2017-02-14 22:52:02 +00:00
|
|
|
module API
|
|
|
|
module Helpers
|
2017-02-16 00:30:46 +00:00
|
|
|
module Runner
|
2017-02-28 12:29:52 +00:00
|
|
|
JOB_TOKEN_HEADER = 'HTTP_JOB_TOKEN'
|
|
|
|
JOB_TOKEN_PARAM = :token
|
2017-02-15 17:08:29 +00:00
|
|
|
UPDATE_RUNNER_EVERY = 10 * 60
|
|
|
|
|
2017-02-14 22:52:02 +00:00
|
|
|
def runner_registration_token_valid?
|
2017-02-16 00:20:17 +00:00
|
|
|
ActiveSupport::SecurityUtils.variable_size_secure_compare(params[:token],
|
|
|
|
current_application_settings.runners_registration_token)
|
2017-02-14 22:52:02 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
def get_runner_version_from_params
|
|
|
|
return unless params['info'].present?
|
|
|
|
attributes_for_keys(%w(name version revision platform architecture), params['info'])
|
|
|
|
end
|
|
|
|
|
|
|
|
def authenticate_runner!
|
|
|
|
forbidden! unless current_runner
|
|
|
|
end
|
|
|
|
|
|
|
|
def current_runner
|
|
|
|
@runner ||= ::Ci::Runner.find_by_token(params[:token].to_s)
|
|
|
|
end
|
2017-02-15 17:08:29 +00:00
|
|
|
|
|
|
|
def update_runner_info
|
|
|
|
return unless update_runner?
|
|
|
|
|
|
|
|
current_runner.contacted_at = Time.now
|
|
|
|
current_runner.assign_attributes(get_runner_version_from_params)
|
|
|
|
current_runner.save if current_runner.changed?
|
|
|
|
end
|
|
|
|
|
|
|
|
def update_runner?
|
|
|
|
# Use a random threshold to prevent beating DB updates.
|
|
|
|
# It generates a distribution between [40m, 80m].
|
|
|
|
#
|
|
|
|
contacted_at_max_age = UPDATE_RUNNER_EVERY + Random.rand(UPDATE_RUNNER_EVERY)
|
|
|
|
|
|
|
|
current_runner.contacted_at.nil? ||
|
2017-02-16 00:38:53 +00:00
|
|
|
(Time.now - current_runner.contacted_at) >= contacted_at_max_age
|
2017-02-15 17:08:29 +00:00
|
|
|
end
|
|
|
|
|
2017-02-28 11:52:08 +00:00
|
|
|
def job_not_found!
|
2017-02-15 17:08:29 +00:00
|
|
|
if headers['User-Agent'].to_s.match(/gitlab(-ci-multi)?-runner \d+\.\d+\.\d+(~beta\.\d+\.g[0-9a-f]+)? /)
|
|
|
|
no_content!
|
|
|
|
else
|
|
|
|
not_found!
|
|
|
|
end
|
|
|
|
end
|
2017-02-28 11:52:08 +00:00
|
|
|
|
|
|
|
def validate_job!(job)
|
|
|
|
not_found! unless job
|
|
|
|
|
|
|
|
yield if block_given?
|
|
|
|
|
|
|
|
forbidden!('Project has been deleted!') unless job.project
|
|
|
|
forbidden!('Job has been erased!') if job.erased?
|
|
|
|
end
|
2017-02-28 12:29:52 +00:00
|
|
|
|
|
|
|
def authenticate_job!(job)
|
|
|
|
validate_job!(job) do
|
|
|
|
forbidden! unless job_token_valid?(job)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def job_token_valid?(job)
|
|
|
|
token = (params[JOB_TOKEN_PARAM] || env[JOB_TOKEN_HEADER]).to_s
|
|
|
|
token && job.valid_token?(token)
|
|
|
|
end
|
2017-02-28 13:27:25 +00:00
|
|
|
|
|
|
|
def max_artifacts_size
|
|
|
|
current_application_settings.max_artifacts_size.megabytes.to_i
|
|
|
|
end
|
2017-02-14 22:52:02 +00:00
|
|
|
end
|
|
|
|
end
|
2017-02-16 00:20:17 +00:00
|
|
|
end
|