Skip to content

fix: update some build permissions when the source repo is private#1351

Merged
leafty merged 10 commits into
mainfrom
leafty/fix-builds-no-peeking-2
Jun 29, 2026
Merged

fix: update some build permissions when the source repo is private#1351
leafty merged 10 commits into
mainfrom
leafty/fix-builds-no-peeking-2

Conversation

@leafty

@leafty leafty commented Jun 12, 2026

Copy link
Copy Markdown
Member

Closes #1347.

Updated permissions when the source repository is private:

API Endpoint db.py method Description Required Permission
GET /builds/<build_id> get_build() Get a single build item Project Read
GET /environments/<environment_id>/builds get_environment_builds() List the build history for a launcher Project Read
POST /environments/<environment_id>/builds start_build() Rebuild (build a new image for the launcher) Project Write + Repo Read
PATCH /builds/<build_id> update_build() Cancel a build Project Write
GET /builds/<build_id>/logs get_build_logs() Get a build's logs Project Write + Repo Read
- _refresh_build() Refresh build status Project Read (checked before calling)

Note: in the case of POST /environments/<environment_id>/builds, this avoids starting a build which would fail at the source step.

/deploy extra-values=dataService.imageBuilders.enabled=true,dataService.imageBuilders.strategyName=renku-buildpacks-v3,dataService.imageBuilders.outputImagePrefix=harbor.dev.renku.ch/renku-build/,dataService.imageBuilders.nodeSelector.renku.io/node-purpose=user,dataService.imageBuilders.tolerations[0].effect=NoSchedule,dataService.imageBuilders.tolerations[0].key=renku.io/dedicated,dataService.imageBuilders.tolerations[0].operator=Equal,dataService.imageBuilders.tolerations[0].value=user,dataService.imageBuilders.privateRepositoryBuilds.enabled=true,dataService.imageBuilders.privateRepositoryBuilds.outputPrivateImagePrefix=harbor.dev.renku.ch/renku-ci-private-images-build-private-project/,dataService.imageBuilders.privateRepositoryBuilds.pushPrivateSecretName=renku-build-private-docker-secret,dataService.imageBuilders.privateRepositoryBuilds.pullPrivateSecretName=renku-build-private-docker-secret

@RenkuBot

Copy link
Copy Markdown
Contributor

You can access the deployment of this PR at https://renku-ci-ds-1351.dev.renku.ch

@coveralls

coveralls commented Jun 23, 2026

Copy link
Copy Markdown

Coverage Report for CI Build 28375065596

Coverage at 86.203% (no base build to compare)

Details

  • Coverage remained the same as the base build.
  • Patch coverage: 14 uncovered changes across 1 file (5 of 19 lines covered, 26.32%).
  • No coverage regressions found.

Uncovered Changes

File Changed Covered %
components/renku_data_services/session/db.py 19 5 26.32%

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 31528
Covered Lines: 27178
Line Coverage: 86.2%
Coverage Strength: 1.49 hits per line

💛 - Coveralls

@leafty leafty marked this pull request as ready for review June 29, 2026 11:41
@leafty leafty requested review from a team, SalimKayal and sgaist as code owners June 29, 2026 11:41
Comment thread components/renku_data_services/session/db.py Outdated
leafty and others added 2 commits June 29, 2026 15:09
Co-authored-by: Samuel Gaist <samuel.gaist@idiap.ch>
@leafty leafty requested a review from sgaist June 29, 2026 13:20
@leafty leafty merged commit d978816 into main Jun 29, 2026
45 of 48 checks passed
@leafty leafty deleted the leafty/fix-builds-no-peeking-2 branch June 29, 2026 14:32
@RenkuBot

Copy link
Copy Markdown
Contributor

Tearing down the temporary RenkuLab deployment for this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Follow up from #1338: update builds permissions when the source is a private code repo

4 participants