{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/helm/issues/1038","repository_url":"https://api.github.com/repos/kubernetes/helm","labels_url":"https://api.github.com/repos/kubernetes/helm/issues/1038/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/helm/issues/1038/comments","events_url":"https://api.github.com/repos/kubernetes/helm/issues/1038/events","html_url":"https://github.com/kubernetes/helm/issues/1038","id":170330285,"number":1038,"title":"Securing a chart repository?","user":{"login":"mumoshu","id":22009,"avatar_url":"https://avatars.githubusercontent.com/u/22009?v=3","gravatar_id":"","url":"https://api.github.com/users/mumoshu","html_url":"https://github.com/mumoshu","followers_url":"https://api.github.com/users/mumoshu/followers","following_url":"https://api.github.com/users/mumoshu/following{/other_user}","gists_url":"https://api.github.com/users/mumoshu/gists{/gist_id}","starred_url":"https://api.github.com/users/mumoshu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mumoshu/subscriptions","organizations_url":"https://api.github.com/users/mumoshu/orgs","repos_url":"https://api.github.com/users/mumoshu/repos","events_url":"https://api.github.com/users/mumoshu/events{/privacy}","received_events_url":"https://api.github.com/users/mumoshu/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-08-10T05:22:36Z","updated_at":"2016-08-11T01:27:34Z","closed_at":null,"body":"Hi, Thanks as always for providing a great OSS 👍 \r\n\r\nWhile reading [the documentation about chart repositories](https://github.com/kubernetes/helm/blob/master/docs/charts.md#chart-repositories), it was not clear for me how to secure a chart repository.\r\nAlso I couldn't find any code in helm that provides authentication for connecting chart repositories.\r\nIs there any plan to add it?"},"comment":{"url":"https://api.github.com/repos/kubernetes/helm/issues/comments/239052238","html_url":"https://github.com/kubernetes/helm/issues/1038#issuecomment-239052238","issue_url":"https://api.github.com/repos/kubernetes/helm/issues/1038","id":239052238,"user":{"login":"mumoshu","id":22009,"avatar_url":"https://avatars.githubusercontent.com/u/22009?v=3","gravatar_id":"","url":"https://api.github.com/users/mumoshu","html_url":"https://github.com/mumoshu","followers_url":"https://api.github.com/users/mumoshu/followers","following_url":"https://api.github.com/users/mumoshu/following{/other_user}","gists_url":"https://api.github.com/users/mumoshu/gists{/gist_id}","starred_url":"https://api.github.com/users/mumoshu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mumoshu/subscriptions","organizations_url":"https://api.github.com/users/mumoshu/orgs","repos_url":"https://api.github.com/users/mumoshu/repos","events_url":"https://api.github.com/users/mumoshu/events{/privacy}","received_events_url":"https://api.github.com/users/mumoshu/received_events","type":"User","site_admin":false},"created_at":"2016-08-11T01:27:34Z","updated_at":"2016-08-11T01:27:34Z","body":"@technosophos Thank you for being so responsive 🍺\r\n\r\nI'd like to see Digest Authentication support in the Helm client, so that we can:\r\n\r\n1. Authenticate without repeatedly sending username/password for each request like Basic Authentication does,\r\n2. (Optionally) expire sessions after some period of time(e.g. using Apache's `AuthDigestNonceLifetime`.  Can't be done with Basic Auth)\r\n3. (Optionally) authorize access to a file according to whom it is accessed by(on the chart repository side, using digest auth's `realm` and `username`)\r\n4. Easily test secured chart repositories with `curl --anyauth --user <user>:<pass>`\r\n5. Major http servers supports it(apache, nginx, lighthttpd, etc)\r\n\r\nIMHO,\r\n* Basic Authentication is too insecure, as chart repositories are not required to be https.\r\n* Rolling our own token/cookie-based authentication is overkill\r\n"}}
{"actor":{"display_login":"mumoshu"}}