Commit Graph
5405 Commits
Author SHA1 Message Date
chris meyers 5bfe9bf228 vary the pk 2018-08-09 15:44:59 -04:00
chris meyers 40d6c763b3 add test for first net cred ssh password protected wins 2018-08-09 13:32:42 -04:00
chris meyers 2f49dc774a first net password-protected ssh key wins 2018-08-09 13:25:15 -04:00
chris meyers 8d440acb0f add test for ssh over network ssh key password preference 2018-08-09 12:51:40 -04:00
chris meyers 9a199b99ac add pexpect test for net cred 2018-08-09 12:40:37 -04:00
chris meyers 48a0038f53 fill in network ssh password protected keys 2018-08-09 12:15:27 -04:00
adamscmRH 1bc83b488b hide client_secret from API 2018-08-09 11:27:39 -04:00
Yunfan Zhang 5f0b34de38 Merge pull request #2769 from YunfanZhang42/release_3.3.0
Do not create refresh tokens for apps with implicit grant type
2018-08-09 10:50:12 -04:00
Alan Rominger fad568c960 Merge pull request #2801 from AlanCoding/register_queue
Only add instances to policy list via CLI command
2018-08-09 10:43:21 -04:00
Wayne Witzel III 89642a449f disable computed for create preload data mgmt cmd 2018-08-09 10:11:37 -04:00
AlanCoding df05cff850 only add instances to policy list via CLI command 2018-08-09 09:32:09 -04:00
Yunfan Zhang 02db543848 Do not create refresh tokens for apps with implicit grant type.
Signed-off-by: Yunfan Zhang <yz322@duke.edu>
2018-08-08 17:37:02 -04:00
AlanCoding 7aa7cc1c98 add current workflow job to running list 2018-08-08 07:49:02 -04:00
Ryan Petrello 91c92d57e3 fix a bug in isolated job launches when there are no controllers online
see: https://github.com/ansible/tower/issues/2782
2018-08-07 17:27:23 -04:00
Ryan Petrello ec735b7b47 check oauth_scopes in _every_ view
see: https://github.com/ansible/tower/issues/2759
2018-08-06 11:05:59 -04:00
AlanCoding a99ebbb02f Apply policy task more selectively 2018-08-03 06:56:15 -04:00
Yunfan Zhang 7001c67c84 Fixing incorrect license_error value in inventory_sync.
Signed-off-by: Yunfan Zhang <yz322@duke.edu>
2018-08-02 14:19:13 -04:00
Wayne Witzel III 95a9e1a7b6 Merge pull request #2737 from wwitzel3/release_3.3.0
unless allow_simultaneous do not start workflow jobs already running
2018-08-02 12:37:46 -04:00
Wayne Witzel III 74ed1c2c40 fetch running workflow jobs once per process 2018-08-02 11:46:38 -04:00
walkafwalka 0b9726a3ed Standardize Slack backend API method
Signed-off-by: walkafwalka <41709139+walkafwalka@users.noreply.github.com>
2018-08-02 05:31:38 +00:00
Yunfan Zhang b191f6cfc3 Add AND filter to related search.
Signed-off-by: Yunfan Zhang <yz322@duke.edu>
2018-08-01 19:43:57 -07:00
Wayne Witzel III da603dd3ad use workflow_template_id 2018-08-01 15:55:19 -04:00
Wayne Witzel III c96cf3cf5d unless allow_simultaneous, do not start workflow jobs that are already running 2018-08-01 14:53:00 -04:00
Alan Rominger 0c0d5d4eba Merge pull request #2719 from AlanCoding/differential_policy
Apply policy results differentially
2018-07-31 16:25:14 -04:00
Alan Rominger 9ff249f5c4 Merge pull request #2438 from AlanCoding/ask_user_input_creds
Ask user input if credential prompting enabled
2018-07-31 15:48:19 -04:00
Ryan Petrello 0c53a0c0a4 Merge pull request #2717 from ryanpetrello/fix-2180
allow access to JT labels if you have read access to the JT
2018-07-31 15:28:24 -04:00
Ryan Petrello 0aaa3807a9 allow access to JT labels if you have read access to the JT
see: https://github.com/ansible/tower/issues/2180
2018-07-31 15:13:24 -04:00
AlanCoding 8eaae97768 Apply policy results differentially
This avoids client-side scripting problems
where they grab the instance list during the
re-calculation which leads to incorrect assumptions
2018-07-31 15:03:36 -04:00
Ryan Petrello 8e3b72e1e5 more network UI cleanup (whoops) 2018-07-31 14:53:11 -04:00
Yunfan Zhang 9cdee4f75c Merge pull request #2711 from YunfanZhang42/add_instance_groups_to_activity_stream
Add instance groups to activity stream.
