Skip to content

Fix token leak to other cluster during forced node add #1142

Merged
tomjelinek merged 7 commits into
mainfrom
handle-token-leaks
Jun 17, 2026
Merged

Fix token leak to other cluster during forced node add #1142
tomjelinek merged 7 commits into
mainfrom
handle-token-leaks

Conversation

@ApetorSkol

@ApetorSkol ApetorSkol commented Jun 16, 2026

Copy link
Copy Markdown
Collaborator

When using pcs cluster node add ... --force on a node that is already in cluster, it leaks the auth tokens to other nodes in cluster. To not share this info, cluster is destroyed before joining new cluster.

I figured it doesnt make sense to have some tests in fluent and
other tests in non fluent interface within one test class.
So I converted whole classes to fluent interface.
@ApetorSkol ApetorSkol requested a review from tomjelinek as a code owner June 16, 2026 15:41
@ApetorSkol ApetorSkol self-assigned this Jun 16, 2026
@ApetorSkol ApetorSkol temporarily deployed to testing-farm-apikey June 16, 2026 15:42 — with GitHub Actions Inactive
@ApetorSkol ApetorSkol deployed to testing-farm-apikey June 16, 2026 15:42 — with GitHub Actions Active
@github-actions

Copy link
Copy Markdown

Testing Farm results

namecomposearchstatusstarted (UTC)timelogs
CentOS-Stream-10CentOS-Stream-10x86_64✅ passed16.06.2026 15:42:439min 9stest pipeline

@tomjelinek tomjelinek merged commit 34cfbfc into main Jun 17, 2026
5 checks passed
@tomjelinek tomjelinek deleted the handle-token-leaks branch June 17, 2026 07:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants