External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-09-16 00:40:11 -02:30
Code Issues Packages Projects Releases Wiki Activity
27,574 Commits 63 Branches 102 Tags
8df6dc0ca011f5aabce4760ae68c8e2f8625a7ae
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ryan Petrello 6097066cd8 Merge branch 'downstream' into devel 2020-10-26 09:32:00 -04:00
Ryan Petrello a26d20cbf2 Merge pull request #4631 from ryanpetrello/galaxy-creds-cli 
allow the CLI to associate Galaxy credentials to Organizations
 2020-10-21 10:40:55 -04:00
Ryan Petrello c373d5307f allow the CLI to associate Galaxy credentials to Organizations 
$ awx organizations associate Default --galaxy_credential "Ansible Galaxy"
 2020-10-21 09:39:33 -04:00
Ryan Petrello 67a5ad7dd6 Bump version to 15.0.1 2020-10-20 09:39:43 -04:00
Ryan Petrello 06b1243857 Merge pull request #8396 from shanemcd/retry-galaxy 
Makefile logic to retry failed galaxy installs
 2020-10-20 09:37:47 -04:00
Ryan Petrello 57b2cd402b make workflow approval creation return an HTTP 201, not 200 OK 
see: https://github.com/ansible/awx/pull/8364/files/e16a910062290674e19e7c2bf550d5e5a0e4ec99#diff-67c0fe4fc2a405ad611e42d1457e8aa5
 2020-10-19 16:20:40 -04:00
Ryan Petrello 77d0958490 clarify the instructios for building CLI docs 2020-10-13 09:04:35 -04:00
Ryan Petrello faf0fa9040 Clarify behavioral changes from content syncing behavior in 15.0.0+ 
see: https://github.com/ansible/awx/issues/8341
 2020-10-12 15:51:08 -04:00
Ryan Petrello 0cdcbdfea6 fix a confusing error message when extra vars aren't valid JSON/YAML 
see: https://github.com/ansible/awx/issues/8359
 2020-10-12 12:56:13 -04:00
Ryan Petrello 30b6fd27b3 fix a display bug in notification bodies with unicode characters 
see: https://github.com/ansible/awx/issues/7400
 2020-10-02 14:37:25 -04:00
Ryan Petrello 64485c1066 fix a bug that prevents deletion of workflow approval records 
see: https://github.com/ansible/awx/issues/8305
 2020-10-01 16:06:53 -04:00
Ryan Petrello 70a371b212 s/Tower/AWX 2020-09-30 12:28:11 -04:00
Ryan Petrello 429e752c26 Clarify changelog addition to address CVE-2020-25626 2020-09-30 12:20:43 -04:00
Ryan Petrello 2e371dd2ea more 15.0.0 changelog 2020-09-29 17:38:42 -04:00
Ryan Petrello 98b24cd2d8 Bump version to 15.0.0 2020-09-29 17:36:32 -04:00
Ryan Petrello 089b0503bb update to the latest Django Rest Framework 2020-09-29 10:25:07 -04:00
Ryan Petrello c52054951d fix a bug that can break password prompting in certain scenarios 
see: https://github.com/ansible/awx/issues/8202
 2020-09-29 09:34:38 -04:00
Ryan Petrello baad765179 refactor some callback receiver code 
the bigint migration removed the foreign key constraints for:

- host_id
- job_id (and projectupdate_id, etc...)

because of this, we don't really need to check explicitly for a host_id
IntegrityError anymore (because it won't occur)

additionally, while it's possible to insert an event with a mismatched
job_id now (for example, you can totally start a long-running job, and
delete the job record in the background using the ORM or psql), doing
so results in DoesNotExist errors in the code that handles the
playbook_on_stats events
 2020-09-25 13:12:42 -04:00
Ryan Petrello cd0b9de7b9 remove multiprocessing.Queue usage from the callback receiver 
instead, just have each worker connect directly to redis
this has a few benefits:

