opentf-toolkit-nightly 0.62.0.dev1333__py3-none-any.whl → 0.62.0.dev1342__py3-none-any.whl

opentf/commons/__init__.py

@@ -337,6 +337,11 @@ def _make_authenticator(context: Dict[str, Any]):
         ):
             g.insecure_login = True
             return None
+        if (
+            context.get('enable_insecure_healthcheck_endpoint')
+            and request.path == '/health'
+        ):
+            return None
         authz = request.headers.get('Authorization')
         if authz is None:
             return make_status_response('Unauthorized', 'No Bearer token')
@@ -461,6 +466,7 @@ def make_app(
     app.config['DESCRIPTOR'] = (
         descriptor if isinstance(descriptor, list) else [descriptor]
     )
+    app.route('/health', methods=['GET'])(lambda: 'OK')
     app.before_request(_make_authenticator(context))
     app.after_request(_add_securityheaders)
     return app
@@ -842,7 +848,10 @@ def validate_inputs(
     If `normalize` is set, non-normalized inputs are removed from the
     dictionary.
 
-    Choices values are validated.  Types are not checked.
+    Choices values are validated.
+
+    Types are enforced if declared as `boolean`, `number`, or `string`.
+    Conversion is performed if needed.
 
     # Required parameters
 
@@ -870,12 +879,33 @@ def validate_inputs(
                 raise ValueError(f'Mandatory input "{key}" not provided.')
             _set_default(inputs, key, definition)
             continue
-        if definition.get('type') == 'choice':
-            if (val := inputs.get(key)) not in definition['options']:
+        val = inputs.get(key)
+        type_ = definition.get('type')
+        if type_ == 'choice':
+            if val not in definition['options']:
                 allowed = '", "'.join(sorted(definition['options']))
                 raise ValueError(
                     f'Invalid value "{val}" for input "{key}".  Allowed values: "{allowed}".'
                 )
+        elif type_ == 'boolean' and not isinstance(val, bool):
+            if isinstance(val, str) and val.lower() in ('true', 'false'):
+                inputs[key] = val.lower() == 'true'
+                continue
+            raise ValueError(
+                f'Invalid value "{val}" for input "{key}".  Allowed values: "true", "false".'
+            )
+        elif type_ == 'number':
+            try:
+                inputs[key] = int(val)
+            except ValueError:
+                try:
+                    inputs[key] = float(val)
+                except ValueError:
+                    raise ValueError(
+                        f'Invalid value "{val}" for input "{key}".  Expected a number.'
+                    )
+        elif type_ == 'string':
+            inputs[key] = str(val)
 
     if additional_inputs:
         return

opentf/commons/auth.py

@@ -445,6 +445,7 @@ def initialize_authn_authz(args, context: Dict[str, Any]) -> None:
 
     - `--trusted-authorities`
     - `--enable-insecure-login`
+    - `--enable-insecure-healthcheck-endpoint`
     - `--insecure-bind-address`
     - `--authorization-mode` (ABAC, RBAC, JWT)
 
@@ -485,6 +486,14 @@ def initialize_authn_authz(args, context: Dict[str, Any]) -> None:
         context['enable_insecure_login'] = True
     if 'enable_insecure_login' not in context:
         context['enable_insecure_login'] = False
+    if args.enable_insecure_healthcheck_endpoint:
+        context['enable_insecure_healthcheck_endpoint'] = True
+    else:
+        ihe = os.environ.get('OPENTF_ENABLE_INSECURE_HEALTHCHECK_ENDPOINT')
+        if ihe and ihe.lower() in ('true', 'on', 'yes', '1'):
+            context['enable_insecure_healthcheck_endpoint'] = True
+    if 'enable_insecure_healthcheck_endpoint' not in context:
+        context['enable_insecure_healthcheck_endpoint'] = False
     if 'insecure_bind_address' not in context:
         context['insecure_bind_address'] = args.insecure_bind_address
     if args.trustedkeys_auth_file:

opentf/commons/config.py

@@ -109,6 +109,12 @@ def make_argparser(description: str, configfile: str) -> argparse.ArgumentParser
         '--trustedkeys-auth-file',
         help='authenticated trusted keys for ABAC and RBAC',
     )
+    parser.add_argument(
+        '--enable-insecure-healthcheck-endpoint',
+        '--enable_insecure_healthcheck_endpoint',
+        action='store_true',
+        help='enable insecure healthcheck endpoint (disabled by default)',
+    )
     return parser
 
