zuul
/
zuul
Code Issues Proposed changes
zuul/tests/fixtures/config
History
James E. Blair 9021fdf8bb Allow config projects to override allowed-projects 
To handle the case where an untrusted project defines a job with
a secret which another project would like to run, allow a config
project to attach that job to a project-pipeline and have it run
regardless of the allowed-projects setting.

Normally, untrusted jobs with secrets have an implicit and
non-overridable allowed-projects setting of only that project, to
avoid a situation where another project with a trusted post-review
pipeline gains access to the secret by using a Depends-On to a
change which lifts the allowed-projects restriction.  This change
allows a config project to bypass this, in effect saying that the
projects involved trust each other sufficiently (or else, do not
have access to a post-review pipeline which could be used to
obtain secrets).

Change-Id: I52ab193d0e39a37de64c8b3cb6953538e4073b43
 		2019-06-24 09:32:25 -07:00
..
abstract Add abstract job attribute 2018-02-12 15:35:54 -08:00
allowed-projects Set allowed-projects on untrusted jobs with secrets 2019-01-22 14:01:10 -08:00
allowed-projects-trusted Allow config projects to override allowed-projects 2019-06-24 09:32:25 -07:00
ambiguous-names scheduler: fix enqueue event to use canonical project name 2018-07-13 06:58:36 +00:00
ansible Safely add Ansible password lookup plugin 2019-06-12 15:40:35 +00:00
ansible-no-log Fix unreachable nodes detection 2018-09-29 13:13:00 +02:00
ansible-unreachable Also retry the job if a post job failed with unreachable 2018-09-29 13:13:01 +02:00
ansible-versions Support Ansible 2.8 2019-05-16 15:07:26 -04:00
base-jobs Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
branch-deletion Fix branch deletion after failed reconfig 2018-02-14 14:26:31 -08:00
branch-mismatch Use override-checkout to select jobs 2018-01-24 13:06:04 -08:00
branch-negative Fix complex branch matchers in project configs 2017-12-01 15:25:13 -08:00
branch-tag Don't add implied branch matchers to project-pipeline variants 2018-06-27 10:43:56 -07:00
branch-templates Combine branch templates and pipeline branch matchers 2017-11-28 14:07:14 -08:00
branch-variants Update playbook paths with extension 2017-12-05 14:25:07 +11:00
broken Tolerate missing project 2019-04-05 17:26:34 +00:00
broken-trusted Config errors should not affect config-projects 2019-04-15 15:26:15 -07:00
central-jobs Add multi-branch support for project-templates 2017-10-27 13:41:25 -07:00
conflict-config Require a base job 2017-08-07 14:52:37 -07:00
container-build-resources Fix container job documentation typo 2018-12-19 05:37:22 +00:00
cross-source Add cross-source tests 2018-01-16 09:37:59 -08:00
cross-source-pagure Pagure driver - https://pagure.io/pagure/ 2019-06-17 14:18:19 -07:00
data-return Fix node leak when skipping child jobs 2018-12-11 19:42:36 +01:00
dependency-graph Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
disk-accountant Sync when doing disk accountant testing 2018-02-06 15:03:04 -08:00
duplicate-pipeline Tenant config can be read from an external script 2018-04-03 14:33:41 +02:00
executor-facts Expose date time as facts 2019-06-18 12:19:18 +00:00
fail-fast Support fail-fast in project pipelines 2019-04-29 08:26:58 +02:00
final Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
force-merge-template Fix wedged scheduler on force-merge of non-existing template 2019-02-03 19:06:31 +01:00
gerrit-file-comments Filter file comments for existing files 2018-10-25 06:21:01 -07:00
git-driver Git driver 2017-12-15 14:32:40 +01:00
governor Executor: Don't start too many jobs at once 2018-02-02 11:36:49 -08:00
implicit-project Add implicit project name matching 2017-12-22 10:09:28 +01:00
implicit-roles Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
in-repo Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
in-repo-join Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
