Without this processors, HTTP access logs look like this:

    [info] 127.0.0.1:44936 PUT /build 1.1 404 9 3170 [http.server]

With the change applied, they become more informative:

    [info] 127.0.0.1:44936 PUT /build 1.1 404 9 3170 [http.server] http_port=6040 known_worker=False worker_id=None

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

On the contrary, we don’t care about logging ports for WebSockets.

It would be a bit more efficient to store the detected port into
g.port here and reuse it later in require_auth(), but OTOH that
would make the tests for require_auth a bit more complicated, since
before_request decorators are not automatically imported.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Internally-accessible resources (emulating the interface of workers) are
not affected at all by the fact the external interface is prefixed,
so the app overall cannot have root_path set, otherwise communications
between repserver and emulated workers break.

Instead, split out externally-accessible resources into a blueprint,
and mount it into the correct place before starting the webserver.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Python 3.11 is now in Bookworm, so make failures on 3.11 hard failures.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

request.path includes the root prefix, so when it’s not empty, it needs
to be stripped from request.path before using it.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

The fuse-overlayfs configuration is no longer necessary.
However, binfmt-support package was missing from the dependencies.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Drop unused imports, drop extra empty lines, replace a wildcard
import with a series of specific imports.

Fixes: abd77e4d ("Add configuration de/serialisation code")

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Pipe all logs through structlog, including stdlib logs.
When run on a tty, use colours, otherwise logfmt.
Convert some log prints to structured logs.
Bump Quart dependency to 0.18.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

This is necessary to enable the client to be able to only specify
minimal configuration, and fetch the rest from the server.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Andrej Shadura authored 2 years ago and Sjoerd Simons committed 1 year ago

This is an internal endpoint mostly useful for debugging, it should
not be open to the world.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

This enables other tests to override parts of the config without
having to do the manual work themselves.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

When deploying in a proxy-per-worker configuration, it’s useful to
consolidate all proxy instances on a single hostname, since DNS names
can be scarce.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

On lightweight runners, tests would sometimes run out of disk space
or memory or both.

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Sjoerd Simons authored 2 years ago and Andrej Shadura committed 2 years ago

Create a helm chart for deploying the server side of the obs proxy. The
main thing that needs to be configured by users here is the ingress as
well as the obs backend server. The backend server when running in
kubernetes as well should be available via <cluster ip name>.<namespace>
as the dns name as per kubernetes conventions.

Signed-off-by: Sjoerd Simons <sjoerd@collabora.com>

Allow the authentication token to come in via the environment makes it
easier to stash it into a k8s secret without requiring the whole
configuration file to be a secret.

Signed-off-by: Sjoerd Simons <sjoerd@collabora.com>

Sjoerd Simons authored 2 years ago and Andrej Shadura committed 2 years ago

Create a trivial dummy endpoint which just returns a 200 reply. This is
useful e.g. for Kubernetes readiness tests to check if a service is up
and running.

Signed-off-by: Sjoerd Simons <sjoerd@collabora.com>

Kaniko unfortunately cannot build multi-arch containers as it has no way
to create a manifest of more then one image. Switch to buildah as the
builder instead which can do this to build both an amd64 and arm64
container

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Keeping files open at all times prevents them from being cleaned up
properly, and when cleanups happen, the existing code couldn’t handle
it properly and would either error out, or continue logging into an
invisible file (referenced to only by its open file descriptor).

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>