go icon indicating copy to clipboard operation
go copied to clipboard

Published 20 hours ago • verified publisher icon golang

x/build: revamp the security model used by gomote

Open cagedmantis opened this issue 4 years ago • 42 comments

This is a tracking issue for the redesign of the authentication for the gomote application. The gomote application will have the authentication method changed as well as the addition of an authorization layer. This work will be broken down into many steps which will be added here as they are fully decided upon:

  • [x] Collect metrics on gomote usage #48579
  • [ ] Update the gomote client to notify users of an upcoming change to authentication #48726
  • [x] Determine if a new DNS address is needed for gomote testing #48727
  • [x] Enable IAP #48728
  • [x] Configure HTTPS Load Balancers #49191
  • [x] Add Authentication #48729
  • [x] Add Authorization #48730
  • [x] Add proxy #48733
  • [x] Add gomote manager #48735
  • [x] Implement the gomote API #48742
  • [x] Add new gomote client commands #48737
  • [x] Add authentication to gomote client #48739
  • [x] Add certificate authentication to SSH Server #52594
  • [ ] Create IAM groups #48741
  • [x] List instances on farmer.golang.org
  • [ ] Ask users to request accounts #48725

@golang/release

cagedmantis avatar Aug 03 '21 18:08 cagedmantis

Change https://golang.org/cl/352809 mentions this issue: cmd/coordinator: add metrics for gomote usage

gopherbot avatar Sep 28 '21 15:09 gopherbot

Change https://golang.org/cl/356589 mentions this issue: internal/gomote/protos: add a skeleton for a gomote api

gopherbot avatar Oct 18 '21 18:10 gopherbot

Change https://golang.org/cl/358915 mentions this issue: internal/access: add access package

gopherbot avatar Oct 26 '21 21:10 gopherbot

Change https://golang.org/cl/361098 mentions this issue: internal/gomote, cmd/coordinator: add GRPC gomote server

gopherbot avatar Nov 03 '21 15:11 gopherbot

Change https://golang.org/cl/365735 mentions this issue: deploy: add GRPC servers to build.golang.org

gopherbot avatar Nov 19 '21 17:11 gopherbot

Change https://golang.org/cl/367554 mentions this issue: cmd/coordinator: set buildenv when on GCE

gopherbot avatar Nov 29 '21 16:11 gopherbot

Change https://golang.org/cl/370661 mentions this issue: dashboard: add privileged flag for builders

gopherbot avatar Dec 09 '21 19:12 gopherbot

Change https://golang.org/cl/377335 mentions this issue: buildenv: update iap backend service IDs

gopherbot avatar Jan 10 '22 18:01 gopherbot

Change https://go.dev/cl/391155 mentions this issue: internal/secret: add certificate authority entries for gomotes.

gopherbot avatar Mar 09 '22 19:03 gopherbot

Change https://go.dev/cl/391516 mentions this issue: internal/gomote, internal/coordinator/remote: add the sign SSH key endpoint implementation

gopherbot avatar Mar 10 '22 17:03 gopherbot

Change https://go.dev/cl/382494 mentions this issue: internal/gomote, buildlet: add execute command implementation

gopherbot avatar Mar 14 '22 15:03 gopherbot

Change https://go.dev/cl/397334 mentions this issue: all: update cloud.google.com/go/storage version

gopherbot avatar Mar 31 '22 18:03 gopherbot

Change https://go.dev/cl/397354 mentions this issue: all: update cloud.google.com/go/storage version

gopherbot avatar Mar 31 '22 18:03 gopherbot

Change https://go.dev/cl/397595 mentions this issue: internal/gomote, internal/gomote/protos: add the upload file endpoint

gopherbot avatar Apr 01 '22 19:04 gopherbot

Change https://go.dev/cl/397596 mentions this issue: internal/gomote, internal/gomote/protos: implement write files from URL

gopherbot avatar Apr 01 '22 19:04 gopherbot

Change https://go.dev/cl/397598 mentions this issue: internal/gomote, internal/gomote/protos: add read tgz endpoint

gopherbot avatar Apr 01 '22 19:04 gopherbot

Change https://go.dev/cl/397597 mentions this issue: internal/gomote: enable downloads from GCS bucket in WriteTGZFromURL

gopherbot avatar Apr 01 '22 19:04 gopherbot

Change https://go.dev/cl/397656 mentions this issue: cmd/gomote: add gomote GRPC client and authentication

