Bump SonarQube to new version with mTLS integration
Package Merge Request
Package Changes
Added default peerauthentication for sonarqube in strict mTLS
Package MR
https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube/-/merge_requests/71
https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube/-/merge_requests/79
For Issue
Closes https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/1048
Merge request reports
Activity
added sonarqube statusreview labels
requested review from @micah.nagel
assigned to @anthonywendt
mentioned in issue #1048 (closed)
changed milestone to %1.31.0
enabled an automatic merge when the pipeline for 1564670d succeeds
- Resolved by Micah Nagel
Looks like we missed this in the package MR - the change password hook does not have a sidecar so it gets denied by the STRICT mTLS rule. I think we should probably enable the sidecar on that job (removing that linked annotation) and then add the sidecar termination to the end of the job commands:
{{- if and .Values.istio.enabled (eq .Values.istio.injection "enabled") }} until curl -fsI http://localhost:15021/healthz/ready; do echo "Waiting for Istio sidecar proxy..." sleep 3 done sleep 5 echo "Stopping the istio proxy..." curl -X POST http://localhost:15020/quitquitquit {{- end }}
The other option would be to add an exception for the job, but I think enabling the sidecar is better?
Edited by Micah Nagel
removed statusreview label
- Resolved by Micah Nagel
added 13 commits
-
40d3c2b6...358df92b - 12 commits from branch
master
- f5608f96 - Merge branch 'master' into bb-1048-sonarqube-version-bump
-
40d3c2b6...358df92b - 12 commits from branch
- Resolved by Ryan Garcia