pulpcore 3.83.2__py3-none-any.whl → 3.84.0__py3-none-any.whl

pulp_certguard/app/__init__.py

@@ -6,6 +6,6 @@ class PulpCertGuardPluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_certguard.app"
     label = "certguard"
-    version = "3.83.2"
+    version = "3.84.0"
     python_package_name = "pulpcore"
     domain_compatible = True

pulp_file/app/__init__.py

@@ -8,6 +8,6 @@ class PulpFilePluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_file.app"
     label = "file"
-    version = "3.83.2"
+    version = "3.84.0"
     python_package_name = "pulpcore"
     domain_compatible = True

pulpcore/app/apps.py

@@ -247,7 +247,7 @@ class PulpAppConfig(PulpPluginAppConfig):
     label = "core"
 
     # The version of this app
-    version = "3.83.2"
+    version = "3.84.0"
 
     # The python package name providing this app
     python_package_name = "pulpcore"

pulpcore/app/migrations/0134_task_insert_trigger.py

@@ -0,0 +1,81 @@
+# Generated by Django 4.2.22 on 2025-06-06 14:32
+
+from django.db import migrations
+from pulpcore.migrations import RequireVersion
+
+# This migration is supposed to be zero downtime upgrade safe.
+
+
+TASK_INSERT_TRIGGER_UP = """
+CREATE FUNCTION on_insert_timestamp_task()
+  RETURNS TRIGGER
+  LANGUAGE plpgsql
+  AS $$
+    DECLARE
+      res_list text[];
+      res_list_shared text[];
+    BEGIN
+      res_list := array_agg(q.res) FROM (SELECT regexp_replace(unnest(NEW.reserved_resources_record), '^shared:', '') res) AS q;
+      res_list_shared := array_agg(q.res) FROM (SELECT 'shared:' || unnest(res_list) AS res) AS q;
+      PERFORM pg_advisory_xact_lock(4711, q.id) FROM (SELECT hashtext(res) AS id FROM unnest(res_list) AS res ORDER BY id) AS q;
+      NEW.pulp_created = clock_timestamp();
+      IF NEW.pulp_created <= (
+        SELECT max(pulp_created) FROM core_task
+        WHERE
+          state NOT IN ('completed', 'failed', 'canceled', 'skipped')
+        AND
+          reserved_resources_record && (res_list || res_list_shared)
+      )
+      THEN
+        RAISE EXCEPTION 'Clock screw detected.';
+      END IF;
+      RETURN NEW;
+    END;
+  $$
+;
+
+CREATE FUNCTION on_update_timestamp_task()
+  RETURNS TRIGGER
+  LANGUAGE plpgsql
+  AS $$
+    BEGIN
+      -- This is mainly a safeguard to prevent old code from messing with the timestamp, now that the database is in charge.
+      RAISE EXCEPTION 'Updating pulp_created is not allowed.';
+    END;
+  $$
+;
+
+CREATE TRIGGER on_insert_timestamp_task_trigger
+  BEFORE INSERT
+  ON core_task
+  FOR EACH ROW
+  EXECUTE FUNCTION on_insert_timestamp_task()
+;
+
+CREATE TRIGGER on_update_timestamp_task_trigger
+  BEFORE UPDATE
+  ON core_task
+  FOR EACH ROW
+  WHEN (OLD.pulp_created <> NEW.pulp_created)
+  EXECUTE FUNCTION on_update_timestamp_task()
+;
+"""
+
+TASK_INSERT_TRIGGER_DOWN = """
+DROP TRIGGER on_update_timestamp_task_trigger on core_task;
+DROP TRIGGER on_insert_timestamp_task_trigger on core_task;
+DROP FUNCTION on_update_timestamp_task;
+DROP FUNCTION on_insert_timestamp_task;
+"""
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("core", "0133_repositoryversion_content_ids"),
+    ]
+
+    operations = [
+        RequireVersion("core", "3.82.1"),
+        migrations.RunSQL(sql=TASK_INSERT_TRIGGER_UP, reverse_sql=TASK_INSERT_TRIGGER_DOWN),
+    ]

pulpcore/app/migrations/0135_task_pulp_task_resources_index.py

@@ -0,0 +1,25 @@
+# Generated by Django 4.2.22 on 2025-07-07 11:07
+
+import django.contrib.postgres.indexes
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("core", "0134_task_insert_trigger"),
+    ]
+
+    operations = [
+        migrations.AddIndex(
+            model_name="task",
+            index=django.contrib.postgres.indexes.GinIndex(
+                condition=models.Q(
+                    ("state__in", ["completed", "failed", "canceled", "skipped"]), _negated=True
+                ),
+                fields=["reserved_resources_record"],
+                name="pulp_task_resources_index",
+                opclasses=["array_ops"],
+            ),
+        ),
+    ]

pulpcore/app/models/task.py

@@ -9,6 +9,7 @@ from gettext import gettext as _
 
 from django.conf import settings
 from django.contrib.postgres.fields import ArrayField, HStoreField
+from django.contrib.postgres.indexes import GinIndex
 from django.core.serializers.json import DjangoJSONEncoder
 from django.db import connection, models
 from django.utils import timezone
@@ -348,6 +349,12 @@ class Task(BaseModel, AutoAddObjPermsMixin):
             models.Index(fields=["unblocked_at"]),
             models.Index(fields=["state"]),
             models.Index(fields=["state", "pulp_created"]),
+            GinIndex(
+                name="pulp_task_resources_index",
+                fields=["reserved_resources_record"],
+                condition=~models.Q(state__in=["completed", "failed", "canceled", "skipped"]),
+                opclasses=["array_ops"],
+            ),
         ]
         permissions = [
             ("manage_roles_task", "Can manage role assignments on task"),

pulpcore/app/settings.py

@@ -20,7 +20,8 @@ from django.core.files.storage import storages
 from django.conf import global_settings
 from django.core.exceptions import ImproperlyConfigured
 from django.db import connection
-from dynaconf import DjangoDynaconf, Dynaconf, Validator
+from pulpcore.app.loggers import deprecation_logger
+from dynaconf import DjangoDynaconf, Dynaconf, Validator, get_history
 
 from pulpcore import constants
 
@@ -553,7 +554,14 @@ settings = DjangoDynaconf(
 
 # begin compatibility layer for DEFAULT_FILE_STORAGE
 # Remove on pulpcore=3.85 or pulpcore=4.0
-
+using_deprecated_storage_settings = len(get_history(settings, key="DEFAULT_FILE_STORAGE")) > 1
+if using_deprecated_storage_settings:
+    deprecation_logger.warning(
+        "[deprecation] DEFAULT_FILE_STORAGE will be removed in pulpcore 3.85. "
+        "Learn how to upgrade to STORAGES:\n"
+        "https://discourse.pulpproject.org/t/"
+        "action-required-upgrade-your-storage-settings-before-pulpcore-3-85/2072/2"
+    )
 # Ensures the cached property storage.backends uses the the right value
 storages._backends = settings.STORAGES.copy()
 storages.backends

pulpcore/app/tasks/purge.py

@@ -82,17 +82,20 @@ def purge(finished_before=None, states=None, **kwargs):
         states (Optional[List[str]]): List of task-states we want to purge.
 
     """
+    scheduled = current_task.get().taskschedule_set.exists()
+
     if finished_before is None:
         assert settings.TASK_PROTECTION_TIME > 0
         finished_before = timezone.now() - timezone.timedelta(minutes=settings.TASK_PROTECTION_TIME)
     if states is None:
         states = TASK_FINAL_STATES
-    domain = get_domain()
+
     # Tasks, prior to the specified date, in the specified state, owned by the current-user, in the
     # current domain
-    candidate_qs = Task.objects.filter(
-        finished_at__lt=finished_before, state__in=states, pulp_domain=domain
-    )
+    candidate_qs = Task.objects.filter(finished_at__lt=finished_before, state__in=states)
+
+    if not scheduled:
+        candidate_qs = candidate_qs.filter(pulp_domain=get_domain())
     if "user_pk" in kwargs:
         if (user_pk := kwargs["user_pk"]) is not None:
             current_user = User.objects.get(pk=user_pk)
@@ -101,7 +104,7 @@ def purge(finished_before=None, states=None, **kwargs):
         # This is the old task signature (<= 3.74) without "user_pk".
         # Has this task not been dispatched from a task schedule? Then we assume there was a user
         # doing that.
-        if not current_task.get().taskschedule_set.exists():
+        if not scheduled:
             current_user = get_current_authenticated_user()
             if current_user is None:
                 raise RuntimeError(

pulpcore/constants.py

@@ -12,6 +12,10 @@ TASK_UNBLOCKING_LOCK = 84
 TASK_METRICS_HEARTBEAT_LOCK = 74
 STORAGE_METRICS_LOCK = 72
 
+# Reasons to send along a task worker wakeup call.
+TASK_WAKEUP_UNBLOCK = "unblock"
+TASK_WAKEUP_HANDLE = "handle"
+
 #: All valid task states.
 TASK_STATES = SimpleNamespace(
     WAITING="waiting",

pulpcore/tasking/entrypoint.py

@@ -21,8 +21,18 @@ _logger = logging.getLogger(__name__)
 @click.option(
     "--reload/--no-reload", help="Reload worker on code changes. [requires hupper to be installed.]"
 )
+@click.option(
+    "--auxiliary/--no-auxiliary",
+    default=False,
+    help="Auxiliary workers do not perform housekeeping duties.",
+)
 @click.command()
-def worker(pid, burst, reload):
+def worker(
+    pid,
+    burst,
+    reload,
+    auxiliary,
+):
     """A Pulp worker."""
 
     if reload:
@@ -40,4 +50,4 @@ def worker(pid, burst, reload):
 
     _logger.info("Starting distributed type worker")
 
-    PulpcoreWorker().run(burst=burst)
+    PulpcoreWorker(auxiliary=auxiliary).run(burst=burst)

pulpcore/tasking/tasks.py

@@ -9,12 +9,11 @@ import traceback
 import tempfile
 import threading
 from asgiref.sync import sync_to_async
-from datetime import timedelta
 from gettext import gettext as _
 
 from django.conf import settings
 from django.db import connection, transaction
-from django.db.models import Model, Max
+from django.db.models import Model
 from django_guid import get_guid
 from pulpcore.app.apps import MODULE_PLUGIN_VERSIONS
 from pulpcore.app.models import Task, TaskGroup
@@ -23,8 +22,8 @@ from pulpcore.constants import (
     TASK_FINAL_STATES,
     TASK_INCOMPLETE_STATES,
     TASK_STATES,
-    TASK_DISPATCH_LOCK,
     IMMEDIATE_TIMEOUT,
+    TASK_WAKEUP_UNBLOCK,
 )
 from pulpcore.middleware import x_task_diagnostics_var
 from pulpcore.tasking.kafka import send_task_notification
@@ -47,10 +46,10 @@ def _validate_and_get_resources(resources):
     return list(resource_set)
 
 
-def wakeup_worker():
+def wakeup_worker(reason="unknown"):
     # Notify workers
     with connection.connection.cursor() as cursor:
-        cursor.execute("NOTIFY pulp_worker_wakeup")
+        cursor.execute("SELECT pg_notify('pulp_worker_wakeup', %s)", (reason,))
 
 
 def execute_task(task):
@@ -228,13 +227,6 @@ def dispatch(
     notify_workers = False
     with contextlib.ExitStack() as stack:
         with transaction.atomic():
-            # Task creation need to be serialized so that pulp_created will provide a stable order
-            # at every time. We specifically need to ensure that each task, when committed to the
-            # task table will be the newest with respect to `pulp_created`.
-            with connection.cursor() as cursor:
-                # Wait for exclusive access and release automatically after transaction.
-                cursor.execute("SELECT pg_advisory_xact_lock(%s, %s)", [0, TASK_DISPATCH_LOCK])
-            newest_created = Task.objects.aggregate(Max("pulp_created"))["pulp_created__max"]
             task = Task.objects.create(
                 state=TASK_STATES.WAITING,
                 logging_cid=(get_guid()),
@@ -250,23 +242,6 @@ def dispatch(
                 profile_options=x_task_diagnostics_var.get(None),
             )
             task.refresh_from_db()  # The database may have assigned a timestamp for us.
-            if newest_created and task.pulp_created <= newest_created:
-                # Let this workaround not row forever into the future.
-                if newest_created - task.pulp_created > timedelta(seconds=1):
-                    # Do not commit the transaction if this condition is not met.
-                    # If we ever hit this, think about delegating the timestamping to PostgresQL.
-                    raise RuntimeError("Clockscrew detected. Task dispatching would be dangerous.")
-                # Try to work around the smaller glitch
-                task.pulp_created = newest_created + timedelta(milliseconds=1)
-                task.save()
-            if task_group:
-                task_group.refresh_from_db()
-                if task_group.all_tasks_dispatched:
-                    task.set_canceling()
-                    task.set_canceled(
-                        TASK_STATES.CANCELED, "All tasks in group have been dispatched/canceled."
-                    )
-                    return task
             if immediate:
                 # Grab the advisory lock before the task hits the db.
                 stack.enter_context(task)
@@ -308,7 +283,7 @@ def dispatch(
                 task.set_canceling()
                 task.set_canceled(TASK_STATES.CANCELED, "Resources temporarily unavailable.")
     if notify_workers:
-        wakeup_worker()
+        wakeup_worker(TASK_WAKEUP_UNBLOCK)
     return task
 
 

pulpcore/tasking/worker.py

@@ -15,6 +15,7 @@ from packaging.version import parse as parse_version
 from django.conf import settings
 from django.db import connection
 from django.db.models import Case, Count, F, Max, Value, When
+from django.db.models.functions import Random
 from django.utils import timezone
 
 from pulpcore.constants import (
@@ -23,6 +24,8 @@ from pulpcore.constants import (
     TASK_SCHEDULING_LOCK,
     TASK_UNBLOCKING_LOCK,
     TASK_METRICS_HEARTBEAT_LOCK,
+    TASK_WAKEUP_UNBLOCK,
+    TASK_WAKEUP_HANDLE,
 )
 from pulpcore.metrics import init_otel_meter
 from pulpcore.app.apps import pulp_plugin_configs
@@ -56,12 +59,14 @@ THRESHOLD_UNBLOCKED_WAITING_TIME = 5
 
 
 class PulpcoreWorker:
-    def __init__(self):
+    def __init__(self, auxiliary=False):
         # Notification states from several signal handlers
         self.shutdown_requested = False
-        self.wakeup = False
+        self.wakeup_unblock = False
+        self.wakeup_handle = False
         self.cancel_task = False
 
+        self.auxiliary = auxiliary
         self.task = None
         self.name = f"{os.getpid()}@{socket.getfqdn()}"
         self.heartbeat_period = timedelta(seconds=settings.WORKER_TTL / 3)
@@ -124,7 +129,17 @@ class PulpcoreWorker:
 
     def _pg_notify_handler(self, notification):
         if notification.channel == "pulp_worker_wakeup":
-            self.wakeup = True
+            if notification.payload == TASK_WAKEUP_UNBLOCK:
+                # Auxiliary workers don't do this.
+                self.wakeup_unblock = not self.auxiliary
+            elif notification.payload == TASK_WAKEUP_HANDLE:
+                self.wakeup_handle = True
+            else:
+                _logger.warn("Unknown wakeup call recieved. Reason: '%s'", notification.payload)
+                # We cannot be sure so assume everything happened.
+                self.wakeup_unblock = not self.auxiliary
+                self.wakeup_handle = True
+
         elif notification.channel == "pulp_worker_metrics_heartbeat":
             self.last_metric_heartbeat = datetime.fromisoformat(notification.payload)
         elif self.task and notification.channel == "pulp_worker_cancel":
@@ -179,18 +194,19 @@ class PulpcoreWorker:
     def beat(self):
         if self.worker.last_heartbeat < timezone.now() - self.heartbeat_period:
             self.worker = self.handle_worker_heartbeat()
-            self.worker_cleanup_countdown -= 1
-            if self.worker_cleanup_countdown <= 0:
-                self.worker_cleanup_countdown = WORKER_CLEANUP_INTERVAL
-                self.worker_cleanup()
-            with contextlib.suppress(AdvisoryLockError), PGAdvisoryLock(TASK_SCHEDULING_LOCK):
-                dispatch_scheduled_tasks()
-            # This "reporting code" must not me moved inside a task, because it is supposed
-            # to be able to report on a congested tasking system to produce reliable results.
-            self.record_unblocked_waiting_tasks_metric()
-
-    def notify_workers(self):
-        self.cursor.execute("NOTIFY pulp_worker_wakeup")
+            if not self.auxiliary:
+                self.worker_cleanup_countdown -= 1
+                if self.worker_cleanup_countdown <= 0:
+                    self.worker_cleanup_countdown = WORKER_CLEANUP_INTERVAL
+                    self.worker_cleanup()
+                with contextlib.suppress(AdvisoryLockError), PGAdvisoryLock(TASK_SCHEDULING_LOCK):
+                    dispatch_scheduled_tasks()
+                # This "reporting code" must not me moved inside a task, because it is supposed
+                # to be able to report on a congested tasking system to produce reliable results.
+                self.record_unblocked_waiting_tasks_metric()
+
+    def notify_workers(self, reason="unknown"):
+        self.cursor.execute("SELECT pg_notify('pulp_worker_wakeup', %s)", (reason,))
 
     def cancel_abandoned_task(self, task, final_state, reason=None):
         """Cancel and clean up an abandoned task.
@@ -224,7 +240,7 @@ class PulpcoreWorker:
         delete_incomplete_resources(task)
         task.set_canceled(final_state=final_state, reason=reason)
         if task.reserved_resources_record:
-            self.notify_workers()
+            self.notify_workers(TASK_WAKEUP_UNBLOCK)
         return True
 
     def is_compatible(self, task):
@@ -249,10 +265,31 @@ class PulpcoreWorker:
     def unblock_tasks(self):
         """Iterate over waiting tasks and mark them unblocked accordingly.
 
-        Returns `True` if at least one task was unblocked. `False` otherwise.
+        This function also handles the communication around it.
+        In order to prevent multiple workers to attempt unblocking tasks at the same time it tries
+        to acquire a lock and just returns on failure to do so.
+        Also it clears the notification about tasks to be unblocked and sends the notification that
+        new unblocked tasks are made available.
+
+        Returns the number of new unblocked tasks.
         """
 
-        changed = False
+        assert not self.auxiliary
+
+        count = 0
+        self.wakeup_unblock_tasks = False
+        with contextlib.suppress(AdvisoryLockError), PGAdvisoryLock(TASK_UNBLOCKING_LOCK):
+            if count := self._unblock_tasks():
+                self.notify_workers(TASK_WAKEUP_HANDLE)
+        return count
+
+    def _unblock_tasks(self):
+        """Iterate over waiting tasks and mark them unblocked accordingly.
+
+        Returns the number of new unblocked tasks.
+        """
+
+        count = 0
         taken_exclusive_resources = set()
         taken_shared_resources = set()
         # When batching this query, be sure to use "pulp_created" as a cursor
@@ -280,7 +317,7 @@ class PulpcoreWorker:
                         task.pulp_domain.name,
                     )
                     task.unblock()
-                    changed = True
+                    count += 1
                 # Don't consider this task's resources as held.
                 continue
 
@@ -301,7 +338,7 @@ class PulpcoreWorker:
                     task.pulp_domain.name,
                 )
                 task.unblock()
-                changed = True
+                count += 1
             elif task.state == TASK_STATES.RUNNING and task.unblocked_at is None:
                 # This should not happen in normal operation.
                 # And it is only an issue if the worker running that task died, because it will
@@ -318,7 +355,7 @@ class PulpcoreWorker:
             taken_exclusive_resources.update(exclusive_resources)
             taken_shared_resources.update(shared_resources)
 
-        return changed
+        return count
 
     def iter_tasks(self):
         """Iterate over ready tasks and yield each task while holding the lock."""
@@ -327,7 +364,7 @@ class PulpcoreWorker:
             for task in Task.objects.filter(
                 state__in=TASK_INCOMPLETE_STATES,
                 unblocked_at__isnull=False,
-            ).order_by("-immediate", "pulp_created"):
+            ).order_by("-immediate", F("pulp_created") + Value(timedelta(seconds=8)) * Random()):
                 # This code will only be called if we acquired the lock successfully
                 # The lock will be automatically be released at the end of the block
                 with contextlib.suppress(AdvisoryLockError), task:
@@ -366,16 +403,18 @@ class PulpcoreWorker:
         """Wait for signals on the wakeup channel while heart beating."""
 
         _logger.debug(_("Worker %s entering sleep state."), self.name)
-        while not self.shutdown_requested and not self.wakeup:
+        while not self.shutdown_requested and not self.wakeup_handle:
             r, w, x = select.select(
                 [self.sentinel, connection.connection], [], [], self.heartbeat_period.seconds
             )
             self.beat()
             if connection.connection in r:
                 connection.connection.execute("SELECT 1")
+                if self.wakeup_unblock:
+                    self.unblock_tasks()
             if self.sentinel in r:
                 os.read(self.sentinel, 256)
-        self.wakeup = False
+        _logger.debug(_("Worker %s leaving sleep state."), self.name)
 
     def supervise_task(self, task):
         """Call and supervise the task process while heart beating.
@@ -424,12 +463,8 @@ class PulpcoreWorker:
                         )
                         cancel_state = TASK_STATES.CANCELED
                         self.cancel_task = False
-                    if self.wakeup:
-                        with contextlib.suppress(AdvisoryLockError), PGAdvisoryLock(
-                            TASK_UNBLOCKING_LOCK
-                        ):
-                            self.unblock_tasks()
-                        self.wakeup = False
+                    if self.wakeup_unblock:
+                        self.unblock_tasks()
                 if task_process.sentinel in r:
                     if not task_process.is_alive():
                         break
@@ -471,10 +506,10 @@ class PulpcoreWorker:
             if cancel_state:
                 self.cancel_abandoned_task(task, cancel_state, cancel_reason)
         if task.reserved_resources_record:
-            self.notify_workers()
+            self.notify_workers(TASK_WAKEUP_UNBLOCK)
         self.task = None
 
-    def handle_available_tasks(self):
+    def handle_unblocked_tasks(self):
         """Pick and supervise tasks until there are no more available tasks.
 
         Failing to detect new available tasks can lead to a stuck state, as the workers
@@ -483,11 +518,9 @@ class PulpcoreWorker:
         """
         keep_looping = True
         while keep_looping and not self.shutdown_requested:
-            try:
-                with PGAdvisoryLock(TASK_UNBLOCKING_LOCK):
-                    keep_looping = self.unblock_tasks()
-            except AdvisoryLockError:
-                keep_looping = True
+            # Clear pending wakeups. We are about to handle them anyway.
+            self.wakeup_handle = False
+            keep_looping = False
             for task in self.iter_tasks():
                 keep_looping = True
                 self.supervise_task(task)
@@ -538,14 +571,19 @@ class PulpcoreWorker:
             self.cursor.execute("LISTEN pulp_worker_cancel")
             self.cursor.execute("LISTEN pulp_worker_metrics_heartbeat")
             if burst:
-                self.handle_available_tasks()
+                if not self.auxiliary:
+                    # Attempt to flush the task queue completely.
+                    # Stop iteration if no new tasks were found to unblock.
+                    while self.unblock_tasks():
+                        self.handle_unblocked_tasks()
+                self.handle_unblocked_tasks()
             else:
                 self.cursor.execute("LISTEN pulp_worker_wakeup")
                 while not self.shutdown_requested:
                     # do work
                     if self.shutdown_requested:
                         break
-                    self.handle_available_tasks()
+                    self.handle_unblocked_tasks()
                     if self.shutdown_requested:
                         break
                     # rest until notified to wakeup

pulpcore/tests/functional/api/test_login.py

@@ -1,5 +1,8 @@
 import http
 import pytest
+import uuid
+
+from urllib.parse import urlparse
 
 pytestmark = [pytest.mark.parallel]
 
@@ -20,27 +23,43 @@ def _fix_response_headers(monkeypatch, pulpcore_bindings):
 
 
 @pytest.fixture
-def session_user(pulpcore_bindings, gen_user, anonymous_user):
-    old_cookie = pulpcore_bindings.client.cookie
-    user = gen_user()
-    with user:
-        response = pulpcore_bindings.LoginApi.login_with_http_info()
-        if isinstance(response, tuple):
-            # old bindings
-            _, _, headers = response
-        else:
-            # new bindings
-            headers = response.headers
-    cookie_jar = http.cookies.SimpleCookie(headers["Set-Cookie"])
-    # Use anonymous_user to remove the basic auth header from the api client.
-    with anonymous_user:
-        pulpcore_bindings.client.cookie = "; ".join(
-            (f"{k}={v.value}" for k, v in cookie_jar.items())
-        )
-        # Weird: You need to pass the CSRFToken as a header not a cookie...
-        pulpcore_bindings.client.set_default_header("X-CSRFToken", cookie_jar["csrftoken"].value)
-        yield user
-        pulpcore_bindings.client.cookie = old_cookie
+def session_user(pulpcore_bindings, gen_user, bindings_cfg):
+    class SessionUser(gen_user):
+        def __enter__(self):
+            """
+            Mimic the behavior of a session user (aka what browsers do).
+
+            - Set auth to None so client will use the session cookie
+            - Set X-CSRFToken header since we are posting JSON instead of form data
+            (Django creates a hidden input field for the CSRF token when using forms)
+            - Set Origin and Host headers so Django CSRF middleware will allow the request
+            (Browsers send these headers and it is needed when using HTTPS)
+            """
+            self.old_cookie = pulpcore_bindings.client.cookie
+            super().__enter__()
+            response = pulpcore_bindings.LoginApi.login_with_http_info()
+            if isinstance(response, tuple):
+                # old bindings
+                _, _, headers = response
+            else:
+                # new bindings
+                headers = response.headers
+            cookie_jar = http.cookies.SimpleCookie(headers["Set-Cookie"])
+            self.cookie = "; ".join((f"{k}={v.value}" for k, v in cookie_jar.items()))
+            self.csrf_token = cookie_jar["csrftoken"].value
+            self.session_id = cookie_jar["sessionid"].value
+            bindings_cfg.username, bindings_cfg.password = None, None
+            pulpcore_bindings.client.cookie = self.cookie
+            pulpcore_bindings.client.set_default_header("X-CSRFToken", self.csrf_token)
+            pulpcore_bindings.client.set_default_header("Origin", bindings_cfg.host)
+            pulpcore_bindings.client.set_default_header("Host", urlparse(bindings_cfg.host).netloc)
+            return self
+
+        def __exit__(self, exc_type, exc_value, traceback):
+            super().__exit__(exc_type, exc_value, traceback)
+            pulpcore_bindings.client.cookie = self.old_cookie
+
+    return SessionUser
 
 
 def test_login_read_denies_anonymous(pulpcore_bindings, anonymous_user):
@@ -83,20 +102,31 @@ def test_login_sets_session_cookie(pulpcore_bindings, gen_user):
     assert cookie_jar["csrftoken"].value != ""
 
 
-def test_session_cookie_is_authorization(pulpcore_bindings, anonymous_user, session_user):
-    result = pulpcore_bindings.LoginApi.login_read()
-    assert result.username == session_user.username
+def test_session_cookie_is_authorization(pulpcore_bindings, session_user):
+    with session_user() as user:
+        result = pulpcore_bindings.LoginApi.login_read()
+        assert result.username == user.username
+        assert pulpcore_bindings.client.configuration.username is None
+
+
+def test_session_cookie_object_create(pulpcore_bindings, session_user, gen_object_with_cleanup):
+    with session_user(model_roles=["core.rbaccontentguard_creator"]):
+        assert pulpcore_bindings.client.configuration.username is None
+        gen_object_with_cleanup(pulpcore_bindings.ContentguardsRbacApi, {"name": str(uuid.uuid4())})
 
 
 def test_logout_removes_sessionid(pulpcore_bindings, session_user):
-    response = pulpcore_bindings.LoginApi.logout_with_http_info()
-    if isinstance(response, tuple):
-        # old bindings
-        _, status_code, headers = response
-    else:
-        # new bindings
-        status_code = response.status_code
-        headers = response.headers
+    with session_user() as user:
+        assert user.session_id != ""
+        assert user.session_id in pulpcore_bindings.client.cookie
+        response = pulpcore_bindings.LoginApi.logout_with_http_info()
+        if isinstance(response, tuple):
+            # old bindings
+            _, status_code, headers = response
+        else:
+            # new bindings
+            status_code = response.status_code
+            headers = response.headers
     assert status_code == 204
     cookie_jar = http.cookies.SimpleCookie(headers["Set-Cookie"])
     assert cookie_jar["sessionid"].value == ""

{pulpcore-3.83.2.dist-info → pulpcore-3.84.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulpcore
-Version: 3.83.2
+Version: 3.84.0
 Summary: Pulp Django Application and Related Modules
 Author-email: Pulp Team <pulp-list@redhat.com>
 Project-URL: Homepage, https://pulpproject.org
@@ -44,11 +44,11 @@ Requires-Dist: gunicorn<23.1.0,>=22.0
 Requires-Dist: importlib-metadata<=6.0.1,>=6.0.1
 Requires-Dist: jinja2<=3.1.6,>=3.1
 Requires-Dist: json_stream<2.4,>=2.3.2
-Requires-Dist: jq<1.10.0,>=1.6.0
+Requires-Dist: jq<1.11.0,>=1.6.0
 Requires-Dist: PyOpenSSL<26.0
-Requires-Dist: opentelemetry-api<1.35,>=1.27.0
-Requires-Dist: opentelemetry-sdk<1.35,>=1.27.0
-Requires-Dist: opentelemetry-exporter-otlp-proto-http<1.35,>=1.27.0
+Requires-Dist: opentelemetry-api<1.36,>=1.27.0
+Requires-Dist: opentelemetry-sdk<1.36,>=1.27.0
+Requires-Dist: opentelemetry-exporter-otlp-proto-http<1.36,>=1.27.0
 Requires-Dist: protobuf<6.0,>=4.21.1
 Requires-Dist: pulp-glue<0.35,>=0.28.0
 Requires-Dist: pygtrie<=2.5.0,>=2.5

{pulpcore-3.83.2.dist-info → pulpcore-3.84.0.dist-info}/RECORD

@@ -1,6 +1,6 @@
 pulp_certguard/__init__.py,sha256=llnEd00PrsAretsgAOHiNKFbmvIdXe3iDVPmSaKz7gU,71
 pulp_certguard/pytest_plugin.py,sha256=qhRbChzqN2PROtD-65KuoTfKr5k9T3GPsz9daFgpqpM,852
-pulp_certguard/app/__init__.py,sha256=q9BSOu9bxBFz2EoNH9L_oph1rcPNOYSNvwAouUImbWY,297
+pulp_certguard/app/__init__.py,sha256=-L1AHE-ls64OS0X-lq7xg4yPqwTZzBhEx4OcM3bWpeE,297
 pulp_certguard/app/models.py,sha256=xy5IWxf0LQxayIDmQw25Y2YhB_NrlTGvuvdY-YW7QBU,8119
 pulp_certguard/app/serializers.py,sha256=3jxWu82vU3xA578Qbyz-G4Q9Zlh3MFLGRHzX62M0RF8,1826
 pulp_certguard/app/utils.py,sha256=O6T1Npdb8fu3XqIkDJd8PQdEFJWPUeQ-i_aHXBl7MEc,816
@@ -49,7 +49,7 @@ pulp_certguard/tests/unit/test_models.py,sha256=TBI0yKsrdbnJSPeBFfxSqhXK7zaNvR6q
 pulp_file/__init__.py,sha256=0vOCXofR6Eyxkg4y66esnOGPeESCe23C1cNBHj56w44,61
 pulp_file/manifest.py,sha256=1WwIOJrPSkFcmkRm7CkWifVOCoZvo_nnANgce6uuG7U,3796
 pulp_file/pytest_plugin.py,sha256=l1PvTxUi5D3uJy4SnHWNhr-otWEYNcm-kc5nSqVJg0Y,10646
-pulp_file/app/__init__.py,sha256=nv2sVGVXrrjtJVhGD7V6U-BMZdHADYNAgnjYQqY5xmE,292
+pulp_file/app/__init__.py,sha256=jMD7UQn6iP02kt5RN9nH8EdERwruutYZzNZKh4ptVq0,292
 pulp_file/app/modelresource.py,sha256=v-m-_bBEsfr8wG0TI5ffx1TuKUy2-PsirhuQz4XXF-0,1063
 pulp_file/app/models.py,sha256=QsrVg_2uKqnR89sLN2Y7Zy260_nLIcUfa94uZowlmFw,4571
 pulp_file/app/replica.py,sha256=OtNWVmdFUgNTYhPttftVNQnSrnvx2_hnrJgtW_G0Vrg,1894
@@ -101,7 +101,7 @@ pulp_file/tests/unit/test_safe_paths.py,sha256=CRJX3-MdIZF_4-hVK-7brH9LSK2i97GdI
 pulp_file/tests/unit/test_serializers.py,sha256=reDGIZrAaPHITwiv-LSCJ85JK-aCcNh5cavmAaba8vw,2143
 pulpcore/__init__.py,sha256=9L859gHcVX5TxrTP0Ef7GWv8oa7tsvIs_8XDkyZIu2g,107
 pulpcore/backends.py,sha256=Ax_MJpbvtNDg_rhkHaiQRm39DBSS2dH8UpMRJN2T0oE,4482
-pulpcore/constants.py,sha256=06lih8sVRzHCrBXGmoT3Q-9ZkKZUEEYZ8EoeFfxEq04,4673
+pulpcore/constants.py,sha256=R97fEBxQ0jkf9RPNUh_B3f8yHKjydUZoDgiMEFn8Nd4,4787
 pulpcore/filters.py,sha256=dD5oRRkWg65s3LoObr-ipRvRsxZK_3Zr0lKMNr9Sg5o,16682
 pulpcore/metrics.py,sha256=Mfq-nnRjRf3vBHFO-ux-4d1I3yE7TgeptwgiSgGz4rA,2230
 pulpcore/middleware.py,sha256=10Jxc4Iq03gZD3n39t63OmBCpdftcke8bxEd-LioJlA,5973
@@ -110,7 +110,7 @@ pulpcore/pytest_plugin.py,sha256=skubiEUIevVURr4LnmmVMt_ZeH5vT9mI0yiPUYerMnQ,380
 pulpcore/responses.py,sha256=mIGKmdCfTSoZxbFu4yIH1xbdLx1u5gqt3D99LTamcJg,6125
 pulpcore/app/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulpcore/app/access_policy.py,sha256=5vCKy6WoHtIt1_-eS5vMaZ7CmR4G-CIpsrB8yT-d88Q,6079
-pulpcore/app/apps.py,sha256=CqrQ8sW9sFLntd8_iPC7g0rBVWDnUa2aHc-zSdBRXrs,17860
+pulpcore/app/apps.py,sha256=r_P_PtQ94J3JkWzPyb-qpEy9_gzxZC5dYuJ6TqPkGnE,17860
 pulpcore/app/authentication.py,sha256=1LIJW6HIQQlZrliHy__jdzkDEh6Oj7xKgd0V-vRcDus,2855
 pulpcore/app/checks.py,sha256=jbfTF7nmftBbky4AQXHigpyCaGydKasvRUXsd72JZVg,1946
 pulpcore/app/entrypoint.py,sha256=YIfQpM5UxybBTasiEY5ptq--UmqPqjdIGnwmqVsDC7E,4972
@@ -129,7 +129,7 @@ pulpcore/app/redis_connection.py,sha256=VTdG0ulXuyESjYV6SJdG_jLzkLZH-MlLcD6pielw
 pulpcore/app/replica.py,sha256=rGE14OBaR_FKxmHL7NMxf_OizMyS-90IPsMRo_j9YRI,11474
 pulpcore/app/response.py,sha256=hYH_jSBrxmRsBr2bknmXE1qfs2g8JjDTXYcQ5ZWlF_c,1950
 pulpcore/app/role_util.py,sha256=84HSt8_9fxB--dtfSyg_TumVgOdyBbyP6rBaiAfTpOU,22393
-pulpcore/app/settings.py,sha256=HxZj3R15UG_AhwhNIs1VFXZqPuBHW3shjHkPwqvZMqo,22548
+pulpcore/app/settings.py,sha256=hSe_93KK3k70SbjkJ8JXdC-HE6K9gOwczisAxkrLbtQ,23040
 pulpcore/app/urls.py,sha256=0gdI74CAdycJStXSw1gknviDGe3J3k0UhS4J8RYa5dg,8120
 pulpcore/app/util.py,sha256=nYF6nZXgqVk4U1QeZEpWYX-wqitGSGAJip6W78IfXUk,24432
 pulpcore/app/wsgi.py,sha256=7rpZ_1NHEN_UfeNZCj8206bas1WeqRkHnGdxpd7rdDI,492
@@ -286,6 +286,8 @@ pulpcore/app/migrations/0131_distribution_checkpoint_publication_checkpoint.py,s
 pulpcore/app/migrations/0132_alter_content_options.py,sha256=hrhUTsRqQJgwC6wU9Ys5AvyVz2YCzklj2OuVf6hyBfs,477
 pulpcore/app/migrations/0132_task_profile_options.py,sha256=ljdIm5-NXl_8s87HzkthvUxr7eHhLaETrr5qNtAVKDE,518
 pulpcore/app/migrations/0133_repositoryversion_content_ids.py,sha256=P8H16p6-EWtnyoenomC4R8CvAivfPqUkkRAsoizgm2M,545
+pulpcore/app/migrations/0134_task_insert_trigger.py,sha256=6kBoMWSwljS5RERsRu42xXXUOJS0_Z2w-Lv9FixPHf4,2310
+pulpcore/app/migrations/0135_task_pulp_task_resources_index.py,sha256=X2cJRbuuKxv31psqDaLx8bQxb2Kcv5_zMuGHwwloSCg,714
 pulpcore/app/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulpcore/app/models/__init__.py,sha256=9JKMGKbEV6nJPep_K36rnWnS1QWMKBFSty-Hkr65JVk,3459
 pulpcore/app/models/access_policy.py,sha256=o4L41RGoZ5UMmh5UeeenmadD5MJgShguphgd4eAVxQA,6071
@@ -306,7 +308,7 @@ pulpcore/app/models/repository.py,sha256=SIc21Gex6okxI7OCfHEGIpXpGlypG3z9IgMt5-m
 pulpcore/app/models/role.py,sha256=dZklNd2VeAw4cT6dyJ7SyTBt9sZvdqakY86wXGAY3vU,3287
 pulpcore/app/models/status.py,sha256=72oUOJ7BnCAw3uDbc-XuI72oAyP2llCoBic4zb2JP78,3683
 pulpcore/app/models/storage.py,sha256=2b-DQWaO31NqjV6FiISALegND-sQZAU7BVAsduUvm3o,6780
-pulpcore/app/models/task.py,sha256=2w0fXHeErSrVssCfP8LeUuYjKgupAbhfR_IkWG8wmus,14950
+pulpcore/app/models/task.py,sha256=TpQfZDzH7NzeD4kIR3S0XX64p13jzAeJQjZ1M9sg8rk,15280
 pulpcore/app/models/upload.py,sha256=3njXT2rrVJwBjEDegvqcLD9_7cPnnl974lhbAhikEp8,3004
 pulpcore/app/protobuf/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulpcore/app/protobuf/analytics_pb2.py,sha256=-4CkbSW8JUAEIjZJBTPAJ5QezFJOdCPiDhx8_KA1bMU,2168
@@ -339,7 +341,7 @@ pulpcore/app/tasks/export.py,sha256=dRg-KcnM7HumXUx8mjgJ-EVMcz2RbzSOPmMkzVtJEnI,
 pulpcore/app/tasks/importer.py,sha256=5T14JynWJjBijAE-d_YstTRYOtY0WTHMqkF7GFJaj5o,23222
 pulpcore/app/tasks/migrate.py,sha256=wCjGskoF-XWzbINEyC_crgcigFZlC8EHqZTbjkLQykg,2452
 pulpcore/app/tasks/orphan.py,sha256=4rTZLZ549niJ7mGMh_7suy-czIcj06oCTxPYnsPN8mU,4685
-pulpcore/app/tasks/purge.py,sha256=yrnlvQKtg2usjK-75JoDvg4RvvEKipMpI8p4fh69A3o,7472
+pulpcore/app/tasks/purge.py,sha256=IpdKTj9AvlNNuMNbkxa63xuaf3eK6dUvHZeMMWr_MjQ,7532
 pulpcore/app/tasks/reclaim_space.py,sha256=FZ7KFasbScPAU7A6lzK98pdylmqgThssgnNMecG5bEw,3803
 pulpcore/app/tasks/replica.py,sha256=T0Mky1FjrJH0j6ag61fE-vQmdQ0Otoe8_nOREXYHVXg,4485
 pulpcore/app/tasks/repository.py,sha256=v-CDXp03YV6S6Lf-rKklPw7PwpfeoQe_Gw3ZyMH6SFQ,9640
@@ -427,11 +429,11 @@ pulpcore/plugin/viewsets/__init__.py,sha256=G2zE-NRWz6PFYp8OMZrv01RYBQELFWfW702b
 pulpcore/plugin/viewsets/content.py,sha256=MHvmLOxsKSQfk6y5t1s9CVxkce9YNeU-dYb1Ldyf83I,6432
 pulpcore/tasking/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulpcore/tasking/_util.py,sha256=fPW4k1nUa_NZ0ywy_A15Fuiejo5stY58abPbZTXw5t8,9904
-pulpcore/tasking/entrypoint.py,sha256=Npnn41e39soGvJ7CTaZXT5MjIhOO7UtQmpmNaZtfKYg,1120
+pulpcore/tasking/entrypoint.py,sha256=eAypZD4ORoNOrmBeMdbwO9p6GSQ59bMvZ3TrbnE0czw,1305
 pulpcore/tasking/kafka.py,sha256=76z4DzeXM1WL5uu1HlKnduWeLO3-b-czvGBXdWR6054,3845
 pulpcore/tasking/storage.py,sha256=zQkwlpC_FDQtmZGZ8vKwHqxvD6CLO_gAS4Q7wijZE-k,3106
-pulpcore/tasking/tasks.py,sha256=0WLv16FOCPOsrGAxEOYOkmzFP7MRYCczXWB94ajIkzY,14537
-pulpcore/tasking/worker.py,sha256=c9RgSYg4J_Jn_q70MVF_2egDeASFgXlLrP00lqWKtnQ,23822
+pulpcore/tasking/tasks.py,sha256=bYYAFwJGGyl3mgS7Iw3JZ-vDl1nXbHiAbt3LBSq-nqQ,12946
+pulpcore/tasking/worker.py,sha256=zEdrEmdcnVqNzjkN09O3mui8xKBX04j_QDUHlX1Ugco,25698
 pulpcore/tests/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulpcore/tests/functional/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulpcore/tests/functional/content_with_coverage.py,sha256=gQK8himy32s9O9vpXdgoM6-_z2KySaXm5rTga9z0jGI,260
@@ -446,7 +448,7 @@ pulpcore/tests/functional/api/test_correlation_id.py,sha256=4iCKrI8exUPuwOr6tO1n
 pulpcore/tests/functional/api/test_crd_artifacts.py,sha256=NNr7Bd9Uy7gSaeqQS8vs03znSv8KunM-EVWn9ab_Ycg,7873
 pulpcore/tests/functional/api/test_crud_domains.py,sha256=vgPuj-J4-KxBegH5rFYWU6mWjU9OXq1OdN4FtRb0Aa0,13063
 pulpcore/tests/functional/api/test_filter.py,sha256=2tPd85CJRxMNPDZYPkHnrcVyRq9pa1R06uWiYBbpGeA,9296
-pulpcore/tests/functional/api/test_login.py,sha256=oGRHv6H74PcRjS-VMtN9A2L22JDtfM_V9C6ISd9Ciqc,3922
+pulpcore/tests/functional/api/test_login.py,sha256=BcOgch17WZ7jD7LGNN5s0i0KOdJt_uF25APbNYdYltI,5548
 pulpcore/tests/functional/api/test_openapi_schema.py,sha256=pDm4xSp40sr69WgUM8MzHDaE8ouCgPRMKGC6cKTVkEs,3825
 pulpcore/tests/functional/api/test_openpgp.py,sha256=6iKUhAs4mSeIDg1xVA6sP1SF0RgqwRzS9ioGfU6Ahlk,6272
 pulpcore/tests/functional/api/test_replication.py,sha256=46DHyvbR1QevT_IzMtmR8wNsmUNp6U-vm3OI_oUQRRc,28730
@@ -532,9 +534,9 @@ pulpcore/tests/unit/stages/test_artifactdownloader.py,sha256=qB1ANdFmNtUnljg8fCd
 pulpcore/tests/unit/stages/test_stages.py,sha256=H1a2BQLjdZlZvcb_qULp62huZ1xy6ItTcthktVyGU0w,4735
 pulpcore/tests/unit/viewsets/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 pulpcore/tests/unit/viewsets/test_viewset_base.py,sha256=W9o3V6758bZctR6krMPPQytb0xJuF-jb4uBWTNDoD_U,4837
-pulpcore-3.83.2.dist-info/licenses/LICENSE,sha256=dhnHU8rJXUdAIgIjveSKAyYG_KzN5eVG-bxETIGrNW0,17988
-pulpcore-3.83.2.dist-info/METADATA,sha256=H7p6-06DVRkFtXi_V7p_I7e5rxAxhQ8ABdy6o4IF3Hg,4380
-pulpcore-3.83.2.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-pulpcore-3.83.2.dist-info/entry_points.txt,sha256=OZven4wzXzQA5b5q9MpP4HUpIPPQCSvIOvkKtNInrK0,452
-pulpcore-3.83.2.dist-info/top_level.txt,sha256=6h-Lm3FKQSaT_nL1KSxu_hBnzKE15bcvf_BoU-ea4CI,34
-pulpcore-3.83.2.dist-info/RECORD,,
+pulpcore-3.84.0.dist-info/licenses/LICENSE,sha256=dhnHU8rJXUdAIgIjveSKAyYG_KzN5eVG-bxETIGrNW0,17988
+pulpcore-3.84.0.dist-info/METADATA,sha256=XqnHGTwnBlSySFuK5Icohu-J5viTdz-LyV2f_SnBG_4,4380
+pulpcore-3.84.0.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+pulpcore-3.84.0.dist-info/entry_points.txt,sha256=OZven4wzXzQA5b5q9MpP4HUpIPPQCSvIOvkKtNInrK0,452
+pulpcore-3.84.0.dist-info/top_level.txt,sha256=6h-Lm3FKQSaT_nL1KSxu_hBnzKE15bcvf_BoU-ea4CI,34
+pulpcore-3.84.0.dist-info/RECORD,,