- it's simpler to explain and debug
- back pressure on the queue keeps messages around in redis (which is
  observable, and survives the restart of Python processes)
- it's likely notably more performant at high loads
 2020-09-24 13:53:58 -04:00
Ryan Petrello 1f0cd8df71 expose GALAXY_IGNORE_CERTS in the job settings UI 2020-09-23 08:36:52 -04:00
Ryan Petrello 89ff8e1f3e change host -> last_job_id bulk update query to avoid locking issues 
see: https://github.com/ansible/awx/issues/8145
 2020-09-22 16:04:28 -04:00
Ryan Petrello b370e8389e add a few additional optimizations to the callback receiver 2020-09-22 08:51:01 -04:00
Ryan Petrello bed2dea04d don't broadcast ws:// events when UI_LIVE_UPDATES_ENABLED is False 2020-09-21 20:42:39 -04:00
Ryan Petrello bf1d93168b fix an rrule bug that causes improper HOURLY/MINUTELY calculation 
see: https://github.com/ansible/awx/issues/8071
 2020-09-18 12:06:07 -04:00
Ryan Petrello a1ddbd760d report callback receiver status in the sosreport 2020-09-18 10:49:50 -04:00
Ryan Petrello 57f8e48894 make --status more robust for dispatcher, and add support for receiver 
make the --status flag work by fetching a periodically recorded snapshot
of internal process state; additionally, update the callback receiver to
*also* record these statistics so we can gain more insight into any
performance issues
 2020-09-17 15:33:37 -04:00
Ryan Petrello 0df6409244 remove task state tracking from the callback receiver 
we don't have support for displaying these stats anyways, so there's
no point in using resources tracking them, especially for high-volume
installs
 2020-09-16 13:40:42 -04:00
Ryan Petrello 1a533a2a23 move an optional import for awxkit 
I'm not sure that this function is actually in use anywhere anymore, but
it shouldn't be a top-level import because it represents an optional
dependency.
 2020-09-15 14:50:01 -04:00
Ryan Petrello af238be377 address a few follow-up issues for Org -> Galaxy Credentials support 
- add support for managing galaxy creds in the tower organization module
- fix a minor serializer bug
 2020-09-10 11:00:21 -04:00
Ryan Petrello a817708d70 remove boto as an awx dependency 
see: https://github.com/ansible/awx/issues/2115
 2020-09-09 14:33:33 -04:00
Ryan Petrello c862b3e5a2 Revert "work around a memory leak in channels_redis" 
This reverts commit e25da217e8.
 2020-09-08 10:40:47 -04:00
Ryan Petrello f81560b12c update Django and channels_redis 
see: https://github.com/ansible/tower/issues/4439
also, addresses CVE-2020-24583 and CVE-2020-24584
 2020-09-08 10:39:26 -04:00
Ryan Petrello 013b411a0a remove old fact scanning plugins 2020-09-04 10:51:34 -04:00
Ryan Petrello b01d204137 if redis is unreachable, set instance capacity to zero 2020-09-03 15:11:53 -04:00
Ryan Petrello a6d26d7dab add the ability to prevent SAML auto-population behavior 2020-09-03 11:21:14 -04:00
Ryan Petrello 798f6371af update the project archive sync support for py2 compatability 
playbook runs in AWX are still supported in python2, so this adds
support for archive-based project syncs in py2
 2020-09-01 15:58:43 -04:00
Ryan Petrello 3edaa6bc14 remove some dead code 2020-09-01 15:26:38 -04:00
Ryan Petrello f4af74dabe renumber the Galaxy credential migration after rebasing 2020-09-01 13:47:26 -04:00
Ryan Petrello 4046b18eff properly handle Galaxy credentials if a Project is orphaned 2020-09-01 13:45:03 -04:00
Ryan Petrello a869d7da35 create the Galaxy credential for new installs in the preload script 
doing this in the migration *before* any Organizations actually exist
is stirring up RBAC dragons that I don't have time to fight

this commit meanst that *new* installs will pre-create the default
Galaxy (public) credential in create_preload_data, while
*upgraded/migrations* installs will do so via the migration
 2020-09-01 13:45:03 -04:00
Ryan Petrello a30ca9c19c don't run ansible-galaxy installs if there are no Galaxy credentials 2020-09-01 13:45:03 -04:00
Ryan Petrello 30da93a64e update the help text for Organization galaxy credentials 2020-09-01 13:45:03 -04:00
Ryan Petrello 011822b1f0 make a global "managed by AWX/Tower" Credential to represent Galaxy 2020-09-01 13:45:03 -04:00
Ryan Petrello e5552b547b properly migrate settings.FALLBACK_GALAXY_SERVERS 2020-09-01 13:45:02 -04:00
Ryan Petrello 1b4dd7c783 enforce Organization ownership of Galaxy credentials 2020-09-01 13:45:02 -04:00
Ryan Petrello 25a9a9c3ba remove redaction exclusions for Galaxy URLs (basic auth support is gone) 2020-09-01 13:45:02 -04:00
Ryan Petrello 130e279012 add a data migration for Galaxy credentials 
see: https://github.com/ansible/awx/issues/7813
 2020-09-01 13:45:02 -04:00
Ryan Petrello b8e0d087e5 add model support, an API, and a migration for Org -> Galaxy credentials 
see: https://github.com/ansible/awx/issues/7813
 2020-09-01 13:44:59 -04:00
Ryan Petrello 40ac719d6d add a changelog note about upgrade issues from 13.0 -> 14.0 2020-09-01 13:32:09 -04:00
Ryan Petrello 059999c7c3 update the inventory source module to respect new fields 2020-09-01 13:15:07 -04:00
Ryan Petrello 73baf3fcf9 defer loading Job.artifacts on host views to improve performance 
see: https://github.com/ansible/awx/issues/8006

