Commit Graph

1383 Commits

Author SHA1 Message Date
Matthew Jones
273181e894 Expand dbconfig support
* Support updating settings values
* Support activity stream endpoint
* Support clearing value
* Improve type conversion system for displaying values
2015-12-14 15:09:10 -05:00
Matthew Jones
f53f3d805d View and some validation logic for database config
* Fixing some bugs in the manifest definition
* Database model and schema migration for tower settings
* Initial View and Serializer implementation using a strategy of merging
  model instances and named tuples
2015-12-11 16:57:11 -05:00
Matthew Jones
fdcda43de6 Initial Database Configuration bootstrap
* Settings manifest, mapping internal settings to what can be used in
  the database along with type information etc.
* Initial Database model
* Helper object that overlays database settings on django settings
2015-12-07 09:49:13 -05:00
Matthew Jones
3d30ad2db2 Updates for fixes on the core ec2 inventory module
Inventory syncs will still fail if you specify an instance_filter.  We
need to check:

https://github.com/ansible/ansible/pull/13178

For the moment I'm making sure we specifically disable elasticache
querying but it still yields an error.

Will follow up with:

https://trello.com/c/h1U0w4WC/138-ec2-module-is-busted-if-you-set-instance-filters
2015-11-23 14:22:36 -05:00
Matthew Jones
7ffbb2dac6 Don't save the instance in set_actor if the user is invalid 2015-11-18 07:27:52 -05:00
Matthew Jones
98965d4792 Fix typo in AnonymousUser 2015-11-17 12:46:50 -05:00
Matthew Jones
564f9e2c58 Fix an issue reauthing as a social auth user
If a social auth user is deleted and then attemnpts to relogin after the
old user object has been removed then it can cause an error.  So here
we'll add an extra lookup for the user just to verify
2015-11-17 12:42:33 -05:00
Chris Church
cd447bed96 Social auth and SSO updates:
* Move auth backends into sso app.
* Add support for mapping social auth users into organizations and teams.
* Return social auth backends in a consistent order in the API.
* Remove custom SAML attribute mapping and use options provided by PSA.
* Add pipeline function to raise an exception if no user has been found or created; added comments on how to disable new user creation.
* Add comments for defining a custom social auth pipeline function.
2015-11-13 11:30:55 -05:00
Chris Meyers
97c56d451e allow multi-org expired licenses to delete orgs 2015-11-12 15:33:00 -05:00
Matthew Jones
5f321ecab6 Emit a warning for unmapped SAML paramters 2015-11-11 16:05:53 -05:00
Matthew Jones
fdc9979595 Fix up some SAML issues
* Fix an issue I created overriding authenticate
* Fix up attribute mapping using an identity provider class.  The
  methods built into django-social-auth for saml are probably not going
  to work.  We also now expose those mappings in a settings attrs map
  that the user can override.
2015-11-10 11:58:42 -05:00
Chris Meyers
3f4913f5ab adds socket tests 2015-11-06 10:30:56 -05:00
Chris Meyers
dbbfde0d25 fixes remove_instance error
* Initialize object attribute to None so a later if check that depends
on that attributes succeeds. The attribute is related to unifying the
command line args to the *_instance command set.
* Added regression test case
2015-11-06 07:19:09 -05:00
Chris Meyers
5845730cf6 Merge pull request #485 from chrismeyersfsu/fix-openstack_jt
add openstack cred file to env for jt launch
2015-11-05 11:28:26 -05:00
James Laska
abed41d390 Reword log msgs for enterprise_auth failures 2015-11-05 09:50:08 -05:00
Matthew Jones
f78f69159d Fix up pyflakes indentation issues 2015-11-04 09:50:50 -05:00
Chris Meyers
3a8044754c add openstack cred file to env for jt launch 2015-11-03 09:37:38 -05:00
Matthew Jones
113c5ed78f Clean up authenticate and get_user for ldap auth 2015-11-02 12:02:14 -05:00
Matthew Jones
dd29bc40d9 Add logging and improve validation for certain auth backends
* Abstract authention to provide a hook for emitting an error message
* Perform some license validation that wasn't present before for
  enterprise licenses
2015-11-02 11:59:17 -05:00
Matthew Jones
4603ac5d1c Change dependent job failure message entity ref.
Originally we were looking at the underlying project/inventory update
but we are now populating the name of project updates and inventory
updates a lot better so we'll just take their names
