6f722e4585
Since trust will break if Quay makes changes, disable all Quay tag-change APIs and build APIs+webhooks when trust is enabled on a repository. Once we get Quay signing things itself, we can revisit this.
50 lines
2.1 KiB
Python
50 lines
2.1 KiB
Python
import pytest
|
|
|
|
from data import model
|
|
from endpoints.api.build import RepositoryBuildList, RepositoryBuildResource
|
|
from endpoints.api.tag import RepositoryTag, RestoreTag
|
|
from endpoints.api.trigger import (BuildTrigger, BuildTriggerSubdirs,
|
|
BuildTriggerActivate, BuildTriggerAnalyze, ActivateBuildTrigger,
|
|
BuildTriggerFieldValues, BuildTriggerSources,
|
|
BuildTriggerSourceNamespaces)
|
|
from endpoints.api.test.shared import client_with_identity, conduct_api_call
|
|
from test.fixtures import app, appconfig, database_uri, init_db_path, sqlitedb_file
|
|
|
|
BUILD_ARGS = {'build_uuid': '1234'}
|
|
IMAGE_ARGS = {'imageid': '1234', 'image_id': 1234}
|
|
MANIFEST_ARGS = {'manifestref': 'sha256:abcd1234'}
|
|
LABEL_ARGS = {'manifestref': 'sha256:abcd1234', 'labelid': '1234'}
|
|
NOTIFICATION_ARGS = {'uuid': '1234'}
|
|
TAG_ARGS = {'tag': 'foobar'}
|
|
TRIGGER_ARGS = {'trigger_uuid': '1234'}
|
|
FIELD_ARGS = {'trigger_uuid': '1234', 'field_name': 'foobar'}
|
|
|
|
@pytest.mark.parametrize('resource, method, params', [
|
|
(RepositoryBuildList, 'post', None),
|
|
(RepositoryBuildResource, 'delete', BUILD_ARGS),
|
|
(RepositoryTag, 'put', TAG_ARGS),
|
|
(RepositoryTag, 'delete', TAG_ARGS),
|
|
(RestoreTag, 'post', TAG_ARGS),
|
|
(BuildTrigger, 'delete', TRIGGER_ARGS),
|
|
(BuildTriggerSubdirs, 'post', TRIGGER_ARGS),
|
|
(BuildTriggerActivate, 'post', TRIGGER_ARGS),
|
|
(BuildTriggerAnalyze, 'post', TRIGGER_ARGS),
|
|
(ActivateBuildTrigger, 'post', TRIGGER_ARGS),
|
|
(BuildTriggerFieldValues, 'post', FIELD_ARGS),
|
|
(BuildTriggerSources, 'post', TRIGGER_ARGS),
|
|
(BuildTriggerSourceNamespaces, 'get', TRIGGER_ARGS),
|
|
])
|
|
def test_disallowed_for_apps(resource, method, params, client):
|
|
namespace = 'devtable'
|
|
repository = 'somerepo'
|
|
|
|
devtable = model.user.get_user('devtable')
|
|
repo = model.repository.create_repository(namespace, repository, devtable, repo_kind='image')
|
|
model.repository.set_trust(repo, True)
|
|
|
|
params = params or {}
|
|
params['repository'] = '%s/%s' % (namespace, repository)
|
|
|
|
with client_with_identity('devtable', client) as cl:
|
|
conduct_api_call(cl, resource, method, params, None, 400)
|
|
|