External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-01-10 15:32:07 -03:30
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9673 from jborean93/pwsh-request

Browse Source 
Fix up request tower ps script

SUMMARY
Fixes the request_tower_configuration.ps1 script with the following:

Added PowerShell 6+ support, can now run on Linux
Removes the uneeded strict and ErrorActionPreference settings which could impact the global settings
Enables TLS 1.2 support on Windows PowerShell
Fixes -insecure handling for certificates

Works across ps versions
Original didn't actually work (at least in my testing)
Hopefully doesn't impact the global state


Fixes IE not loaded error on Windows PowerShell when running on a new profile
Changes the encoding to UTF-8 (no BOM) and made it executable

Can now be invoked on Linux like ./request_tower_configuration.ps1 ...
There are no non-ASCII chars in the script so this won't matter on Windows



Fixes #9434
ISSUE TYPE

Bugfix Pull Request

COMPONENT NAME

Tools

AWX VERSION
N/A

Reviewed-by: Ryan Petrello <None>
This commit is contained in:
softwarefactory-project-zuul[bot] 2021-04-07 13:18:43 +00:00 committed by GitHub
commit f48e600563
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 72 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

101
tools/scripts/request_tower_configuration.ps1 Normal file → Executable file
View File

@ -1,4 +1,6 @@
# Define parameters
#!/usr/bin/env pwsh
# Define parameters
[cmdletbinding()]
Param(
[Alias("k")]
@ -21,8 +23,6 @@ Param(
)
# Initialize variables
Set-StrictMode -Version 2
$ErrorActionPreference = "Stop"
$retry_attempts = 10
$attempt = 0
$usage = @"
@ -54,46 +54,89 @@ If (-not $tower_url -or -not $host_config_key -or -not $job_template_id -or $hel
}
# Create Invoke-WebRequest JSON data hash tables
If (-not $extra_vars) {
$data = @{
host_config_key=$host_config_key
}
} Else {
$data = @{
host_config_key=$host_config_key
extra_vars=$extra_vars
$data = @{
host_config_key = $host_config_key
}
If ($extra_vars) {
$data.extra_vars = $extra_vars
}
# Ensure TLS 1.2 is enabled (this isn't on by default on older .NET versions)
[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
$invoke_params = @{
ContentType = 'application/json'
Method = 'POST'
Body = (ConvertTo-Json $data)
Uri = "$tower_url/api/v2/job_templates/$job_template_id/callback/"
UseBasicParsing = $true
ErrorAction = 'Stop'
}
$invoke_command = Get-Command -Name Invoke-WebRequest
$legacy_insecure = $insecure
If ('SkipCertificateCheck' -in $invoke_command.Parameters.Keys) {
$invoke_params.SkipCertificateCheck = $insecure
$legacy_insecure = $false
}
Else {
Add-Type -TypeDefinition @'
using System.Net;
using System.Security.Cryptography.X509Certificates;
public class TrustAllCertsPolicy : ICertificatePolicy {
public bool CheckValidationResult(ServicePoint srvPoint, X509Certificate certificate,
WebRequest request, int certificateProblem) {
return true;
}
}
'@
}
$old_validation_policy = [System.Net.ServicePointManager]::CertificatePolicy
# Success on any 2xx status received, failure on only 404 status received, retry any other status every min for up to 10 min
While ($attempt -lt $retry_attempts) {
Try {
If ($insecure) {
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
If ($legacy_insecure) {
[System.Net.ServicePointManager]::CertificatePolicy = New-Object -TypeName TrustAllCertsPolicy
}
$resp = Invoke-WebRequest -ContentType application/json -Method POST -Body (ConvertTo-Json $data) -Uri $tower_url/api/v2/job_templates/$job_template_id/callback/
If ($resp.StatusCode -match '^2[0-9]+$') {
Exit 0
}
}
Catch [System.Security.Authentication.AuthenticationException] {
Write-Host $_
Exit 1
$null = Invoke-WebRequest @invoke_params
Exit 0
}
Catch {
$ex = $_
$attempt++
If ($([int]$ex.Exception.Response.StatusCode) -eq 404) {
Write-Host "$([int]$ex.Exception.Response.StatusCode) received... encountered problem, halting"
$exp = $_.Exception
# The StatusCode is only present on certain exception which differ across PowerShell versions.
$status_code = If ($exp.GetType().FullName -in @(
'System.Net.WebException', # Windows PowerShell (<=5.1)
'Microsoft.PowerShell.Commands.HttpResponseException' # PowerShell (6+)
)) {
$exp.Response.StatusCode
}
# WinPS cert validation errors are a WebException but have no StatusCode so we need to check that explicitly.
If ($null -ne $status_code) {
$attempt++
$msg = "$([int]$status_code) ($status_code) received... "
If ([int]$status_code -eq 404) {
Write-Host "$msg encountered problem, halting"
Exit 1
}
Write-Host "$msg retrying in 1 minute (Attempt $attempt)"
}
Else {
Write-Host "Unknown error received... $($_.ToString()) ($($exp.GetType().FullName))"
Exit 1
}
Write-Host "$([int]$ex.Exception.Response.StatusCode) received... retrying in 1 minute (Attempt $attempt)"
}
Finally {
If ($insecure) {
$sp = [System.Net.ServicePointManager]::FindServicePoint($tower_url)
If ($legacy_insecure) {
$sp = [System.Net.ServicePointManager]::FindServicePoint($invoke_params.Uri)
$sp.CloseConnectionGroup("") > $null
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null
[System.Net.ServicePointManager]::CertificatePolicy = $old_validation_policy
}
}
Start-Sleep -Seconds 60