gopherbot avatar Apr 01 '22 22:04 gopherbot

Change https://go.dev/cl/398054 mentions this issue: cmd/gomote: implement GRPC create command

gopherbot avatar Apr 04 '22 16:04 gopherbot

Change https://go.dev/cl/398056 mentions this issue: cmd/gomote: implements GRPC list command

gopherbot avatar Apr 04 '22 16:04 gopherbot

Change https://go.dev/cl/398055 mentions this issue: cmd/gomote: implements GRPC destroy command

gopherbot avatar Apr 04 '22 16:04 gopherbot

Change https://go.dev/cl/398496 mentions this issue: cmd/gomote: implements GRPC run command

gopherbot avatar Apr 05 '22 18:04 gopherbot

Change https://go.dev/cl/398495 mentions this issue: cmd/gomote: implements GRPC ls command

gopherbot avatar Apr 05 '22 18:04 gopherbot

Change https://go.dev/cl/398497 mentions this issue: cmd/coordinator: increase backend server timeout

gopherbot avatar Apr 05 '22 19:04 gopherbot

Change https://go.dev/cl/398696 mentions this issue: cmd/gomote: implements GRPC put14 command

gopherbot avatar Apr 06 '22 21:04 gopherbot

Change https://go.dev/cl/398695 mentions this issue: cmd/gomote: implements GRPC ping command

gopherbot avatar Apr 06 '22 21:04 gopherbot

Change https://go.dev/cl/405258 mentions this issue: cmd/coordinator, internal/coordinator/remote: add gomote instances to status

gopherbot avatar May 09 '22 21:05 gopherbot

Change https://go.dev/cl/405255 mentions this issue: cmd/coordinator, internal/coordinator/remote: move SSH server to internal package

gopherbot avatar May 09 '22 21:05 gopherbot

Change https://go.dev/cl/405257 mentions this issue: cmd/coordinator, internal/coordinator/remote: move handlers into internal package

gopherbot avatar May 09 '22 21:05 gopherbot

Change https://go.dev/cl/405514 mentions this issue: cmd/gomote: implements GRPC ssh command

gopherbot avatar May 10 '22 18:05 gopherbot

Change https://go.dev/cl/405515 mentions this issue: cmd/gomote: implements GRPC rm command

gopherbot avatar May 10 '22 18:05 gopherbot

Change https://go.dev/cl/405535 mentions this issue: internal/gomote: add object name to UploadFile endpoint

gopherbot avatar May 11 '22 01:05 gopherbot

Change https://go.dev/cl/406014 mentions this issue: internal/gomote: various updates

gopherbot avatar May 12 '22 19:05 gopherbot

Change https://go.dev/cl/406015 mentions this issue: cmd/gomote: implements GRPC put command

gopherbot avatar May 12 '22 19:05 gopherbot

Change https://go.dev/cl/405256 mentions this issue: internal/coordinator/remote: add certificate authentication to server

gopherbot avatar May 13 '22 16:05 gopherbot

Change https://go.dev/cl/406334 mentions this issue: deploy: correct IAP backend timeout

gopherbot avatar May 13 '22 22:05 gopherbot

Change https://go.dev/cl/406857 mentions this issue: cmd/gomote: implements GRPC gettar command

gopherbot avatar May 17 '22 16:05 gopherbot

Change https://go.dev/cl/407878 mentions this issue: cmd/gomote: implements GRPC puttar command

gopherbot avatar May 23 '22 16:05 gopherbot

Change https://go.dev/cl/410818 mentions this issue: internal/gomote,cmd/gomote: implements GRPC add bootstrap

gopherbot avatar Jun 07 '22 17:06 gopherbot

Change https://go.dev/cl/410819 mentions this issue: cmd/gomote: implements GRPC push command

gopherbot avatar Jun 07 '22 17:06 gopherbot

Change https://go.dev/cl/411065 mentions this issue: internal/gomote: fix ExecuteCommand

gopherbot avatar Jun 10 '22 22:06 gopherbot

Change https://go.dev/cl/412374 mentions this issue: cmd/gomote: adds missing field to GRPC push

gopherbot avatar Jun 15 '22 15:06 gopherbot

Change https://go.dev/cl/423999 mentions this issue: cmd/gomote: make the GRPC gomote API the default

gopherbot avatar Aug 16 '22 17:08 gopherbot