File tree Expand file tree Collapse file tree
packages/reflex-hosting-cli/src/reflex_cli/v2
tests/units/reflex_cli/v2 Expand file tree Collapse file tree Original file line number Diff line number Diff line change 5757# Allowlist of host environment variables forwarded to the deploy script.
5858# We deliberately exclude things like AWS_*/GITHUB_TOKEN/SSH agent sockets so a
5959# compromised or tampered manifest cannot exfiltrate unrelated credentials.
60- DEPLOY_ENV_ALLOWLIST = frozenset (
61- {
62- "PATH" ,
63- "HOME" ,
64- "USER" ,
65- "LOGNAME" ,
66- "SHELL" ,
67- "TERM" ,
68- "LANG" ,
69- "LC_ALL" ,
70- "LC_CTYPE" ,
71- "TMPDIR" ,
72- "TEMP" ,
73- "TMP" ,
74- "XDG_CONFIG_HOME" ,
75- # gcloud configuration
76- "CLOUDSDK_CONFIG" ,
77- "CLOUDSDK_ACTIVE_CONFIG_NAME" ,
78- "CLOUDSDK_CORE_PROJECT" ,
79- "CLOUDSDK_CORE_ACCOUNT" ,
80- "CLOUDSDK_AUTH_ACCESS_TOKEN_FILE" ,
81- "GOOGLE_APPLICATION_CREDENTIALS" ,
82- # docker configuration
83- "DOCKER_HOST" ,
84- "DOCKER_TLS_VERIFY" ,
85- "DOCKER_CERT_PATH" ,
86- "DOCKER_CONFIG" ,
87- "DOCKER_BUILDKIT" ,
88- # corporate proxy / TLS trust
89- "HTTP_PROXY" ,
90- "HTTPS_PROXY" ,
91- "NO_PROXY" ,
92- "http_proxy" ,
93- "https_proxy" ,
94- "no_proxy" ,
95- "SSL_CERT_FILE" ,
96- "SSL_CERT_DIR" ,
97- "REQUESTS_CA_BUNDLE" ,
98- "CURL_CA_BUNDLE" ,
99- }
100- )
60+ DEPLOY_ENV_ALLOWLIST = frozenset ({
61+ "PATH" ,
62+ "HOME" ,
63+ "USER" ,
64+ "LOGNAME" ,
65+ "SHELL" ,
66+ "TERM" ,
67+ "LANG" ,
68+ "LC_ALL" ,
69+ "LC_CTYPE" ,
70+ "TMPDIR" ,
71+ "TEMP" ,
72+ "TMP" ,
73+ "XDG_CONFIG_HOME" ,
74+ # gcloud configuration
75+ "CLOUDSDK_CONFIG" ,
76+ "CLOUDSDK_ACTIVE_CONFIG_NAME" ,
77+ "CLOUDSDK_CORE_PROJECT" ,
78+ "CLOUDSDK_CORE_ACCOUNT" ,
79+ "CLOUDSDK_AUTH_ACCESS_TOKEN_FILE" ,
80+ "GOOGLE_APPLICATION_CREDENTIALS" ,
81+ # docker configuration
82+ "DOCKER_HOST" ,
83+ "DOCKER_TLS_VERIFY" ,
84+ "DOCKER_CERT_PATH" ,
85+ "DOCKER_CONFIG" ,
86+ "DOCKER_BUILDKIT" ,
87+ # corporate proxy / TLS trust
88+ "HTTP_PROXY" ,
89+ "HTTPS_PROXY" ,
90+ "NO_PROXY" ,
91+ "http_proxy" ,
92+ "https_proxy" ,
93+ "no_proxy" ,
94+ "SSL_CERT_FILE" ,
95+ "SSL_CERT_DIR" ,
96+ "REQUESTS_CA_BUNDLE" ,
97+ "CURL_CA_BUNDLE" ,
98+ })
10199
102100
103101@click .command (name = "deploy" )
Original file line number Diff line number Diff line change @@ -453,7 +453,7 @@ def test_build_cloudbuild_yaml_embeds_dockerfile_via_heredoc():
453453 heredoc_body = yaml [body_start :body_end ]
454454 # Every `$` in the heredoc body is part of a `$$` pair — i.e. no isolated `$`.
455455 assert "$" in heredoc_body # sanity
456- assert heredoc_body .replace ("$$" , "" ) .count ("$" ) == 0
456+ assert heredoc_body .replace ("$$" , "" ).count ("$" ) == 0
457457 # Concrete escapes are present.
458458 assert ' ENV PATH="$${UV_PROJECT_ENVIRONMENT}/bin:$$PATH"' in heredoc_body
459459 assert " RUN echo $$weird '\" chars\" ' \\ " in heredoc_body
You can’t perform that action at this time.
0 commit comments