supply authentication to zuul's gerrit baseurl

[John Dewey]

We don't want to allow anonymous r/o access to our repos. To disable this,
we disabled the Anonynous user from refs/*. However, when doing this, prevents zuul from connecting to gerrit anonymously.

[gerrit]
baseurl=http://127.0.0.1:8181
server=127.0.0.1
user=jenkins
sshkey=/var/lib/zuul/ssh/id_rsa_jenkins

Was hoping we could allow user/pass options, so zuul can construct an authenticated URL to query gerrit.

[Jeremy Stanley (fungi)]

It's worth noting that plaintext HTTP will potentially leak your credentials for this. HTTPS with proper certificate validation or possibly Gerrit's SSH interface could provide a secure transport for this sort of feature enhancement. Since Zuul already needs to be able to connect to Gerrit's SSH interface to read the event stream, perhaps much of the needed key management logic is already in place for that?

[John Dewey (retr0h)]

Ah, yes. I would agree using gerrit's ssh interface would be ideal, if it is possible.

[Zang MingJie (zealot0630)]

Patch to fix the bug

https://review.openstack.org/#/c/67858

[Gene Snider (gene-4)]

This issue affects everyone who uses the 'proxy-https' setting in the httpd section of gerrit.conf. The change was abandonded due to inactivity but I have asked the author to restore it.

[Xiaofei.Wang (wangxf-s)]

I have some issue.How can i resolve it?

[Xiaofei.Wang (wangxf-s)]

I has been fixed it