Project

General

Profile

Actions

Bug #23211

closed

Refine a-c-r search logic for "all buckets" credential

Added by Brett Smith 5 months ago. Updated 5 months ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Category:
CWL
Target version:
Story points:
-
Release relationship:
Auto

Description

  • Change the filter to search for ["scopes", "contains", "s3://*"]
  • Update the user guide and any other non-reference documentation to match.

Subtasks 1 (0 open1 closed)

Task #23220: Review 23211-credentials-searchResolvedBrett Smith10/27/2025Actions

Related issues 1 (0 open1 closed)

Related to Arvados - Feature #23210: Stricter validation of credential_class and scopes on credentialsResolvedLisa KnoxActions
Actions #1

Updated by Brett Smith 5 months ago

  • Related to Feature #23210: Stricter validation of credential_class and scopes on credentials added
Actions #2

Updated by Brett Smith 5 months ago

  • Subtask #23220 added
Actions #3

Updated by Brett Smith 5 months ago

  • Release set to 79
Actions #4

Updated by Brett Smith 5 months ago

23211-credentials-search @ 246c5e87d14c2befb708372e31be8ccb9e725672 - developer-run-tests: #4924

Note this branch is based off the branch from #23210 to prevent a merge conflict. I have reviewed that branch and I'm happy with the implementation changes, including the changes to a-c-r that this touches. The changes you really need to review are all in b646d889128e47a9f6328c96a95c799c7c28a44c. The other commit is a trivial documentation typo fix.

  • All agreed upon points are implemented / addressed. Describe changes from pre-implementation design.
    • Yes
  • Anything not implemented (discovered or discussed during work) has a follow-up story.
    • N/A
  • Code is tested and passing, both automated and manual, what manual testing was done is described.
    • Manually tested the different cases and confirmed they all basically work as expected. It would be nice to add automatic tests for this, but it would be a better use of time to do that as part of #23205.
  • Tested code incorporates recent main branch changes.
    • See above about being based on #23210
  • New or changed UI/UX and has gotten feedback from stakeholders.
    • Using s3://* to match any bucket was discussed and agreed post-standup.
  • Documentation has been updated.
    • Yes
  • Behaves appropriately at the intended scale (describe intended scale).
    • No change
  • Considered backwards and forwards compatibility issues between client and server.
    • Because credentials have not been in any Arvados release yet, this change to semantics is okay (and this is the best time to do it)
  • Follows our coding standards and GUI style guidelines.
    • Yes
Actions #5

Updated by Zoë Ma 5 months ago

LGTM! Just a note; I did a quick grep for the Python structural match syntax used in this changeset in the current Arvados codebase (the command was ag -G '.+\.py' '^\s*(match|case) .+:'). And this would be the first instance of the match/case syntax. Congrats! :)

Actions #6

Updated by Brett Smith 5 months ago

Thanks for the quick review.

Zoë Ma wrote in #note-5:

And this would be the first instance of the match/case syntax. Congrats! :)

It only very recently became possible after we made Python 3.10 the minimum version in #23097.

Actions #7

Updated by Brett Smith 5 months ago

  • Status changed from New to Resolved
Actions

Also available in: Atom PDF