Story #6617

[Workbench] [Documentation] Display https url in repositories panel in manage_account page. Update documentation as needed.

Added by Radhika Chippada over 6 years ago. Updated over 6 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Radhika Chippada
Category:
Workbench
Target version:
Start date:
07/17/2015
Due date:
% Done:

100%

Estimated time:
(Total: 0.00 h)
Story points:
1.0

Description

Background: When logged in to a shell node via SSH, you can access git repositories via SSH (like ) by using agent forwarding. However, if you log in to a shell node via webshell, your options are:
  • Create/store a private key on the shell node. This is a bad practice.
  • Don't use SSH to authenticate to git repos when logged in via webshell.

The infrastructure is in place (pending #6619) to authenticate via https using the arvados API token that is automatically added to your environment at login time. Of course, this only helps when you clone/push https://git.zzzzz.arvadosapi.com/foo/bar.git -- but doc.arvados.org and Workbench's "Manage Account" page only suggest using the url git@git.zzzzz.arvadosapi.com:foo/bar.git.

Both docs and Workbench must be updated to present both options and provide guidance about when to use each.
  • Clone with HTTPS if your ARVADOS_API_TOKEN env var is set (e.g., you're logged in to an Arvados shell VM). This is the best option for shell VMs even if you're logged in with SSH: it means "push" will work next time you log in, even if you log in with Webshell.
  • Clone with SSH if you've added your SSH key to Arvados and it's available in your login session (e.g., you're cloning to your workstation).
screenshot.png (22.1 KB) screenshot.png Manoj Malipeddu, 07/17/2015 04:49 PM

Subtasks

Task #6670: Review branch: 6617-doc-repo-https-urlResolvedRadhika Chippada

Task #6660: Display https url in repositories panel in manage_account pageResolvedManoj Malipeddu

Task #6662: Document https url in repositoriesResolvedRadhika Chippada

Task #6665: Review Branch 6617-display-https-urlResolvedManoj Malipeddu


Related issues

Blocked by Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlsResolved07/20/2015

Associated revisions

Revision a1e6ebc7
Added by Manoj Malipeddu over 6 years ago

refs #6617
Merge branch '6617-display-https-url'

Revision f7c152d3
Added by Radhika Chippada over 6 years ago

closes #6617
Merge branch '6617-doc-repo-https-url'

History

#1 Updated by Tom Clegg over 6 years ago

  • Subject changed from [Workbench] Display https url in repositories panel in manage_account page. Update documentation as needed. to [Workbench] [Documentation] Display https url in repositories panel in manage_account page. Update documentation as needed.
  • Description updated (diff)
  • Category set to Workbench
  • Story points set to 1.0

#2 Updated by Radhika Chippada over 6 years ago

  • Status changed from New to In Progress
  • Assigned To set to Radhika Chippada
  • Target version changed from 2015-08-05 sprint to 2015-07-22 sprint

#3 Updated by Manoj Malipeddu over 6 years ago

In db2584826ed9aadb162b8bd6d25e164565bbab8b

Display https url in repositories panel in manage_account page

Added assertions to test in user_manage_account_text:
test "create new repository"

#4 Updated by Manoj Malipeddu over 6 years ago

  • File screenshot.png added

#5 Updated by Radhika Chippada over 6 years ago

  • File deleted (screenshot.png)

#7 Updated by Tom Clegg over 6 years ago

Changes look good, thanks.

We need to add guidance about how to authenticate when using the https:// urls. I'm on the fence about whether that should block merging db25848.
  • Shouldn't block: it "just works" from a shell VM thanks to #6619, so no instructions are needed.
  • Should block: if used from your workstation, it will ask for a username/password, which will be mysterious because Arvados has no passwords. At least with the SSH option, a worldly user would guess that they need to provide a public key just like on Github.

Suggest wording for guidance (edits welcome):

"If you are prompted for credentials when using https URLs, provide "none" as your username and your Arvados API token as your password. When you are using an Arvados shell account, credentials are handled automatically."

#8 Updated by Manoj Malipeddu over 6 years ago

Verified that the clone with https url works in staging. Merged into master.

#9 Updated by Peter Amstutz over 6 years ago

Reviewing 6617-doc-repo-https-url

  • "If you are prompted for username and password when you try to git clone using this command, it would mean that git config needs to be updated:"

This is a little too passively worded. How about "If you are prompted for username and password when you try to git clone using this command, you may first need to update your git config:"

Everything else looks good.

#10 Updated by Radhika Chippada over 6 years ago

  • Status changed from In Progress to Resolved
  • % Done changed from 50 to 100

Applied in changeset arvados|commit:f7c152d3ca9a753812bd7729ceb6cb8a23b12fce.

Also available in: Atom PDF