Story #1055
closed
As a user, I would like to enable or disable specific repo auth plugins
Status:
CLOSED - CURRENTRELEASE
Description
Currently, users are able to enable or disable all of the repo auth plugins at once, but cannot disable specific plugins. This causes issues if we want to have a default plugin installed, but still want to be able to disable it in favor of a different plugin.
This story is composed of three deliverables:
- create a new config value in repo_auth.conf that allows enumeration of plugins to disable (likely using the plugin's name in entrypoints)
- write code to parse this value and disable listed plugins
- document this config value
- Status changed from NEW to ASSIGNED
- Assignee set to cduryee
- Platform Release set to 2.7.0
- Status changed from ASSIGNED to POST
- Status changed from POST to MODIFIED
- % Done changed from 0 to 100
- Status changed from MODIFIED to 5
- Status changed from 5 to 6
verified
[root@lenovo-x3850-02 ~]# rpm -qa pulp-server
pulp-server-2.7.0-0.4.beta.el7.noarch
[root@lenovo-x3850-02 ~]#
[root@lenovo-x3850-02 ~]# curl -k https://localhost/pulp/repos/repos/pulp/pulp/demo_repos/zoo/repodata/repomd.xml
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /pulp/repos/repos/pulp/pulp/demo_repos/zoo/repodata/repomd.xml
on this server.</p>
</body></html>
[root@lenovo-x3850-02 ~]# vi /etc/pulp/repo_auth.conf
[root@lenovo-x3850-02 ~]# sudo systemctl restart httpd[root@lenovo-x3850-02 ~]# curl -k https://localhost/pulp/repos/repos/pulp/pulp/demo_repos/zoo/repodata/repomd.xml
<?xml version="1.0" encoding="UTF-8"?>
<repomd xmlns="http://linux.duke.edu/metadata/repo" xmlns:rpm="http://linux.duke.edu/metadata/rpm"><revision>1436463312</revision>
<data type="filelists"><location href="repodata/eb282eabc17646ec0e5563aab3ace73f46dbc67ff32ef1050fa9a62866ebf1e7-filelists.xml.gz" /><timestamp>1436463312</timestamp><size>1977</size><checksum type="sha256">eb282eabc17646ec0e5563aab3ace73f46dbc67ff32ef1050fa9a62866ebf1e7</checksum><open-size>6545</open-size><open-checksum type="sha256">47946df05c0763e1c6a1fb28780a1db6efc432c88a776246a6f10472faf13637</open-checksum></data>
<data type="other"><location href="repodata/e4092b39388707f9ba794c92221a4f5f2fdcf396d7353dda39f1ef3c9e29526b-other.xml.gz" /><timestamp>1436463312</timestamp><size>1819</size><checksum type="sha256">e4092b39388707f9ba794c92221a4f5f2fdcf396d7353dda39f1ef3c9e29526b</checksum><open-size>5502</open-size><open-checksum type="sha256">44990d242bdba2a0ff32cdcd895192f6d08faff7c9b49946079a853efc0c5e93</open-checksum></data>
<data type="primary"><location href="repodata/4a43a1afc37482340dc4e8db69a836d9cddbf85fdcdd8fe31ebfe5007635b22c-primary.xml.gz" /><timestamp>1436463312</timestamp><size>3650</size><checksum type="sha256">4a43a1afc37482340dc4e8db69a836d9cddbf85fdcdd8fe31ebfe5007635b22c</checksum><open-size>31538</open-size><open-checksum type="sha256">051fcc36bf751dd21b142f8e0baa309b1e5ccb2ba936d870ac4f6c2c07cc249a</open-checksum></data>
<data type="updateinfo"><location href="repodata/cd4ab7684cff8e7b5dccf9d214da0669654b4b4ac754771fd22e39f89a6359a2-updateinfo.xml.gz" /><timestamp>1436463312</timestamp><size>572</size><checksum type="sha256">cd4ab7684cff8e7b5dccf9d214da0669654b4b4ac754771fd22e39f89a6359a2</checksum><open-size>3118</open-size><open-checksum type="sha256">89cad27094f2825fe4efd7851465b0076f24986ad504c44bc183d16df5e88406</open-checksum></data>
<data type="group"><location href="repodata/a441d0569eb703514df272408689e7c447f2b947faf0d07a50cf545211068f59-comps.xml" /><timestamp>1436463312</timestamp><size>1923</size><checksum type="sha256">a441d0569eb703514df272408689e7c447f2b947faf0d07a50cf545211068f59</checksum></data>
</repomd>
[root@lenovo-x3850-02 ~]#
- Status changed from 6 to CLOSED - CURRENTRELEASE
Also available in: Atom
PDF
.
Allow disabling specific repo auth plugins
Previously in Pulp 2.7, repo authenticator plugins were controlled only via the plugin's entry points. This meant that if a plugin was installed by default, we were not able to disable it.
A new config value has been added to repo_auth.conf to disable specific plugins. This lets us turn plugins on and off at will, without having to uninstall any default plugins.
fixes #1055
https://pulp.plan.io/issues/1055