← Back to issue list

Merge bundled ACLs with custom ones

View original Github issue

Metadata

Project
fetch-service
Number
#518
Type
issue
State
open
Author
lengau
Labels
Type: Enhancement Status: Triaged
Created
Updated
Closed
—

Current evaluation

Custom acl.yaml still replaces the bundled ACL, forcing users to track every new destination or default change; this triaged enhancement remains open and unimplemented.

Suggested action: keep open

Reason: The ACL loader falls back to the bundled file only when the custom file is absent, confirming the reported replacement behavior. Commit 0dcc1c2/#497 solved the analogous inspectors.yaml problem with per-inspector overrides, providing a clear implementation precedent, but the ACL path remains unchanged.

Evaluated by: mr-cal-bot

Impact: 45 Quick Win: 24 Complexity: 34 Confidence: 96 Actionability: 82

Issue body

### What needs to get done Implement the same type of fix for https://github.com/canonical/fetch-service/issues/491 but for `acl.yaml` ### Why it needs to get done If a custom inspectors ACL is given to the fetch service, it is loaded instead of the default configuration shipped with the fetch-service. This behavior forces users (ex. the LP team) to regularly update their custom configuration whenever a new inspector is added, or when the default values change.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha
Impact: 45
Quick Win: 24
Complexity: 34
Confidence: 96
Actionability: 82
keep open Custom acl.yaml still replaces the bundled ACL, forcing users to track every new destination or default change; this triaged enhancement remains open and unimplemented.
stealth/space-bunny-alpha
Impact: 40
Quick Win: 13
Complexity: 55
Confidence: 94
Actionability: 70
keep open Triaged enhancement remains open: custom acl.yaml still replaces the bundled ACL. The analogous inspector override shipped in #497, but ACL rule-merge semantics and implementation remain unresolved.
stealth/space-bunny-alpha
Impact: 48
Quick Win: 22
Complexity: 46
Confidence: 94
Actionability: 83
keep open Triaged enhancement to merge acl.yaml with bundled defaults, preventing custom deployments from losing new rules; still open while the equivalent inspector merge is implemented.
qwen/qwen3.6-35b-a3b
Impact: 55
Quick Win: 30
Staleness: 75
Complexity: 45
Confidence: 65
Support Request: 15
keep open Enhancement to merge bundled ACLs with custom ones instead of replacing defaults. Triaged but inactive for 299 days.

Update history

Date Change
created

Related work

  • Related To: canonical/fetch-service#491 (confidence 100%)

    The issue explicitly requests applying the same bundled-config merging fix to acl.yaml.

  • Related To: canonical/fetch-service#497 (confidence 98%)

    Commit 0dcc1c2 implemented bundled inspectors configuration with custom per-inspector overrides.

Related issues

No related issues found above the similarity threshold.