ironic-python-agent/releasenotes/notes/basic-auth-for-user-image-server-150835e7567444da.yaml
Adam Rozman 70961789a6 implement basic-auth support for user-image download process
This feature was proposed in https://bugs.launchpad.net/ironic-python-agent/+bug/2021947

Change-Id: I9dbfc1402240beb75b6736214753fd86dccae676
2023-10-10 16:25:51 +03:00

28 lines
1.7 KiB
YAML

---
features:
- |
Introducing basic authentication and configurable authentication strategy
support for image and image checksum download processes. This feature
introduces 3 new variables that could be set (either via oslo.config or
image_info) to select the authentication strategy an provide credentials
for HTTP(S) basic authentication. The 3 variables are structured in way
that 1 of them 'image_server_auth_strategy' (string) provides the ability
to select between authentication strategies by specifying the name of
the strategy. Currently the only supported authentication strategy is the
'http-basic' which will make IPA use HTTP(S) basic authentication also
known as the 'RFC 7617' standard. The other 2 variables
'image_server_password' and 'image_server_user' provide username and
password credentials for image download processes. The
'image_server_password' and 'image_server_user' are not strategy specific
and could be reused for any username + password based authentication
strategy, but for the moment these 2 variables are only used for the
'http-basic' strategy. 'image_server_basic_auth' not just enables the
feature but enforces checks on the values of the 2 related credentials.
When the 'http-basic' strategy is enabled for image server download
workflow the download logic will make sure to raise an exception in case
any of the credentials are None or an empty string. Values coming from
'image_info' are prioritized over values coming from the 'oslo.config'
framework and the 2 different credential source can't be mixed. Passing 1
or 2 out of the 3 from and source and the remaining values from an other
source will result in a exception.