Revision 21aa39e2
Added by Ian Ballou about 1 month ago
| manifests/plugin/container.pp | ||
|---|---|---|
|
String $location_prefix = '/pulpcore_registry',
|
||
|
String $registry_version_path = '/v2/',
|
||
|
) {
|
||
|
$api_default_request_headers = [
|
||
|
"unset ${pulpcore::apache::remote_user_environ_header}",
|
||
|
]
|
||
|
|
||
|
$api_additional_request_headers = $pulpcore::api_client_auth_cn_map.map |String $cn, String $pulp_user| {
|
||
|
"set ${pulpcore::apache::remote_user_environ_header} \"${pulp_user}\" \"expr=%{SSL_CLIENT_S_DN_CN} == '${cn}'\""
|
||
|
}
|
||
|
|
||
|
$context = {
|
||
|
'directories' => [
|
||
|
{
|
||
| ... | ... | |
|
'url' => "${pulpcore::apache::api_base_url}${registry_version_path}",
|
||
|
},
|
||
|
],
|
||
|
'request_headers' => [
|
||
|
"unset ${pulpcore::apache::remote_user_environ_header}",
|
||
|
"set ${pulpcore::apache::remote_user_environ_header} \"%{SSL_CLIENT_S_DN_CN}s\" env=SSL_CLIENT_S_DN_CN",
|
||
|
],
|
||
|
'request_headers' => $api_default_request_headers + $api_additional_request_headers,
|
||
|
},
|
||
|
],
|
||
|
'proxy_pass' => [
|
||
Also available in: Unified diff
Fixes #37308 - set REMOTE_USER properly for pulpcore registry