Revision 21aa39e2
Added by Ian Ballou about 1 month ago
manifests/plugin/container.pp | ||
---|---|---|
String $location_prefix = '/pulpcore_registry',
|
||
String $registry_version_path = '/v2/',
|
||
) {
|
||
$api_default_request_headers = [
|
||
"unset ${pulpcore::apache::remote_user_environ_header}",
|
||
]
|
||
|
||
$api_additional_request_headers = $pulpcore::api_client_auth_cn_map.map |String $cn, String $pulp_user| {
|
||
"set ${pulpcore::apache::remote_user_environ_header} \"${pulp_user}\" \"expr=%{SSL_CLIENT_S_DN_CN} == '${cn}'\""
|
||
}
|
||
|
||
$context = {
|
||
'directories' => [
|
||
{
|
||
... | ... | |
'url' => "${pulpcore::apache::api_base_url}${registry_version_path}",
|
||
},
|
||
],
|
||
'request_headers' => [
|
||
"unset ${pulpcore::apache::remote_user_environ_header}",
|
||
"set ${pulpcore::apache::remote_user_environ_header} \"%{SSL_CLIENT_S_DN_CN}s\" env=SSL_CLIENT_S_DN_CN",
|
||
],
|
||
'request_headers' => $api_default_request_headers + $api_additional_request_headers,
|
||
},
|
||
],
|
||
'proxy_pass' => [
|
Also available in: Unified diff
Fixes #37308 - set REMOTE_USER properly for pulpcore registry