opentf-toolkit-nightly 0.62.0.dev1338__py3-none-any.whl → 0.62.0.dev1342__py3-none-any.whl

opentf/commons/__init__.py

@@ -337,6 +337,11 @@ def _make_authenticator(context: Dict[str, Any]):
         ):
             g.insecure_login = True
             return None
+        if (
+            context.get('enable_insecure_healthcheck_endpoint')
+            and request.path == '/health'
+        ):
+            return None
         authz = request.headers.get('Authorization')
         if authz is None:
             return make_status_response('Unauthorized', 'No Bearer token')
@@ -461,6 +466,7 @@ def make_app(
     app.config['DESCRIPTOR'] = (
         descriptor if isinstance(descriptor, list) else [descriptor]
     )
+    app.route('/health', methods=['GET'])(lambda: 'OK')
     app.before_request(_make_authenticator(context))
     app.after_request(_add_securityheaders)
     return app

opentf/commons/auth.py

@@ -445,6 +445,7 @@ def initialize_authn_authz(args, context: Dict[str, Any]) -> None:
 
     - `--trusted-authorities`
     - `--enable-insecure-login`
+    - `--enable-insecure-healthcheck-endpoint`
     - `--insecure-bind-address`
     - `--authorization-mode` (ABAC, RBAC, JWT)
 
@@ -485,6 +486,14 @@ def initialize_authn_authz(args, context: Dict[str, Any]) -> None:
         context['enable_insecure_login'] = True
     if 'enable_insecure_login' not in context:
         context['enable_insecure_login'] = False
+    if args.enable_insecure_healthcheck_endpoint:
+        context['enable_insecure_healthcheck_endpoint'] = True
+    else:
+        ihe = os.environ.get('OPENTF_ENABLE_INSECURE_HEALTHCHECK_ENDPOINT')
+        if ihe and ihe.lower() in ('true', 'on', 'yes', '1'):
+            context['enable_insecure_healthcheck_endpoint'] = True
+    if 'enable_insecure_healthcheck_endpoint' not in context:
+        context['enable_insecure_healthcheck_endpoint'] = False
     if 'insecure_bind_address' not in context:
         context['insecure_bind_address'] = args.insecure_bind_address
     if args.trustedkeys_auth_file:

opentf/commons/config.py

@@ -109,6 +109,12 @@ def make_argparser(description: str, configfile: str) -> argparse.ArgumentParser
         '--trustedkeys-auth-file',
         help='authenticated trusted keys for ABAC and RBAC',
     )
+    parser.add_argument(
+        '--enable-insecure-healthcheck-endpoint',
+        '--enable_insecure_healthcheck_endpoint',
+        action='store_true',
+        help='enable insecure healthcheck endpoint (disabled by default)',
+    )
     return parser
 
 

{opentf_toolkit_nightly-0.62.0.dev1338.dist-info → opentf_toolkit_nightly-0.62.0.dev1342.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: opentf-toolkit-nightly
-Version: 0.62.0.dev1338
+Version: 0.62.0.dev1342
 Summary: OpenTestFactory Orchestrator Toolkit
 Home-page: https://gitlab.com/henixdevelopment/open-source/opentestfactory/python-toolkit
 Author: Martin Lafaix

{opentf_toolkit_nightly-0.62.0.dev1338.dist-info → opentf_toolkit_nightly-0.62.0.dev1342.dist-info}/RECORD

@@ -1,6 +1,6 @@
-opentf/commons/__init__.py,sha256=HOqPRAFWWg5kGvxzTxoMtj7WeTDggQfR9vyBiu6vXhQ,28116
-opentf/commons/auth.py,sha256=gXRp_0Tf3bfd65F4QiQmh6C6vR9y3ugag_0DSvozJFk,15898
-opentf/commons/config.py,sha256=RVSSdQhMle4oCo_z_AR2EQ4U6sUjSxw-qVBtjKuJVfo,10219
+opentf/commons/__init__.py,sha256=2Y6BWtwYPWdLPbf-96iQwmk-6fjRVtgbSCl4_j8NV6E,28326
+opentf/commons/auth.py,sha256=yUmAoZPk9Aru2UVT5xSjH96u9DOKPk17AeL1_12mjBM,16399
+opentf/commons/config.py,sha256=gcge4zou7wMgu3GTyM5vVZudTyEpuyi3JEY8cdCBf5A,10454
 opentf/commons/exceptions.py,sha256=7dhUXO8iyAbqVwlUKxZhgRzGqVcb7LkG39hFlm-VxIA,2407
 opentf/commons/expressions.py,sha256=jM_YKXVOFhvOE2aE2IuacuvxhIsOYTFs2oQkpcbWR6g,19645
 opentf/commons/meta.py,sha256=ygSO3mE2d-Ux62abzK1wYk86noT4R5Tumd90nyZo0MU,3322
@@ -59,8 +59,8 @@ opentf/scripts/startup.py,sha256=AcVXU2auPvqMb_6OpGzkVqrpgYV6vz7x_Rnv8YbAEkk,231
 opentf/toolkit/__init__.py,sha256=7MGAfKb5V9ckzWE8ozfj0PcC7g0a-0VfdyrClkWTk38,22319
 opentf/toolkit/channels.py,sha256=6qKSsAgq_oJpuDRiKqVUz-EAjdfikcCG3SFAGmKZdhQ,25551
 opentf/toolkit/core.py,sha256=fqnGgaYnuVcd4fyeNIwpc0QtyUo7jsKeVgdkBfY3iqo,9443
-opentf_toolkit_nightly-0.62.0.dev1338.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-opentf_toolkit_nightly-0.62.0.dev1338.dist-info/METADATA,sha256=J1Ur6xkpKWdkQWJFP_ET1DFldSrsilHsmB91B7pmfMI,2214
-opentf_toolkit_nightly-0.62.0.dev1338.dist-info/WHEEL,sha256=DK49LOLCYiurdXXOXwGJm6U4DkHkg4lcxjhqwRa0CP4,91
-opentf_toolkit_nightly-0.62.0.dev1338.dist-info/top_level.txt,sha256=_gPuE6GTT6UNXy1DjtmQSfCcZb_qYA2vWmjg7a30AGk,7
-opentf_toolkit_nightly-0.62.0.dev1338.dist-info/RECORD,,
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/METADATA,sha256=dzyod6IsHTN1wbSmbplog9qMCLxK8wJiNBNI6eug1eE,2214
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/WHEEL,sha256=CmyFI0kx5cdEMTLiONQRbGQwjIoR1aIYB7eCAQ4KPJ0,91
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/top_level.txt,sha256=_gPuE6GTT6UNXy1DjtmQSfCcZb_qYA2vWmjg7a30AGk,7
+opentf_toolkit_nightly-0.62.0.dev1342.dist-info/RECORD,,

{opentf_toolkit_nightly-0.62.0.dev1338.dist-info → opentf_toolkit_nightly-0.62.0.dev1342.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: setuptools (78.0.2)
+Generator: setuptools (78.1.0)
 Root-Is-Purelib: true
 Tag: py3-none-any