No description
- Perl 100%
Andrew Lukoshko
22aa1eab4c
The #7481 backport in -4 makes openqa-clone-job request unredacted settings, but create_url_handler() builds the source-host client with apikey/apisecret explicitly set to undef. The request is therefore anonymous, the API keeps returning '[redacted]', and clones still store secrets such as ROOT_PASSWORD as that literal string (verified on openqa.almalinux.org with -4: the new warning fires and the value is still redacted). Upstream master has the same anonymous client. Authenticate those API reads with the credentials configured for the source host itself in client.conf, as asset downloads from that host already do via read_secrets(). A source host without its own configured credentials still gets anonymous requests, and the destination host's credentials are never sent to it. Adds a t/35-script_clone_job.t subtest covering both cases. Verified on openqa.almalinux.org: with the patched CloneJob.pm a clone of job 22300 stores the real ROOT_PASSWORD. %prep applies and t/35-script_clone_job.t passes. |
||
|---|---|---|
| SOURCES | ||
| SPECS | ||
| .gitignore | ||
| .openqa.metadata | ||