Commit Graph
100 Commits
Author SHA1 Message Date
Ryan Petrello 1cedf244b7 replace the smart inventory membership lock with a new Django 2.2 flag 2019-07-22 11:11:36 -04:00
Ryan Petrello f6c357659d Merge pull request #4348 from shanemcd/devel
Bump VERSION to 6.1.0
2019-07-18 14:26:18 -04:00
Ryan Petrello c25dbb534f fix a 500 error for Activity Stream job records w/ a missing JT 2019-07-17 10:28:51 -04:00
Ryan Petrello b620d8505a build and link a newer sqlite3 to make Django happy 2019-07-16 10:50:49 -04:00
Ryan Petrello a4b2d6bf88 Revert "Change the devel containers to be based on Fedora instead of CentOS"
This reverts commit 7936dff188.
2019-07-16 09:18:24 -04:00
Ryan Petrello 66321a6218 specify a ng-csp attribute so Angular doesn't autodetect
without this, we're getting a false positive log message about an unsafe
eval (which is *actually* just angular auto-detecting whether or not
eval is supported)
2019-07-08 17:32:41 -04:00
Ryan Petrello 0dcbafaccb fix a bug that breaks OPT_X_TLS_REQUIRE_CERT=0 for LDAP authentication 2019-07-05 10:24:18 -04:00
Ryan Petrello 75a72637dd allow data: images in our Content Security Policy
support for custom login logos relies on data:image/*;base64
see: https://github.com/ansible/awx/issues/4253
2019-07-02 11:35:56 -04:00
Ryan PetrelloandJim Ladd 11b36982cd fix a bug that causes LDAP TLS connection flags to not be set properly
co-authored-by: Jim Ladd <jladd@redhat.com>
2019-06-28 22:15:35 -04:00
Ryan Petrello dfa8d44eb8 don't ship external logs from the main thread of the dispatcher
this is a fairly esoteric change that attempts to work around a bug
we've discovered in cpython itself

context: https://github.com/ansible/awx/issues/4181
2019-06-27 16:24:36 -04:00
Ryan Petrello eacf819caf add a reasonable default Content Security Policy
ideally we'd improve this over time to remove the `unsafe-inline` lines,
but we can't due that today because Angular1 makes use of a lot of
inline <script> and <style> tag generation

see: https://github.com/ansible/awx/issues/2056
2019-06-26 10:46:26 -04:00
Ryan Petrello 01d31231c0 bump ovirtsdk version to 4.3.0
see: https://github.com/ansible/ansible/commit/bfc6a2a8d6342c7f36038c2216dc8f3e50a6244a
2019-06-21 12:49:16 -04:00
Ryan Petrello d8bd72054d work around a unit test that's periodically flaky 2019-06-14 10:05:41 -04:00
Ryan Petrello ae9032ce03 fix a bug introduced in the inventory source detail API by v1 removal
see: https://github.com/ansible/awx/issues/4059
2019-06-13 17:20:21 -04:00
Ryan Petrello a454102e77 delete a few really old migration utility files 2019-06-13 17:19:43 -04:00
Ryan Petrello be8a30b9d9 fix a py3 compat problem in an LDAP migration 2019-06-11 10:25:15 -04:00
Ryan Petrello 329b40fd69 support vault IDs that include dot characters
see: https://github.com/ansible/awx/issues/4009
2019-06-06 12:42:31 -04:00
Ryan Petrello 6da445f7c0 remove /api/v1 and deprecated credential fields 2019-06-06 12:23:00 -04:00
Ryan Petrello 6d1ba411e6 make activity stream action_node deterministic for Swagger docs 2019-06-06 10:36:34 -04:00