2018-07-31 13:17:22 -04:00
Yunfan Zhang f9309c9cd9 Add instance groups to activity streams.
Signed-off-by: Yunfan Zhang <yz322@duke.edu>
2018-07-31 11:01:29 -04:00
Alan Rominger 0004c42f6d Merge pull request #2628 from AlanCoding/all_projects
Apply lock file to all project updates
2018-07-31 10:36:12 -04:00
Ryan Petrello ef242483b3 Merge pull request #2716 from ryanpetrello/fix-fail-workflow-on-missing-jt
set workflow status to failed if we find a node w/ a missing UJT
2018-07-31 08:19:39 -04:00
Ryan Petrello cc574be657 Merge pull request #2708 from ryanpetrello/remove-network-ui
remove the network UI
2018-07-31 08:18:13 -04:00
Ryan Petrello 184db58fa3 set workflow status to failed if we find a node w/ a missing UJT
see: https://github.com/ansible/tower/issues/2576
2018-07-30 16:37:24 -04:00
Ryan Petrello a3040d60d9 Merge pull request #2714 from ryanpetrello/fix-2643
fail immediately if an isolated host is unreachable at launch time
2018-07-30 14:34:54 -04:00
Ryan Petrello b99f211c7e add some additional validation to JT.credentials
see: https://github.com/ansible/tower/issues/2612
2018-07-30 14:08:27 -04:00
Ryan Petrello aee986d53c fail immediately if an isolated host is unreachable at launch time
see: https://github.com/ansible/tower/issues/2643
2018-07-30 12:40:26 -04:00
Ryan Petrello 6f5259d017 remove the network UI 2018-07-30 11:03:53 -04:00
Ryan Petrello 3cdd0a94bd simplify dynamic queue binding
we recently made a change so that instances no longer bind to
instance-group specific queues, but now instead they each bind to
a direct queue for their specific hostname
(https://github.com/ansible/tower/pull/1922)

Because of this, we shouldn't *need* to reconfigure the queue binds at
runtime anymore when group membership changes. Under our new model,
every celeryd listens on a queue named after its hostname; when the
scheduler finds a task to run, it picks an Instance in the target
Instance Group and sends the task to the queue for that Instance's
hostname.
2018-07-28 00:48:37 -04:00
Ryan Petrello 9b1961f60d some celery-watcher tweaks
* give celery more time to reply over AMQP (the default timeout is 1s)
* record datestamps in celery watcher logs for debugging purposes
2018-07-26 17:16:05 -04:00
AlanCoding d1b89815f7 fix conflicting migrations 2018-07-26 10:38:26 -04:00
Christian Adams 0694fa83b0 Merge pull request #2682 from rooftopcellist/remove_client_credentials
Remove Client Credentials grant_type
2018-07-26 10:18:46 -04:00
adamscmRH 87829ea339 remove client credentials grant_type 2018-07-25 18:23:08 -04:00
Ryan Petrello 15aaca8f03 make InstanceGroup.policy_instance_list non-exclusive by default
see: https://github.com/ansible/tower/issues/2583
2018-07-25 17:26:13 -04:00
Yunfan Zhang fec1e8d398 Merge pull request #2363 from YunfanZhang42/fix_crendential_copy
Fix credential leak when copying Job Templates
2018-07-25 13:14:40 -04:00
Yunfan Zhang cb6d7dfe69 Fix credential leak when copying Job Templates.
Signed-off-by: Yunfan Zhang <yz322@duke.edu>
2018-07-25 11:51:17 -04:00
Ryan Petrello af84b25726 prevent cross site request forgery in websockets w/ the CSRF token
now that we have the CSRF middleware, we have a reliable token
available to us which we can use to verify individual ws_receive
payloads;  this is _simpler_ than making sure you've properly configured
trusted origins, and it's also more secure than Origin header checks

see: https://github.com/ansible/tower/issues/2661
2018-07-25 09:47:53 -04:00
Ryan Petrello c81d2f53c5 slightly refactor origin validity checks 2018-07-24 15:16:09 -04:00
Ryan Petrello 4b3ca080d4 improve robustness of host comparision for wss:// Origin headers
see: https://github.com/ansible/tower/issues/2647
2018-07-24 13:30:04 -04:00