Skip to content

Commit 09a0ccd

Browse files
author
Travis CI dpl test (via Travis CI)
committed
Update master
1 parent 3f148ab commit 09a0ccd

File tree

3 files changed

+38
-2
lines changed

3 files changed

+38
-2
lines changed

_data/snippets.yml

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,3 +114,31 @@ enterprise_3_encryption_key_backup: |
114114
1. Make sure you have appropriate access to the kubernetes cluster: you need credentials for `kubectl` and connection to [travis-api-pod]
115115
2. Run `kubectl exec -it [travis-api-pod] cat /app/config/travis.yml |grep -A 2 encryption` (using Travis API pod is recommended).
116116
3. Create a backup of the value returned by that command by either writing it down on a piece of paper or storing it on a different computer.
117+
github_oauth_access_rights: |
118+
When you sign in to [travis-ci.com](https://travis-ci.com) using GitHub for the first time, you will receive a message from GitHub saying:
119+
120+
> Travis CI by travis-pro wants to access your [account name] account.
121+
122+
and in the repositorie's section it will state:
123+
124+
> This application will be able to read and write all public and private repository data.
125+
126+
This is not how Travis CI access yout data, however we can explain it later in the process.
127+
128+
The warning is triggerred due to GitHub OAuth App permissions which Travis CI uses, and due to the available granularity of permission scopes (see GitHub [Scopes for OAuth Apps documentation](https://docs.github.com/en/developers/apps/scopes-for-oauth-apps) ).
129+
130+
**Travis CI does not access all your repositories by default**.
131+
132+
Once you acknowledge the access rights, you will see Travis CI OAuth application present in your GitHub [Authorized OAuth Apps list](https://github.com/settings/applications), however **you need to explicitly configure which repositories Travis CI has access to** within your [travis-ci.com](https://travis-ci.com) account. The configuration is done during the activation of Travis CI for your repositories. You can use either the 'All repositories' option or the 'Only select repositories' option during the activation process.
133+
134+
When the Travis CI activation has completed, you will see the actual Travis CI GitHub Application installed in [Installed GitHub Apps](https://github.com/settings/installations) section.
135+
136+
Travis CI uses OAuth permissions in the following way:
137+
138+
1) Travis CI's system synchronizes certain metadata with GitHub. This metadata is required for proper service functioning. In particular, we sync users, orgs, memberships, repos, permissions and, (optionally) branches. This type of sync happens either once a day by schedule or per the user's request. You can find more information and source code [in this repository](https://github.com/travis-ci/travis-github-sync#syncs)
139+
140+
2) In order to run builds, Travis CI's system clones a repository, from which the build is triggered, to the build environment. The build environment is an isolated virtual machine or an LXD container, which gets terminated as soon as the build finishes. Cloning happens only after a build request, and therefore only for the repositories explicitly enabled at GitHub settings.
141+
142+
3) To set up a build environment and prepare the build, Travis CI's system fetches and processes the `.travis.yml` config file from the repository and the branch explicitly specified in the build request, triggered by GitHub.
143+
144+
4) Travis CI's system reports build results back to GitHub via its [Checks API](https://developer.github.com/v3/checks/).

user/migrate/open-source-repository-migration.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ No. Unless there was something very customised in your `.travis.yml`, no changes
7474

7575
If you are already using GitHub Apps for your account in travis-ci.com, you need to access your installation settings and grant access to the repositories you'd like to migrate. Otherwise:
7676

77-
1. Log in to [https://travis-ci.com] and access your profile (or your organization's) at [https://travis-ci.com/profile](https://travis-ci.com/profile)
77+
1. Log in to [https://travis-ci.com] and access your profile (or your organization's) at [https://travis-ci.com/profile](https://travis-ci.com/profile). For any doubts on the Travis CI GitHub Authorized OAuth App access rights message, please read more details [below](/user/migrate/open-source-repository-migration#travis-ci-github-oauth-app-access-rights).
7878

7979
2. If you aren't using the new GitHub Apps integration already, activate it for your account
8080
![Activate GitHub Apps](/user/images/oss-migration/gapps-activate.png)
@@ -83,6 +83,10 @@ If you are already using GitHub Apps for your account in travis-ci.com, you need
8383

8484
4. Once back in your Travis CI profile, the selected repositories will be listed there. Those projects that were already building in travis-ci.org will appear in the Migrate tab for your account.
8585

86+
#### Travis CI GitHub OAuth App access rights
87+
88+
{{ site.data.snippets.github_oauth_access_rights }}
89+
8690
### The migration steps
8791

8892
1. Once you have granted access via GitHub Apps to the repositories you'd like to build and transfer, on the ["Migrate" tab](https://travis-ci.com/account/migrate), there will be a list of the repositories available to migrate:

user/tutorial.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ To start using Travis CI, make sure you have:
2121

2222
1. Go to [Travis-ci.com](https://travis-ci.com) and [*Sign up with GitHub*](https://travis-ci.com/signin).
2323

24-
2. Accept the Authorization of Travis CI. You'll be redirected to GitHub.
24+
2. Accept the Authorization of Travis CI. You'll be redirected to GitHub. For any doubts on the Travis CI GitHub Authorized OAuth App access rights message, please read more details [below](/user/tutorial#travis-ci-github-oauth-app-access-rights)
2525

2626
3. Click on your profile picture in the top right of your Travis Dashboard, click Settings and then the green *Activate* button, and select the repositories you want to use with Travis CI.
2727

@@ -49,6 +49,10 @@ To start using Travis CI, make sure you have:
4949

5050
6. Check the build status page to see if your build [passes or fails](/user/job-lifecycle/#breaking-the-build) according to the return status of the build command by visiting [Travis CI](https://travis-ci.com/auth) and selecting your repository.
5151

52+
#### Travis CI GitHub OAuth App access rights
53+
54+
{{ site.data.snippets.github_oauth_access_rights }}
55+
5256
## To get started with Travis CI using Bitbucket
5357

5458
<blockquote class="beta">

0 commit comments

Comments
 (0)