mlrun 1.10.0rc39__py3-none-any.whl → 1.10.0rc40__py3-none-any.whl

mlrun/common/secrets.py

@@ -11,18 +11,10 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-import re
+
 from abc import ABC, abstractmethod
 
 import mlrun.common.schemas
-from mlrun.config import config as mlconf
-
-_AUTH_SECRET_NAME_TEMPLATE = re.escape(
-    mlconf.secret_stores.kubernetes.auth_secret_name.format(
-        hashed_access_key="",
-    )
-)
-AUTH_SECRET_PATTERN = re.compile(f"^{_AUTH_SECRET_NAME_TEMPLATE}.*")
 
 
 class SecretProviderInterface(ABC):

mlrun/model.py

@@ -29,7 +29,6 @@ import pydantic.v1.error_wrappers
 import mlrun
 import mlrun.common.constants as mlrun_constants
 import mlrun.common.schemas.notification
-import mlrun.common.secrets
 import mlrun.utils.regex
 
 from .utils import (
@@ -1617,14 +1616,7 @@ class RunTemplate(ModelObj):
 
         :returns: The RunTemplate object
         """
-        if kind == "azure_vault" and isinstance(source, dict):
-            candidate_secret_name = (source.get("k8s_secret") or "").strip()
-            if candidate_secret_name and mlrun.common.secrets.AUTH_SECRET_PATTERN.match(
-                candidate_secret_name
-            ):
-                raise mlrun.errors.MLRunInvalidArgumentError(
-                    f"Forbidden secret '{candidate_secret_name}' matches MLRun auth-secret pattern."
-                )
+
         if kind == "vault" and isinstance(source, list):
             source = {"project": self.metadata.project, "secrets": source}
 

mlrun/projects/project.py

@@ -45,7 +45,6 @@ import mlrun.common.runtimes.constants
 import mlrun.common.schemas.alert
 import mlrun.common.schemas.artifact
 import mlrun.common.schemas.model_monitoring.constants as mm_constants
-import mlrun.common.secrets
 import mlrun.datastore.datastore_profile
 import mlrun.db
 import mlrun.errors
@@ -3419,12 +3418,7 @@ class MlrunProject(ModelObj):
         self._initialized = True
         return self.spec._function_objects
 
-    def with_secrets(
-        self,
-        kind,
-        source,
-        prefix="",
-    ):
+    def with_secrets(self, kind, source, prefix=""):
         """register a secrets source (file, env or dict)
 
         read secrets from a source provider to be used in workflows, example::
@@ -3446,21 +3440,12 @@ class MlrunProject(ModelObj):
 
         This will enable access to all secrets in vault registered to the current project.
 
-        :param kind:   secret type (file, inline, env, vault, azure_vault)
+        :param kind:   secret type (file, inline, env, vault)
         :param source: secret data or link (see example)
         :param prefix: add a prefix to the keys in this source
 
         :returns: project object
         """
-        # Block using mlrun-auth-secrets.* via azure_vault's k8s_secret param (client-side only)
-        if kind == "azure_vault" and isinstance(source, dict):
-            candidate_secret_name = (source.get("k8s_secret") or "").strip()
-            if candidate_secret_name and mlrun.common.secrets.AUTH_SECRET_PATTERN.match(
-                candidate_secret_name
-            ):
-                raise mlrun.errors.MLRunInvalidArgumentError(
-                    f"Forbidden secret '{candidate_secret_name}' matches MLRun auth-secret pattern."
-                )
 
         if kind == "vault" and isinstance(source, list):
             source = {"project": self.metadata.name, "secrets": source}

mlrun/runtimes/mounts.py

@@ -17,8 +17,6 @@ import typing
 import warnings
 from collections import namedtuple
 
-import mlrun.common.secrets
-import mlrun.errors
 from mlrun.config import config
 from mlrun.config import config as mlconf
 from mlrun.errors import MLRunInvalidArgumentError
@@ -414,13 +412,6 @@ def mount_secret(
                          the specified paths, and unlisted keys will not be
                          present."""
 
