Commit Graph

957 Commits

Author SHA1 Message Date
Ralph Bean
8238ab81df Make the scheduler more quiet in development.
It may be nice to have the scheduler be more quiet when run inside
docker.  Our DEBUG output level is very spammy.

/cc @mjia
2017-02-20 20:14:39 -05:00
Matt Jia
143effcd15 Error out if OIDC_CLIENT_SECRETS is not set in server config 2017-02-21 11:08:42 +10:00
Matt Jia
be65a0ff81 allow to explicitly disable client authentication 2017-02-21 11:08:37 +10:00
Jakub Kadlčík
defabcfc28 Add test for submitting yaml file 2017-02-20 20:54:43 +01:00
Ralph Bean
b5e31d73a1 Adjust test string. 2017-02-20 14:37:17 -05:00
Ralph Bean
61b7b6f47d Use an authorization header instead of cookie for oidc token.
Fixes #330.
2017-02-20 13:12:00 -05:00
Ralph Bean
0dec5f2d3c Remove unused import. 2017-02-20 13:07:27 -05:00
Ralph Bean
0ffb1f7e42 Test that we can clone repos with a trailing slash. 2017-02-20 12:44:49 -05:00
Ralph Bean
2e6e153660 Add a few tests for the SCM module.
In particular, test to see if we can pass a branch name with shell
characters, and get MBS to inadvertently execute malicious code.

The test shows that doing this in a straightforward way is not possible
and should guard against any future regressions.

Fixes #329.
2017-02-20 09:25:00 -05:00
Ralph Bean
0c441bbcd4 Merge #339 Have the Kerberos ticket be located at /tmp/mbs-krbcc instead of /var/tmp/krbcc 2017-02-20 13:50:13 +00:00
Ralph Bean
7c7e21dd69 Merge #341 Do not start new batch when component is built when there is already some in progress. 2017-02-20 13:44:39 +00:00
Ralph Bean
ffd3fe460d Merge #338 Add and handle OIDC scope for MBS permissions. 2017-02-20 13:42:18 +00:00
Ralph Bean
ef14008927 Split this string, at @puiterwijk's suggestion. 2017-02-20 08:41:36 -05:00
Jan Kaluza
6a0e8d0b2e Do not start new batch when component is built when there is already some in progress. 2017-02-20 13:51:10 +01:00
Jakub Kadlčík
1630c5f14f Raise user friendly exception when yaml submission is not allowed 2017-02-19 22:38:43 +01:00
Jakub Kadlčík
3e2ee93dd8 Rename conf option to YAML_SUBMIT_ALLOWED 2017-02-19 22:35:55 +01:00
Jakub Kadlčík
43b653097a Add config option for allowing of direct submitting yaml files to mbs 2017-02-19 22:35:55 +01:00
Jakub Kadlčík
43acbdbdba Implement possibility to submit yaml files (See #310) 2017-02-19 22:35:55 +01:00
Jakub Kadlčík
1591b9c5e7 Create method for loading modulemd object from yaml 2017-02-19 22:35:55 +01:00
Matt Prahl
219da6c760 Have the Kerberos ticket be located at /tmp/mbs-krbcc instead of /var/tmp/krbcc 2017-02-17 17:16:04 -05:00
Ralph Bean
54770cdc23 Check that our required OIDC scopes are present. 2017-02-17 10:55:37 -05:00
Ralph Bean
20d1abfcfc Add OIDC scope for MBS permissions.
Added here:  https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=87503b8ed96813c259eb5b31afef1fc0cbdc7027
2017-02-17 10:44:52 -05:00
Ralph Bean
916c47cf2f Remove unused OIDC scopes. 2017-02-17 10:44:47 -05:00
Ralph Bean
52ace7f671 Merge #327 test koji proxyuser feature 2017-02-17 15:09:27 +00:00
Matt Jia
e3ea21c0fd test koji proxyuser feature 2017-02-17 18:24:44 +10:00
Ralph Bean
4e58536104 Merge #319 Some handy scripts for bootstrapping a new instance. 2017-02-17 02:35:33 +00:00
Matt Prahl
a7bbfe76f3 Merge #321 Implement list_task_for_components method for CoprModuleBuilder 2017-02-17 00:51:26 +00:00
Matt Prahl
b30a6a8e05 Merge #322 Use requests instead of httplib2 in auth.py 2017-02-17 00:27:42 +00:00
Jakub Kadlčík
fdca6fa6e8 Implement list_task_for_components method for CoprModuleBuilder 2017-02-17 00:52:45 +01:00
Jakub Kadlčík
47924a2688 Use requests instead of httplib2 2017-02-16 21:52:24 +01:00
Ralph Bean
30daab024e Handle odd response from OIDC UserInfo.
By surprise, ipsilon handed me back a response with no groups one time.
Not sure why.  But logging here can hopefully help us catch it next
time.
2017-02-16 14:28:43 -05:00
Ralph Bean
8bd3b9e60e Some handy scripts for bootstrapping a new instance. 2017-02-16 14:24:20 -05:00
Ralph Bean
3a31e60f57 Merge #318 Handle changing PDCClient API. 2017-02-16 15:41:59 +00:00
Ralph Bean
bebf50f78c Haste makes waste. 2017-02-16 10:41:40 -05:00
Ralph Bean
2819b65204 Remove unused import. 2017-02-16 10:30:08 -05:00
Ralph Bean
b37ff40758 Handle still more variations in the pdcclient api. 2017-02-16 10:30:02 -05:00
Matt Prahl
1a10a4da19 Merge #315 Trying to debug jenkins failures. 2017-02-16 15:22:46 +00:00
Ralph Bean
32c743725d Remove xmd from test data for modulemd change. 2017-02-16 10:17:24 -05:00
Ralph Bean
67e3947a9b Handle changing PDCClient API.
I hit this in staging.  Some versions of the pdc-client library have a
different signature for PDCClient.  We need to specify these as keyword
arguments so we don't get spooky failures with accidental values.
2017-02-15 19:42:36 -05:00
Ralph Bean
a0b7ff4dc4 Our nonce should actually be random.
Also, the state value here is unused, so drop it.
2017-02-15 19:41:15 -05:00
Ralph Bean
6eaf8d7863 Demote this log statement. Way too noisy in production. 2017-02-15 15:43:38 -05:00
Ralph Bean
c862cc3def Trying to debug jenkins failures.
Tests pass locally, but fail in jenkins for some reason.

Trying to add more debug info here to figure out why....
2017-02-15 14:47:04 -05:00
Ralph Bean
14dee071bc Merge #313 Force MMD's int version to a str when interacting with our db. 2017-02-15 17:52:23 +00:00
Ralph Bean
2a60d1ff20 Also, alembic. 2017-02-15 12:30:31 -05:00
Ralph Bean
92c3c1a90f Drop the modules table. 2017-02-15 12:11:40 -05:00
Ralph Bean
9bb7b8a716 Force MMD's int version to a str when interacting with our db. 2017-02-15 12:09:49 -05:00
Ralph Bean
840ab8e553 v1.2.0 released v1.2.0 2017-02-15 11:07:32 -05:00
Ralph Bean
6bd6aaaf12 Merge #311 Do things in copr as the correct user 2017-02-14 17:25:57 +00:00
Matt Prahl
01e94cb902 Merge #307 Replace query to FAS with OIDC groups scope check. 2017-02-10 21:28:15 +00:00
Ralph Bean
3674fb49b2 Make this convenient for f2.0 developers 2017-02-10 16:27:35 -05:00