freshmaker

#67 Initialize credential cache properly for API calls to Koji and ODCS
Closed: Fixed Opened by cqi.

Closed: Fixed
Reopen Issue

Freshmaker calls Koji API buildContainer to build container and ODCS API new_compose to request a new compose. Both of those requests are authenticated by Kerberos. When freshmaker runs in a server, local credential cache must be initialized properly with valid ticket in advance.

AC:

The solution should initialize credential cache automatically when necessary, no need of a manual operation, like execute kinit in terminal.

On the other hand, solution should also be friendly to development environment, especially when making a demo, where only kinit with personal kerberos account is enough.

@mikeb says you should be able to do this with the python-gssapi library.

@ralph Sure. I'm going to use https://github.com/krbcontext/python-krbcontext/, and I have been migrating it to python-gssapi, not finished yet. It is successfully used in PELC, that is at least one of use cases I know so far. With this library, it should be much easier to initialize ccache when necessary with less code.

:+1: - let's queue this up for next sprint?

I'm ok with it. @jkaluza what do you think?

I'm testing the migration to python-gssapi now in my spare time, the progress is a little bit slow. If this could be included as a task in sprint as well, it would be accelerated.

Some extra tasks would be to release new version and push to PyPI, request a new package in Fedora, and build in Brew internal.

Metadata Update from @cqi:
- Issue assigned to cqi

Metadata Update from @cqi:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.