gmakstutis/openrag
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

os security check

Browse source
This commit is contained in:
phact 2025-10-07 14:01:38 -04:00
parent d0fb8af3c8
commit fb64c3e966
1 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
Makefile
View file

@ -212,18 +212,26 @@ test-ci:
curl -s http://localhost:8000/.well-known/openid-configuration >/dev/null 2>&1 && break || sleep 2; \ curl -s http://localhost:8000/.well-known/openid-configuration >/dev/null 2>&1 && break || sleep 2; \
done; \ done; \
echo "Waiting for OpenSearch with JWT auth to work..."; \ echo "Waiting for OpenSearch with JWT auth to work..."; \
JWT_AUTH_READY=false; \
for i in $$(seq 1 60); do \ for i in $$(seq 1 60); do \
if curl -k -s https://localhost:9200 -u admin:$${OPENSEARCH_PASSWORD} >/dev/null 2>&1; then \ if curl -k -s https://localhost:9200 -u admin:$${OPENSEARCH_PASSWORD} >/dev/null 2>&1; then \
TOKEN=$$(curl -s http://localhost:8000/auth/me | grep -o '"token":"[^"]*"' | cut -d'"' -f4 || echo ""); \ TOKEN=$$(curl -s http://localhost:8000/auth/me | grep -o '"token":"[^"]*"' | cut -d'"' -f4 || echo ""); \
if [ -n "$$TOKEN" ]; then \ if [ -n "$$TOKEN" ]; then \
if curl -k -s -H "Authorization: Bearer $$TOKEN" https://localhost:9200/documents/_search -d '{"query":{"match_all":{}}}' 2>&1 | grep -v "Unauthorized" >/dev/null; then \ if curl -k -s -H "Authorization: Bearer $$TOKEN" https://localhost:9200/documents/_search -d '{"query":{"match_all":{}}}' 2>&1 | grep -v "Unauthorized" >/dev/null; then \
echo "OpenSearch JWT auth working"; \ echo "✓ OpenSearch JWT auth working after $$((i*2)) seconds"; \
JWT_AUTH_READY=true; \
break; \ break; \
fi; \ fi; \
fi; \ fi; \
fi; \ fi; \
sleep 2; \ sleep 2; \
done; \ done; \
if [ "$$JWT_AUTH_READY" = "false" ]; then \
echo "✗ ERROR: OpenSearch JWT authentication failed to work after 120 seconds!"; \
echo " This likely means the OIDC security configuration was not applied correctly."; \
echo " Check OpenSearch logs: docker logs os"; \
exit 1; \
fi; \
echo "Waiting for Langflow..."; \ echo "Waiting for Langflow..."; \
for i in $$(seq 1 60); do \ for i in $$(seq 1 60); do \
curl -s http://localhost:7860/ >/dev/null 2>&1 && break || sleep 2; \ curl -s http://localhost:7860/ >/dev/null 2>&1 && break || sleep 2; \