lywsvip/cloudpods
1
0
Fork 0
mirror of https://github.com/yunionio/cloudpods.git synced 2026-05-06 21:52:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(keystone): allow blob update for image credentials (#24565)

Browse Source 
Also fix type check to allow secret/image only.
This commit is contained in:
Zexi Li
2026-03-26 11:41:19 +08:00
committed by GitHub
parent e2f4b7b6ce
commit 3fd0c13e1a
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
pkg/keystone/models/credentials.go
View File

@@ -25,6 +25,7 @@ import (
"yunion.io/x/pkg/gotypes"
"yunion.io/x/pkg/tristate"
"yunion.io/x/pkg/util/rbacscope"
"yunion.io/x/pkg/util/sets"
"yunion.io/x/sqlchemy"
api "yunion.io/x/onecloud/pkg/apis/identity"
@@ -175,8 +176,8 @@ func (cred *SCredential) ValidateUpdateData(ctx context.Context, userCred mcclie
}
if len(input.Blob) > 0 {
if cred.Type != api.CONTAINER_SECRET_TYPE {
return input, httperrors.NewNotSupportedError("blob update only supported for credential type %s", api.CONTAINER_SECRET_TYPE)
if !sets.NewString(api.CONTAINER_SECRET_TYPE, api.CONTAINER_IMAGE_TYPE).Has(cred.Type) {
return input, httperrors.NewNotSupportedError("blob update only supported for credential type %v", sets.NewString(api.CONTAINER_SECRET_TYPE, api.CONTAINER_IMAGE_TYPE).List())
}
blobEnc, err := keys.CredentialKeyManager.Encrypt([]byte(input.Blob))
if err != nil {