Actions
Story #1055
closed
As a user, I would like to enable or disable specific repo auth plugins
Start date:
Due date:
% Done:
100%
Estimated time:
Platform Release:
2.7.0
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:
Description
Currently, users are able to enable or disable all of the repo auth plugins at once, but cannot disable specific plugins. This causes issues if we want to have a default plugin installed, but still want to be able to disable it in favor of a different plugin.
This story is composed of three deliverables:
- create a new config value in repo_auth.conf that allows enumeration of plugins to disable (likely using the plugin's name in entrypoints)
- write code to parse this value and disable listed plugins
- document this config value
Updated by cduryee over 8 years ago
- Status changed from NEW to ASSIGNED
- Assignee set to cduryee
- Platform Release set to 2.7.0
Updated by cduryee over 8 years ago
- Status changed from ASSIGNED to POST
Added by cduryee over 8 years ago
Added by cduryee over 8 years ago
Revision ed541b02 | View on GitHub
Allow disabling specific repo auth plugins
Previously in Pulp 2.7, repo authenticator plugins were controlled only via the plugin's entry points. This meant that if a plugin was installed by default, we were not able to disable it.
A new config value has been added to repo_auth.conf to disable specific plugins. This lets us turn plugins on and off at will, without having to uninstall any default plugins.
fixes #1055
Updated by cduryee over 8 years ago
- Status changed from POST to MODIFIED
- % Done changed from 0 to 100
Applied in changeset pulp|ed541b0294a1bb3ecc9566658b5058188b1b1e4f.
Updated by dkliban@redhat.com over 8 years ago
- Status changed from MODIFIED to 5
Updated by pthomas@redhat.com over 8 years ago
- Status changed from 5 to 6
verified
[root@lenovo-x3850-02 ~]# rpm -qa pulp-server
pulp-server-2.7.0-0.4.beta.el7.noarch
[root@lenovo-x3850-02 ~]#
[root@lenovo-x3850-02 ~]# curl -k https://localhost/pulp/repos/repos/pulp/pulp/demo_repos/zoo/repodata/repomd.xml
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /pulp/repos/repos/pulp/pulp/demo_repos/zoo/repodata/repomd.xml
on this server.</p>
</body></html>
[root@lenovo-x3850-02 ~]# vi /etc/pulp/repo_auth.conf
[root@lenovo-x3850-02 ~]# sudo systemctl restart httpd[root@lenovo-x3850-02 ~]# curl -k https://localhost/pulp/repos/repos/pulp/pulp/demo_repos/zoo/repodata/repomd.xml
<?xml version="1.0" encoding="UTF-8"?>
<repomd xmlns="http://linux.duke.edu/metadata/repo" xmlns:rpm="http://linux.duke.edu/metadata/rpm"><revision>1436463312</revision>
<data type="filelists"><location href="repodata/eb282eabc17646ec0e5563aab3ace73f46dbc67ff32ef1050fa9a62866ebf1e7-filelists.xml.gz" /><timestamp>1436463312</timestamp><size>1977</size><checksum type="sha256">eb282eabc17646ec0e5563aab3ace73f46dbc67ff32ef1050fa9a62866ebf1e7</checksum><open-size>6545</open-size><open-checksum type="sha256">47946df05c0763e1c6a1fb28780a1db6efc432c88a776246a6f10472faf13637</open-checksum></data>
<data type="other"><location href="repodata/e4092b39388707f9ba794c92221a4f5f2fdcf396d7353dda39f1ef3c9e29526b-other.xml.gz" /><timestamp>1436463312</timestamp><size>1819</size><checksum type="sha256">e4092b39388707f9ba794c92221a4f5f2fdcf396d7353dda39f1ef3c9e29526b</checksum><open-size>5502</open-size><open-checksum type="sha256">44990d242bdba2a0ff32cdcd895192f6d08faff7c9b49946079a853efc0c5e93</open-checksum></data>
<data type="primary"><location href="repodata/4a43a1afc37482340dc4e8db69a836d9cddbf85fdcdd8fe31ebfe5007635b22c-primary.xml.gz" /><timestamp>1436463312</timestamp><size>3650</size><checksum type="sha256">4a43a1afc37482340dc4e8db69a836d9cddbf85fdcdd8fe31ebfe5007635b22c</checksum><open-size>31538</open-size><open-checksum type="sha256">051fcc36bf751dd21b142f8e0baa309b1e5ccb2ba936d870ac4f6c2c07cc249a</open-checksum></data>
<data type="updateinfo"><location href="repodata/cd4ab7684cff8e7b5dccf9d214da0669654b4b4ac754771fd22e39f89a6359a2-updateinfo.xml.gz" /><timestamp>1436463312</timestamp><size>572</size><checksum type="sha256">cd4ab7684cff8e7b5dccf9d214da0669654b4b4ac754771fd22e39f89a6359a2</checksum><open-size>3118</open-size><open-checksum type="sha256">89cad27094f2825fe4efd7851465b0076f24986ad504c44bc183d16df5e88406</open-checksum></data>
<data type="group"><location href="repodata/a441d0569eb703514df272408689e7c447f2b947faf0d07a50cf545211068f59-comps.xml" /><timestamp>1436463312</timestamp><size>1923</size><checksum type="sha256">a441d0569eb703514df272408689e7c447f2b947faf0d07a50cf545211068f59</checksum></data>
</repomd>
[root@lenovo-x3850-02 ~]#
Updated by rbarlow almost 8 years ago
- Status changed from 6 to CLOSED - CURRENTRELEASE
Actions
.
Allow disabling specific repo auth plugins
Previously in Pulp 2.7, repo authenticator plugins were controlled only via the plugin's entry points. This meant that if a plugin was installed by default, we were not able to disable it.
A new config value has been added to repo_auth.conf to disable specific plugins. This lets us turn plugins on and off at will, without having to uninstall any default plugins.
fixes #1055
https://pulp.plan.io/issues/1055