inventory Encode zuul.message with base64 2019-02-28 18:09:22 +01:00
job-output Fix error reporting for special task failures 2019-02-06 10:25:56 +01:00
job-pause Resume paused job with skipped children 2018-11-05 12:06:32 +01:00
job-pause-priority Ensure correct lexical sorting of node requests 2019-03-14 15:39:23 +01:00
job-pause2 Don't set child jobs to skipped on post failure 2019-02-19 17:33:43 -08:00
line-mapping Map file comment line numbers 2018-08-15 14:38:03 -07:00
merge-modes/git/common-config/playbooks Merge "Add playbooks for all test jobs" into feature/zuulv3 2017-02-06 16:45:58 +00:00
merges Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
mqtt-driver Report job depedencies via MQTT reporter 2019-05-23 12:56:50 +02:00
multi-driver Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
multi-tenant Add allowed-labels tenant setting 2018-11-27 06:00:54 +00:00
multi-tenant-semaphore web: remove SafeLoader left-over from ZuulJSONEncoder 2019-06-05 10:03:54 +00:00
nodesets Handle nodesets in branches 2018-01-18 13:38:13 -08:00
openstack Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
pass-to-parent pass-to-parent: Fix passing multiple secrets to parent 2019-05-20 15:33:52 +02:00
post-playbook Update playbook paths with extension 2017-12-05 14:25:07 +11:00
pragma Add pragma directive 2017-10-26 14:28:03 -07:00
pragma-multibranch Add implied-branches pragma directive 2017-12-13 16:06:34 -08:00
pre-playbook Enable autohold for RETRY_LIMIT / POST_FAILURE 2018-03-21 15:16:08 -04:00
protected Add support for protected jobs 2017-12-15 19:31:02 +01:00
provides-requires-buildset Handle artifacts on non change types. 2019-05-15 10:45:11 -07:00
provides-requires-pause Add provides/requires support 2019-01-30 14:07:42 -08:00
push-reqs Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
regex-project Add regex support to project stanzas 2018-04-27 21:35:07 +02:00
remote-action-modules Prevent local code execution via the raw module 2019-03-11 17:49:38 +01:00
remote-zuul-json Add role information to task in zuul_json callback 2018-05-08 14:13:35 +02:00
remote-zuul-stream zuul-tox-remote: use unique zuul_console service 2019-05-17 07:56:58 +00:00
requirements Fix reject clauses in the absence of approvals 2018-08-13 12:37:32 +02:00
role-branches Check out more appropriate branches of role and playbook repos 2018-04-05 10:41:51 -07:00
roles Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
secret-inheritance Set allowed-projects on untrusted jobs with secrets 2019-01-22 14:01:10 -08:00
secret-leaks Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
secrets config: add playbooks to job.toDict() 2019-02-18 15:29:05 +11:00
semaphore Fix rare semaphore leak during reconfiguration 2019-02-25 15:38:24 +01:00
semaphore-branches Normalize semaphore branch handling 2018-01-18 14:53:15 -08:00
shadow Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
single-tenant Fix dequeue ref not handling the project name 2019-05-14 20:02:13 +02:00
speculative-plugins Fix plugin injection vulnerability 2018-03-16 18:12:35 +01:00
split-config Fix source context in split config 2018-07-05 09:50:58 -07:00
sql-driver Return artifact metadata in API endpoint 2019-02-19 16:12:12 -08:00
streamer Add timestamps to multiline debug message logs 2018-06-07 09:23:08 -07:00
success-url Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
templated-project Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
tenant-parser Make ansible version configurable 2019-03-15 09:09:16 +01:00
unprotected-branches Reload tenant in case of new project branches 2018-09-10 09:29:43 +02:00
zuul-connections-multiple-gerrits Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
zuul-connections-same-gerrit Update test fixtures to use explicit run 2017-10-26 15:59:41 -07:00
zuul-job-contamination Fix job contamination by unmerged change 2018-07-09 22:37:19 +02:00
zuultrigger Limit search scope of getChangesDependingOn to tenant 2018-05-24 00:15:51 +00:00