Add setting to toggle tuf

- disable by default
- enable in dev environment

Signed-off-by: Lukas Puehringer <[email protected]>

Author: Lukas Puehringer

dev/environment

@@ -65,6 +65,7 @@ TWOFACTORMANDATE_ENABLED=true
 OIDC_AUDIENCE=pypi
 
 TUF_RSTUF_API_URL="http://rstuf-api"
+TUF_ENABLED=true
 
 # Default to the reCAPTCHA testing keys from https://developers.google.com/recaptcha/docs/faq
 RECAPTCHA_SITE_KEY=6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI

warehouse/config.py

@@ -367,6 +367,13 @@ def configure(settings=None):
         "OIDC_BACKEND",
         default="warehouse.oidc.services.OIDCPublisherService",
     )
+    maybe_set(
+        settings,
+        "tuf.enabled",
+        "TUF_ENABLED",
+        coercer=distutils.util.strtobool,
+        default=False,
+    )
     maybe_set(settings, "tuf.rstuf_api_url", "TUF_RSTUF_API_URL")
 
     # Pythondotorg integration settings

warehouse/tuf/__init__.py

@@ -73,6 +73,9 @@ def update_metadata(request: Request, project: Project):
     distributions files and simple detail files. In reality, simple detail files
     are enough, as they already include all relevant distribution file infos.
     """
+    if not request.registry.settings["tuf.enabled"]:
+        return
+
     digest, path, size = render_simple_detail(project, request, store=True)
 
     server = request.registry.settings["tuf.rstuf_api_url"]