-    if secret_name and mlrun.common.secrets.AUTH_SECRET_PATTERN.match(
-        secret_name.strip()
-    ):
-        raise mlrun.errors.MLRunInvalidArgumentError(
-            f"Forbidden secret '{secret_name}' matches MLRun auth-secret pattern."
-        )
-
     def _mount_secret(runtime: "KubeResource"):
         # Define the secret volume source
         secret_volume_source = {

mlrun/runtimes/nuclio/serving.py

@@ -44,7 +44,6 @@ from mlrun.serving.states import (
 )
 from mlrun.utils import get_caller_globals, logger, set_paths
 
-from ...common.secrets import AUTH_SECRET_PATTERN
 from .. import KubejobRuntime
 from ..pod import KubeResourceSpec
 from .function import NuclioSpec, RemoteRuntime, min_nuclio_versions
@@ -636,14 +635,7 @@ class ServingRuntime(RemoteRuntime):
 
         :returns: The Runtime (function) object
         """
-        if kind == "azure_vault" and isinstance(source, dict):
-            candidate_secret_name = (source.get("k8s_secret") or "").strip()
-            if candidate_secret_name and AUTH_SECRET_PATTERN.match(
-                candidate_secret_name
-            ):
-                raise mlrun.errors.MLRunInvalidArgumentError(
-                    f"Forbidden secret '{candidate_secret_name}' matches MLRun auth-secret pattern."
-                )
+
         if kind == "vault" and isinstance(source, list):
             source = {"project": self.metadata.project, "secrets": source}
 

mlrun/runtimes/pod.py

@@ -20,7 +20,6 @@ import typing
 import warnings
 from collections.abc import Iterable
 from enum import Enum
-from typing import Optional
 
 import dotenv
 import kubernetes.client as k8s_client
@@ -35,7 +34,6 @@ from mlrun.common.schemas import (
     SecurityContextEnrichmentModes,
 )
 
-from ..common.secrets import AUTH_SECRET_PATTERN
 from ..config import config as mlconf
 from ..k8s_utils import (
     generate_preemptible_nodes_affinity_terms,
@@ -710,44 +708,19 @@ class KubeResource(BaseRuntime):
     def spec(self, spec):
         self._spec = self._verify_dict(spec, "spec", KubeResourceSpec)
 
-    def set_env_from_secret(
-        self,
-        name: str,
-        secret: Optional[str] = None,
-        secret_key: Optional[str] = None,
-    ):
-        """Set env var from secret; block auth-secret usage on client side."""
-        self._validate_no_auth_secret(
-            secret_name=secret,
-        )
+    def set_env_from_secret(self, name, secret=None, secret_key=None):
+        """set pod environment var from secret"""
         secret_key = secret_key or name
         value_from = k8s_client.V1EnvVarSource(
-            secret_key_ref=k8s_client.V1SecretKeySelector(
-                name=secret,
-                key=secret_key,
-            )
-        )
-        return self._set_env(
-            name=name,
-            value_from=value_from,
+            secret_key_ref=k8s_client.V1SecretKeySelector(name=secret, key=secret_key)
         )
+        return self._set_env(name, value_from=value_from)
 
-    def set_env(
-        self,
-        name: str,
-        value: Optional[str] = None,
-        value_from: Optional[typing.Any] = None,
-    ):
-        """Set env var; block auth-secret usage when coming from a secret."""
-        if value_from is not None:
-            secret_name = self._extract_secret_name_from_value_from(
-                value_from=value_from,
-            )
-            self._validate_no_auth_secret(
-                secret_name=secret_name,
-            )
-            return self._set_env(name, value_from=value_from)
-        return self._set_env(name, value=str(value) if value is not None else None)
+    def set_env(self, name, value=None, value_from=None):
+        """set pod environment var from value"""
+        if value is not None:
+            return self._set_env(name, value=str(value))
+        return self._set_env(name, value_from=value_from)
 
     def with_annotations(self, annotations: dict):
         """set a key/value annotations in the metadata of the pod"""
@@ -1393,37 +1366,6 @@ class KubeResource(BaseRuntime):
 
