37 lines
1.2 KiB
Python
37 lines
1.2 KiB
Python
|
import time
|
||
|
|
|
||
|
|
from app import app
|
||
|
|
from boot import setup_jwt_proxy
|
||
|
|
from util.secscan.api import SecurityScannerAPI
|
||
|
|
from util.config.validators import BaseValidator, ConfigValidationException
|
||
|
|
|
||
|
|
class SecurityScannerValidator(BaseValidator):
|
||
|
|
name = "security-scanner"
|
||
|
|
|
||
|
|
@classmethod
|
||
|
|
def validate(cls, config, user, user_password):
|
||
|
|
""" Validates the configuration for talking to a Quay Security Scanner. """
|
||
|
|
if not config.get('FEATURE_SECURITY_SCANNER', False):
|
||
|
|
return
|
||
|
|
|
||
|
|
client = app.config['HTTPCLIENT']
|
||
|
|
api = SecurityScannerAPI(app, config, None, client=client, skip_validation=True)
|
||
|
|
|
||
|
|
if not config.get('TESTING', False):
|
||
|
|
# Generate a temporary Quay key to use for signing the outgoing requests.
|
||
|
|
setup_jwt_proxy()
|
||
|
|
|
||
|
|
# We have to wait for JWT proxy to restart with the newly generated key.
|
||
|
|
max_tries = 5
|
||
|
|
response = None
|
||
|
|
while max_tries > 0:
|
||
|
|
response = api.ping()
|
||
|
|
if response.status_code == 200:
|
||
|
|
return
|
||
|
|
|
||
|
|
time.sleep(1)
|
||
|
|
max_tries = max_tries - 1
|
||
|
|
|
||
|
|
message = 'Expected 200 status code, got %s: %s' % (response.status_code, response.text)
|
||
|
|
raise ConfigValidationException('Could not ping security scanner: %s' % message)
|