opendev
/
system-config
Code Issues Proposed changes

Set allowed-projects on system-config image jobs 

Without this, other projects could run this job (or its descendents)
and pass in an images dictionary instructing it to upload something
to one of our repositories.

Change-Id: I2c68d6673217bbc274c1134ee221cd6484abcf16
This commit is contained in:
James E. Blair 2019-01-16 16:26:16 -08:00
parent f917e7696f
commit a81503921d
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.zuul.yaml
View File

@ -48,6 +48,7 @@
<https://zuul-ci.org/docs/zuul-jobs/roles.html#role-build-docker-image>`_
for details.
abstract: true
allowed-projects: openstack-infra/system-config
pre-run: playbooks/zuul/build-image/pre.yaml
run: playbooks/zuul/build-image/run.yaml
@ -61,6 +62,7 @@
<https://zuul-ci.org/docs/zuul-jobs/roles.html#role-upload-docker-image>`_
for details.
abstract: true
allowed-projects: openstack-infra/system-config
post-run: playbooks/zuul/build-image/upload.yaml
secrets:
name: credentials
@ -75,6 +77,7 @@
<https://zuul-ci.org/docs/zuul-jobs/roles.html#role-promote-docker-image>`_
for details.
abstract: true
allowed-projects: openstack-infra/system-config
run: playbooks/zuul/build-image/promote.yaml
secrets:
name: credentials