Hey @hyagi ,
I wish that were the case to save me the embarrassment, but I’m afraid it was just operator error (me, not pulp-operator). I had been entering the wrong pulp content path, but convinced myself that it must be the switch to blob storage as that was the only recent change. Everything was configured fine all along!
The only issue I have now is that my k6 test runs are receiving 302s trying to download packages and failing to authenticate. I gather from an earlier post that I need to disable redirect. I have tried disabling through the configmap:
---
apiVersion: v1
kind: ConfigMap
metadata:
name: settings
data:
analytics: "False"
content_origin: '"http://<pulp_ip>"'
api_root: '"/pulp/"'
pypi_api_hostname: '"http://<pulp_ip>"'
allowed_export_paths: '[ "/tmp" ]'
allowed_import_paths: '[ "/tmp" ]'
redirect_to_object_storage: "False"
Now I see ‘REDIRECT_TO_OBJECT_STORAGE’ twice in settings.py on the pods. First it is set to true, then as a result of the setting above there is a further entry setting it to false, which I suppose overrides that:
...
REDIRECT_TO_OBJECT_STORAGE = True
MEDIA_ROOT = ""
STORAGES = {
"default": {
"BACKEND": "storages.backends.azure_storage.AzureStorage",
"OPTIONS": {
"connection_string": 'DefaultEndpointsProtocol=***core.windows.net',
"account_name": '****',
"azure_container": 'filestore',
"account_key": '***',
"expiration_secs": 60,
"overwrite_files": 'True',
"location": 'pulp3'
},
},
"staticfiles": {"BACKEND": "django.contrib.staticfiles.storage.StaticFilesStorage"},
}
TOKEN_SERVER = "http://example-pulp-api-svc.pulp.svc.cluster.local:24817/token/"
SECRET_KEY = "****"
ALLOWED_EXPORT_PATHS = [ "/tmp" ]
ALLOWED_IMPORT_PATHS = [ "/tmp" ]
ANALYTICS = False
API_ROOT = "/pulp/"
CONTENT_ORIGIN = "http://<pulp_ip>"
PYPI_API_HOSTNAME = "http://<pulp_ip>"
REDIRECT_TO_OBJECT_STORAGE = False
I still receive a 302 but am now able to download the files. I’m confused by this - I had expected that, from the client’s perspective, with redirection disabled the files would appear to be served from Pulp directly?
Actually I’d prefer to leave redirection enabled, but I’m not sure how to go about handling authentication to the blob storage for clients.
