Repository navigation
Conversation
Cloud shell is an unused, dev-only terminal webapp that is not used in upstream che-machine-exec and is responsible for several security issues. This removes the cloud-shell application and all references to it: - delete the cloud-shell/ directory - drop the cloud_shell_builder stage and --static entrypoint arg from the Dockerfile - remove the --static / StaticPath flag and static-resource serving, which cloud-shell was the only consumer of (main.go, cfg/cfg.go) - remove the cloud-shell endpoint, the node component, and the build-cloud-shell / start-cloud-shell commands from the devfile - drop the /cloud-shell npm entry from dependabot - drop the --static launch arg and cloud-shell/node_modules dockerignore CRW-13290 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info
📝 Walkthrough
Merge Risk: ⚪ Minimal · up to The Cloud Shell UI is removed, while the machine-execution API remains available. No actionable merge-blocking risk is established by the supplied evidence. Architecture SummaryArchitecture risk: 🔵 Low · up to The change affects 4 systems. Changed systems: Architecture concerns Review details
Pre-merge checks |
|
|
This PR contains changes to files in directories that are typically not intended to be committed:
Please verify these changes are intentional. |
What does this PR do?
Removes the
cloud-shellapplication from che-machine-exec. Cloud shell is an unused, dev-only terminal webapp that is not used in upstream che-machine-exec and is responsible for several security issues.Changes:
cloud-shell/directorycloud_shell_builderstage and the--staticentrypoint arg from the Dockerfile--static/StaticPathflag and static-resource serving — cloud-shell was its only consumer (main.go,cfg/cfg.go)cloud-shellendpoint, thenodecomponent, and thebuild-cloud-shell/start-cloud-shellcommands from the devfile/cloud-shellnpm entry from dependabot--staticlaunch arg and thecloud-shell/node_modulesdockerignore entryThe
Cloud Shellreferences inexec/kubernetes_exec_manager.goare intentionally kept — they are comments describing a container-selection workaround (eclipse-che/che#15434), unrelated to the removed webapp.What issues does this PR fix or reference?
https://issues.redhat.com/browse/CRW-13290
How to test this PR?
go build ./...passesgo test ./...passes🤖 Generated with Claude Code
Summary by CodeRabbit