Skip to content

Block git push over HTTP when database is in read-only mode

Aakriti Gupta requested to merge ag-block-git-push-when-read-only into master

What does this MR do?

This MR blocks git pushes over HTTP when db is read-only, which happens on Geo secondaries.

This is part of the discussion !46045 (diffs, comment 441993716) on blocking non-get HTTP requests in the under-development maintenance mode. The main assertion is:

pushes (git_receive_pack) were only intended to be allowed on Geo secondaries. It's fine because they proxy pushes to the primary

(But pushes were not intended to be allowed on non-Geo secondaries when the DB is read-only)

Screenshots (strongly suggested)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Edited by Michael Kozono

Merge request reports