diff options
authordistix ticketing system <>2018-09-06 18:17:11 +0000
committerdistix ticketing system <>2018-09-06 18:17:11 +0000
commit0e88052b306b7b4320daaded8d282ebd0dc96058 (patch)
parentb659f8a30ce5dfa6b4c13a05d06846233415b9d5 (diff)
imported mails
5 files changed, 150 insertions, 0 deletions
diff --git a/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/cur/.this-dir-not-empty/.empty/empty-file b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/cur/.this-dir-not-empty/.empty/empty-file
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/cur/.this-dir-not-empty/.empty/empty-file
diff --git a/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/new/.this-dir-not-empty/.empty/empty-file b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/new/.this-dir-not-empty/.empty/empty-file
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/new/.this-dir-not-empty/.empty/empty-file
diff --git a/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/new/1536257831.M386312P23713Q1.koom b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/new/1536257831.M386312P23713Q1.koom
new file mode 100644
index 0000000..d723b2b
--- /dev/null
+++ b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/new/1536257831.M386312P23713Q1.koom
@@ -0,0 +1,144 @@
+Return-Path: <>
+Received: from ( [])
+ by (Postfix) with ESMTPS id D13E94358F
+ for <>; Thu, 6 Sep 2018 18:16:51 +0000 (UTC)
+Received: from (unknown [])
+ by (Postfix) with ESMTP id 9CE11414C5
+ for <>; Thu, 6 Sep 2018 19:16:51 +0100 (BST)
+Received: from ip6-localhost.nat ([::1]
+ by with esmtp (Exim 4.80 #2 (Debian))
+ id 1fxypn-0003vf-HE; Thu, 06 Sep 2018 19:16:51 +0100
+Received: from ([]
+ by with esmtpsa (Exim 4.80 #2 (Debian))
+ id 1fxypm-0003vR-1U
+ for <>; Thu, 06 Sep 2018 19:16:50 +0100
+Received: from exolobe3 ( [])
+ by (Postfix) with ESMTPSA id 80A6340898
+ for <>; Thu, 6 Sep 2018 18:16:49 +0000 (UTC)
+Message-ID: <>
+From: Lars Wirzenius <>
+To: ick discussions <>
+Date: Thu, 06 Sep 2018 21:16:47 +0300
+User-Agent: Evolution 3.30.0-1
+Mime-Version: 1.0
+X-Pepperfish-Transaction: 9d8e-6cfb-6392-7cdc
+X-Pepperfish-Transaction-By: platypus
+Subject: Ick planning: what next?
+X-Mailman-Version: 2.1.5
+Precedence: list
+List-Id: discussions about the ick CI system <>
+List-Unsubscribe: <>,
+ <>
+List-Archive: <>
+List-Post: <>
+List-Help: <>
+List-Subscribe: <>,
+ <>
+Content-Type: multipart/mixed; boundary="===============6309345869005290914=="
+Mime-version: 1.0
+Content-Type: multipart/signed; micalg="pgp-sha512";
+ protocol="application/pgp-signature"; boundary="=-W0owP7QZKqnCdVp5zpkK"
+Content-Type: text/plain; charset="UTF-8"
+Content-Transfer-Encoding: quoted-printable
+Ick has been a little on the backburner lately, while I sort out some
+personal and work stuff. However, it would be good to have a little
+discussion about where we should take ick next.
+Current status is that the controller works and builds happen. There is
+_very_ rudimentary web application.
+It is clear to me, after talking to various people, that a web interface
+for ick should be a high priority. I'm not good with front-end web stuff,
+so that's something I'd really like help with.
+A pre-requisite for an ick web application is to make end-user
+authentication more sensible. At the moment, the web application allows the
+user to log in, and that works. However, the command line application,
+icktool, requires a different set of credential.
+Technically, the web application uses the OpenID Connect authorization code
+flow for login, and ickdtool uses the OAuth2 client credentials grant. I
+think this needs to be handled so that the web application is changed to
+allow the user to create an "API token", which icktool can use to access
+the controller. This allows the user to only have one set of credentials,
+which is much more sane.
+The API token will be an extension to OIDC, and will allow icktool to
+retreive a standard access token, for actually accessing the controller
+API. The access token will identify the user.
+When all API use identifies the user, we can change ick to assign an owner
+to each resource (project, pipeline, build, build log, artifact), and
+restrict users to only see, create, modify, and delete their own artifacts.
+This, in turn, will take ick much closer to being a "hostable service",
+where different users are more or less safe from each other.
+What do you all think about this? Is there something you'd really like to
+see in ick, before or after the above? Please say, the floor is open for
+dreams, fantasies, and wishes.
+The ick web application will be using the RESTful HTTP APIs of the various
+ick components, but can otherwise be separate from them. It can be
+implemented in any language and way, as long as the user is happy to use it
+and it uses Qvisqve for end-user authenticattion and the ick APIs for drive
+ick. I'd like the web application to be free software, built using tools in
+Debian, and have no dependencies outside what is packaged in Debian.
+However, I realise that's a difficult request in the modern world of web
+development, so I'm willing to discuss the build and runtime dependencies,
+though not the freedom.
+If web application front-ends are something you like working on, please say
+so. I'd really appreciate any help with the front-end.
+Content-Type: application/pgp-signature; name="signature.asc"
+Content-Description: This is a digitally signed message part
+Content-Transfer-Encoding: 7bit
+Content-Type: text/plain; charset="us-ascii"
+MIME-Version: 1.0
+Content-Transfer-Encoding: 7bit
+Content-Disposition: inline
+ick-discuss mailing list
diff --git a/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/tmp/.this-dir-not-empty/.empty/empty-file b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/tmp/.this-dir-not-empty/.empty/empty-file
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/Maildir/tmp/.this-dir-not-empty/.empty/empty-file
diff --git a/tickets/7e97db8f0e9e41c0a3b7da293ea89686/ticket.yaml b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/ticket.yaml
new file mode 100644
index 0000000..47e55ed
--- /dev/null
+++ b/tickets/7e97db8f0e9e41c0a3b7da293ea89686/ticket.yaml
@@ -0,0 +1,6 @@
+- open
+- 7e97db8f0e9e41c0a3b7da293ea89686
+- 'Ick planning: what next?'