Commit Graph

907 Commits

Author SHA1 Message Date
Jan Kaluza
aa6db9fcce Use StopIteration in QueueBasedThreadPool to stop the threads. 2017-02-21 08:02:50 +01:00
Jan Kaluza
e7acde9aa5 Use six.moves to import Queue 2017-02-21 08:02:50 +01:00
Jan Kaluza
64d96966e2 Use Queue based ThreadPool instead of the default Python's one. Improve locking and debugging in the Mock backend. 2017-02-21 08:02:50 +01:00
Ralph Bean
43ebe6d943 Merge #343 Use an authorization header instead of cookie for OIDC authn. 2017-02-21 02:13:30 +00:00
Ralph Bean
64fb5e9a1d Be nice. Kill whitespace. 2017-02-20 21:12:30 -05:00
Ralph Bean
1bd421e9c2 Merge #340 allow to explicitly disable client authentication 2017-02-21 02:09:48 +00:00
Ralph Bean
357b4a089d Add an internal repo for tests. 2017-02-20 21:07:20 -05:00
Matt Jia
143effcd15 Error out if OIDC_CLIENT_SECRETS is not set in server config 2017-02-21 11:08:42 +10:00
Matt Jia
be65a0ff81 allow to explicitly disable client authentication 2017-02-21 11:08:37 +10:00
Ralph Bean
b5e31d73a1 Adjust test string. 2017-02-20 14:37:17 -05:00
Ralph Bean
61b7b6f47d Use an authorization header instead of cookie for oidc token.
Fixes #330.
2017-02-20 13:12:00 -05:00
Ralph Bean
0dec5f2d3c Remove unused import. 2017-02-20 13:07:27 -05:00
Ralph Bean
0ffb1f7e42 Test that we can clone repos with a trailing slash. 2017-02-20 12:44:49 -05:00
Ralph Bean
2e6e153660 Add a few tests for the SCM module.
In particular, test to see if we can pass a branch name with shell
characters, and get MBS to inadvertently execute malicious code.

The test shows that doing this in a straightforward way is not possible
and should guard against any future regressions.

Fixes #329.
2017-02-20 09:25:00 -05:00
Ralph Bean
0c441bbcd4 Merge #339 Have the Kerberos ticket be located at /tmp/mbs-krbcc instead of /var/tmp/krbcc 2017-02-20 13:50:13 +00:00
Ralph Bean
7c7e21dd69 Merge #341 Do not start new batch when component is built when there is already some in progress. 2017-02-20 13:44:39 +00:00
Ralph Bean
ffd3fe460d Merge #338 Add and handle OIDC scope for MBS permissions. 2017-02-20 13:42:18 +00:00
Ralph Bean
ef14008927 Split this string, at @puiterwijk's suggestion. 2017-02-20 08:41:36 -05:00
Jan Kaluza
6a0e8d0b2e Do not start new batch when component is built when there is already some in progress. 2017-02-20 13:51:10 +01:00
Matt Prahl
219da6c760 Have the Kerberos ticket be located at /tmp/mbs-krbcc instead of /var/tmp/krbcc 2017-02-17 17:16:04 -05:00
Ralph Bean
54770cdc23 Check that our required OIDC scopes are present. 2017-02-17 10:55:37 -05:00
Ralph Bean
20d1abfcfc Add OIDC scope for MBS permissions.
Added here:  https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=87503b8ed96813c259eb5b31afef1fc0cbdc7027
2017-02-17 10:44:52 -05:00
Ralph Bean
916c47cf2f Remove unused OIDC scopes. 2017-02-17 10:44:47 -05:00
Ralph Bean
52ace7f671 Merge #327 test koji proxyuser feature 2017-02-17 15:09:27 +00:00
Matt Jia
e3ea21c0fd test koji proxyuser feature 2017-02-17 18:24:44 +10:00
Ralph Bean
4e58536104 Merge #319 Some handy scripts for bootstrapping a new instance. 2017-02-17 02:35:33 +00:00
Matt Prahl
a7bbfe76f3 Merge #321 Implement list_task_for_components method for CoprModuleBuilder 2017-02-17 00:51:26 +00:00
Matt Prahl
b30a6a8e05 Merge #322 Use requests instead of httplib2 in auth.py 2017-02-17 00:27:42 +00:00
Jakub Kadlčík
fdca6fa6e8 Implement list_task_for_components method for CoprModuleBuilder 2017-02-17 00:52:45 +01:00
Jakub Kadlčík
47924a2688 Use requests instead of httplib2 2017-02-16 21:52:24 +01:00
Ralph Bean
30daab024e Handle odd response from OIDC UserInfo.
By surprise, ipsilon handed me back a response with no groups one time.
Not sure why.  But logging here can hopefully help us catch it next
time.
2017-02-16 14:28:43 -05:00
Ralph Bean
8bd3b9e60e Some handy scripts for bootstrapping a new instance. 2017-02-16 14:24:20 -05:00
Ralph Bean
3a31e60f57 Merge #318 Handle changing PDCClient API. 2017-02-16 15:41:59 +00:00
Ralph Bean
bebf50f78c Haste makes waste. 2017-02-16 10:41:40 -05:00
Ralph Bean
2819b65204 Remove unused import. 2017-02-16 10:30:08 -05:00
Ralph Bean
b37ff40758 Handle still more variations in the pdcclient api. 2017-02-16 10:30:02 -05:00
Matt Prahl
1a10a4da19 Merge #315 Trying to debug jenkins failures. 2017-02-16 15:22:46 +00:00
Ralph Bean
32c743725d Remove xmd from test data for modulemd change. 2017-02-16 10:17:24 -05:00
Ralph Bean
67e3947a9b Handle changing PDCClient API.
I hit this in staging.  Some versions of the pdc-client library have a
different signature for PDCClient.  We need to specify these as keyword
arguments so we don't get spooky failures with accidental values.
2017-02-15 19:42:36 -05:00
Ralph Bean
a0b7ff4dc4 Our nonce should actually be random.
Also, the state value here is unused, so drop it.
2017-02-15 19:41:15 -05:00
Ralph Bean
6eaf8d7863 Demote this log statement. Way too noisy in production. 2017-02-15 15:43:38 -05:00
Ralph Bean
c862cc3def Trying to debug jenkins failures.
Tests pass locally, but fail in jenkins for some reason.

Trying to add more debug info here to figure out why....
2017-02-15 14:47:04 -05:00
Ralph Bean
14dee071bc Merge #313 Force MMD's int version to a str when interacting with our db. 2017-02-15 17:52:23 +00:00
Ralph Bean
2a60d1ff20 Also, alembic. 2017-02-15 12:30:31 -05:00
Ralph Bean
92c3c1a90f Drop the modules table. 2017-02-15 12:11:40 -05:00
Ralph Bean
9bb7b8a716 Force MMD's int version to a str when interacting with our db. 2017-02-15 12:09:49 -05:00
Ralph Bean
840ab8e553 v1.2.0 released v1.2.0 2017-02-15 11:07:32 -05:00
Ralph Bean
6bd6aaaf12 Merge #311 Do things in copr as the correct user 2017-02-14 17:25:57 +00:00
Matt Prahl
01e94cb902 Merge #307 Replace query to FAS with OIDC groups scope check. 2017-02-10 21:28:15 +00:00
Ralph Bean
3674fb49b2 Make this convenient for f2.0 developers 2017-02-10 16:27:35 -05:00