awx/awx/settings at 1ee5c890f347547d29f6fce22ba106f675c5f66b - awx

mirror of https://github.com/ansible/awx.git synced 2026-03-25 04:45:03 -02:30

Files

Matthew Sandoval ff68d6196d Add feature flag for OIDC workload identity credential types (#16348 )

Add install-time feature flag for OIDC workload identity credential types

Implements FEATURE_OIDC_WORKLOAD_IDENTITY_ENABLED feature flag to gate
HashiCorp Vault OIDC credential types as a Technology Preview feature.

When the feature flag is disabled (default), OIDC credential types are
not loaded into the plugin registry at application startup and do not
exist in the database.

When enabled, OIDC credential types are loaded normally and function
as expected.

Changes:
- Add FEATURE_OIDC_WORKLOAD_IDENTITY_ENABLED setting (defaults to False)
- Add OIDC_CREDENTIAL_TYPE_NAMESPACES constant for maintainability
- Modify load_credentials() to skip OIDC types when flag is disabled
- Add test coverage (2 test cases)

This is an install-time flag that requires application restart to take
effect. The flag is checked during application startup when credential
types are loaded from plugins.

Fixes: AAP-64510

Assisted-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2026-03-18 22:40:33 -04:00

__init__.py

[AAP-64062] Enforce JWT-only authentication for Controller when deployed as part of AAP (#16283 )

2026-03-09 17:46:31 +01:00

application_name.py

[4.6][Backport][Feature] feat: Manage Django Settings with Dynaconf (#6910 )

2025-04-15 15:17:16 -04:00

defaults.py

Add feature flag for OIDC workload identity credential types (#16348 )

2026-03-18 22:40:33 -04:00

development_defaults.py

AAP-58539 Move to dispatcherd (#16209 )