pulp / pulp/pulp_ansible

Please add a switch to turn off avatar downloads

Open
#1,817 11 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement Feature good first issue
Dominant language
Python
Stars
68
Forks
62
Avg merge
1d 14h
Merged PRs (30d)
37

Description

Is your feature request related to a problem? Please describe.
We sync collections with PAH from ansible galaxy. In this progress the namespace avatars are downloaded. But they can be from any third party source. This is bad because it seems to be a security issue and also it is difficult because of firewall rules that have to be adjusted potentially.

Describe the solution you'd like
For us it would be sufficient to have an option to disable avatar downloads.

And it would be great to also make this option accessable via PAH WebUI, but I think I would have to create an additional RFE there with Redhat, once this is implemented here.

Yours
David

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the collection sync path that downloads namespace avatars from Ansible Galaxy and identify where a configuration option could control that behavior. Review the issue comments for any decisions about configuration or PAH WebUI scope. Done means the option reliably prevents avatar downloads during sync and its behavior is covered by the relevant tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
ansible, python
Domain
backend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.