Add support for pull credentials on builds and build triggers

static/css/quay.css

@@ -3589,4 +3589,38 @@ pre.command:before {
 .auth-info .scope {
   cursor: pointer;
   margin-right: 4px;
+}
+
+.trigger-pull-credentials {
+  margin-top: 4px;
+  padding-left: 26px;
+  font-size: 12px;
+}
+
+.trigger-pull-credentials .context-tooltip {
+  color: gray;
+  margin-right: 4px;
+}
+
+.trigger-description .trigger-description-subtitle {
+  display: inline-block;
+  margin-right: 34px;
+}
+
+.trigger-option-section:not(:last-child) {
+  border-bottom: 1px solid #eee;
+  padding-bottom: 16px;
+  margin-bottom: 16px;
+}
+
+.trigger-option-section .entity-search-element .twitter-typeahead {
+  width: 370px;
+}
+
+.trigger-option-section .entity-search-element input {
+  width: 100%;
+}
+
+.trigger-option-section table td {
+  padding: 6px;
 }

static/directives/trigger-description.html

@@ -10,7 +10,7 @@
       </span>
     </div>
     <div style="margin-top: 4px; margin-left: 26px; font-size: 12px; color: gray;" ng-if="!trigger.config.subdir && !short">
-      <span>Dockerfile:
+      <span><span class="trigger-description-subtitle">Dockerfile:</span>
         <a href="https://github.com/{{ trigger.config.build_source }}/tree/{{ trigger.config.master_branch || 'master' }}/Dockerfile" target="_blank">
           //Dockerfile
         </a>

static/js/app.js

@@ -2504,7 +2504,8 @@ quayApp.directive('entitySearch', function () {
       'isOrganization': '=isOrganization',
       'isPersistent': '=isPersistent',
       'currentEntity': '=currentEntity',
-      'clearNow': '=clearNow'
+      'clearNow': '=clearNow',
+      'filter': '=filter',
     },
     controller: function($scope, $element, Restangular, UserService, ApiService) {
       $scope.lazyLoading = true;
@@ -2628,6 +2629,19 @@ quayApp.directive('entitySearch', function () {
             var datums = [];
             for (var i = 0; i < data.results.length; ++i) {
               var entity = data.results[i];
+              if ($scope.filter) {
+                var allowed = $scope.filter;
+                var found = 'user';
+                if (entity.kind == 'user') {
+                  found = entity.is_robot ? 'robot' : 'user';
+                } else if (entity.kind == 'team') {
+                  found = 'team';
+                }
+                if (allowed.indexOf(found)) {
+                  continue;
+                }
+              }
+
               datums.push({
                 'value': entity.name,
                 'tokens': [entity.name],

static/js/controllers.js

@@ -1158,7 +1158,7 @@ function RepoBuildCtrl($scope, Restangular, ApiService, $routeParams, $rootScope
   fetchRepository();
 }
 
-function RepoAdminCtrl($scope, Restangular, ApiService, KeyService, $routeParams, $rootScope, $location) {
+function RepoAdminCtrl($scope, Restangular, ApiService, KeyService, $routeParams, $rootScope, $location, UserService) {
   var namespace = $routeParams.namespace;
   var name = $routeParams.name;
 
@@ -1462,6 +1462,10 @@ function RepoAdminCtrl($scope, Restangular, ApiService, KeyService, $routeParams
   $scope.setupTrigger = function(trigger) {
     $scope.triggerSetupReady = false;
     $scope.currentSetupTrigger = trigger;
+
+    trigger['_pullEntity'] = null;
+    trigger['_publicPull'] = true;
+
     $('#setupTriggerModal').modal({});
     $('#setupTriggerModal').on('hidden.bs.modal', function () {
       $scope.$apply(function() {
@@ -1470,6 +1474,10 @@ function RepoAdminCtrl($scope, Restangular, ApiService, KeyService, $routeParams
     });
   };
 
