chris meyers
5bfe9bf228
vary the pk
2018-08-09 15:44:59 -04:00
chris meyers
40d6c763b3
add test for first net cred ssh password protected wins
2018-08-09 13:32:42 -04:00
chris meyers
2f49dc774a
first net password-protected ssh key wins
2018-08-09 13:25:15 -04:00
chris meyers
8d440acb0f
add test for ssh over network ssh key password preference
2018-08-09 12:51:40 -04:00
chris meyers
9a199b99ac
add pexpect test for net cred
2018-08-09 12:40:37 -04:00
chris meyers
48a0038f53
fill in network ssh password protected keys
2018-08-09 12:15:27 -04:00
adamscmRH
1bc83b488b
hide client_secret from API
2018-08-09 11:27:39 -04:00
Yunfan Zhang
5f0b34de38
Merge pull request #2769 from YunfanZhang42/release_3.3.0
...
Do not create refresh tokens for apps with implicit grant type
2018-08-09 10:50:12 -04:00
Alan Rominger
fad568c960
Merge pull request #2801 from AlanCoding/register_queue
...
Only add instances to policy list via CLI command
2018-08-09 10:43:21 -04:00
Wayne Witzel III
89642a449f
disable computed for create preload data mgmt cmd
2018-08-09 10:11:37 -04:00
AlanCoding
df05cff850
only add instances to policy list via CLI command
2018-08-09 09:32:09 -04:00
Yunfan Zhang
02db543848
Do not create refresh tokens for apps with implicit grant type.
...
Signed-off-by: Yunfan Zhang <yz322@duke.edu >
2018-08-08 17:37:02 -04:00
AlanCoding
7aa7cc1c98
add current workflow job to running list
2018-08-08 07:49:02 -04:00
Ryan Petrello
91c92d57e3
fix a bug in isolated job launches when there are no controllers online
...
see: https://github.com/ansible/tower/issues/2782
2018-08-07 17:27:23 -04:00
Ryan Petrello
ec735b7b47
check oauth_scopes in _every_ view
...
see: https://github.com/ansible/tower/issues/2759
2018-08-06 11:05:59 -04:00
AlanCoding
a99ebbb02f
Apply policy task more selectively
2018-08-03 06:56:15 -04:00
Yunfan Zhang
7001c67c84
Fixing incorrect license_error value in inventory_sync.
...
Signed-off-by: Yunfan Zhang <yz322@duke.edu >
2018-08-02 14:19:13 -04:00
Wayne Witzel III
95a9e1a7b6
Merge pull request #2737 from wwitzel3/release_3.3.0
...
unless allow_simultaneous do not start workflow jobs already running
2018-08-02 12:37:46 -04:00
Wayne Witzel III
74ed1c2c40
fetch running workflow jobs once per process
2018-08-02 11:46:38 -04:00
walkafwalka
0b9726a3ed
Standardize Slack backend API method
...
Signed-off-by: walkafwalka <41709139+walkafwalka@users.noreply.github.com >
2018-08-02 05:31:38 +00:00
Yunfan Zhang
b191f6cfc3
Add AND filter to related search.
...
Signed-off-by: Yunfan Zhang <yz322@duke.edu >
2018-08-01 19:43:57 -07:00
Wayne Witzel III
da603dd3ad
use workflow_template_id
2018-08-01 15:55:19 -04:00
Wayne Witzel III
c96cf3cf5d
unless allow_simultaneous, do not start workflow jobs that are already running
2018-08-01 14:53:00 -04:00
Alan Rominger
0c0d5d4eba
Merge pull request #2719 from AlanCoding/differential_policy
...
Apply policy results differentially
2018-07-31 16:25:14 -04:00
Alan Rominger
9ff249f5c4
Merge pull request #2438 from AlanCoding/ask_user_input_creds
...
Ask user input if credential prompting enabled
2018-07-31 15:48:19 -04:00
Ryan Petrello
0c53a0c0a4
Merge pull request #2717 from ryanpetrello/fix-2180
...
allow access to JT labels if you have read access to the JT
2018-07-31 15:28:24 -04:00
Ryan Petrello
0aaa3807a9
allow access to JT labels if you have read access to the JT
...
see: https://github.com/ansible/tower/issues/2180
2018-07-31 15:13:24 -04:00
AlanCoding
8eaae97768
Apply policy results differentially
...
This avoids client-side scripting problems
where they grab the instance list during the
re-calculation which leads to incorrect assumptions
2018-07-31 15:03:36 -04:00
Ryan Petrello
8e3b72e1e5
more network UI cleanup (whoops)
2018-07-31 14:53:11 -04:00
Yunfan Zhang
9cdee4f75c
Merge pull request #2711 from YunfanZhang42/add_instance_groups_to_activity_stream
...
