mirrors/pikasTech-unidesk
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cicd read large follower state safely

Browse Source
This commit is contained in:
Codex
2026-07-03 11:57:34 +00:00
parent 8162f2f999
commit 67008b9f89
1 changed files with 12 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/src/cicd.ts
+12 -4
View File
@@ -3,6 +3,7 @@
import { createHash } from "node:crypto"; import { createHash } from "node:crypto";
import { readFileSync } from "node:fs"; import { readFileSync } from "node:fs";
import { isAbsolute } from "node:path"; import { isAbsolute } from "node:path";
import { gunzipSync } from "node:zlib";
import { repoRoot, rootPath, type UniDeskConfig } from "./config"; import { repoRoot, rootPath, type UniDeskConfig } from "./config";
import { runCommand, type CommandResult } from "./command"; import { runCommand, type CommandResult } from "./command";
import { startJob } from "./jobs"; import { startJob } from "./jobs";
@@ -1881,7 +1882,7 @@ function kubeConfigMapFollowerState(registry: BranchFollowerRegistry, options: P
function kubeConfigMapDataValue(registry: BranchFollowerRegistry, options: ParsedOptions, key: string): { ok: boolean; present: boolean; value: string | null; omitted: boolean; error: string } { function kubeConfigMapDataValue(registry: BranchFollowerRegistry, options: ParsedOptions, key: string): { ok: boolean; present: boolean; value: string | null; omitted: boolean; error: string } {
const template = `{{ with index .data ${JSON.stringify(key)} }}{{ . }}{{ end }}`; const template = `{{ with index .data ${JSON.stringify(key)} }}{{ . }}{{ end }}`;
const maxValueBytes = 6144; const maxValueBytes = 32_768;
const script = [ const script = [
"set -eu", "set -eu",
"tmpdir=$(mktemp -d)", "tmpdir=$(mktemp -d)",
@@ -1905,8 +1906,13 @@ function kubeConfigMapDataValue(registry: BranchFollowerRegistry, options: Parse
" printf '{\"ok\":true,\"present\":true,\"valueB64\":null,\"omitted\":true,\"valueBytes\":%s,\"errorB64\":\"\"}' \"$value_bytes\"", " printf '{\"ok\":true,\"present\":true,\"valueB64\":null,\"omitted\":true,\"valueBytes\":%s,\"errorB64\":\"\"}' \"$value_bytes\"",
" exit 0", " exit 0",
"fi", "fi",
"value_b64=$(printf '%s' \"$value\" | base64 | tr -d '\\n')", "if command -v gzip >/dev/null 2>&1; then",
"printf '{\"ok\":true,\"present\":true,\"valueB64\":\"%s\",\"omitted\":false,\"valueBytes\":%s,\"errorB64\":\"\"}' \"$value_b64\" \"$value_bytes\"", " value_b64=$(printf '%s' \"$value\" | gzip -c | base64 | tr -d '\\n')",
" printf '{\"ok\":true,\"present\":true,\"valueB64\":\"%s\",\"encoding\":\"gzip-base64\",\"omitted\":false,\"valueBytes\":%s,\"errorB64\":\"\"}' \"$value_b64\" \"$value_bytes\"",
"else",
" value_b64=$(printf '%s' \"$value\" | base64 | tr -d '\\n')",
" printf '{\"ok\":true,\"present\":true,\"valueB64\":\"%s\",\"encoding\":\"base64\",\"omitted\":false,\"valueBytes\":%s,\"errorB64\":\"\"}' \"$value_b64\" \"$value_bytes\"",
"fi",
].join("\n"); ].join("\n");
const result = runKubeScript(registry, options, script, "", 10_000); const result = runKubeScript(registry, options, script, "", 10_000);
const parsed = result.exitCode === 0 ? parseJsonObject(result.stdout) : null; const parsed = result.exitCode === 0 ? parseJsonObject(result.stdout) : null;
@@ -1925,10 +1931,12 @@ function kubeConfigMapDataValue(registry: BranchFollowerRegistry, options: Parse
const present = parsed.present === true; const present = parsed.present === true;
const omitted = parsed.omitted === true; const omitted = parsed.omitted === true;
const valueB64 = typeof parsed.valueB64 === "string" ? parsed.valueB64 : null; const valueB64 = typeof parsed.valueB64 === "string" ? parsed.valueB64 : null;
const encoding = stringOrNull(parsed.encoding) ?? "base64";
const valueBuffer = valueB64 === null ? null : Buffer.from(valueB64, "base64");
return { return {
ok, ok,
present, present,
value: valueB64 === null ? null : Buffer.from(valueB64, "base64").toString("utf8"), value: valueBuffer === null ? null : encoding === "gzip-base64" ? gunzipSync(valueBuffer).toString("utf8") : valueBuffer.toString("utf8"),
omitted, omitted,
error: redactText(error), error: redactText(error),
}; };