this data can be *really* large, and we don't actually need it for the summary fields on this API endpoint
 2020-08-26 13:34:15 -04:00
Ryan Petrello 04229ba14b gather facts for image builds so we can detect arch 
related: https://github.com/ansible/awx/pull/7607/
 2020-08-25 11:36:26 -04:00
Ryan Petrello e0acf73ac6 add a changelog note about the channels_redis memory leak 2020-08-25 09:58:04 -04:00
Ryan Petrello e25da217e8 work around a memory leak in channels_redis 
see: https://github.com/django/channels_redis/issues/212
see: https://github.com/django/channels_redis/pull/219/
 2020-08-25 09:58:03 -04:00
Ryan Petrello 04188aa2d6 Bump version to 14.1.0 2020-08-25 09:45:05 -04:00
Ryan Petrelloandkldavis52 64da67fa2e mprove error message when changing an inventory from regular -> smart 
see: https://github.com/ansible/awx/issues/5744
Co-Authored-By: kldavis52 <kyle.linnard.davis@gmail.com>
 2020-08-25 09:25:54 -04:00
Ryan Petrello de59d1d3f6 improve job reaping for jobs that were started on a missing Instance 
see: https://github.com/ansible/awx/issues/7848
 2020-08-21 16:32:17 -04:00
Ryan Petrello 0266ed3836 more changelog updates 2020-08-20 10:44:06 -04:00
Ryan Petrello 821cfba88a changelog for arm64 builds 2020-08-20 10:05:27 -04:00
Ryan Petrello b14515b287 fix a bug that prevents the explicit removal of instances from groups 2020-08-19 13:22:31 -04:00
Ryan Petrello 815d691622 clean up old authtoken support 
just use Bearer tokens - those are the only type of tokens we support
 2020-08-19 12:23:00 -04:00
Ryan Petrello 612bb81976 add a deprecation warning for mercurial project syncs 
see: https://github.com/ansible/awx/issues/7932
 2020-08-19 11:19:03 -04:00
Ryan Petrello 33e2c059ed make event stdout encoding more resilient to UTF-16 surrogate pairs 
see: https://en.wikipedia.org/wiki/Universal_Character_Set_characters#Surrogates
 2020-08-18 10:23:20 -04:00
Ryan Petrello 5fb1b1ceea changelog updates for recent additions 2020-08-11 12:52:52 -04:00
Ryan Petrello 987c7d48a0 minor cleanup up CLI import -f yaml support 2020-08-11 09:44:13 -04:00
Ryan Petrello 5e9d372db2 update to a newer python-ldap to address a bug 
see: https://github.com/ansible/awx/issues/7868
 2020-08-11 09:34:04 -04:00
Ryan Petrello 32542021c6 fix busted flake8 CI 2020-08-10 12:26:12 -04:00
Ryan Petrello 99e417d748 Bump version to 14.0.0 2020-08-05 16:22:03 -04:00
Ryan Petrello 6067fc36f6 begin a 14.0.0 changelog 2020-08-05 14:53:01 -04:00
Ryan Petrello 0c6be1f4d7 Merge branch 'downstream' into devel 2020-08-05 14:48:36 -04:00
Ryan Petrello 76ba363513 mark PRIMARY_GALAXY_USERNAME and PRIMARY_GALAXY_PASSWORD as deprecated 2020-08-04 10:18:40 -04:00
Ryan Petrello 820c0782ad remove vNNN from example migration files 2020-08-03 15:30:37 -04:00
Ryan Petrello a0e5e74cab fix a typo in an f-string 2020-07-31 12:48:45 -04:00
Ryan Petrello 5b8cfa353f make these issue template sentences comments 
(because people are filing issues and leaving this text at the top)
 2020-07-31 09:58:52 -04:00
Ryan Petrello 1ad623f253 only support ansible-galaxy collection in 2.9+ 
see: https://github.com/ansible/awx/issues/7769
 2020-07-31 09:42:07 -04:00
Ryan Petrello 173628c709 update the bug report and feature templates w/ additional instructions 2020-07-30 13:24:54 -04:00
Ryan Petrello 7938bf58d4 Merge pull request #4485 from ryanpetrello/more-cred-failure-cleanup-372 
properly obfuscate connection errors for credential lookup failure
 2020-07-28 12:04:03 -04:00
Ryan Petrello 91594a1ae8 properly obfuscate connection errors for credential lookup failure 2020-07-28 11:38:48 -04:00
Ryan Petrello b03b12163f Merge pull request #4486 from ryanpetrello/fix-372-unit-tests 
pin pytest-forked to fix broken unit tests
 2020-07-28 11:18:52 -04:00
Ryan Petrello 1c08206792 pin pytest-forked to fix broken unit tests 2020-07-28 11:16:52 -04:00
Ryan Petrello 847d6c65bd Merge pull request #4480 from ryanpetrello/372-cred-plugin-30x 
properly report 30x errors on credential plugin tests
 2020-07-23 15:27:27 -04:00
Ryan Petrello f29e7b9c81 properly report 30x errors on credential plugin tests 2020-07-23 14:50:35 -04:00
Ryan Petrello 32831794ee Merge pull request #4477 from ryanpetrello/372-signal-deadlock 
force worker processes to have a different signal handler from the parent
 2020-07-23 12:21:44 -04:00
Ryan Petrello 26660fa82e Merge pull request #4464 from ryanpetrello/named-url-vuln-372 
update the named URL code to properly return 404 vs 403
 2020-07-23 12:07:33 -04:00
Ryan Petrello 860183f178 update the named URL code to properly return 404 vs 403 2020-07-22 12:15:34 -04:00
Ryan Petrello 34be08d38e add tests for filtering User.created_by in the API 2020-07-20 11:28:32 -04:00
Ryan Petrello 959b81aec5 refactor k8s credential injectors to properly handle verify=f 2020-07-16 12:43:10 -04:00
Ryan Petrello 1a39cbc2f4 add tests for k8s credential usage in Job Templates 2020-07-16 12:22:11 -04:00
Ryan Petrello 715dc4ece8 add a license for ruamel.ordereddict (for openshift lib support) 2020-07-16 11:38:54 -04:00
Ryan Petrello c44f8e9122 implement k8s credential selection in the new patternfly UI 2020-07-16 11:25:03 -04:00
Ryan Petrello 75a0382c31 show k8s credentials in the Job Template prompt on launch UI 2020-07-16 10:53:21 -04:00
Ryan Petrello 0b221a42c0 Add the ability to specify K8S/OCP credentials on a Job Template 
see: https://github.com/ansible/awx/issues/5735
 2020-07-15 17:44:07 -04:00
Ryan Petrello c410f1f344 Merge pull request #4458 from ryanpetrello/fifo-cred-plugin-hang-372 
[3.7.2] remove the usage of create_temporary_fifo from credential plugins
 2020-07-14 17:21:35 -04:00
Ryan Petrello 310a0f88e5 remove the usage of create_temporary_fifo from credential plugins 
this resolves an issue that causes an endless hang on with Cyberark AIM
lookups when a certificate *and* key are specified

