Configurable lua libs for resource actions about argo-cd HOT 3 OPEN

Hey @P0t4T0o, seems like this is already possible. I wrote https://github.com/argoproj/argo-cd/blob/master/resource_customizations/external-secrets.io/ExternalSecret/actions/refresh/action.lua a while back and it uses the os package to add an annotation with the date, which triggers a watch event on the controller.

from argo-cd.

Hi @agaudreault, that is right, os works because it is imported here. However string or math libs are not, so manipulation with strings is currently challenging. I have a working draft of necessary changes to enable this. If it is fine and everything aligns with the project's plan, I can open a PR

from argo-cd.

From #2300

Retrieving the timestamp in lua was problematic, because os.date() resides in the os lua library. The entire Lua 'os' library is a security risk because the os library can also do things like call os.exit() and read local files.
So in order to support restarts, we had to expose a subset of the lua os library to the Lua VM. The subset of functionality was copied from the go-lua implementation.

Maybe @argoproj/argo-security and @jessesuen should be involved in whether we add additional package or not.

@P0t4T0o what functions do you need? Can you share the Lua script you want to run? And have you tried to use useOpenLibs as documented in https://argo-cd.readthedocs.io/en/stable/operator-manual/health/

from argo-cd.