{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/9819","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/9819/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/9819/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/9819/events","html_url":"https://github.com/openshift/origin/pull/9819","id":165366649,"number":9819,"title":"User can get only blobs he's able to see","user":{"login":"miminar","id":1478803,"avatar_url":"https://avatars.githubusercontent.com/u/1478803?v=3","gravatar_id":"","url":"https://api.github.com/users/miminar","html_url":"https://github.com/miminar","followers_url":"https://api.github.com/users/miminar/followers","following_url":"https://api.github.com/users/miminar/following{/other_user}","gists_url":"https://api.github.com/users/miminar/gists{/gist_id}","starred_url":"https://api.github.com/users/miminar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/miminar/subscriptions","organizations_url":"https://api.github.com/users/miminar/orgs","repos_url":"https://api.github.com/users/miminar/repos","events_url":"https://api.github.com/users/miminar/events{/privacy}","received_events_url":"https://api.github.com/users/miminar/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2016-07-13T16:38:34Z","updated_at":"2016-07-20T13:00:43Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/9819","html_url":"https://github.com/openshift/origin/pull/9819","diff_url":"https://github.com/openshift/origin/pull/9819.diff","patch_url":"https://github.com/openshift/origin/pull/9819.patch"},"body":"The main idea is to replace regular layer link Stat call done in [blobDescriptorService](https://github.com/openshift/origin/pull/9819/commits/c2589f5da04965339b6488fc38695fcd53e7ebcf#diff-3d8bcc0cba2e875dc71bc23d0ac50f0fR38) with a fall-back to registry's cache of blob and another fall-back to image stream images in etcd.\r\n\r\nIt's nearly a lowest possible level where we can intercept Stat calls on local blobs. Unfortunately blob descriptor service doesn't know, which repository is being accessed without being told via context. That's why [WithRepository](https://github.com/openshift/origin/pull/9819/commits/c2589f5da04965339b6488fc38695fcd53e7ebcf#diff-fb5549a25f7ea1c43f45f7cacd685cb5R22) calls.\r\n\r\nDuring a cross-repo mount, we need to call upstream's `Create()` function to do the linking for us (not exposed). In order to do that, we need upstream's `linkedBlobStore` to [*nest*](https://github.com/openshift/origin/pull/9819/commits/0734753de05389b90cd59268c5c24bfcbeb74647#diff-80435d6f72a5946cec1b2c5ee492ab70R318) into our repository middleware to do the Stat call. Otherwise the stat would be happen on upstream's blob store which doesn't have our pullthrough and other wrappers, so the remote blobs wouldn't work with cross-repo mount requests.\r\n\r\nCloses #9755 "},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/233941693","html_url":"https://github.com/openshift/origin/pull/9819#issuecomment-233941693","issue_url":"https://api.github.com/repos/openshift/origin/issues/9819","id":233941693,"user":{"login":"openshift-bot","id":1779249,"avatar_url":"https://avatars.githubusercontent.com/u/1779249?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift-bot","html_url":"https://github.com/openshift-bot","followers_url":"https://api.github.com/users/openshift-bot/followers","following_url":"https://api.github.com/users/openshift-bot/following{/other_user}","gists_url":"https://api.github.com/users/openshift-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift-bot/subscriptions","organizations_url":"https://api.github.com/users/openshift-bot/orgs","repos_url":"https://api.github.com/users/openshift-bot/repos","events_url":"https://api.github.com/users/openshift-bot/events{/privacy}","received_events_url":"https://api.github.com/users/openshift-bot/received_events","type":"User","site_admin":false},"created_at":"2016-07-20T13:00:43Z","updated_at":"2016-07-20T13:00:43Z","body":"continuous-integration/openshift-jenkins/test FAILURE (https://ci.openshift.redhat.com/jenkins/job/test_pr_origin/6550/)"}}
{"actor":{"display_login":"openshift-bot"}}