 

{opentf_toolkit_nightly-0.62.0.dev1333.dist-info → opentf_toolkit_nightly-0.62.0.dev1342.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: opentf-toolkit-nightly
-Version: 0.62.0.dev1333
+Version: 0.62.0.dev1342
 Summary: OpenTestFactory Orchestrator Toolkit
 Home-page: https://gitlab.com/henixdevelopment/open-source/opentestfactory/python-toolkit
 Author: Martin Lafaix

{opentf_toolkit_nightly-0.62.0.dev1333.dist-info → opentf_toolkit_nightly-0.62.0.dev1342.dist-info}/RECORD

@@ -1,6 +1,6 @@
-opentf/commons/__init__.py,sha256=sa_sDz-XnbmJTqe9E_o6orixV9RoMLm-bqm-A3BRvvc,27210
-opentf/commons/auth.py,sha256=gXRp_0Tf3bfd65F4QiQmh6C6vR9y3ugag_0DSvozJFk,15898
-opentf/commons/config.py,sha256=RVSSdQhMle4oCo_z_AR2EQ4U6sUjSxw-qVBtjKuJVfo,10219
+opentf/commons/__init__.py,sha256=2Y6BWtwYPWdLPbf-96iQwmk-6fjRVtgbSCl4_j8NV6E,28326
+opentf/commons/auth.py,sha256=yUmAoZPk9Aru2UVT5xSjH96u9DOKPk17AeL1_12mjBM,16399
+opentf/commons/config.py,sha256=gcge4zou7wMgu3GTyM5vVZudTyEpuyi3JEY8cdCBf5A,10454
 opentf/commons/exceptions.py,sha256=7dhUXO8iyAbqVwlUKxZhgRzGqVcb7LkG39hFlm-VxIA,2407
 opentf/commons/expressions.py,sha256=jM_YKXVOFhvOE2aE2IuacuvxhIsOYTFs2oQkpcbWR6g,19645
 opentf/commons/meta.py,sha256=ygSO3mE2d-Ux62abzK1wYk86noT4R5Tumd90nyZo0MU,3322
@@ -59,8 +59,8 @@ opentf/scripts/startup.py,sha256=AcVXU2auPvqMb_6OpGzkVqrpgYV6vz7x_Rnv8YbAEkk,231
 opentf/toolkit/__init__.py,sha256=7MGAfKb5V9ckzWE8ozfj0PcC7g0a-0VfdyrClkWTk38,22319
 opentf/toolkit/channels.py,sha256=6qKSsAgq_oJpuDRiKqVUz-EAjdfikcCG3SFAGmKZdhQ,25551
 opentf/toolkit/core.py,sha256=fqnGgaYnuVcd4fyeNIwpc0QtyUo7jsKeVgdkBfY3iqo,9443
-opentf_toolkit_nightly-0.62.0.dev1333.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-opentf_toolkit_nightly-0.62.0.dev1333.dist-info/METADATA,sha256=Fw7qG9XcomeHvCOAz_zt_HxYs3nfs1ObRWYkYLV3ntA,2214
-opentf_toolkit_nightly-0.62.0.dev1333.dist-info/WHEEL,sha256=1tXe9gY0PYatrMPMDd6jXqjfpz_B-Wqm32CPfRC58XU,91
-opentf_toolkit_nightly-0.62.0.dev1333.dist-info/top_level.txt,sha256=_gPuE6GTT6UNXy1DjtmQSfCcZb_qYA2vWmjg7a30AGk,7
-opentf_toolkit_nightly-0.62.0.dev1333.dist-info/RECORD,,
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/METADATA,sha256=dzyod6IsHTN1wbSmbplog9qMCLxK8wJiNBNI6eug1eE,2214
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/WHEEL,sha256=CmyFI0kx5cdEMTLiONQRbGQwjIoR1aIYB7eCAQ4KPJ0,91
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/top_level.txt,sha256=_gPuE6GTT6UNXy1DjtmQSfCcZb_qYA2vWmjg7a30AGk,7
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/RECORD,,

{opentf_toolkit_nightly-0.62.0.dev1333.dist-info → opentf_toolkit_nightly-0.62.0.dev1342.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: setuptools (77.0.3)
+Generator: setuptools (78.1.0)
 Root-Is-Purelib: true
 Tag: py3-none-any