Commit Graph

910 Commits

Author SHA1 Message Date
Jan Kaluža
d5c003296d Merge #344 Make the scheduler more quiet in development. 2017-02-21 07:09:11 +00:00
Jan Kaluza
1d8bc3e33a Use concurrent.futures instead of our own ThreadPool implementation 2017-02-21 08:02:50 +01:00
Jan Kaluza
aa6db9fcce Use StopIteration in QueueBasedThreadPool to stop the threads. 2017-02-21 08:02:50 +01:00
Jan Kaluza
e7acde9aa5 Use six.moves to import Queue 2017-02-21 08:02:50 +01:00
Jan Kaluza
64d96966e2 Use Queue based ThreadPool instead of the default Python's one. Improve locking and debugging in the Mock backend. 2017-02-21 08:02:50 +01:00
Ralph Bean
43ebe6d943 Merge #343 Use an authorization header instead of cookie for OIDC authn. 2017-02-21 02:13:30 +00:00
Ralph Bean
64fb5e9a1d Be nice. Kill whitespace. 2017-02-20 21:12:30 -05:00
Ralph Bean
1bd421e9c2 Merge #340 allow to explicitly disable client authentication 2017-02-21 02:09:48 +00:00
Ralph Bean
357b4a089d Add an internal repo for tests. 2017-02-20 21:07:20 -05:00
Ralph Bean
8238ab81df Make the scheduler more quiet in development.
It may be nice to have the scheduler be more quiet when run inside
docker.  Our DEBUG output level is very spammy.

/cc @mjia
2017-02-20 20:14:39 -05:00
Matt Jia
143effcd15 Error out if OIDC_CLIENT_SECRETS is not set in server config 2017-02-21 11:08:42 +10:00
Matt Jia
be65a0ff81 allow to explicitly disable client authentication 2017-02-21 11:08:37 +10:00
Ralph Bean
b5e31d73a1 Adjust test string. 2017-02-20 14:37:17 -05:00
Ralph Bean
61b7b6f47d Use an authorization header instead of cookie for oidc token.
Fixes #330.
2017-02-20 13:12:00 -05:00
Ralph Bean
0dec5f2d3c Remove unused import. 2017-02-20 13:07:27 -05:00
Ralph Bean
0ffb1f7e42 Test that we can clone repos with a trailing slash. 2017-02-20 12:44:49 -05:00
Ralph Bean
2e6e153660 Add a few tests for the SCM module.
In particular, test to see if we can pass a branch name with shell
characters, and get MBS to inadvertently execute malicious code.

The test shows that doing this in a straightforward way is not possible
and should guard against any future regressions.

Fixes #329.
2017-02-20 09:25:00 -05:00
Ralph Bean
0c441bbcd4 Merge #339 Have the Kerberos ticket be located at /tmp/mbs-krbcc instead of /var/tmp/krbcc 2017-02-20 13:50:13 +00:00
Ralph Bean
7c7e21dd69 Merge #341 Do not start new batch when component is built when there is already some in progress. 2017-02-20 13:44:39 +00:00
Ralph Bean
ffd3fe460d Merge #338 Add and handle OIDC scope for MBS permissions. 2017-02-20 13:42:18 +00:00
Ralph Bean
ef14008927 Split this string, at @puiterwijk's suggestion. 2017-02-20 08:41:36 -05:00
Jan Kaluza
6a0e8d0b2e Do not start new batch when component is built when there is already some in progress. 2017-02-20 13:51:10 +01:00
Matt Prahl
219da6c760 Have the Kerberos ticket be located at /tmp/mbs-krbcc instead of /var/tmp/krbcc 2017-02-17 17:16:04 -05:00
Ralph Bean
54770cdc23 Check that our required OIDC scopes are present. 2017-02-17 10:55:37 -05:00
Ralph Bean
20d1abfcfc Add OIDC scope for MBS permissions.
Added here:  https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=87503b8ed96813c259eb5b31afef1fc0cbdc7027
2017-02-17 10:44:52 -05:00
Ralph Bean
916c47cf2f Remove unused OIDC scopes. 2017-02-17 10:44:47 -05:00
Ralph Bean
52ace7f671 Merge #327 test koji proxyuser feature 2017-02-17 15:09:27 +00:00
Matt Jia
e3ea21c0fd test koji proxyuser feature 2017-02-17 18:24:44 +10:00
Ralph Bean
4e58536104 Merge #319 Some handy scripts for bootstrapping a new instance. 2017-02-17 02:35:33 +00:00
Matt Prahl
a7bbfe76f3 Merge #321 Implement list_task_for_components method for CoprModuleBuilder 2017-02-17 00:51:26 +00:00
Matt Prahl
b30a6a8e05 Merge #322 Use requests instead of httplib2 in auth.py 2017-02-17 00:27:42 +00:00
Jakub Kadlčík
fdca6fa6e8 Implement list_task_for_components method for CoprModuleBuilder 2017-02-17 00:52:45 +01:00
Jakub Kadlčík
47924a2688 Use requests instead of httplib2 2017-02-16 21:52:24 +01:00
Ralph Bean
30daab024e Handle odd response from OIDC UserInfo.
By surprise, ipsilon handed me back a response with no groups one time.
Not sure why.  But logging here can hopefully help us catch it next
time.
2017-02-16 14:28:43 -05:00
Ralph Bean
8bd3b9e60e Some handy scripts for bootstrapping a new instance. 2017-02-16 14:24:20 -05:00
Ralph Bean
3a31e60f57 Merge #318 Handle changing PDCClient API. 2017-02-16 15:41:59 +00:00
Ralph Bean
bebf50f78c Haste makes waste. 2017-02-16 10:41:40 -05:00
Ralph Bean
2819b65204 Remove unused import. 2017-02-16 10:30:08 -05:00
Ralph Bean
b37ff40758 Handle still more variations in the pdcclient api. 2017-02-16 10:30:02 -05:00
Matt Prahl
1a10a4da19 Merge #315 Trying to debug jenkins failures. 2017-02-16 15:22:46 +00:00
Ralph Bean
32c743725d Remove xmd from test data for modulemd change. 2017-02-16 10:17:24 -05:00
Ralph Bean
67e3947a9b Handle changing PDCClient API.
I hit this in staging.  Some versions of the pdc-client library have a
different signature for PDCClient.  We need to specify these as keyword
arguments so we don't get spooky failures with accidental values.
2017-02-15 19:42:36 -05:00
Ralph Bean
a0b7ff4dc4 Our nonce should actually be random.
Also, the state value here is unused, so drop it.
2017-02-15 19:41:15 -05:00
Ralph Bean
6eaf8d7863 Demote this log statement. Way too noisy in production. 2017-02-15 15:43:38 -05:00
Ralph Bean
c862cc3def Trying to debug jenkins failures.
Tests pass locally, but fail in jenkins for some reason.

Trying to add more debug info here to figure out why....
2017-02-15 14:47:04 -05:00
Ralph Bean
14dee071bc Merge #313 Force MMD's int version to a str when interacting with our db. 2017-02-15 17:52:23 +00:00
Ralph Bean
2a60d1ff20 Also, alembic. 2017-02-15 12:30:31 -05:00
Ralph Bean
92c3c1a90f Drop the modules table. 2017-02-15 12:11:40 -05:00
Ralph Bean
9bb7b8a716 Force MMD's int version to a str when interacting with our db. 2017-02-15 12:09:49 -05:00
Ralph Bean
840ab8e553 v1.2.0 released v1.2.0 2017-02-15 11:07:32 -05:00