diff options
| author | Dan Duvall <dduvall@wikimedia.org> | 2018-03-09 14:33:13 -0800 |
|---|---|---|
| committer | Dan Duvall <dduvall@wikimedia.org> | 2018-03-22 14:02:43 -0700 |
| commit | cffb77e9dbb14db23ed11c24c68579bd75891f9d (patch) | |
| tree | c6eeb40099dc933cccd7b8a83b88f3156ffe9e39 /blubber.example.yaml | |
| parent | 50c5793952a725b5629c5dcd82f26b92716e628a (diff) | |
| download | blubber-cffb77e9dbb14db23ed11c24c68579bd75891f9d.tar.gz | |
Provide a `runs.insecurely` to be used with test variants
Summary:
Use cases involving running of test suites and doc generation require
more liberal ownership and read/write permission to application files.
When `runs.insecurely` is set to `true`, the effective runtime user will
be `lives.as`, the same user that owns the application files and
installed dependencies.
D999 is a complement to this change to allow restrictions on this and
other potentially sensitive configuration.
Depends on D999, D1002
Test Plan: Run `go test ./...`.
Reviewers: thcipriani, mmodell, hashar, #release-engineering-team, demon
Reviewed By: thcipriani, #release-engineering-team
Tags: #release-engineering-team
Differential Revision: https://phabricator.wikimedia.org/D1003
Diffstat (limited to 'blubber.example.yaml')
| -rw-r--r-- | blubber.example.yaml | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/blubber.example.yaml b/blubber.example.yaml index 5dc7233..e47eefb 100644 --- a/blubber.example.yaml +++ b/blubber.example.yaml @@ -28,6 +28,8 @@ variants: packages: [chromium] python: requirements: [requirements.txt, test-requirements.txt, docs/requirements.txt] + runs: + insecurely: true entrypoint: [npm, test] prep: |