Add instance groups to activity stream.
2018-07-31 13:17:22 -04:00
Yunfan Zhang
f9309c9cd9
Add instance groups to activity streams.
...
Signed-off-by: Yunfan Zhang <yz322@duke.edu >
2018-07-31 11:01:29 -04:00
Alan Rominger
0004c42f6d
Merge pull request #2628 from AlanCoding/all_projects
...
Apply lock file to all project updates
2018-07-31 10:36:12 -04:00
Ryan Petrello
ef242483b3
Merge pull request #2716 from ryanpetrello/fix-fail-workflow-on-missing-jt
...
set workflow status to failed if we find a node w/ a missing UJT
2018-07-31 08:19:39 -04:00
Ryan Petrello
cc574be657
Merge pull request #2708 from ryanpetrello/remove-network-ui
...
remove the network UI
2018-07-31 08:18:13 -04:00
Ryan Petrello
184db58fa3
set workflow status to failed if we find a node w/ a missing UJT
...
see: https://github.com/ansible/tower/issues/2576
2018-07-30 16:37:24 -04:00
Ryan Petrello
a3040d60d9
Merge pull request #2714 from ryanpetrello/fix-2643
...
fail immediately if an isolated host is unreachable at launch time
2018-07-30 14:34:54 -04:00
Ryan Petrello
b99f211c7e
add some additional validation to JT.credentials
...
see: https://github.com/ansible/tower/issues/2612
2018-07-30 14:08:27 -04:00
Ryan Petrello
aee986d53c
fail immediately if an isolated host is unreachable at launch time
...
see: https://github.com/ansible/tower/issues/2643
2018-07-30 12:40:26 -04:00
Ryan Petrello
6f5259d017
remove the network UI
2018-07-30 11:03:53 -04:00
Ryan Petrello
3cdd0a94bd
simplify dynamic queue binding
...
we recently made a change so that instances no longer bind to
instance-group specific queues, but now instead they each bind to
a direct queue for their specific hostname
(https://github.com/ansible/tower/pull/1922 )
Because of this, we shouldn't *need* to reconfigure the queue binds at
runtime anymore when group membership changes. Under our new model,
every celeryd listens on a queue named after its hostname; when the
scheduler finds a task to run, it picks an Instance in the target
Instance Group and sends the task to the queue for that Instance's
hostname.
2018-07-28 00:48:37 -04:00
Ryan Petrello
9b1961f60d
some celery-watcher tweaks
...
* give celery more time to reply over AMQP (the default timeout is 1s)
* record datestamps in celery watcher logs for debugging purposes
2018-07-26 17:16:05 -04:00
AlanCoding
d1b89815f7
fix conflicting migrations
2018-07-26 10:38:26 -04:00
Christian Adams
0694fa83b0
Merge pull request #2682 from rooftopcellist/remove_client_credentials
...
Remove Client Credentials grant_type
2018-07-26 10:18:46 -04:00
adamscmRH
87829ea339
remove client credentials grant_type
2018-07-25 18:23:08 -04:00
Ryan Petrello
15aaca8f03
make InstanceGroup.policy_instance_list non-exclusive by default
...
see: https://github.com/ansible/tower/issues/2583
2018-07-25 17:26:13 -04:00
Yunfan Zhang
fec1e8d398
Merge pull request #2363 from YunfanZhang42/fix_crendential_copy
...
Fix credential leak when copying Job Templates
2018-07-25 13:14:40 -04:00
Yunfan Zhang
cb6d7dfe69
Fix credential leak when copying Job Templates.
...
Signed-off-by: Yunfan Zhang <yz322@duke.edu >
2018-07-25 11:51:17 -04:00
Ryan Petrello
af84b25726
prevent cross site request forgery in websockets w/ the CSRF token
...
now that we have the CSRF middleware, we have a reliable token
available to us which we can use to verify individual ws_receive
payloads; this is _simpler_ than making sure you've properly configured
trusted origins, and it's also more secure than Origin header checks
see: https://github.com/ansible/tower/issues/2661
2018-07-25 09:47:53 -04:00
Ryan Petrello
c81d2f53c5
slightly refactor origin validity checks
2018-07-24 15:16:09 -04:00
Ryan Petrello
4b3ca080d4
improve robustness of host comparision for wss:// Origin headers
...
see: https://github.com/ansible/tower/issues/2647
2018-07-24 13:30:04 -04:00