Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-25936

Virtual Helm repository index returns a partial index.yaml for users with no read permissions for one of the repositories under the virtual

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Resolution: Done
    • Affects Version/s: 7.18.6
    • Fix Version/s: None
    • Component/s: Helm
    • Labels:
      None
    • Location:
      External

      Description

      Description:

      If a user doesn't have read permissions for one (or more) repositories under the virtual repository, this can break the metadata calculation, depends on the resolution order.

      Steps to reproduce:

      1. Create 3 local Helm repositories and 1 Virtual helm repository (helm1, helm2, helm3, and helm)
      2. Deploy 3 different charts (chart_a, chart_b, chart_c)  to helm1, helm2, helm3 accordingly.
      3. Create a new user (user1) with read permission for helm1 and helm3 (no permission at all for helm2)
      4. Verify that the resolution order is: helm1 -> helm2 -> helm3
      5. $ helm repo add <JFROG_URL>/artifactory/helm --username user1 --password <password>
      6. Review the cached index.yaml file (~/Library/Caches/helm/repository) it will list the chart only from helm1 but not from helm3.

      Desired behavior:

      The virtual repository index.yaml file should contain the charts from all the repositories according to the permissions. user1 should see charts from helm1 and helm3.

      Actual behavior:

      The resolution order in combination with different permission levels breaks the virtual repository aggregation functionality. user1 will only see charts from helm1 but not helm3.

       

       

        Attachments

          Activity

              People

              Assignee:
              Unassigned
              Reporter:
              hanank Hanan Kemelman
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Sync Status

                  Connection: RTFACT Sync
                  RTMID-25937 -
                  ERROR
                  • Last Sync Date: