805872 - Build a basic UI for BMM

Status: RESOLVED FIXED

(Infrastructure & Operations :: RelOps: General, task)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

For dcops

 * show all boards
 * allow viewing logs
 * allow rebooting and reimaging, preferably of groups of boards at a time

This will be a bit tricky given that the API call for a panda must be made to that panda's imaging server.  I'll need to learn about cross-origin access.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

That's not so hard.  Each server's API has to reply with a 'Access-Control-Allow-Origin' header giving the origin from which the request originates.  The browser sends an 'Origin' request header giving the originating domain.

My thinking is, let's add an 'allowed_origin_regex' to the config - it will be something like 'mobile-imaging-[0-9]+.p[0-9]+.releng.scl1.mozilla.com' for the moment.  Then, when a request comes in, if the Origin header matches the regexp, send the same origin back in the Access-Control-Allow-Origin header.

That will allow JS served from one imaging server to make POST requests to all other imaging servers.

These services aren't authenticated anyway, so XSS is kinda worthless.  I don't see a need for too much caution here.

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

OK, I have the frontend built, checked in, and released as bmm-0.2.0.  Now to deploy with puppet.

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

Attachment: bug805872.patch

Note that this adds a new parameter to supervisord::supervise, too.

Comment 4

[Rail Aliiev [:rail]]

Comment on attachment 677515 [details] [diff] [review]
bug805872.patch

Review of attachment 677515 [details] [diff] [review]:
-----------------------------------------------------------------

Ship it!

Comment 5

[Dustin J. Mitchell [:dustin] (he/him)]

That's service!  Thanks!

Checked in.