-
Notifications
You must be signed in to change notification settings - Fork 7.2k
[ci] refactor auth out of copy_files #60614
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
|
Reviews in this chain: |
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Code Review
This pull request refactors authentication logic into a new centralized library, ci/ray_ci/rayci_auth.py, which is a great improvement for code organization and reusability. The new implementation for Docker Hub login also enhances security by using --password-stdin, preventing password exposure in the process list. My review focuses on the new rayci_auth.py file, offering suggestions to improve its robustness, maintainability, and error handling.
68188cc to
7452f4c
Compare
2195731 to
e8e58b5
Compare
54061a8 to
9fc08d8
Compare
e8e58b5 to
26fe123
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
aa87d9d to
c6a71b7
Compare
26fe123 to
60f859b
Compare
c6a71b7 to
86e7fb9
Compare
557b8d7 to
99cf7b7
Compare
86e7fb9 to
6f67b57
Compare
6f67b57 to
c77beb5
Compare
f43d7b0 to
aa0695a
Compare
c77beb5 to
ecb0349
Compare
aa0695a to
2b49072
Compare
ecb0349 to
89c3834
Compare
2b49072 to
44aa52e
Compare
For the Wanda version of building each Ray Image, we want to selectively upload to DockerHub only in certain postsubmit cases. Rather than calling on 'buildkite:copy_files --destination docker_login' separately, this refactor pushes the auth setup to a central library that can be called on certain conditions. Without this, logic would need to be pushed into the Rayci step itself, since current login is gated on a per-Pipeline-ID basis. Topic: auth-refactor Relative: multiplat-support Labels: draft Signed-off-by: andrew <andrew@anyscale.com>
89c3834 to
44f98a4
Compare
aslonnie
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
why is this in draft? is this ready for review?
| mock_config, | ||
| mock_exists, | ||
| mock_copy, | ||
| mock_ecr_login, | ||
| mock_ci_init, | ||
| mock_docker_login, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
these are a lot of mocks.. we probably need to talk about this in person..
For the Wanda version of building each Ray Image, we want to selectively upload to DockerHub only in certain postsubmit cases. Rather than calling on 'buildkite:copy_files --destination docker_login' separately, this refactor pushes the auth setup to a central library that can be called on certain conditions.
Without this, logic would need to be pushed into the Rayci step itself, since current login is gated on a per-Pipeline-ID basis.
Topic: auth-refactor
Relative: multiplat-support
Labels: draft
Signed-off-by: andrew andrew@anyscale.com