-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Change migration volume exception messages #12367
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
|
@blueorangutan package |
|
@sureshanaparti a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress. |
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #12367 +/- ##
============================================
- Coverage 17.76% 17.76% -0.01%
Complexity 15861 15861
============================================
Files 5923 5923
Lines 530470 530538 +68
Branches 64823 64826 +3
============================================
- Hits 94253 94252 -1
- Misses 425673 425742 +69
Partials 10544 10544
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR enhances security by sanitizing error messages in volume migration operations to prevent infrastructure information disclosure to end users. The changes replace detailed exception messages containing storage pool and volume object details with generic, user-friendly messages while preserving detailed information in server logs for debugging.
Key Changes:
- Replaced infrastructure-exposing exception messages with generic user-facing error messages
- Added detailed error logging for administrators to diagnose issues
- Improved error message consistency for volume resize failures
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
server/src/main/java/com/cloud/storage/VolumeApiServiceImpl.java
Outdated
Show resolved
Hide resolved
|
Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 16260 |
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
@blueorangutan package |
|
@DaanHoogland a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress. |
|
Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✖️ debian ✔️ suse15. SL-JID 16293 |
Description
Currently, when performing volume migration operations, an exception message exposing infrastructure information may be shown. Changes have been made to this message in order to hide infrastructure information from end users.
Types of changes
Feature/Enhancement Scale or Bug Severity
Feature/Enhancement Scale
Screenshots (if appropriate):
Exception displayed for users before the changes
Exception displayed for users after the changes
Log messages
How Has This Been Tested?
To perform the tests, I created a VM with a 5 GiB Disk Offering. After stopping the VM, I performed the
changeDiskOfferingForVolumeInternaloperation for a 100 GiB Disk Offering, which resulted in the error with the correct message. Other tests were also performed using the IntelliJ IDE debug functionality to force the expected exceptions when performing thechangeDiskOfferingForVolumeInternaloperation.