Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: kurtosis github login #2113

Merged
merged 57 commits into from
Feb 7, 2024
Merged

feat: kurtosis github login #2113

merged 57 commits into from
Feb 7, 2024

Conversation

tedim52
Copy link
Contributor

@tedim52 tedim52 commented Feb 2, 2024

Description:

This change enables GitHub users over Docker to authorize with Kurtosis CLI so that Kurtosis can perform git operations such as cloning packages in private repositories. This primarily enables the use of private GitHub locators for package runs, import_module, and upload_files.

This is accomplished via an OAuth flow where kurtosis github login directs the user to authorize Kurtosis CLI to take actions on their behalf. A token is retrieved upon success and is used by Kurtosis for subsequent git operations. Kurtosis attempts to store the token in secure system storage, but if not found, the token is stored in a plain text file at kurtosis config path.

Github commands added:

  • kurtosis github login
  • kurtosis github logout
  • kurtosis github token
  • kurtosis github status

Flags added (these override existing GitHub login for one off authorization use cases):

  • kurtosis engine start --github-auth-token=< token.txt
  • kurtosis engine restart --github-auth-token=< token.txt

Is this change user facing?

YES

References:

#2020

Copy link

gitguardian bot commented Feb 2, 2024

️✅ There are no secrets present in this pull request anymore.

If these secrets were true positive and are still valid, we highly recommend you to revoke them.
Once a secret has been leaked into a git repository, you should consider it compromised, even if it was deleted immediately.
Find here more information about risks.


🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

Our GitHub checks need improvements? Share your feedbacks!

@tedim52 tedim52 requested a review from laurentluce February 7, 2024 16:27
cli/cli/commands/github/status/status.go Outdated Show resolved Hide resolved
cli/cli/helpers/github_auth_store/github_auth_store.go Outdated Show resolved Hide resolved
cli/cli/helpers/oauth/oauth.go Outdated Show resolved Hide resolved
cli/cli/helpers/oauth/oauth.go Show resolved Hide resolved
cli/cli/helpers/oauth/oauth.go Show resolved Hide resolved
@tedim52 tedim52 enabled auto-merge February 7, 2024 21:49
@tedim52 tedim52 added this pull request to the merge queue Feb 7, 2024
Merged via the queue into main with commit 2f0d638 Feb 7, 2024
38 checks passed
@tedim52 tedim52 deleted the tedi/privateloc branch February 7, 2024 22:13
github-merge-queue bot pushed a commit that referenced this pull request Feb 8, 2024
🤖 I have created a release *beep* *boop*
---


##
[0.86.16](0.86.15...0.86.16)
(2024-02-07)


### Features

* kurtosis github login
([#2113](#2113))
([2f0d638](2f0d638))


### Bug Fixes

* Remove Derek and Karla as default assignees for docs issues
([#2129](#2129))
([2f1eecc](2f1eecc))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

---------

Co-authored-by: kurtosisbot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants