From d4a4ba7fdb9fab2acbf19eeff05b72c121d62715 Mon Sep 17 00:00:00 2001
From: Alan Rominger <arominge@redhat.com>
Date: Fri, 11 Mar 2022 11:08:04 -0500
Subject: [PATCH] Move location of AWX_ISOLATION_SHOW_PATHS so it is editable

---
 awx/settings/production.py | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/awx/settings/production.py b/awx/settings/production.py
index 9f480a188a..d4a40ef5d4 100644
--- a/awx/settings/production.py
+++ b/awx/settings/production.py
@@ -39,8 +39,20 @@ BASE_VENV_PATH = os.path.realpath("/var/lib/awx/venv")
 # Base virtualenv paths and enablement
 AWX_VENV_PATH = os.path.join(BASE_VENV_PATH, "awx")
 
+# Very important that this is editable (not read_only) in the API
+AWX_ISOLATION_SHOW_PATHS = [
+    '/etc/pki/ca-trust:/etc/pki/ca-trust:O',
+    '/usr/share/pki:/usr/share/pki:O',
+]
+
 # Store a snapshot of default settings at this point before loading any
 # customizable config files.
+#
+###############################################################################################
+#
+#  Any settings defined after this point will be marked as as a read_only database setting
+#
+################################################################################################
 DEFAULTS_SNAPSHOT = {}
 this_module = sys.modules[__name__]
 for setting in dir(this_module):
@@ -91,8 +103,3 @@ except IOError:
 DATABASES.setdefault('default', dict()).setdefault('OPTIONS', dict()).setdefault(
     'application_name', f'{CLUSTER_HOST_ID}-{os.getpid()}-{" ".join(sys.argv)}'[:63]
 )  # noqa
-
-AWX_ISOLATION_SHOW_PATHS = [
-    '/etc/pki/ca-trust:/etc/pki/ca-trust:O',
-    '/usr/share/pki:/usr/share/pki:O',
-]