mirror of
https://github.com/wahyd4/gitlabhq.git
synced 2026-08-11 21:56:19 +10:00
Kamil Trzcinski
447f1e30db
This solves https://dev.gitlab.org/gitlab/gitlabhq/issues/2646 1. This MR simplifies CI permission model: - read_build: allows to read a list of builds, artifacts and trace - update_build: allows to cancel and retry builds - admin_build: allows to manage triggers, runners and variables - read_commit_status: allows to read a list of commit statuses (including the status of a build, but doesn't allow to see a build details) - create_commit_status: allows to create a new commit status using API 2. I do make sure that the proper permissions are used in all places where the CI can be shown. 3. Add the `read_build` ability if user is anonymous or guest and allow_guest_to_access_builds is enabled. 4. Add CI setting: public_builds. 5. The artifacts specific permission are removed, since they are covered by `*_build`.
118 lines
3.6 KiB
Ruby
118 lines
3.6 KiB
Ruby
module API
|
|
# Triggers API
|
|
class Triggers < Grape::API
|
|
resource :projects do
|
|
# Trigger a GitLab project build
|
|
#
|
|
# Parameters:
|
|
# id (required) - The ID of a CI project
|
|
# ref (required) - The name of project's branch or tag
|
|
# token (required) - The uniq token of trigger
|
|
# variables (optional) - The list of variables to be injected into build
|
|
# Example Request:
|
|
# POST /projects/:id/trigger/builds
|
|
post ":id/trigger/builds" do
|
|
required_attributes! [:ref, :token]
|
|
|
|
project = Project.find_with_namespace(params[:id]) || Project.find_by(id: params[:id])
|
|
trigger = Ci::Trigger.find_by_token(params[:token].to_s)
|
|
not_found! unless project && trigger
|
|
unauthorized! unless trigger.project == project
|
|
|
|
# validate variables
|
|
variables = params[:variables]
|
|
if variables
|
|
unless variables.is_a?(Hash)
|
|
render_api_error!('variables needs to be a hash', 400)
|
|
end
|
|
|
|
unless variables.all? { |key, value| key.is_a?(String) && value.is_a?(String) }
|
|
render_api_error!('variables needs to be a map of key-valued strings', 400)
|
|
end
|
|
|
|
# convert variables from Mash to Hash
|
|
variables = variables.to_h
|
|
end
|
|
|
|
# create request and trigger builds
|
|
trigger_request = Ci::CreateTriggerRequestService.new.execute(project, trigger, params[:ref].to_s, variables)
|
|
if trigger_request
|
|
present trigger_request, with: Entities::TriggerRequest
|
|
else
|
|
errors = 'No builds created'
|
|
render_api_error!(errors, 400)
|
|
end
|
|
end
|
|
|
|
# Get triggers list
|
|
#
|
|
# Parameters:
|
|
# id (required) - The ID of a project
|
|
# page (optional) - The page number for pagination
|
|
# per_page (optional) - The value of items per page to show
|
|
# Example Request:
|
|
# GET /projects/:id/triggers
|
|
get ':id/triggers' do
|
|
authenticate!
|
|
authorize! :admin_build, user_project
|
|
|
|
triggers = user_project.triggers.includes(:trigger_requests)
|
|
triggers = paginate(triggers)
|
|
|
|
present triggers, with: Entities::Trigger
|
|
end
|
|
|
|
# Get specific trigger of a project
|
|
#
|
|
# Parameters:
|
|
# id (required) - The ID of a project
|
|
# token (required) - The `token` of a trigger
|
|
# Example Request:
|
|
# GET /projects/:id/triggers/:token
|
|
get ':id/triggers/:token' do
|
|
authenticate!
|
|
authorize! :admin_build, user_project
|
|
|
|
trigger = user_project.triggers.find_by(token: params[:token].to_s)
|
|
return not_found!('Trigger') unless trigger
|
|
|
|
present trigger, with: Entities::Trigger
|
|
end
|
|
|
|
# Create trigger
|
|
#
|
|
# Parameters:
|
|
# id (required) - The ID of a project
|
|
# Example Request:
|
|
# POST /projects/:id/triggers
|
|
post ':id/triggers' do
|
|
authenticate!
|
|
authorize! :admin_build, user_project
|
|
|
|
trigger = user_project.triggers.create
|
|
|
|
present trigger, with: Entities::Trigger
|
|
end
|
|
|
|
# Delete trigger
|
|
#
|
|
# Parameters:
|
|
# id (required) - The ID of a project
|
|
# token (required) - The `token` of a trigger
|
|
# Example Request:
|
|
# DELETE /projects/:id/triggers/:token
|
|
delete ':id/triggers/:token' do
|
|
authenticate!
|
|
authorize! :admin_build, user_project
|
|
|
|
trigger = user_project.triggers.find_by(token: params[:token].to_s)
|
|
return not_found!('Trigger') unless trigger
|
|
|
|
trigger.destroy
|
|
|
|
present trigger, with: Entities::Trigger
|
|
end
|
|
end
|
|
end
|
|
end
|