From 147e267bd016baddf85d4fc3ad9ccd0af749d776 Mon Sep 17 00:00:00 2001
From: Michael Mraka <michael.mraka@redhat.com>
Date: Mon, 7 Oct 2024 13:44:01 +0200
Subject: [PATCH] RHINENG-13308: switch default value to enforce auth

---
 conf/admin_api.env    | 1 +
 deploy/clowdapp.yaml  | 2 +-
 turnpike/admin_api.go | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/conf/admin_api.env b/conf/admin_api.env
index 6260a1d85..650b79c73 100644
--- a/conf/admin_api.env
+++ b/conf/admin_api.env
@@ -2,3 +2,4 @@ DB_USER=admin
 DB_PASSWD=passwd
 
 EVAL_TOPIC=patchman.evaluator.recalc
+POD_CONFIG=turnpike_auth=false
diff --git a/deploy/clowdapp.yaml b/deploy/clowdapp.yaml
index 6232eb79a..b5f64ee5f 100644
--- a/deploy/clowdapp.yaml
+++ b/deploy/clowdapp.yaml
@@ -648,7 +648,7 @@ parameters:
 - {name: MEM_LIMIT_ADMIN, value: 256Mi}
 - {name: CPU_REQUEST_ADMIN, value: 50m}
 - {name: MEM_REQUEST_ADMIN, value: 128Mi}
-- {name: ADMIN_CONFIG, value: 'turnpike_auth'}
+- {name: ADMIN_CONFIG, value: ''}
 
 # Floorist parameters
 - {name: FLOORIST_SUSPEND, value: 'true', required: true} # Disable Floorist cronjob execution
diff --git a/turnpike/admin_api.go b/turnpike/admin_api.go
index 12630f25c..efb42ff5b 100644
--- a/turnpike/admin_api.go
+++ b/turnpike/admin_api.go
@@ -27,7 +27,7 @@ func RunAdminAPI() {
 	core.ConfigureApp()
 
 	// Toggle Turnpike authentication for internal API (manual sync, re-calc)
-	enableTurnpikeAuth := utils.PodConfig.GetBool("turnpike_auth", false)
+	enableTurnpikeAuth := utils.PodConfig.GetBool("turnpike_auth", true)
 
 	utils.LogInfo("port", utils.CoreCfg.PublicPort, "Manager-admin starting")
 	app := gin.New()