Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

set EnableHTTPSTrafficOnly in azure storage account creation #64957

Merged
merged 1 commit into from
Jun 21, 2018

Conversation

andyzhangx
Copy link
Member

@andyzhangx andyzhangx commented Jun 11, 2018

What this PR does / why we need it:
PEN test shows there is security risk if https traffic is not enabled by default
Enforce azure storage account creation with https traffic only, this PR will apply for both azure disk & azure file features.

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #64956

Special notes for your reviewer:
Tests with azure disk & azure file all pass

Release note:

Enforce azure storage account creation with https traffic only

/sig azure
/kind feature
/assign @khenidak

@k8s-ci-robot k8s-ci-robot added the release-note Denotes a PR that will be considered when it comes time to generate release notes. label Jun 11, 2018
@k8s-ci-robot k8s-ci-robot added sig/azure kind/feature Categorizes issue or PR as related to a new feature. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jun 11, 2018
@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Jun 11, 2018
@andyzhangx andyzhangx changed the title set EnableHTTPSTrafficOnly in storageAccount creation set EnableHTTPSTrafficOnly in azure storage account creation Jun 11, 2018
@andyzhangx
Copy link
Member Author

/test pull-kubernetes-e2e-gce-device-plugin-gpu

@andyzhangx
Copy link
Member Author

/assign @feiskyer

@feiskyer
Copy link
Member

/lgtm
/approve

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Jun 14, 2018
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: andyzhangx, feiskyer

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@andyzhangx
Copy link
Member Author

/test pull-kubernetes-e2e-gce

@andyzhangx
Copy link
Member Author

/test pull-kubernetes-integration

@k8s-github-robot
Copy link

Automatic merge from submit-queue (batch tested with PRs 64895, 64938, 63700, 65050, 64957). If you want to cherry-pick this change to another branch, please follow the instructions here.

@k8s-github-robot k8s-github-robot merged commit 0765e0a into kubernetes:master Jun 21, 2018
k8s-github-robot pushed a commit that referenced this pull request Jul 13, 2018
…4957-upstream-release-1.11

Automatic merge from submit-queue.

Automated cherry pick of #64957: set EnableHTTPSTrafficOnly in storageAccount creation

Cherry pick of #64957 on release-1.11.

#64957: set EnableHTTPSTrafficOnly in storageAccount creation
k8s-github-robot pushed a commit that referenced this pull request Jul 13, 2018
…4957-upstream-release-1.10

Automatic merge from submit-queue.

Automated cherry pick of #64957: set EnableHTTPSTrafficOnly in storageAccount creation

Cherry pick of #64957 on release-1.10.

#64957: set EnableHTTPSTrafficOnly in storageAccount creation
k8s-ci-robot added a commit that referenced this pull request Sep 10, 2018
…4957-upstream-release-1.9

Automated cherry pick of #64957: set EnableHTTPSTrafficOnly in storageAccount creation
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/feature Categorizes issue or PR as related to a new feature. lgtm "Looks good to me", indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Enforce azure storage account creation with https traffic only
6 participants