Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gitserver: Sunset Exec endpoint #62774

Merged
merged 1 commit into from
Jun 6, 2024
Merged

Conversation

eseliger
Copy link
Member

@eseliger eseliger commented May 17, 2024

After we finally migrated all calls to Exec by proper API offerings, we're finally not using this API anymore.
The previous PR deprecated this endpoint, and this one will fully remove it. We can merge it early June when after the next release was cut.

As a result of this, gitserver no longer exposes a blanket exec endpoint that could pose several risks from running dangerous commands to just running commands that could cause resource exhaustion.

Closes #62099

Test plan:

This endpoint is unused, CI did not find any issues from removing it.

@github-actions github-actions bot added team/product-platform team/source Tickets under the purview of Source - the one Source to graph it all labels May 17, 2024
@eseliger eseliger marked this pull request as ready for review May 17, 2024 21:59
@eseliger eseliger requested a review from a team May 17, 2024 21:59
@eseliger eseliger force-pushed the es/05-17-gitserverdeprecateexecandremovelocalgit branch from 7f51c08 to 858cb3d Compare May 21, 2024 15:15
@eseliger eseliger force-pushed the es/05-17-gitserversunsetexecendpoint branch from 45db510 to 3e86bd6 Compare May 21, 2024 15:15
@eseliger eseliger force-pushed the es/05-17-gitserverdeprecateexecandremovelocalgit branch from 858cb3d to 44b9087 Compare May 21, 2024 16:06
Base automatically changed from es/05-17-gitserverdeprecateexecandremovelocalgit to main May 21, 2024 16:19
@eseliger eseliger force-pushed the es/05-17-gitserversunsetexecendpoint branch from 3e86bd6 to d0fbdc8 Compare May 21, 2024 17:36
After we finally migrated all calls to Exec by proper API offerings, we're finally not using this API anymore.
The previous PR deprecated this endpoint, and this one will fully remove it. We can merge it early June when after the next release was cut.

As a result of this, gitserver no longer exposes a blanket exec endpoint that could pose several risks from running dangerous commands to just running commands that could cause resource exhaustion.

Test plan:

This endpoint is unused, CI did not find any issues from removing it.
@eseliger eseliger force-pushed the es/05-17-gitserversunsetexecendpoint branch from d0fbdc8 to 1708397 Compare June 6, 2024 12:24
@eseliger eseliger merged commit 9183f52 into main Jun 6, 2024
15 checks passed
@eseliger eseliger deleted the es/05-17-gitserversunsetexecendpoint branch June 6, 2024 12:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla-signed team/product-platform team/source Tickets under the purview of Source - the one Source to graph it all
Projects
None yet
Development

Successfully merging this pull request may close these issues.

gitserver: Sunset Exec endpoint
2 participants