         return self.status.state
 
-    @staticmethod
-    def _validate_no_auth_secret(
-        secret_name: Optional[str],
-    ):
-        """Raise if secret name matches MLRun auth-secret pattern."""
-        if secret_name and AUTH_SECRET_PATTERN.match(secret_name):
-            raise mlrun.errors.MLRunInvalidArgumentError(
-                f"Forbidden secret '{secret_name}' matches MLRun auth-secret pattern."
-            )
-
-    @staticmethod
-    def _extract_secret_name_from_value_from(
-        value_from: typing.Any,
-    ) -> Optional[str]:
-        """Extract secret name from a V1EnvVarSource or dict representation."""
-        if isinstance(value_from, k8s_client.V1EnvVarSource):
-            if value_from.secret_key_ref:
-                return value_from.secret_key_ref.name
-        elif isinstance(value_from, dict):
-            value_from = (
-                value_from.get("valueFrom")
-                or value_from.get("value_from")
-                or value_from
-            )
-            secret_key_ref = (value_from or {}).get("secretKeyRef") or (
-                value_from or {}
-            ).get("secret_key_ref")
-            if isinstance(secret_key_ref, dict):
-                return secret_key_ref.get("name")
-        return None
-
 
 def _resolve_if_type_sanitized(attribute_name, attribute):
     attribute_config = sanitized_attributes[attribute_name]

mlrun/utils/version/version.json

@@ -1,4 +1,4 @@
 {
-  "git_commit": "a8c2a4e78b2c7ad2c929bb0edce5d9db47c2baea",
-  "version": "1.10.0-rc39"
+  "git_commit": "3bb8c631304e89739430fbb6e6299e190fe6738a",
+  "version": "1.10.0-rc40"
 }

{mlrun-1.10.0rc39.dist-info → mlrun-1.10.0rc40.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mlrun
-Version: 1.10.0rc39
+Version: 1.10.0rc40
 Summary: Tracking and config of machine learning runs
 Home-page: https://github.com/mlrun/mlrun
 Author: Yaron Haviv