Ryan Petrello c6afd98500 unpin apache-libcloud now that a version is out without PyCrypto
see: https://github.com/ansible/awx/pull/3466
see: https://github.com/ansible/awx/issues/3822
2019-06-04 09:26:27 -04:00
Ryan Petrello 40b1e89b67 add the ability to disable RabbitMQ queue durability 2019-05-28 15:49:32 -04:00
Ryan Petrello b1d75327e3 add the ability to toggle DEBUG logging on dynamically 2019-05-16 07:58:31 -04:00
Ryan Petrello be4705ef8b Merge branch 'downstream' into devel 2019-05-10 09:18:07 -04:00
Ryan Petrello adfdfcdd0a use make targets for dev supervisor commands 2019-05-09 13:45:49 -04:00
Ryan Petrello 766a5c0c3f remove honcho in the dev environment (just use foregrounded supervisor)
using supervisor gives us the ability to restart entire processes on
code change (like the dispatcher and callback receiver)
2019-05-08 14:44:07 -04:00
Ryan Petrello 993b0a889d add API tests for InstanceGroup order persistence 2019-05-08 11:56:30 -04:00
Ryan Petrello e4a50f3595 enforce a stable list order when attaching/detaching instance groups 2019-05-07 14:53:00 -04:00
Ryan Petrello c6c14d4fb9 properly record Instance.cpu and Instance.memory for isolated nodes 2019-05-03 15:30:41 -04:00
Ryan Petrello a874ed0424 Merge pull request #3543 from AlanCoding/migration_schmigration
Fix server error for in-flight migration
2019-05-03 11:59:02 -04:00
Ryan Petrello 8d75fc5f56 Merge branch 'downstream' into devel 2019-05-03 07:58:25 -04:00
Ryan Petrello 7fc13b8bb5 Merge pull request #3538 from ryanpetrello/valid-netloc
require a valid netloc for Credential Type inputs w/ format=url
2019-05-02 15:08:48 -04:00
Ryan Petrello e560dccd36 require a valid netloc for Credential Type inputs w/ format=url 2019-05-02 14:49:02 -04:00
Ryan Petrello de56e20f11 Merge pull request #3536 from ryanpetrello/urllib3-1.24.3
pin urllib3 to 1.24.3 to address CVE-2019-9740
2019-05-02 14:27:10 -04:00
Ryan Petrello 6bb9902588 pin urllib3 to 1.24.3 to address CVE-2019-9740 2019-05-02 11:59:01 -04:00
Ryan Petrello 50f9c70afd remove references to the (now defunct) fact receiver 2019-05-01 23:48:05 -04:00
Ryan Petrello c41da766fb Merge pull request #3530 from ryanpetrello/you're-not-by-real-dad
fix a bug that caused parent_uuid not to be persisted
2019-05-01 10:21:35 -04:00
Ryan Petrello 46795cc71e fix a bug that caused parent_uuid not to be persisted 2019-05-01 10:13:59 -04:00
Ryan Petrello 4fac608890 Merge pull request #3528 from jakemcdermott/fix-3507
require url scheme for external credential type url inputs
2019-05-01 09:32:42 -04:00
Ryan Petrello 6e00038d35 Merge pull request #3516 from jakemcdermott/fix-3511
hide dashboard tips on graph teardown event
2019-04-30 23:01:25 -04:00
Ryan Petrello ad4e413a36 Merge pull request #3515 from jakemcdermott/fix-3513
fix error on template prompt initialization when credential has prompt
2019-04-30 15:47:39 -04:00
Ryan Petrello 52276ebbab Merge pull request #3523 from wenottingham/failure-event-handling-is-an-option
Use AWX python interpreter for failure-event-handler.
2019-04-30 10:41:54 -04:00
Ryan Petrello 586c3e4583 document CORS middleware 2019-04-26 11:00:33 -04:00
Ryan Petrello d11dfd0a2b Merge branch 'downstream' into devel 2019-04-26 08:02:04 -04:00
Ryan Petrello 27d74528c0 Merge pull request #3494 from rooftopcellist/analytics_csv
analytics table copies formatted as csv now
2019-04-25 14:48:59 -04:00
Ryan Petrello 0ada1e965f Merge pull request #3508 from ryanpetrello/runner-134
pin runner 1.3.4
2019-04-25 10:16:05 -04:00
Ryan Petrello 2808a852eb pin runner 1.3.4 2019-04-25 09:49:03 -04:00
Ryan Petrello c9424f9af8 fix a few issues with license counts in /api/v2/metrics/
- switched these to gauges so people can track them over time
- fixed a typo that caused `free_instances` to always be zero
2019-04-24 12:23:07 -04:00
Ryan Petrello 519d2eebcb remove unnecessary dotfiles 2019-04-23 17:23:15 -04:00
Ryan Petrello 787e369bcf pin runner to 1.3.3 2019-04-22 12:57:55 -04:00
Ryan Petrello eb0463890c add a loud warning about perf regressions to tasks.py 2019-04-22 10:26:58 -04:00
Ryan Petrello 4159a9b6af make deprecation warnings at /api/ much more obvious 2019-04-18 12:32:49 -04:00
Ryan Petrello d6ecb486d2 deprecate /api/v2/dashboard in favor of /api/v2/metrics 2019-04-18 11:45:37 -04:00
Ryan Petrello 9d000a76de properly set ansible_python_interpreter for local task execution
this works a limitation in ansible for connection: local and makes it so
that you can run connection: local playbooks with a /usr/bin/python that
is Python3 and an Ansible virtualenv that is Python2

see: https://github.com/ansible/awx/issues/3267
2019-04-16 21:24:23 -04:00
Ryan Petrello f1d87bf392 fix a bug that breaks the isolated heartbeat 2019-04-16 16:24:40 -04:00
Ryan Petrello 387682ed8d if runner crashes, attempt to record why
this attempts to surface the underlying runner exception for tracebacks
like this one:

FileNotFoundError: [Errno 2] No such file or directory:
'/tmp/awx_41_93gtgv25/artifacts/41/status'
2019-04-15 13:17:45 -04:00
Ryan Petrello 17a803f49c remove the old callback plugin import paths and callback-specific tests 2019-04-12 16:11:23 -04:00
Ryan Petrello 85898fd708 remove more unnecessary feature flagging for AUTHENTICATION_BACKENDS 2019-04-12 11:28:27 -04:00
Ryan Petrello 0c4ed78bee pin ansible runner to 1.3.2 2019-04-11 12:57:07 -04:00
Ryan Petrello 01a79dd23e remove COMPONENT NAME from our issue templates
this is a remnant from our closed sourced days; upstream bug reporters
only fill this out correctly like 50% of the time, and it's often
difficult to know without knowing how AWX actually works
2019-04-09 12:49:11 -04:00
Ryan Petrello aa0179690d expose CredentialType.namespace in the API
see: https://github.com/ansible/awx/issues/3644
2019-04-08 19:02:10 -04:00
Ryan Petrello fc9da002d2 add an example config file and make target for starting a prometheus 2019-04-08 12:01:46 -04:00
Ryan Petrello dfd4cb55e5 add a unique UUID for identifying an AWX installation 2019-04-05 20:10:55 -04:00
Ryan Petrello a9a479a51b fix a typo 2019-04-05 14:28:39 -04:00
Ryan Petrello cd90ad2497 fix a small bug related to failed inventory counts in the dashboard API 2019-04-05 14:02:19 -04:00
Ryan Petrello 81fe923577 don't write playbook stdout to sys.stdout (it's duplicated in log files)
this instructs runner to _not_ write to stdout when we invoke
runner.interface.run(); AWX consumes/ingests this strictly as events
2019-04-05 11:20:34 -04:00
Ryan Petrello 79d580d5b9 update periodic isolated cleanup to match the new paths post-runner 2019-04-05 09:43:27 -04:00
Ryan Petrello 5a4a812c73 specify --forks on isolated health check calls
this requires ansible-runner 1.3.2
2019-04-04 20:12:14 -04:00
Ryan Petrello 5c5173956d add some additional analytics metrics 2019-04-04 20:10:54 -04:00
Ryan Petrello ce2fc1a9dd fix more py3 centos7 issues 2019-04-04 18:35:59 -04:00
Ryan Petrello 78cd1abbb2 fix a bug in isolated OpenSSH key syncing
OpenSSH keys _must_ end with a \n to be accepted by ssh-add; enforce
a newline if there isn't one
2019-04-03 11:53:45 -04:00
Ryan Petrello 0768c6ac1d store the public key for HashiVault signing in the plugin metadata 2019-04-02 11:21:47 -04:00
Ryan Petrello 2824616ba6 add support for CyberArk Conjur (API v5) 2019-04-02 11:21:44 -04:00
Ryan Petrello 81a509424a prefetch related source credentials in tasks.py 2019-04-02 11:21:33 -04:00
Ryan Petrello 42f4956a7f enforce required credential fields at job start time rather than on save
this is necessary for credential plugins support so that you can (in two
requests):

1.  Save a Credential with _no_ input values defined
2.  Create/associate one (or more) CredentialInputSource records to the
    new Credential
2019-04-02 11:21:29 -04:00
Ryan Petrello 368d933799 remove association behavior from /api/v2/credentials/input_sources/ 2019-04-02 11:21:14 -04:00
Ryan Petrello b911f8bf77 allow creation at /api/v2/credential_input_sources 2019-04-02 11:21:06 -04:00
Ryan Petrello e727909a61 rename the CredentialInputSource related_names so they're plural 2019-04-02 11:21:02 -04:00
Ryan Petrello 13366c1e75 Encrypt machine.ssh_public_key_data (in case users paste in signed data) 2019-04-02 11:20:58 -04:00
Ryan Petrello ca6d124417 add API examples for supported credential plugins 2019-04-02 11:20:55 -04:00
Ryan Petrello 35cca68f04 add RBAC definitions for CredentialInputSource 2019-04-02 11:20:51 -04:00
Ryan Petrello dcf17683e2 mark cred plugin strings for translation 2019-04-02 11:20:48 -04:00
Ryan Petrello b851e2be4a don't add hvac as a dependency for hashicorp vault integration
hvac is just based on requests anyways, and it doesn't support half of
what we need (like the SSH secrets engine API)
2019-04-02 11:20:44 -04:00
Ryan Petrello 69368d874e move path parameterization to the CredentialInputSource model 2019-04-02 11:20:36 -04:00
Ryan Petrello 7a43f00a5d add support for HashiCorp signed SSH certificates 2019-04-02 11:20:29 -04:00
Ryan Petrello 4ed5bca5e3 add credential plugin support for Azure Key Vault 2019-04-02 11:20:26 -04:00
Ryan Petrello 0a87469225 give credential plugins an explicit namespace 2019-04-02 11:20:22 -04:00
Ryan Petrello 63997838cd support HashiCorp Vault versioned secrets (API v2) 2019-04-02 11:20:19 -04:00
Ryan Petrello 89b731a0cb Improve the HashiCorp Vault KV name and field labels/help_text 2019-04-02 11:20:15 -04:00
Ryan Petrello 9036ba492c switch CredentialInput creation to use the associate/disassociate view 2019-04-02 11:20:10 -04:00
Ryan Petrello 52a2ed2786 fix a py3 compat issue in the insights action plugin 2019-04-01 17:07:37 -04:00
Ryan Petrello 7ef68a03c6 index unified_job.status
this is a fairly importantj column that we join on for a number of
queries throughout AWX, particularly the task scheduler and analytics
2019-03-29 12:59:43 -04:00
Ryan Petrello 563a0cc2a4 move awx.main.expect to awx.main.isolated 2019-03-29 12:14:40 -04:00
Ryan Petrello a59bc33280 slightly refactor isolated event consumption 2019-03-29 10:48:42 -04:00
Ryan Petrello 8f089c02a5 fix some faulty logic in isolated syncs that caused SSH keys to not work 2019-03-29 10:32:24 -04:00
Ryan Petrello d663d397f8 clean up some isolated adhoc code
if it's adhoc, there's not project directory to copy
2019-03-29 10:31:56 -04:00
Ryan Petrello 546281d435 work around a bug where runner doesn't provide atomic event writes 2019-03-29 10:31:12 -04:00
Ryan Petrello 9160d91278 clean up old usage of idle_timeout
cmeyers and I looked at this and can't tell where/why/how you'd actually
set this setting - it looks like really old ~2014-2015 Tower history
that probably isn't actually in use
2019-03-28 17:31:32 -04:00
Ryan Petrello ab11f18957 send an EOF event if isolated dispatch fails 2019-03-28 16:48:52 -04:00
Ryan Petrello ea30547754 remove main.expect tests (this functionality exists in runner now) 2019-03-28 16:13:14 -04:00
Ryan Petrello dd81f59d9a set PYTHONPATH properly for isolated usage of runner 2019-03-28 12:40:21 -04:00