@@ -71,42 +71,42 @@ pub async fn provision_keytab(krb5_config_path: &Path, req: &Request) -> Result<
7171 let req_str = serde_json:: to_vec ( & req) . context ( SerializeRequestSnafu ) ?;
7272
7373 let mut child = Command :: new ( "stackable-krb5-provision-keytab" )
74- // make sure the process is killed if we error out of this fn somewhere due to
74+ // make sure the process is killed if we error out of this fn somewhere due to
7575 // an error when writing to stdin or getting stdout
7676 . kill_on_drop ( true )
7777 . env ( "KRB5_CONFIG" , krb5_config_path)
7878 // ldap3 uses the default client keytab to authenticate to the LDAP server
7979 . env ( "KRB5_CLIENT_KTNAME" , & req. admin_keytab_path )
80- // avoid leaking credentials between secret volumes/secretclasses by only storing the
81- // TGT that is obtained for the operation in the memory of the short lives process
80+ // avoid leaking credentials between secret volumes/secretclasses by only storing the
81+ // TGT that is obtained for the operation in the memory of the short lives process
8282 // spawned by `Command::new` above - this way it'll be wiped from memory once this exits
83- // With any shared or persistent ticket cache this might stick around and potentially be
83+ // With any shared or persistent ticket cache this might stick around and potentially be
8484 // reused by later runs
8585 . env ( "KRB5CCNAME" , "MEMORY:" )
8686 . stdin ( Stdio :: piped ( ) )
8787 . stdout ( Stdio :: piped ( ) )
8888 . spawn ( )
8989 . context ( SpawnProvisionerSnafu ) ?;
90-
90+
9191 // Get a `ChildStdin` object for the spawned process and write the serialized request
92- // for a Principal into it in order for the child process to deserialize it and
92+ // for a Principal into it in order for the child process to deserialize it and
9393 // process the request
9494 let mut stdin = child. stdin . take ( ) . unwrap ( ) ;
9595 stdin. write_all ( & req_str) . await . context ( WriteRequestSnafu ) ?;
9696 stdin. flush ( ) . await . context ( WriteRequestSnafu ) ?;
9797 drop ( stdin) ;
98-
98+
9999 // Wait for the process to finish and capture output
100100 // This will always return Ok(...) regardless of exit code or output of the child process
101- // Failure here means that something went wrong with connecting to the process or obtaining
101+ // Failure here means that something went wrong with connecting to the process or obtaining
102102 // exit code or output
103103 let output = child
104104 . wait_with_output ( )
105105 . await
106106 . context ( WaitProvisionerSnafu ) ?;
107107
108108 // Check for success of the operation by deserializing stdout of the process to a `Response`
109- // struct - since `Response` is an empty struct with no fields this effectively means that
109+ // struct - since `Response` is an empty struct with no fields this effectively means that
110110 // any output will fail to deserialize and cause an `Error::RunProvisioner` to be propagated
111111 // with the output of the child process
112112 serde_json:: from_slice :: < Result < Response , String > > ( & output. stdout )
0 commit comments