Poetry - Private packages

When letting Aikido update your dependencies in repositories with private packages, Aikido would need to also have access to the private packages so that we can properly update your lockfiles. For Poetry, you can provide a Google Artifact Registry configuration service key or provide environment variables in Aikido for this.

Adding credentials with environment variables

When the credentials to connect to the private registry are static, you can provide custom environment variables for this in the private registry connection modal. The environment variables should be created in the following format:

• POETRY_HTTP_BASIC_[SOURCE_NAME]_USERNAME

• POETRY_HTTP_BASIC_[SOURCE_NAME]_PASSWORD

Where the [SOURCE_NAME] is the name of the data source which you specified in your pyproject.toml file in uppercase. For example, set POETRY_HTTP_BASIC_ARTIFACT_USERNAME and POETRY_HTTP_BASIC_ARTIFACT_PASSWORD for the following project file:

[[tool.poetry.source]]
name = "artifact"
url = "https://repo-1234567890.d.codeartifact.eu-west-1.amazonaws.com/pypi/poetry/simple/"

If you are using AWS CodeArtifact in combination with Poetry, see this page.

When creating a PR via Autofix, Aikido will include these environment variables when running poetry commands.

Adding credentials for GCP Artifact Registry

For some registries, the credentials can not be generated statically, such as for GCP Artifact registry. In this case you can follow the steps below.

1. Create a Service Account

First, create a service account in your Google Cloud project:

1. Go to the Google Cloud Console.

2. Navigate to IAM & Admin > Service Accounts.

3. Click Create Service Account.

4. Fill in a Service account name such as Aikido Artifact Registry Reader and click Create And Continue.

5. Grant the service account with the Artifact Registry Reader role.

   

   Assigning the "Artifact Registry Reader" role to a service account in a Google Cloud project.
6. Click Continue and Done.

2. Create a Key for the Service Account

1. On the Service Accounts page, find the service account you just created.

2. Click on the three dots on the right and select Manage Keys.

3. Click Add Key > Create New Key.

4. Choose JSON and click Create.

5. Save the JSON key file to a secure location.

3. Configuration in Aikido

Once the prerequisites are fulfilled, you can configure aikido to authenticate with your private registry when updating the dependencies by following the steps below:

1. Go to your account's settings page for the autofixer in Aikido, here.

2. Click on Manage private registry connection, the configuration modal will now be shown

3. Select Poetry from the tab bar

   

   Configure private registry access for multiple package managers, including Poetry, using an account key.
4. Paste your saved JSON Key content in the Private registry service account key field

5. Click Save to save the configuration.