stevearc / pypicloud

S3-backed pypi server implementation
MIT License
507 stars 141 forks source link

Set pypi.default_read = authenticated in ppc-make-config #330

Closed ddelange closed 1 year ago

ddelange commented 1 year ago

Hi 👋

We found out that our kubernetes cluster was exposing packages due to default_read=everyone. We created the config for our cluster using the 'docker mode' (ppc-make-config -r). This default was unexpected to us, also because of the docs stating authendicated as default value.

stevearc commented 1 year ago

The docs are talking about what the default value is when not specified by the configuration file. I can understand missing this if you just generate the config file and deploy it, but I think anyone reading over the config, especially if looking specifically at the ACL, would be able to spot it.

ddelange commented 1 year ago

alright, fair enough:) thanks for the quick reply