| Commit message (Collapse) | Author | Files | Lines |
|
|
|
* Fix up ansible sanity checks
* Fix awx-collection test failure
* Add ignore for ansible-test 2.17
---------
Signed-off-by: Seth Foster <fosterbseth@gmail.com>
Co-authored-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com>
|
|
* Update a few dev requirements
* Fix test failures due to upgrade
* Update patterns for mocker usage
|
|
We have not identify the root cause of wsrelay failure but attempt to make wsrelay restart itself resulted in postgres and redis connection leak. We were not able to fully identify where the redis connection leak comes from so reverting back to failing and removing startsecs 30 will prevent wsrelay to FATAL
|
|
* Added docs for new RBAC changes
* Added UI changes with screens and API endpoints with sample commands.
* Update docs/docsite/rst/userguide/rbac.rst
Co-authored-by: Vidya Nambiar <43621546+vidyanambiar@users.noreply.github.com>
* Incorporated review feedback from @vidyanambiar.
---------
Co-authored-by: Vidya Nambiar <43621546+vidyanambiar@users.noreply.github.com>
|
|
Co-authored-by: Michael Anstis <manstis@redhat.com>
|
|
fix issue introduced by PR15055
|
|
|
|
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/3.1.3...3.1.4)
---
updated-dependencies:
- dependency-name: jinja2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
|
```
ERRO[0000] path "/var/lib/awx/.config" exists and it is not owned by the current user
```
start to happen with podman 5
it seems that the config files are no longer needed removing it fixes the problem
|
|
* Allowed hosts for logout redirects can now be set via the LOGOUT_ALLOWED_HOSTS setting
Authored-by: Michael Anstis <manstis@redhat.com>
Co-authored-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com>
|
|
(#15174)
skip update parent logic for 'waiting' on UnifiedJob
by not looking up "status_before" from previous instance
we save 2 to 3 expensive calls (the self lookup of old state, the lookup
of parent, and the update to parent if allow_simultaneous == False or status == 'waiting')
|
|
remove unneeded settings
|
|
|
|
* Do some asthetic adjustments to role presentation fields
* Correctly test managed setup
* Minor migration adjustments
|
|
Delete e2e_test.yml
Remove because it's no longer being maintained
|
|
This change makes "wait: true" for jobs and syncs
look at the event_processing_finished instead of
finished field.
Right now there is a race condition where
a module might try to delete an inventory, but the events
for an inventory sync have not yet finished. We have a
RelatedJobsPreventDeleteMixin that checks for this condition.
bulk jobs don't have event_processing_finished so we just
use finished field in that case.
|
|
followup to PR #15142
This commit pins openssl in the awx image,
not just the builder image.
|
|
* Upgrade DRF
* Fix failures caused by DRF upgrade
|
|
openssl 3.2.0 has incompatiblity issues with
the libpq version we are using, and causes
some C runtime errors:
"double free or corruption (out)"
see awx issue #15136
also this issue
github.com/conan-io/conan-center-index/pull/22615
once the libpq libraries on centos stream9 are
updated with the patch, we can unpin openssl
Signed-off-by: Seth Foster <fosterbseth@gmail.com>
|
|
If we don't have something in the cache when we call
get_by_natural_key, do an actual filtered query for it and cache the
results. We'll get more overall API calls this way, but they'll be
smaller and will happen while we are importing, not upfront.
|
|
Co-authored-by: Ирина Розет <irozet@astralinux.ru>
|
|
* Adding CSRF Validation for schemas
* Changing retrieve of scheme to avoid importing new library
* check if CSRF_TRUSTED_ORIGINS exists before accessing it
---------
Signed-off-by: Bruno Sanchez <brsanche@redhat.com>
|
|
* Add ability to set SameSite policy for userLoggedIn cookie
* reformat line for linter
|
|
* Fix and test data migration error from DAB RBAC
* Fix up migration test
* Fix custom method bug
* Fix another fat fingered bug
|
|
|
|
* Backports previously approved corrections.
* Deleted a blank line in inventories line 100
|
|
Currently the association box displays a
list of available instances/addresses that can
be peered to.
The pagination issue arises as follows:
- fetch 5 instances (based on page_size)
- filter these instances down based on some
criteria (like is_internal: false)
- show results
Filtering down the results inside of the fetch
method results in pagnation errors (may return fewer than
5, for example)
instead, do the filtering by API queries. That way the
pagination count will be correct.
Signed-off-by: Seth Foster <fosterbseth@gmail.com>
|
|
Makefiles use $() for variable templating, so trying to use it
directly as a shell subcommand doesn't work.
|
|
It's the year 2024: using -k as default in https URL schemes should be deprecated. (I have left one mention of it possibly being required if no CA available). Furtheremore, neither -XGET or -XPOST are required, as curl(1) well knows when to use which method.
|
|
Signed-off-by: hugehope <cmm7@sina.cn>
|
|
- when re-establishing connection to db close old connection
- re-initialize WebSocketRelayManager when restarting asyncio.run
- log and ignore error in cleanup_offline_host (this might come back to bite us)
- cleanup connection when WebSocketRelayManager crash
|
|
Fixed missing fstring from wsrelay logging
|
|
|
|
* update LDAP config dump
* return missing fields if any
* update test, remove unused import
* return bool and fields. check for missing_fields
|
|
|
|
|
|
Related to https://github.com/ansible/awx-operator/pull/1823
|
|
Update related name to reflect upstream DAB change
|
|
|
|
* Rename managed role definitions, and move migration logic here
* Fix naming capitalization
|
|
* Fix bug where team could not be given read_role to other team
* Avoid unwanted triggers of parentage granting
* Restructure signal structure
* Fix another bug unmasked by team member permission fix
* Changes to live with test writing
* Use equality as opposed to string "in"
from Seth in review comment
Co-authored-by: Seth Foster <fosterseth@users.noreply.github.com>
---------
Co-authored-by: Seth Foster <fosterseth@users.noreply.github.com>
|
|
Tweaks to reflect what endpoints are deprecated
|
|
|
|
Adds new modules for CRUD operations on the
following endpoints:
- api/v2/role_definitions
- api/v2/role_user_assignments
- api/v2/role_team_assignments
Note: assignment is Create or Delete only
Additional changes:
- Currently DAB endpoints do not have "type"
field on the resource list items. So this modifies
the create_or_update_if_needed to allow manually
specifying item type.
Signed-off-by: Seth Foster <fosterbseth@gmail.com>
|
|
* Remove duplicate access_list entries for direct team access
* Revert test changes for superuser in access_list
|
|
* Generalize can_delete solution, use devel DAB
* Fix bug where model was used instead of model_name
* Linter fixes
|
|
Fix server error from delete capability of approvals
|
|
Fix migration for created and modified field changes
|
|
|