appease bandit

Author: ewdurbin

cabotage/celery/tasks/resources.py

@@ -55,7 +55,7 @@
 # ClusterIssuer used to sign TLS certs for backing services
 TLS_CLUSTER_ISSUER = "operators-ca-issuer"
 # Secret containing the CA cert for TLS verification
-TLS_CA_SECRET = "operators-ca-crt"
+TLS_CA_SECRET = "operators-ca-crt"  # nosec B105
 NODE_POOL_LABEL = "cabotage.dev/node-pool"
 DO_NOT_DISRUPT_ANNOTATION = "karpenter.sh/do-not-disrupt"
 HOSTNAME_TOPOLOGY_KEY = "kubernetes.io/hostname"

cabotage/server/config.py

@@ -143,8 +143,8 @@ class Config(metaclass=MetaFlaskEnv):
     TENANT_POSTGRES_BACKUP_SCHEDULE = "0 0 0 * * *"
     TENANT_POSTGRES_BACKUP_SERVICE_ACCOUNT_NAME = "cnpg-backups"
     TENANT_POSTGRES_BACKUP_RUSTFS_ENDPOINT = None
-    TENANT_POSTGRES_BACKUP_RUSTFS_CA_SECRET_NAME = "operators-ca-crt"
-    TENANT_POSTGRES_BACKUP_RUSTFS_SECRET_NAME = "cnpg-backups-objectstore"
+    TENANT_POSTGRES_BACKUP_RUSTFS_CA_SECRET_NAME = "operators-ca-crt"  # nosec B105
+    TENANT_POSTGRES_BACKUP_RUSTFS_SECRET_NAME = "cnpg-backups-objectstore"  # nosec B105
     TENANT_POSTGRES_BACKUP_RUSTFS_SOURCE_SECRET_NAME = None
     TENANT_POSTGRES_BACKUP_RUSTFS_SOURCE_SECRET_NAMESPACE = None
     GITHUB_APP_ID = None