Closed YutongLi291 closed 5 days ago
Queue credentials on the worker should only be able to be able to be accessed by the queue user.
We should verify this to prevent security concerns and regressions in the future.
Add a test that verifies this behaviour that other users on the worker instance cannot access the queue credentials.
Also verify that a different queue also cannot access another queue's credentials.
Better verification that other users cannot access queue credentials.
# Linux source .e2e_linux_infra.sh hatch run e2e-test # Windows source .e2e_windows_infra.sh hatch run e2e-test
Multiple times to verify not flaky.
No
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.
Failed conditions 31.0% Duplication on New Code (required ≤ 3%)
See analysis details on SonarQube Cloud
What was the problem/requirement? (What/Why)
Queue credentials on the worker should only be able to be able to be accessed by the queue user.
We should verify this to prevent security concerns and regressions in the future.
What was the solution? (How)
Add a test that verifies this behaviour that other users on the worker instance cannot access the queue credentials.
Also verify that a different queue also cannot access another queue's credentials.
What is the impact of this change?
Better verification that other users cannot access queue credentials.
How was this change tested?
Multiple times to verify not flaky.
Was this change documented?
No
Is this a breaking change?
No
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.