Project

General

Profile

Bug #30059

Add apache config for protected content with certguard

Added by Samir Jha 2 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
-
Target version:

Description

We need to be able to pass cert headers to content guard to authenticate protected content requests.
The conf for that looks like:

ProxyPass /pulp/repos http://127.0.0.1:24816/pulp/content
ProxyPassReverse /pulp/repo http://127.0.0.1:24816/pulp/content

ProxyPass /pulp/content http://127.0.0.1:24816/pulp/content
ProxyPassReverse /pulp/content http://127.0.0.1:24816/pulp/content

<Location /pulp/repos>
RequestHeader unset X-CLIENT-CERT
RequestHeader set X-CLIENT-CERT "%{SSL_CLIENT_CERT}s" 
</Location>

<Location /pulp/isos>
RequestHeader unset X-CLIENT-CERT
RequestHeader set X-CLIENT-CERT "%{SSL_CLIENT_CERT}s" 
</Location>

<Location /pulp/content>
RequestHeader unset X-CLIENT-CERT
RequestHeader set X-CLIENT-CERT "%{SSL_CLIENT_CERT}s" 
</Location>


Related issues

Related to Installer - Bug #30133: Install python3-subscription-manager-rhsm package to use for rhsm certguardClosed

Associated revisions

Revision 5ea05a8e (diff)
Added by Samir Jha 2 months ago

Fixes #30059 - Add certguard plugin

Revision 3a4d5dac (diff)
Added by Samir Jha about 2 months ago

Fixes #30059 - Add config for protected content (#263)

History

#1 Updated by The Foreman Bot 2 months ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/puppet-foreman_proxy_content/pull/263 added

#2 Updated by The Foreman Bot 2 months ago

  • Pull request https://github.com/theforeman/puppet-pulpcore/pull/99 added

#3 Updated by Anonymous 2 months ago

  • Status changed from Ready For Testing to Closed

#4 Updated by The Foreman Bot about 2 months ago

  • Fixed in Releases 2.2.0 added

#5 Updated by Justin Sherrill about 2 months ago

  • Target version set to 2.1.0

#6 Updated by Ewoud Kohl van Wijngaarden about 1 month ago

  • Related to Bug #30133: Install python3-subscription-manager-rhsm package to use for rhsm certguard added

#7 Updated by Ewoud Kohl van Wijngaarden about 1 month ago

  • Fixed in Releases 2.1.0 added
  • Fixed in Releases deleted (2.2.0)
  • Pull request deleted (https://github.com/theforeman/puppet-foreman_proxy_content/pull/263, https://github.com/theforeman/puppet-pulpcore/pull/99)

#8 Updated by Tomer Brisker about 1 month ago

  • Pull request https://github.com/theforeman/puppet-pulpcore/pull/99, https://github.com/theforeman/puppet-foreman_proxy_content/pull/263 added

Also available in: Atom PDF