Re: [gentoo-dev] Gitolite with WebHooks: testers wanted

[Rafael Goncalves Martins]

On Mon, Mar 9, 2015 at 2:27 AM, Robin H. Johnson <robbat2@g.o> wrote:

> Hi all,
>
> Amongst Git migration preparations, one of the previously mentioned
> items was that GitHub's webhooks were very useful for many tasks.
>
> The QA team is already using them on the gentoo-portage-rsync-mirror
> repo, to trigger regular Travis-CI runs.
>
> In line with our policies of not depending on closed source and concerns
> about the persistence of GitHub, I've got an initial cut of WebHook
> support for Gitolite. These will probably be the primary means of
> interaction with external services, as we'd prefer not to give gitolite
> any SSH private keys to reach out to the world.
>
> It's based on the notify-webhook project [1], I also have the blessing
> of that author to improve his code and push generic changes to it.
>
> I'm looking for testers:
> Do you have a repo on gitolite AND would like pushes to trigger a
> webhook?
>
> If so, please file a bug for the public details. Additionally, if your
> hook has a username/password/secret token, please send me a GPG email
> with those details.
>
> Details needed:
> - repo path
> - webhook URL
> - webhook contenttype (json or url-encoded [default])
> - webhook auth details if any (user, pass, realm, secret token)
>
> I do have plans to make it self-service later, but that will be a while
> coming.
>
> [1] https://github.com/metajack/notify-webhook
>

Just some quick notes, about changes that may be needed in current github
webhooks to work with our infra:

- some webhooks may validate for github's IP range [1], and fail to be
triggered by gentoo infra servers.
- some webhooks may parse repository URLs assuming that the webhooks are
triggered by github, e.g. to add some user/password/token.

[1]
https://help.github.com/articles/what-ip-addresses-does-github-use-that-i-should-whitelist/

[]'s

-- 
Rafael Goncalves Martinsn
Gentoo Linux developer
http://rafaelmartins.eng.br/