2015-10-22 10:49:42 -04:00
Matthew Jones
152ddc4f4f Rename task_ to job_ for pre-task fail error 2015-10-20 21:32:45 -04:00
Matthew Jones
b579b76099 Handle playbook_on_include events from v2 ansible 2015-10-20 11:18:07 -04:00
Matthew Jones
b25413002c Fix custom inventory scripts on org deletion
We'll now clear the organization for it, this requires a database
migration to accept null values for custom inventory scripts
2015-10-19 12:07:09 -04:00
Chris Meyers
f051c13374 list cust inv scripts with deleted orgs 2015-10-14 07:36:32 -05:00
Matthew Jones
fd33d7df58 Tweak proj rbac for orphaned projects
Slight tweak to the rbac for projects related to the user who created
them.  IF a user created a project but it is orphaned/not associated
with an organization then they will be able to see/change it.  If,
however, it is created and associated with an organization and then they
are removed as an org admin they will no longer have access to it.
2015-10-13 16:42:12 -04:00
Matthew Jones
a27a620bcf Remove pdb trace from unit test 2015-10-13 14:10:40 -04:00
Matthew Jones
4b46f33299 Fix up unit tests for overwrite_vars 2015-10-13 11:38:37 -04:00
Matthew Jones
f7ebf956c1 Remove the created_by access ability for projects
Now, simply being the creator of a project does not convey any access
for users.  You must be in a project/team that has access to it and you
must be an org admin for an org that has the project to be able to make
changes to it
2015-10-13 11:24:48 -04:00
Matthew Jones
46aa6dfabb Prevent deleting organizations on basic licenses
Plus unit tests
2015-10-12 14:52:03 -04:00
Chris Meyers
1bcfc67a52 allow user to add ansible callback plugin paths to job runtime 2015-10-12 13:33:46 -05:00
Matthew Jones
98c1301e23 Clean up some flake8 issues 2015-10-12 14:18:02 -04:00
Matthew Jones
6cd39efb85 Add a cleanup_authtokens management command
We also will now clean these up during cleanup_deleted
2015-10-12 13:44:22 -04:00
Matthew Jones
ae3f5c220e Change celery task id in dependent job failure msg
We'll now display a little json that should help the UI in rendering a
link to the dependent job in the job detail screen
2015-10-12 13:24:03 -04:00
Matthew Jones
6e2efd3f8a Overwrite should not imply overwrite-vars 2015-10-12 13:07:50 -04:00
Chris Meyers
c3a387c603 Merge pull request #434 from chrismeyersfsu/fix-rbac_performance2
use subqueries instead of python ids
2015-10-02 09:49:49 -04:00
Chris Meyers
5e7473e101 Merge pull request #457 from chrismeyersfsu/fix-stdout_dl_token
allow token in get params at stdout endpoint
2015-10-02 08:59:07 -04:00
Chris Meyers
22f0a4b79a allow token in get params at stdout endpoint 2015-10-01 17:25:21 -04:00
Chris Meyers
4434d336a3 notify all socket session of a token 2015-10-01 16:27:49 -04:00
Matthew Jones
0e0037b7f8 Merge pull request #451 from matburt/iam_ephemeral_cred
Support IAM ephemeral cred
2015-10-01 10:59:10 -04:00
Matthew Jones
6a3a36513a Add failure test for sts tokens 2015-10-01 10:49:58 -04:00
Chris Meyers
b7cb8c7624 Merge pull request #452 from chrismeyersfsu/fix-options_cap
add appropriate help_text to run_ad_hoc_command
2015-09-30 14:19:37 -04:00
Chris Meyers
833cbce9e0 add appropriate help_text to run_ad_hoc_command 2015-09-30 14:07:50 -04:00
Matthew Jones
acc974289f Unit test for AWS STS token support 2015-09-30 13:42:16 -04:00
Matthew Jones
34e028b8c7 Adding security token field to support ec2 sts
And any future credential that might want to use "security_token"
2015-09-30 13:39:36 -04:00
Chris Meyers
35abd0cc07 influence callback receiver single worker 2015-09-30 12:39:00 -04:00
Chris Meyers
052929d209 Merge pull request #446 from chrismeyersfsu/feature-session_limit2
Feature session limit2
2015-09-30 11:11:36 -04:00
Chris Meyers
b350eef3f0 session limit invalidation events via socket.io 2015-09-29 14:10:26 -04:00
Matthew Jones
29b4865af8 Ability to pause pexpect output with env var
Since inventory updates don't support extra vars
2015-09-29 11:36:31 -04:00
Matthew Jones
5be53d4a79 Add a sleep step to job runs if configured
If the extra var PEXPECT_SLEEP is given to a job then it will
artificially delay the job run by that number of seconds allowing QA to
hook in and cancel the job
2015-09-28 15:43:46 -04:00
Chris Meyers
000d26d7e3 session limit enforcement
* upon creating a new session, invalidate oldest sessions
2015-09-28 14:17:28 -04:00