remove gosec exampt

.github/workflows/dependency-review.yaml

@@ -20,7 +20,7 @@ jobs:
         with:
           go-version: '1.21.6'
       - run: go install github.com/securego/gosec/v2/cmd/gosec@latest
-      - run: gosec -exclude=G101,G103,G204 ./...
+      - run: gosec -exclude-generated ./...
         working-directory: nodeadm
   govulncheck:
     runs-on: ubuntu-latest

nodeadm/internal/kubelet/config.go

@@ -6,9 +6,9 @@ import (
 	"encoding/json"
 	"fmt"
 	"io"
+	"net"
 	"net/url"
 	"os"
-	"os/exec"
 	"path"
 	"strings"
 	"time"
@@ -171,7 +171,17 @@ func (ksc *kubeletConfig) withOutpostSetup(cfg *api.NodeConfig) error {
 		}
 
 		// TODO: cleanup
-		output, err := exec.Command("getent", "hosts", apiUrl.Host).Output()
+		ipAddresses, err := net.LookupHost(apiUrl.Host)
+		if err != nil {
+			return err
+		}
+		var ipHostMappings []string
+		for _, ip := range ipAddresses {
+			ipHostMappings = append(ipHostMappings, fmt.Sprintf("%s\t%s", ip, apiUrl.Host))
+		}
+		output := strings.Join(ipHostMappings, "\n") + "\n"
+		zap.L().Info(fmt.Sprintf("Log returned ipAddress: %v", output))
+
 		if err != nil {
 			return err
 		}
@@ -182,7 +192,7 @@ func (ksc *kubeletConfig) withOutpostSetup(cfg *api.NodeConfig) error {
 			return err
 		}
 		defer f.Close()
-		if _, err := f.Write(output); err != nil {
+		if _, err := f.WriteString(output); err != nil {
 			return err
 		}
 	}

nodeadm/internal/kubelet/image-credential-provider.go

@@ -1,3 +1,5 @@
+// #nosec G101
+
 package kubelet
 
 import (

nodeadm/test/e2e/cases/kubeconfig-outpost/config.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: node.eks.aws/v1alpha1
+kind: NodeConfig
+spec:
+  cluster:
+    id: my-cluster-id
+    name: my-cluster
+    apiServerEndpoint: http://localhost
+    certificateAuthority: Y2VydGlmaWNhdGVBdXRob3JpdHk=
+    cidr: 10.100.0.0/16
+    enableOutpost: true

nodeadm/test/e2e/cases/kubeconfig-outpost/run.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+source /helpers.sh
+
+mock::imds
+wait::dbus-ready
+
+mock::kubelet 1.28.0
+nodeadm init --skip run --config-source file://config.yaml
+assert::file-contains /etc/hosts $'127.0.0.1\tlocalhost'
+assert::file-contains /etc/hosts $'::1\tlocalhost'