search

pulp / pulp_ansible

A Pulp plugin that manages Ansible content, i.e. roles, collections
https://docs.pulpproject.org/pulp_ansible/
GNU General Public License v2.0
57 stars 53 forks source link

Allow customization of RBAC policies in pulp_ansible #1819

Open philfry opened 3 months ago

philfry commented 3 months ago

Is your feature request related to a problem? Please describe. To allow a wider audience to use my ansible collections I'd like to alter the policies to allow anonymous or non-authorized readonly access. Right now the whole api access requires authorization.

Describe the solution you'd like I'd like to be able to change the RBAC policies for the Galaxy APIs through the Pulp Access Policy API.

Describe alternatives you've considered A self-written ansible galaxy server based on fastapi and galaxy-importer.

Additional context https://discourse.pulpproject.org/t/pulp-ansible-how-does-it-work/1193/4

mdellweg commented 3 months ago

You should be able to modify the access policies in the database. It's not an easy interface, but also targeted a power admins. (Note there's a "reset" endpoint for each AP to revert to the default in case something went wrong.)

mdellweg commented 3 months ago

Seems like there was a discussion alread. Added it to the description.