Add allow_package_substitution to Python repos

closes #1375
Assisted By: Claude Opus 4.6

Author: jobselko

CHANGES/1375.feature

@@ -0,0 +1 @@
+Added `--allow-package-substitution`/`--block-package-substitution` options to `pulp python repository` for controlling packages with same filenames but different checksums.

CHANGES/pulp-glue/1375.feature

@@ -0,0 +1 @@
+Added `allow_package_substitution` field to `PulpPythonRepositoryContext` for `pulp_python>=3.28.0`.

pulp-glue/src/pulp_glue/python/context.py

@@ -158,6 +158,8 @@ def preprocess_entity(self, body: EntityDefinition, partial: bool = False) -> En
         body = super().preprocess_entity(body, partial=partial)
         if "autopublish" in body:
             self.pulp_ctx.needs_plugin(PluginRequirement("python", specifier=">=3.3.0"))
+        if "allow_package_substitution" in body:
+            self.pulp_ctx.needs_plugin(PluginRequirement("python", specifier=">=3.28.0"))
         return body
 
     def repair_metadata(self) -> t.Any:

src/pulpcore/cli/python/repository.py

@@ -80,6 +80,15 @@ def repository() -> None:
         needs_plugins=[PluginRequirement("python", specifier=">=3.3.0")],
         default=None,
     ),
+    pulp_option(
+        "--allow-package-substitution/--block-package-substitution",
+        needs_plugins=[PluginRequirement("python", specifier=">=3.28.0")],
+        default=None,
+        help=_(
+            "Allow replacing existing packages with packages of the same filename but"
+            " different checksum. When blocked, such operations are rejected."
+        ),
+    ),
     retained_versions_option,
     pulp_labels_option,
 ]

tests/scripts/pulp_python/test_repository.sh

@@ -37,4 +37,12 @@ if pulp debug has-plugin --name "python" --specifier ">=3.26.0"; then
   expect_succ test "$(echo "$OUTPUT" | jq -r '.state')" = "completed"
 fi
 
+if pulp debug has-plugin --name "python" --specifier ">=3.28.0"; then
+  expect_succ pulp python repository show --repository "cli_test_python_repo"
+  expect_succ test "$(echo "$OUTPUT" | jq -r '.allow_package_substitution')" = "true"
+  expect_succ pulp python repository update --repository "cli_test_python_repo" --block-package-substitution
+  expect_succ pulp python repository show --repository "cli_test_python_repo"
+  expect_succ test "$(echo "$OUTPUT" | jq -r '.allow_package_substitution')" = "false"
+fi
+
 expect_succ pulp python repository destroy --name "cli_test_python_repo"