1043996 - Prune the allowed origins list for buildapi

Status: RESOLVED FIXED

(Release Engineering :: General, defect)

Description

[Ed Morley [:emorley]]

http://mxr.mozilla.org/build-central/source/puppet-manifests/modules/buildapi/templates/production.ini.erb#29
29 allowed_origins = https://tbpl.mozilla.org http://tbpl.mozilla.org http://tbpl.allizom.org http://tests.themasta.com http://dev.philringnalda.com http://bbpl.dbaron.org http://tbpl.mcc.id.au http://ehsanakhgari.org http://tbpl.swatinem.de https://tbpl-dev.allizom.org

Many of these are out of date and can be removed.

Comment 1

[Justin Wood (:Callek)]

That file is no longer used, releng puppet no longer manages buildapi.

That said, the current allowed origins is:

allowed_origins = https://tbpl.mozilla.org http://tbpl.mozilla.org http://tbpl.allizom.org http://tests.themasta.com http://dev.philringnalda.com http://bbpl.dbaron.org http://tbpl.mcc.id.au http://ehsanakhgari.org http://tbpl.swatinem.de https://tbpl-dev.allizom.org https://treeherder.mozilla.org https://treeherder.allizom.org https://treeherder-dev.allizom.org http://local.treeherder.mozilla.org

Comment 2

[Ed Morley [:emorley]]

Ah thank you :-)

The following no longer appear to be hosting a TBPL instance (many were only used before there was an official TBPL instance iirc):
http://tests.themasta.com
http://dev.philringnalda.com
http://bbpl.dbaron.org
http://tbpl.mcc.id.au
http://ehsanakhgari.org
http://tbpl.swatinem.de
(CCing a few people from this list)

These are now redundant (since SSL is enforced):
http://tbpl.mozilla.org
http://tbpl.allizom.org

Making the new list:
allowed_origins = https://tbpl.mozilla.org https://tbpl-dev.allizom.org https://treeherder.mozilla.org https://treeherder.allizom.org https://treeherder-dev.allizom.org http://local.treeherder.mozilla.org

And then once TBPL EOL'd (but I guess we can save this for another bug):
allowed_origins = https://treeherder.mozilla.org https://treeherder.allizom.org https://treeherder-dev.allizom.org http://local.treeherder.mozilla.org

Comment 3

[Nick Thomas [:nthomas] (UTC+12)]

No objections heard, deploying shortly.

Comment 4

[Nick Thomas [:nthomas] (UTC+12)]

(In reply to Ed Morley [:edmorley] from comment #2)
> Making the new list:
> allowed_origins = https://tbpl.mozilla.org https://tbpl-dev.allizom.org
> https://treeherder.mozilla.org https://treeherder.allizom.org
> https://treeherder-dev.allizom.org http://local.treeherder.mozilla.org

Deployed.

Comment 5

[Ed Morley [:emorley]]

Thank you :-)