Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

case sensitivity on user emails #93

Merged
merged 14 commits into from
Sep 20, 2022
Merged

Conversation

mathis-marcotte
Copy link

@mathis-marcotte mathis-marcotte commented Aug 23, 2022

might close StatCan/aaw#127 (must test ofc)

@mathis-marcotte mathis-marcotte requested a review from a team August 24, 2022 13:49
@Jose-Matsuda
Copy link

Jose-Matsuda commented Aug 24, 2022

Ok I've done a fair bit of focused digging, please let me know if I am making any sense I can post a follow-up comment if not.

Few steps to find out where I am in knowledge

  1. At the argocd layer we deploy kubeflow here using an applicationset
  2. So we go to the referenced repoUrl
  3. Search for anything kfam related and end up in this issue and it turns out that it is instead in some profilescomponent
  4. So we look in our kustomization which references upstream.
  5. And lo and behold it exists here

Next Steps in order to test the image.

So it appears that we did switch to using the upstream image. So we will need to

  • build this access-management image in our branch
  • Turn off autosync in argocd dev at the kubeflow application level in order to make an edit to the profiles-deployment Deployment to make a change to the image
    image
  • Refresh and try things out, see if it performs as expected
  • Iff it does, we can make the change permanent by changing up the kustomize that deploys this, and bring it to Prod too (by making the change in the prod branch as well).

Other relevant information

Our fork of kubeflow is at version 1.3, so when we upgrade we will need to evaluate and check that everything works as intended.
We may want to hold off on deploying this fix to prod if that is the case.

@Jose-Matsuda Jose-Matsuda force-pushed the case-sensitivity-emails branch from 4abff20 to 09f1e75 Compare August 24, 2022 18:39
@Jose-Matsuda
Copy link

There's a double build-push because I kept this case-sensitivity-emails in the branchname, will remove it and just keep it as the build on pr / push to stc-master.

But this issue of the docker build failing is a tad more concerning, will need to investigate

@Jose-Matsuda
Copy link

Jose-Matsuda commented Aug 24, 2022

I can make it past the first failure by upgrading the golang version to be 1.17 like they do upstream but now have a new one at

image

oh might need to update go.mod

@mathis-marcotte
Copy link
Author

The solution taken was to forcefully lowercase the emails on profile and rolebinding creation. Investigation was done to try to remove case sensitivity, but that assumption is really built into kubernetes.

A case that wasn't tested is situations where a user actually has capital letters in their email, since I personally didn't have an email like that to use.

Copy link

@Jose-Matsuda Jose-Matsuda left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, as stated unsure about "how profiles already created with capital letters in it will act. If they don't actually work as expected, it might be either return to the drawing board or probably a better option would just be to fix it case by case in the profile objects already saved".

We might need to make a script to lowercase all the existing Profile and User crds to make sure they are compatible with this cross-cutting change.

@chuckbelisle chuckbelisle merged commit f02e4d1 into stc-master Sep 20, 2022
@mathis-marcotte mathis-marcotte deleted the case-sensitivity-emails branch November 30, 2022 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Case sensitivity in emails causes issues
3 participants