Details

Reviewers

Maniphest Tasks

T1814: Update Docker Hub builds format from tokens to trigger URL

Commits

rOPSf4cc2c2cf566: Configure Docker Hub triggers for Docker Hub

Summary

This is the new Docker Hub needed configuration to trigger builds,
still to be supported by keruald/dockerhub and the Notifications Center.

Ref T1814

Test Plan

Trigger a build when a commit is pushed to rNOTIF

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Mar 31 2023, 23:04

dereckson created this revision.

Harbormaster completed remote builds in B4666: Diff 7547.Mar 31 2023, 23:05

Vault policy

Complector

$ sudo salt-call --local state.sls_id salt-node-docker-002 roles/vault/policies
local:
----------
          ID: salt-node-docker-002
    Function: vault.policy_present
      Result: True
     Comment: Policy was updated
     Started: 23:08:25.506425
    Duration: 99.149 ms
     Changes:
              ----------
              salt-node-docker-002:
                  ----------
                  change:
                      ---
                      +++
                      @@ -91,6 +91,14 @@
                           capabilities = [ "read" ]
                       }

                      +path "apps/notifications-center/dockerhub/notifications" {
                      +    capabilities = [ "read" ]
                      +}
                      +
                      +path "apps/notifications-center/dockerhub/authgrove" {
                      +    capabilities = [ "read" ]
                      +}
                      +
                       path "ops/data/secrets/nasqueron.pixelfed.app_key" {
                           capabilities = [ "read" ]
                       }

Summary for local
------------
Succeeded: 1 (changed=1)
Failed:    0
------------
Total states run:     1
Total run time:  99.149 ms

Should be apps/data/...

Simplify Vault path by bypassing this prefix thing

Harbormaster completed remote builds in B4667: Diff 7548.Mar 31 2023, 23:28

Vault part is OK by adding apps to vault_mount_paths.

Correctly no-op after manual edit to test vault.read_secret:

Complector

$ sudo salt-call --local state.sls_id salt-node-docker-002 roles/vault/policies test=True
local:
----------
          ID: salt-node-docker-002
    Function: vault.policy_present
      Result: True
     Comment: Policy exists, and has the correct content
     Started: 23:32:42.091749
    Duration: 53.693 ms
     Changes:

Summary for local
------------
Succeeded: 1
Failed:    0
------------
Total states run:     1
Total run time:  53.693 ms