid the error - attribute “secret” for the runner parameter “cmd” in action “core.local” cannot be overridden.

Why is this required -

We want to create action core.winrm_ps_cmd_secure which is same as core.winrm_ps_cmd where the input parameter cmd is hidden. We have a use case where we need to supply credentials inside the cmd section so it's not visible in stack storm UI after execution.

Add secret to the list of overridable parameters to avoid the error -  attribute “secret” for the runner parameter “cmd” in action “core.local” cannot be overridden.

Why is this required -

We want to create action core.winrm_ps_cmd_secure which is same as core.winrm_ps_cmd where the input parameter cmd is hidden. We have a use case where we need to supply credentials inside the cmd section so it's not visible in stack storm UI after execution.
@pull-request-size pull-request-size bot added the size/XS PR that changes 0-9 lines. Quick fix/merge. label Sep 23, 2022
@CLAassistant
Copy link

CLAassistant commented Sep 23, 2022

CLA assistant check
All committers have signed the CLA.

@StackStorm StackStorm deleted a comment from CLAassistant Sep 23, 2022
@cognifloyd
Copy link
Member

I think this makes sense, but I would like to see something a little more intelligent for the secret attr.
For example, if a runner sets password to secret: true, then the action shouldn't be able to set secret: false. But, adding secret: true to additional parameters seems like a completely valid thing to do.

Would you look at how we can prevent people from setting secret: false in an action when the runner schema specifies secret: true?

@jonathangull
Copy link
Author

@cognifloyd sorry I do not know how to do this, can you elaborate or give me some guidance on how to do it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
runners size/XS PR that changes 0-9 lines. Quick fix/merge.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants