Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -280,8 +280,7 @@ spec:
# Subscribed resource type
kind: ArtifactPromotionRun
apiVersion: artifacts.katanomi.dev/v1alpha1
namespace: "devops" # Subscribe to this namespace

namespace: "devops" # Namespace for the ArtifactPromotionRun CR; it should be the same as the project name.
events:
# 1. Approval pending event: for approvers
- type: "dev.katanomi.cloudevents.kubeevent.artifactpromotionrun.approvalpending.v1alpha1"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -35,11 +35,13 @@ The following components are required for installation:
Download the installation package from AlaudaCloud to your working directory:

```bash
export DOWNLOAD_URL=https://xxx.xx/kubeveent-enricher.tar.gz
export DOWNLOAD_URL=https://cloud.alauda.cn/attachments/knowledge/KB260100010/kubeevent-enricher.tar.gz
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

# Read the file to understand the full context
cat -n "docs/en/solutions/ArtifactPromotionRun_Approval_Notification_with_CorpWeChat_Install_kubeevent-enricher.md"

Repository: alauda/knowledge

Length of output: 6225


🏁 Script executed:

# Verify the URL is accessible
DOWNLOAD_URL="https://cloud.alauda.cn/attachments/knowledge/KB260100010/kubeevent-enricher.tar.gz"
echo "Testing URL accessibility..."
curl -I -s --connect-timeout 5 --max-time 10 "${DOWNLOAD_URL}" 2>&1 | head -n 5
echo "---"
curl -s --connect-timeout 5 --max-time 10 -w "HTTP Status: %{http_code}\n" -o /dev/null "${DOWNLOAD_URL}" 2>&1

Repository: alauda/knowledge

Length of output: 240


Fix URL accessibility in download instructions.

The DOWNLOAD_URL on line 38 returns a 401 Unauthorized error, making the installation impossible for users following these instructions. Either the URL needs to be publicly accessible or authentication requirements must be documented in the prerequisites section.

Additionally, add a checksum verification step after the tar extraction (after line 43) to ensure package integrity:

Suggested verification step
# Verify package integrity
echo "EXPECTED_CHECKSUM kubeevent-enricher.tar.gz" | sha256sum -c -
🤖 Prompt for AI Agents
In
`@docs/en/solutions/ArtifactPromotionRun_Approval_Notification_with_CorpWeChat_Install_kubeevent-enricher.md`
at line 38, Update the DOWNLOAD_URL value (the DOWNLOAD_URL environment
variable) to point to a publicly accessible tarball or, if it must remain
protected, add a clear prerequisite note describing the required authentication
and how to obtain credentials; then add a package integrity verification step
immediately after the tar extraction step (after the tar extraction line) that
verifies the downloaded file using sha256sum -c with an EXPECTED_CHECKSUM
placeholder for kubeevent-enricher.tar.gz so users can validate the checksum
before installation.


mkdir kubeevent-enricher
cd kubeevent-enricher
wget ${DOWNLOAD_URL}

# download the package to current directory

tar -xvzf ./kubeevent-enricher.tar.gz
```

Expand Down