+  $scope.isNamespaceAdmin = function(namespace) {
+    return UserService.isNamespaceAdmin(namespace);
+  };
+
   $scope.finishSetupTrigger = function(trigger) {
     $('#setupTriggerModal').modal('hide');
     $scope.currentSetupTrigger = null;
@@ -1479,7 +1487,15 @@ function RepoAdminCtrl($scope, Restangular, ApiService, KeyService, $routeParams
       'trigger_uuid': trigger.id
     };
 
-    ApiService.activateBuildTrigger(trigger['config'], params).then(function(resp) {
+    var data = {
+      'config': trigger['config']
+    };
+
+    if (trigger['_pullEntity']) {
+      data['pull_robot'] = trigger['_pullEntity']['name'];
+    }
+
+    ApiService.activateBuildTrigger(data, params).then(function(resp) {
       trigger['is_active'] = true;      
     }, function(resp) {
       $scope.triggers.splice($scope.triggers.indexOf(trigger), 1);

static/partials/repo-admin.html

@@ -270,6 +270,12 @@
                           Setting up trigger
                         </div>
                         <div ng-show="trigger.is_active" class="trigger-description" trigger="trigger"></div>
+                        <div class="trigger-pull-credentials" ng-if="trigger.is_active && trigger.pull_user">
+                          <span class="context-tooltip" title="The credentials used by the builder when pulling images" bs-tooltip>
+                            Pull Credentials:
+                          </span>
+                          <span class="entity-reference" entity="trigger.pull_user"></span>
+                        </div>
                       </td>
                       <td style="white-space: nowrap;">
                         <div class="dropdown" style="display: inline-block" ng-visible="trigger.is_active">
@@ -387,7 +393,45 @@
         <h4 class="modal-title">Setup new build trigger</h4>
       </div>
       <div class="modal-body">
-        <div class="trigger-description-element" ng-switch on="currentSetupTrigger.service">
+        <div class="trigger-option-section">
+          <table style="width: 100%;">
+              <tr>
+                <td style="width: 114px">
+                  <div class="context-tooltip" title="The credentials used by the builder when pulling images" bs-tooltip>
+                    Pull Credentials:
+                  </div>
+                </td>
+                <td>
+                  <div ng-if="!isNamespaceAdmin(repo.namespace)" style="color: #aaa;">
+                    In order to set pull credentials for a build trigger, you must be an Administrator of the namespace <strong>{{ repo.namespace }}</strong>
+                  </div>
+                  <div class="btn-group btn-group-sm" ng-if="isNamespaceAdmin(repo.namespace)">
+                    <button type="button" class="btn btn-default"
+                            ng-class="currentSetupTrigger._publicPull ? 'active btn-info' : ''" ng-click="currentSetupTrigger._publicPull = true">Public</button>
+                    <button type="button" class="btn btn-default"
+                            ng-class="currentSetupTrigger._publicPull ? '' : 'active btn-info'" ng-click="currentSetupTrigger._publicPull = false">
+                      <i class="fa fa-wrench"></i>
+                      Robot account
+                    </button>
+                  </div>
+                </td>
+              </tr>
+              <tr ng-show="!currentSetupTrigger._publicPull">
+                <td>                  
+                </td>
+                <td>
+                  <div class="entity-search" namespace="repo.namespace" include-teams="false"
+                       input-title="'Select robot account for pulling...'"
+                       is-organization="repo.is_organization"
+                       is-persistent="true"
+                       current-entity="currentSetupTrigger._pullEntity"
+                       filter="['robot']"></div>
+                </td>
+              </tr>
+          </table>
+        </div>
+
+        <div class="trigger-description-element trigger-option-section" ng-switch on="currentSetupTrigger.service">
           <div ng-switch-when="github">
             <div class="trigger-setup-github" repository="repo" trigger="currentSetupTrigger"></div>
           </div>