Page MenuHomeDevCentral

Configure Docker Hub triggers for Docker Hub
ClosedPublic

Authored by dereckson on Mar 31 2023, 23:04.
Tags
None
Referenced Files
F3772789: D2960.id7553.diff
Sun, Nov 24, 04:55
F3772788: D2960.id7552.diff
Sun, Nov 24, 04:55
F3772787: D2960.id7549.diff
Sun, Nov 24, 04:55
F3772786: D2960.id7548.diff
Sun, Nov 24, 04:55
F3772785: D2960.id7547.diff
Sun, Nov 24, 04:55
F3772747: D2960.id.diff
Sun, Nov 24, 04:47
F3772714: D2960.diff
Sun, Nov 24, 04:41
Unknown Object (File)
Fri, Nov 22, 13:27
Subscribers
None

Details

Summary

This is the new Docker Hub needed configuration to trigger builds,
still to be supported by keruald/dockerhub and the Notifications Center.

Ref T1814

Test Plan

Trigger a build when a commit is pushed to rNOTIF

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
config-notifications-docker
Build Status
Buildable 4666
Build 4943: arc lint + arc unit

Event Timeline

dereckson created this revision.

Vault policy

Complector
$ sudo salt-call --local state.sls_id salt-node-docker-002 roles/vault/policies
local:
----------
          ID: salt-node-docker-002
    Function: vault.policy_present
      Result: True
     Comment: Policy was updated
     Started: 23:08:25.506425
    Duration: 99.149 ms
     Changes:
              ----------
              salt-node-docker-002:
                  ----------
                  change:
                      ---
                      +++
                      @@ -91,6 +91,14 @@
                           capabilities = [ "read" ]
                       }

                      +path "apps/notifications-center/dockerhub/notifications" {
                      +    capabilities = [ "read" ]
                      +}
                      +
                      +path "apps/notifications-center/dockerhub/authgrove" {
                      +    capabilities = [ "read" ]
                      +}
                      +
                       path "ops/data/secrets/nasqueron.pixelfed.app_key" {
                           capabilities = [ "read" ]
                       }

Summary for local
------------
Succeeded: 1 (changed=1)
Failed:    0
------------
Total states run:     1
Total run time:  99.149 ms

Should be apps/data/...

Simplify Vault path by bypassing this prefix thing

Vault part is OK by adding apps to vault_mount_paths.

Correctly no-op after manual edit to test vault.read_secret:

Complector
$ sudo salt-call --local state.sls_id salt-node-docker-002 roles/vault/policies test=True
local:
----------
          ID: salt-node-docker-002
    Function: vault.policy_present
      Result: True
     Comment: Policy exists, and has the correct content
     Started: 23:32:42.091749
    Duration: 53.693 ms
     Changes:

Summary for local
------------
Succeeded: 1
Failed:    0
------------
Total states run:     1
Total run time:  53.693 ms

chmod ; s/authgrove/auth-grove/

This revision is now accepted and ready to land.Mar 31 2023, 23:43