Does the dynamic configuration reload functionality work with SSH repositories?

[brandonp42]

All of the examples using dynamic configuration reload (https://fetchit.readthedocs.io/en/latest/methods.html) seem to use HTTP. Does it support SSH?

Thank you!

[cooktheryan]

Currently the engine only support HTTP based on how it is written a change could be introduced that would allow for the user to specify SSH or HTTP.

…

On Sun, Nov 5, 2023 at 12:05 PM Brandon Peterson ***@***.***> wrote: All of the examples using dynamic configuration reload ( https://fetchit.readthedocs.io/en/latest/methods.html) seem to use HTTP. Does it support SSH? Thank you! — Reply to this email directly, view it on GitHub <#314>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA5CZFFEPHUJTPK3XMPVY7LYC62LRAVCNFSM6AAAAAA66OXPAKVHI2DSMVQWIX3LMV43ERDJONRXK43TNFXW4OZVHAYTKNBVHE> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[brandonp42]

Thank you, I'm not sure if I will have time to attempt a PR for this but might depending on how successful I am at getting my team to adopt FetchIt.

[cooktheryan]

Ill put a slot on my calendar to look into it a bit next week.

…

On Fri, Nov 10, 2023 at 1:51 PM Brandon Peterson ***@***.***> wrote: Thank you, I'm not sure if I will have time to attempt a PR for this but might depending on how successful I am at getting my team to adopt FetchIt. — Reply to this email directly, view it on GitHub <#314 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA5CZFAT7OEQFBIO5OOWMDDYDZZTZAVCNFSM6AAAAAA66OXPAKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM3TKMZWGYYTS> . You are receiving this because you commented.Message ID: ***@***.***>

[brandonp42]

That would be awesome. So far in my testing SSH seems to be best from a security perspective since its easy to keep the ssh key out of the configuration repository. If there was a way to put a Bitbucket/GitHub token in a file outside the configuration file that would help but my security team doesn't want us using HTTP tokens so I don't think I would be able to use that.

[brandonp42]

You know, just trying to share where I'm coming from with this.

[cooktheryan]

@brandonp42 one solution we looked at was using podman secrets

[cooktheryan]

so looking at this I think the solution would be to cut a release at the current time then go in and make the following modification to the config reload engine. We will need to allow for it to do a shallow clone of a git repo and accept a path + filename. Once it has those assets do a move of the file to the expected location.