Proposal to implement basic auth support against simple http(s) disk image servers

[Adam Rozman]

Currently there is no support in IPA to use "basic auth" against http(s) servers that are hosting the disk images used during provisioning.

I would like to propose 2 new configuration variable for IPA that would be possible to supply via config file, cmd argument and kernel parameter. The 2 variable would be basicAuthUser and basicAuthPassword.

I am happy to work on this if the community agrees to accept the proposal.

[Adam Rozman (rozzix)]

I am happy to work on this upstream, In fact I need it right now so I am implementing it on a fork ATM and I would be happy to push it upstream.

[Adam Rozman (rozzix)]

I have pushed the first version of the implementation for both IPA and Ironic:
- https://review.opendev.org/c/openstack/ironic/+/890411
- https://review.opendev.org/c/openstack/ironic-python-agent/+/890272

Based on JayF's comment, I would need to change my approach of supplying the password for user image BAuth between Ironic and IPA, I have to modify the lookup process in both Ironic and IPA to support providing the credentials via the lookup API.

[Adam Rozman (rozzix)]

I have reacted to all the reviews and answered all questions and rewrote the feature according to community requirements.
Please take a look.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/ironic 24.0.0 release.

[Jay Faulkner (jason-oldos)]

Thanks Adam!