initial import for Open Source 🎉

util/config/validators/validate_secscan.py

@@ -0,0 +1,52 @@
+import time
+
+# from boot import setup_jwt_proxy
+from util.secscan.api import SecurityScannerAPI
+from util.config.validators import BaseValidator, ConfigValidationException
+
+class SecurityScannerValidator(BaseValidator):
+  name = "security-scanner"
+
+  @classmethod
+  def validate(cls, validator_context):
+    """ Validates the configuration for talking to a Quay Security Scanner. """
+    config = validator_context.config
+    client = validator_context.http_client
+    feature_sec_scanner = validator_context.feature_sec_scanner
+    is_testing = validator_context.is_testing
+
+    server_hostname = validator_context.url_scheme_and_hostname.hostname
+    uri_creator = validator_context.uri_creator
+
+    if not feature_sec_scanner:
+      return
+
+    api = SecurityScannerAPI(config, None, server_hostname, client=client, skip_validation=True, uri_creator=uri_creator)
+
+    # if not is_testing:
+      # Generate a temporary Quay key to use for signing the outgoing requests.
+      # setup_jwt_proxy()
+
+    # We have to wait for JWT proxy to restart with the newly generated key.
+    max_tries = 5
+    response = None
+    last_exception = None
+
+    while max_tries > 0:
+      try:
+        response = api.ping()
+        last_exception = None
+        if response.status_code == 200:
+          return
+      except Exception as ex:
+        last_exception = ex
+
+      time.sleep(1)
+      max_tries = max_tries - 1
+
+    if last_exception is not None:
+      message = str(last_exception)
+      raise ConfigValidationException('Could not ping security scanner: %s' % message)
+    else:
+      message = 'Expected 200 status code, got %s: %s' % (response.status_code, response.text)
+      raise ConfigValidationException('Could not ping security scanner: %s' % message)