abderrahim commented on issue #2148: URL: https://github.com/apache/buildstream/issues/2148#issuecomment-4914037993
Ultimately, this is not a buildstream problem. It's something for the source plugins to implement. That said, it would be indeed nice to have some guidance from buildstream core on how to implement that so that plugins follow a common configuration format. For now, the buildstream kinda recommends netrc through its use by DownloadableFileSource. For the proposed solution, I don't like that it means starting to have secrets be part of the user configuration. It would be better to keep the secrets separate, which is what netrc gives. It also means adding a new API to buildstream, which will probably take time to get a release and make use of it. Another idea that could work is implementing bazel's credential helpers specification. Buildbox also implements it https://gitlab.com/BuildGrid/buildbox/buildbox/-/merge_requests/1115, and it's probably a reasonable specification for both sources and REAPI cache/remote execution servers to use. It means that buildstream would offload the authentication mechanism to a different program, but it also means that buildstream doesn't need to care about supporting multiple urls under the same host that use different authentication mechanisms. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