{mlrun-1.10.0rc39.dist-info → mlrun-1.10.0rc40.dist-info}/RECORD

@@ -6,7 +6,7 @@ mlrun/execution.py,sha256=Ozu8SjO-nQ6l5vHwqrTQjmP6koMpUqNQpp6qn6jvhVE,58802
 mlrun/features.py,sha256=jMEXo6NB36A6iaxNEJWzdtYwUmglYD90OIKTIEeWhE8,15841
 mlrun/k8s_utils.py,sha256=zIacVyvsXrXVO-DdxAoGQOGEDWOGJEFJzYPhPVnn3z8,24548
 mlrun/lists.py,sha256=OlaV2QIFUzmenad9kxNJ3k4whlDyxI3zFbGwr6vpC5Y,8561
-mlrun/model.py,sha256=KnLnJjGa7SsJO1LSTvoMQbmp3JN4LExA7yJqCXvgAY4,89444
+mlrun/model.py,sha256=JxYWYfMvRMloVEsxfghjH8gq5vsVCVk-OJmHGhbPJuU,88954
 mlrun/render.py,sha256=5DlhD6JtzHgmj5RVlpaYiHGhX84Q7qdi4RCEUj2UMgw,13195
 mlrun/run.py,sha256=BA0CPJqtcM3c-hMmnGl6AccRMyIejJxvCcrSXTwcRwU,49841
 mlrun/secrets.py,sha256=VFETVDJFZ0AGDivYjhYscO_YHnzeBnAebxlio7Svkq0,9633
@@ -24,7 +24,7 @@ mlrun/artifacts/plots.py,sha256=wmaxVXiAPSCyn3M7pIlcBu9pP3O8lrq0Ewx6iHRDF9s,4238
 mlrun/common/__init__.py,sha256=kXGBqhLN0rlAx0kTXhozGzFsIdSqW0uTSKMmsLgq_is,569
 mlrun/common/constants.py,sha256=BbKFJN6EoFSOmUmvos20ZAty8hWtwG0quTrfbLzrWO4,4294
 mlrun/common/helpers.py,sha256=DIdqs_eN3gO5bZ8iFobIvx8cEiOxYxhFIyut6-O69T0,1385
-mlrun/common/secrets.py,sha256=SCNLDIzC9-4r7CcJuJJxSAA89dUDcKD7g3yvSKIhqN4,5439
+mlrun/common/secrets.py,sha256=8g9xtIw-9DGcwiZRT62a5ozSQM-aYo8yK5Ghey9WM0g,5179
 mlrun/common/types.py,sha256=1gxThbmC0Vd0U1ffIkEwz4T4S7JOgHt70rvw8TCO21c,1073
 mlrun/common/db/__init__.py,sha256=kXGBqhLN0rlAx0kTXhozGzFsIdSqW0uTSKMmsLgq_is,569
 mlrun/common/db/dialects.py,sha256=QN9bx7CTo32IIdJ2J3ZrsX8IUdp_BPxBtl0LyjMEC9g,868
@@ -281,7 +281,7 @@ mlrun/platforms/iguazio.py,sha256=32_o95Ntx9z3ciowt2NcnX7tAiLBwX3VB0mbTQ-KrIQ,13
 mlrun/projects/__init__.py,sha256=hdCOA6_fp8X4qGGGT7Bj7sPbkM1PayWuaVZL0DkpuZw,1240
 mlrun/projects/operations.py,sha256=Oo7h0TMztI_RVmj0rQxNS1igS_c94HpQZwMIFjiWt0E,21038
 mlrun/projects/pipelines.py,sha256=ZOfuIEHOXfuc4qAkuWvbWhCjP6kqpLkv-yBBaY9RXhg,52219
-mlrun/projects/project.py,sha256=alWbBKoOl_fej8IyFB397r7JYPZkSlRXrSsmVaaQw8U,258335
+mlrun/projects/project.py,sha256=jSJ65upJ6zYRHly6aOQxBR6414Ypueg2iXE6XBjc-uQ,257695
 mlrun/runtimes/__init__.py,sha256=NSIk1xlUduSY3ZZ2tLmXegw1Z1im5_KjtbmsL874Z6s,9829
 mlrun/runtimes/base.py,sha256=CpIaml8nJbbPt8PQXDzy_AXbJ0LObRWk1lprRBDRYdI,38986
 mlrun/runtimes/daskjob.py,sha256=IN6gKKrmCIjWooj5FgFm-pAb2i7ra1ERRzClfu_rYGI,20102
@@ -290,8 +290,8 @@ mlrun/runtimes/function_reference.py,sha256=fnMKUEieKgy4JyVLhFpDtr6JvKgOaQP8F_K2
 mlrun/runtimes/generators.py,sha256=X8NDlCEPveDDPOHtOGcSpbl3pAVM3DP7fuPj5xVhxEY,7290
 mlrun/runtimes/kubejob.py,sha256=wadCzmSgjv9OU_Ax8CQNHfXLo0v-ev9ZGHUFGcNc9Qw,8577
 mlrun/runtimes/local.py,sha256=sbIFQdU-GBfAwESJGU06hiqXUiwjP6IVvbCieIPGQn4,22311
-mlrun/runtimes/mounts.py,sha256=S2nC5UaZFAl8N5HRyLkD9AUj7RqlPVSYVJcP9W8v4sg,19594
-mlrun/runtimes/pod.py,sha256=4GZCobICnLcIBCjIbdCRuL-4k7tu0CKXzv3iatKD_gg,60192
+mlrun/runtimes/mounts.py,sha256=Q6oN1ilVcsFaVM1DAS-mfCD7vGWa7Wa9aEhRrctJPyk,19292