the underlying issue here is that we can't rely on the underyling Python
ssl implementation to *only* read from the fifo that stores the pem data
*only once*; in reality, we need to just use *actual* tempfiles for
stability purposes

see: https://github.com/ansible/awx/issues/6986
see: https://github.com/urllib3/urllib3/issues/1880
 2020-07-14 16:24:03 -04:00
Ryan Petrello 3ef07ee5f7 Merge pull request #4447 from ryanpetrello/372-master-main-links 
fixed broken UI links
 2020-07-13 15:49:11 -04:00
Ryan Petrello ab11d3188d refactor the job type name into a single property 2020-07-13 09:43:43 -04:00
Ryan Petrello f51774c06e add job type to Host summary_fields.recent_jobs 
see: https://github.com/ansible/awx/issues/5236
 2020-07-13 09:02:04 -04:00
Ryan Petrello 140d9ae3ee Merge pull request #4429 from wenottingham/label-maker 
Reintroduce label filtering
 2020-07-09 09:00:57 -04:00
Ryan Petrello 7322e13436 add tests for clarified label permissions 2020-07-08 16:53:05 -04:00
Ryan Petrello 1cf2f009ed prevent unsafe jinja from being saved in the first place for cred types 
see: https://github.com/ansible/tower-security/issues/21
 2020-07-08 15:48:58 -04:00