-
Notifications
You must be signed in to change notification settings - Fork 80
Closed
Labels
feature requestNew feature requestNew feature request
Description
As a random user, I can install any package from the referenced remote index through Pulp. It looks like pull-through distributions are ignoring includes/excludes fields from remotes. The documentation implies that this will work out of the box. Does this have any implications? Is this a feature yet to be implemented?
Steps to reproduce the behaviour in oci-env (domains enabled).
(venv3) [lmjachky@lmjachky-thinkpadt14gen4 services]$ pulp --profile local python remote create --name test --url https://pypi.org/ --includes '["shelf-reader"]'
{
"pulp_href": "/pulp/default/api/v3/remotes/python/python/0190cbb3-e6b3-7271-a195-a5667aa931d6/",
"pulp_created": "2024-07-19T15:54:43.252124Z",
"pulp_last_updated": "2024-07-19T15:54:43.252136Z",
"name": "test",
"url": "https://pypi.org/",
"ca_cert": null,
"client_cert": null,
"tls_validation": true,
"proxy_url": null,
"pulp_labels": {},
"download_concurrency": null,
"max_retries": null,
"policy": "on_demand",
"total_timeout": null,
"connect_timeout": null,
"sock_connect_timeout": null,
"sock_read_timeout": null,
"headers": null,
"rate_limit": null,
"hidden_fields": [
{
"name": "client_key",
"is_set": false
},
{
"name": "proxy_username",
"is_set": false
},
{
"name": "proxy_password",
"is_set": false
},
{
"name": "username",
"is_set": false
},
{
"name": "password",
"is_set": false
}
],
"includes": [
"shelf-reader"
],
"excludes": [],
"prereleases": true,
"package_types": [],
"keep_latest_packages": 0,
"exclude_platforms": []
}
pulp --profile local python distribution create --name test --base-path test --remote test
Started background task /pulp/default/api/v3/tasks/0190cbb4-1f3b-788b-a620-656d36d591fe/
Done.
{
"pulp_href": "/pulp/default/api/v3/distributions/python/pypi/0190cbb4-1fc1-76fe-a564-965771202cce/",
"pulp_created": "2024-07-19T15:54:57.858495Z",
"pulp_last_updated": "2024-07-19T15:54:57.858506Z",
"base_path": "test",
"base_url": "https://5d57a233243e/pypi/default/test/",
"content_guard": null,
"hidden": false,
"pulp_labels": {},
"name": "test",
"repository": null,
"publication": null,
"allow_uploads": true,
"remote": "/pulp/default/api/v3/remotes/python/python/0190cbb3-e6b3-7271-a195-a5667aa931d6/"
}
pip uninstall pytz
...
Successfully uninstalled pytz-2024.1
pip --no-cache-dir install --trusted-host localhost:5001 -i http://localhost:5001/pypi/default/foo/simple/ pytz --no-build-isolation
...
Successfully installed pytz-2023.3
Metadata
Metadata
Assignees
Labels
feature requestNew feature requestNew feature request