GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

provisionersdk

package

v2.1.1 Latest Latest Go to latest Published: Aug 22, 2023 License: AGPL-3.0 Imports: 22 Imported by: 0

Details

Rendered for

View Source

const (
	// MaxMessageSize is the maximum payload size that can be
	// transported without error.
	MaxMessageSize = 4 << 20
)

View Source

const (
	// TemplateArchiveLimit represents the maximum size of a template in bytes.
	TemplateArchiveLimit = 1 << 20
)

This section is empty.

func AgentScriptEnv() map[string]string

AgentScriptEnv returns a key-pair of scripts that are consumed by the Coder Terraform Provider. See: https://github.com/coder/terraform-provider-coder/blob/main/internal/provider/provider.go#L97

func DirHasLockfile(dir string) (bool, error)

func MemTransportPipe() (drpc.Conn, net.Listener)

func MultiplexedConn(session *yamux.Session) drpc.Conn

MultiplexedConn returns a multiplexed dRPC connection from a yamux session.

func ProvisionerJobLogsNotifyChannel(jobID uuid.UUID) string

ProvisionerJobLogsNotifyChannel is the PostgreSQL NOTIFY channel to publish updates to job logs on.

func Serve(ctx context.Context, server proto.DRPCProvisionerServer, options *ServeOptions) error

Serve starts a dRPC connection for the provisioner and transport provided.

func Tar(w io.Writer, directory string, limit int64) error

Tar archives a Terraform directory.

func Untar(directory string, r io.Reader) error

Untar extracts the archive to a provided directory.

type ProvisionerJobLogsNotifyMessage struct {
	CreatedAfter int64 `json:"created_after"`
	EndOfLogs    bool  `json:"end_of_logs,omitempty"`
}

ProvisionerJobLogsNotifyMessage is the payload published on the provisioner job logs notify channel.

type ServeOptions struct {
	// Conn specifies a custom transport to serve the dRPC connection.
	Listener net.Listener
}

ServeOptions are configurations to serve a provisioner.

Path	Synopsis
proto