Bug 825360 - Application template quickstarts should pull from a controlled, non-master branch
Summary: Application template quickstarts should pull from a controlled, non-master br...
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: OKD
Classification: Red Hat
Component: Website
Version: 2.x
Hardware: Unspecified
OS: Unspecified
high
low
Target Milestone: ---
: ---
Assignee: Fotios Lindiakos
QA Contact: libra bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-05-25 19:22 UTC by Clayton Coleman
Modified: 2015-05-15 01:10 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-06-07 19:25:04 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Clayton Coleman 2012-05-25 19:22:37 UTC
Starting this sprint application templates will be available to our users through the UI that allows them to create a full featured application with a single click.  The Git source for each app will be the quickstart.

For security reasons we want to ensure that the branch of quickstart code that is used by the template is very highly reviewed.  These will be public repositories and are part of our opensource strategy, but we need to ensure that we don't open an attack vector (malicious user injects vuln. into quickstart, user clones quick start, attacker attacks their app).  We also want to allow test to verify certain branches.

So, for each application template we create based on a public quickstart I recommend we create an application_template branch that a) is the source Git URL for the template) and b) only pushed to by the owner of the repo.  If we need additional security, we may want an official fork but that adds additional process.  I do not think we need a staging branch for these.

The test team will need to validate quickstart code that makes it into the template AND test it against the staging/production systems when it is updated.

The initial templates are:
  https://github.com/openshift/drupal-example
  https://github.com/openshift/wordpress-example
  https://github.com/openshift/rails-example
  https://github.com/openshift/kitchensink-example

Each of these will need a branch created and the templates updated to point to the branch as the Git source.

Required to enable templates in production.

Comment 1 Fotios Lindiakos 2012-06-07 19:25:04 UTC
Created User Story to capture this.
https://rally1.rallydev.com/#/4670516379d/detail/userstory/6650619807

Comment 2 Clayton Coleman 2013-07-08 21:14:06 UTC
This was finally implemented this sprint in https://trello.com/c/VIrKJHSF


Note You need to log in before you can comment on or make changes to this bug.