Closed
Bug 1307333
Opened 9 years ago
Closed 9 years ago
Allow unauthenticated s3 access to moz-review/repos/* bucket
Categories
(MozReview Graveyard :: Infrastructure, defect)
MozReview Graveyard
Infrastructure
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: dividehex, Assigned: dividehex)
Details
Attachments
(1 file)
|
562 bytes,
patch
|
fubar
:
review+
|
Details | Diff | Splinter Review |
In changing the custom_package ansible task to use get_url module instead of calling 'aws s3', the moz-mozreview/repos/* should be full accessible with Action: "GetObject" (readonly). Switching to https (and get_url) allows sha256sum hash checking.
|
Assignee | |
Comment 1•9 years ago
|
||
This modifies the base bucket s3 policy to allow reading of base bucket objects in /repos/*
Attachment #8797338 -
Flags: review?(klibby)
|
|
||
Comment 2•9 years ago
|
||
Comment on attachment 8797338 [details] [diff] [review]
bug1307333-s3_bucket_base_read_all.patch
Review of attachment 8797338 [details] [diff] [review]:
-----------------------------------------------------------------
lgtm!
Attachment #8797338 -
Flags: review?(klibby) → review+
|
|
Assignee | |
Comment 3•9 years ago
|
||
Comment on attachment 8797338 [details] [diff] [review]
bug1307333-s3_bucket_base_read_all.patch
Checked in.
commit fe11d993940461a15ea928b16d2a2d9960789296
Author: Jake Watkins <jwatkins@mozilla.com>
Date: Thu Oct 6 08:44:10 2016 -0700
Bug 1307333: allow unauthenticated s3 access; r=fubar
This allows access to objects in the base bucket under /repos/*
Allowing this makes debugging easier and allows the custom_packages
ansible playbook to make use of get_url and package hash pinning
|
|
Assignee | |
Updated•9 years ago
|
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•