# Galaxy-Operator - Deprecating pulp\_settings in favor of extra\_settings - LDAP support

**URL:** <https://forum.ansible.com/t/galaxy-operator-deprecating-pulp-settings-in-favor-of-extra-settings-ldap-support/4869>\
**Category:** Project Discussions\
**Tags:** kubernetes, galaxy-operator, galaxy-ng\
**Created:** [April 10, 2024, 4:56pm UTC](https://forum.ansible.com/t/galaxy-operator-deprecating-pulp-settings-in-favor-of-extra-settings-ldap-support/4869 "2024-04-10T16:56:10Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Denney-tech](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/denney-tech/32/1556_2.png) [@Denney-tech](https://forum.ansible.com/u/Denney-tech)\
**Post date:** [April 10, 2024, 4:56pm UTC](https://forum.ansible.com/t/galaxy-operator-deprecating-pulp-settings-in-favor-of-extra-settings-ldap-support/4869/1 "2024-04-10T16:56:10Z")

</div>

I’m working on a PR for the new galaxy-operator. [fixes #85 Preserve data types in galaxy-server.secret.yaml.j2 by Denney-tech · Pull Request #98 · ansible/galaxy-operator (github.com)](https://github.com/ansible/galaxy-operator/pull/98)

As is, it will allow pulp\_settings to work, more or less, as expected, though actual strings may need to use nested/escaped quotes. This behavior is the same as extra\_settings over on the awx-operator.

That being said, I would like the new galaxy-operator to try and behave more like the awx-operator for feature parity/consistency between them. To that end, I would like to start another PR that deprecates `pulp_settings:` in favor of `extra_settings:` that uses a list of instead of a dict. [awx-operator/docs/user-guide/advanced-configuration/extra-settings.md · ansible/awx-operator (github.com)](https://github.com/ansible/awx-operator/devel/main/docs/user-guide/advanced-configuration/extra-settings.md)

This change would be a step towards supporting LDAP (in a subsequent PR). Looking at awx-operator, the ldap _secrets_ such as the ca bundle and bind password are stored in `/etc/tower/conf.d/ldap.py`, but I’m not sure if galaxy/pulp has a similar conf.d include directory. So I may embed those directly in settings.py (which is what pulp-operator does).

@TheRealHaoLiu @rooftopcellist @aknochow Thoughts? Any objections to deprecating pulp\_settings in particular?

---

<div class="post-metadata">

**Author:** ![Denney-tech](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/denney-tech/32/1556_2.png) [@Denney-tech](https://forum.ansible.com/u/Denney-tech)\
**Post date:** [April 10, 2024, 6:35pm UTC](https://forum.ansible.com/t/galaxy-operator-deprecating-pulp-settings-in-favor-of-extra-settings-ldap-support/4869/2 "2024-04-10T18:35:44Z")

</div>

[https://github.com/ansible/galaxy-operator/pull/100](https://github.com/ansible/galaxy-operator/pull/100)

---

<div class="post-metadata">

**Author:** ![Denney-tech](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/denney-tech/32/1556_2.png) [@Denney-tech](https://forum.ansible.com/u/Denney-tech)\
**Post date:** [April 10, 2024, 7:09pm UTC](https://forum.ansible.com/t/galaxy-operator-deprecating-pulp-settings-in-favor-of-extra-settings-ldap-support/4869/3 "2024-04-10T19:09:27Z")

</div>

> <https://github.com/ansible/galaxy-operator/pull/101>
>
> \##### SUMMARY
> 
> Adds support for LDAP.
> 
> 
> 
> \##### ADDITIONAL INFORMATION
> 
> \[…forum.ansible.com thread\](https://forum.ansible.com/t/galaxy-operator-deprecating-pulp-settings-in-favor-of-extra-settings-ldap-support/4869?u=denney-tech)
> 
> Copied and modified documentation from awx-operator's ldap/ca-trust to here.
> 
> Depends on #100

---

<div class="post-metadata">

**Author:** ![Denney-tech](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/denney-tech/32/1556_2.png) [@Denney-tech](https://forum.ansible.com/u/Denney-tech)\
**Post date:** [April 10, 2024, 7:13pm UTC](https://forum.ansible.com/t/galaxy-operator-deprecating-pulp-settings-in-favor-of-extra-settings-ldap-support/4869/4 "2024-04-10T19:13:45Z")

</div>

@TheRealHaoLiu @rooftopcellist @aknochow

Please review the PR’s. I’m not 100% sure that I got everything.
