Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title
Carthik Sharma commented on PUP-6413
Re: Pip provider on 3.x fails when using ensure => latest
Upgrades fail on 4.x (4.4.2) as well:
{{root@master:/home/training # puppet resource package nose ensure=1.3.6 provider=pip Notice: /Package[nose]/ensure: ensure changed '1.3.7' to '1.3.6' package { 'nose': ensure => '1.3.6', }
root@master:/home/training # puppet resource package nose ensure=latest provider=pip Error: Could not get latest version: HTTP-Error: 403 Must access using HTTPS instead of HTTP Error: /Package[nose]/ensure: change from 1.3.6 to latest failed: Could not get latest version: HTTP-Error: 403 Must access using HTTPS instead of HTTP package { 'nose': ensure => '1.3.6', }
root@master:/home/training # puppet -V 4.4.2}}
Add Comment
This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9)
--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title Owen Rodabaugh updated an issue Puppet / PUP-6413 Pip provider on 3.x fails when using ensure => latest Change By: Owen Rodabaugh CS Priority: Needs Priority Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title William Hopper assigned an issue to Unassigned Puppet / PUP-6413 Pip provider on 3.x fails when using ensure => latest Change By: William Hopper Assignee: William Hopper Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title John Duarte updated an issue Puppet / PUP-6413 Pip provider on 3.x fails when using ensure => latest Change By: John Duarte QA Status: Reviewed Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title John Duarte updated an issue Puppet / PUP-6413 Pip provider on 3.x fails when using ensure => latest Change By: John Duarte QA Risk Assessment: Low Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title William Hopper assigned an issue to William Hopper Puppet / PUP-6413 Pip provider on 3.x fails when using ensure => latest Change By: William Hopper Assignee: William Hopper Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title Branan Riley updated an issue Puppet / PUP-6413 Pip provider on 3.x fails when using ensure => latest Change By: Branan Riley Story Points: 0 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title Branan Riley updated an issue Puppet / PUP-6413 Pip provider on 3.x fails when using ensure => latest Change By: Branan Riley Sprint: Client 2016-06-29 (failover) Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title William Hopper updated an issue Puppet / PUP-6413 Pip provider on 3.x fails when using ensure => latest Change By: William Hopper Scrum Team: Client Platform Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title William Hopper updated an issue Puppet / PUP-6413 Pip provider on 3.x fails when using ensure => latest Change By: William Hopper Fix Version/s: PUP 3.8.8 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6413) Pip provider on 3.x fails when using ensure => latest
Title: Message Title
Spencer Krum created an issue
Puppet / PUP-6413
Pip provider on 3.x fails when using ensure => latest
Issue Type:
Bug
Affects Versions:
PUP 3.8.7
Assignee:
Unassigned
Created:
2016/06/15 3:06 PM
Priority:
Normal
Reporter:
Spencer Krum
Pypi changed behaviour today because of vulnerabilities in urrlib, which is used by pip.
http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html
Pypi changed to denying http requests entirely instead of redirecting to https. (I guess? I don't really understand)
Without this patch:
root@derpderp:~# cat foo.pp package { 'diskimage-builder': ensure => latest, provider => pip, }
root@derpderp:~# puppet apply foo.pp Warning: Setting templatedir is deprecated. See http://links.puppetlabs.com/env-settings-deprecations (at /usr/lib/ruby/vendor_ruby/puppet/settings.rb:1139:in `issue_deprecation_warning') Notice: Compiled catalog for derpderp in environment production in 0.14 seconds Error: Could not get latest version: HTTP-Error: 403 Must access using HTTPS instead of HTTP Error: /Stage[main]/Main/Package[diskimage-builder]/ensure: change from 1.17.0 to latest failed: Could not get latest version: HTTP-Error: 403 Must access using HTTPS instead of HTTP Notice: Finished catalog run in 0.67 seconds
So this breaks any puppet 3.x using the default pip provider.
With this patch, it just
