Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-2941

Add aws-ip-ranges.json to downstream build

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • quay-v3.6.3
    • quay-v3.6.2
    • -area/ci
    • 0

    Description

      This was previously done in the quay-osbs[1] repo when manually pulling the sources.

      For upstream, this is done in the Dockerfile[2].

      None of these options work downstream. Dependencies can only be fetched via cachito, and cachito only downloads dependencies from package managers.

      We need to find a different solution where:

      • The ip ranges are kept up-to-date without human intervention
      • The ip ranges are updated on a schedule (every week? every month?)

      We could either store the files in the git repo and write some sort of automation to keep them up-to-date, or update the code that reads the file[3] to get the ip ranges and cache them on redis instead (setting a sensible expiration date).

      [1] https://github.com/quay/quay-osbs/blob/quay-3.6-rhel-8/Makefile#L16

      [2] https://github.com/quay/quay/blob/master/Dockerfile#L177

      [3] https://github.com/quay/quay/blob/master/util/ipresolver/__init__.py#L29

      Attachments

        Issue Links

          Activity

            People

              fmissi Flavian Missi
              fmissi Flavian Missi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: