Private subrepos: clone and fetch with the parent's credentials for the same hub issue #32
closed: completed andymccall opened this · 0 comments
andymccall
Andy made doomsdayone/rstar-api and doomsdayone/metalgear private. An existing subrepo checkout works because its own remote has a token (set by hand, metalgear feedback issue #23), but a fresh clone of metalgear followed by oxy submodule update --init probes and clones the subrepo with OXY_TOKEN/OXY_CA from the environment only, so without them the private subrepo is refused (and mistaken for a Git URL). When the subrepo's URL is on the same host as one of the parent's remotes, oxy should use that remote's token and CA for the clone, and record them on the subrepo's origin, so a private subrepo just works for someone who can read it. Related: andymccall/oxygenhub#50 (oh in a subrepo checkout).
Andy made doomsdayone/rstar-api and doomsdayone/metalgear private. An existing subrepo checkout works because its own remote has a token (set by hand, metalgear feedback issue #23), but a fresh clone of metalgear followed by oxy submodule update --init probes and clones the subrepo with OXY_TOKEN/OXY_CA from the environment only, so without them the private subrepo is refused (and mistaken for a Git URL). When the subrepo's URL is on the same host as one of the parent's remotes, oxy should use that remote's token and CA for the clone, and record them on the subrepo's origin, so a private subrepo just works for someone who can read it. Related: andymccall/oxygenhub#50 (oh in a subrepo checkout).