[RM-12553] repo: Allow URLs to be passed by env var

This is more secure if the repo URL contains a user:pass combo

Refs: #12553

Signed-off-by: Travis Rhoden <trhoden@redhat.com>

diff --git a/ceph_deploy/repo.py b/ceph_deploy/repo.py
index f40806ae53a996879dc8e5c0618f128d92b0ffca..9fd5c3580d491092a8d386cd56c4820314f0e326 100644 (file)
--- a/ceph_deploy/repo.py
+++ b/ceph_deploy/repo.py
@@ -1,3 +1,4 @@
+import os
 import logging
 
 from ceph_deploy import hosts
@@ -20,8 +21,8 @@ def install_repo(distro, args, cd_conf, rlogger):
                 'missing required key: %s in config section: %s' % (err, args.repo_name)
             )
     else:
-        repo_url = args.repo_url
-        gpg_url = args.gpg_url
+        repo_url = os.environ.get('CEPH_DEPLOY_REPO_URL') or args.repo_url
+        gpg_url = os.environ.get('CEPH_DEPLOY_GPG_URL') or args.gpg_url
         extra_repos = []
 
     repo_url = repo_url.strip('/')  # Remove trailing slashes