+mlrun/runtimes/pod.py,sha256=HtSnhdfaT_rvYwybXjLowl3eOZSrRSyWqW7HYXuUT40,58252
 mlrun/runtimes/remotesparkjob.py,sha256=BalAea66GleaKeoYTw6ZL1Qr4wf1yRxfgk1-Fkc9Pqg,7864
 mlrun/runtimes/utils.py,sha256=b0T5Qm0WmbHk_I4d14ikzhhjymjIVedaifBi-ymKwOc,17733
 mlrun/runtimes/databricks_job/__init__.py,sha256=kXGBqhLN0rlAx0kTXhozGzFsIdSqW0uTSKMmsLgq_is,569
@@ -305,7 +305,7 @@ mlrun/runtimes/nuclio/__init__.py,sha256=osOVMN9paIOuUoOTizmkxMb_OXRP-SlPwXHJSSY
 mlrun/runtimes/nuclio/api_gateway.py,sha256=vH9ClKVP4Mb24rvA67xPuAvAhX-gAv6vVtjVxyplhdc,26969
 mlrun/runtimes/nuclio/function.py,sha256=vcW7IqCeLzxJ9YFBErqtEkp4MbgomFC1qWFTznBbNEY,56078
 mlrun/runtimes/nuclio/nuclio.py,sha256=sLK8KdGO1LbftlL3HqPZlFOFTAAuxJACZCVl1c0Ha6E,2942
-mlrun/runtimes/nuclio/serving.py,sha256=Y7wyqPrBS3Z-0QR6suGbqX36Cq-dKUwHI7zvO1fuLLo,39425
+mlrun/runtimes/nuclio/serving.py,sha256=r5j6ZQJmofrhb_TNQDT1Mu0jdb98ej5yWYSewgf7f5Y,38934
 mlrun/runtimes/nuclio/application/__init__.py,sha256=rRs5vasy_G9IyoTpYIjYDafGoL6ifFBKgBtsXn31Atw,614
 mlrun/runtimes/nuclio/application/application.py,sha256=eVOdGXZF23VMxRhR_cZYArxxaUKKXtEshtomFf-vp3E,34065
 mlrun/runtimes/nuclio/application/reverse_proxy.go,sha256=lEHH74vr2PridIHp1Jkc_NjkrWb5b6zawRrNxHQhwGU,2913
@@ -352,11 +352,11 @@ mlrun/utils/notifications/notification/mail.py,sha256=ZyJ3eqd8simxffQmXzqd3bgbAq
 mlrun/utils/notifications/notification/slack.py,sha256=wSu_7W0EnGLBNwIgWCYEeTP8j9SPAMPDBnfUcPnVZYA,7299
 mlrun/utils/notifications/notification/webhook.py,sha256=FM5-LQAKAVJKp37MRzR3SsejalcnpM6r_9Oe7znxZEA,5313
 mlrun/utils/version/__init__.py,sha256=YnzE6tlf24uOQ8y7Z7l96QLAI6-QEii7-77g8ynmzy0,613
-mlrun/utils/version/version.json,sha256=0zf1ul8-GHaXcJBnhG8fhsvEvZAHbHo2DlsdZIEg4mk,90
+mlrun/utils/version/version.json,sha256=d2kVwExSHA2hiyMjmiaPD_iZ5fjAznYTpHbWnGCOSVI,90
 mlrun/utils/version/version.py,sha256=M2hVhRrgkN3SxacZHs3ZqaOsqAA7B6a22ne324IQ1HE,1877
-mlrun-1.10.0rc39.dist-info/licenses/LICENSE,sha256=zTiv1CxWNkOk1q8eJS1G_8oD4gWpWLwWxj_Agcsi8Os,11337
-mlrun-1.10.0rc39.dist-info/METADATA,sha256=ZwFeqUwSkgA190q2yKK3LxcboenfDmI8VitS_siZVy0,26104
-mlrun-1.10.0rc39.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-mlrun-1.10.0rc39.dist-info/entry_points.txt,sha256=1Owd16eAclD5pfRCoJpYC2ZJSyGNTtUr0nCELMioMmU,46
-mlrun-1.10.0rc39.dist-info/top_level.txt,sha256=NObLzw3maSF9wVrgSeYBv-fgnHkAJ1kEkh12DLdd5KM,6
-mlrun-1.10.0rc39.dist-info/RECORD,,
+mlrun-1.10.0rc40.dist-info/licenses/LICENSE,sha256=zTiv1CxWNkOk1q8eJS1G_8oD4gWpWLwWxj_Agcsi8Os,11337
+mlrun-1.10.0rc40.dist-info/METADATA,sha256=mvE99J8jhZaTLDUcm4FJxCBBri3R8GeqOEwsN6dAxt4,26104
+mlrun-1.10.0rc40.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+mlrun-1.10.0rc40.dist-info/entry_points.txt,sha256=1Owd16eAclD5pfRCoJpYC2ZJSyGNTtUr0nCELMioMmU,46
+mlrun-1.10.0rc40.dist-info/top_level.txt,sha256=NObLzw3maSF9wVrgSeYBv-fgnHkAJ1kEkh12DLdd5KM,6
+mlrun-1.10.0rc40.dist-info/RECORD,,