summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Temporary workaround for CI failure (#15305)Hao Liu2024-06-261-2/+1
| | | | | | Workaround ``` ERROR awx/main/tests/functional/test_licenses.py - pip._vendor.distlib.DistlibException: Unable to locate finder for 'pip._vendor.distlib' ```
* Added troubleshooting and tips tricks content (#15212)TVo2024-06-244-10/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Added troubleshooting and tips tricks content * Added troubleshooting and tips tricks content * Moved DNS host entry override info to customize pod spec section of CG chapter. * Added troubleshooting and tips tricks content * Moved DNS host entry override info to customize pod spec section of CG chapter. * Update docs/docsite/rst/administration/containers_instance_groups.rst Co-authored-by: Seth Foster <fosterseth@users.noreply.github.com> * Update docs/docsite/rst/administration/containers_instance_groups.rst Co-authored-by: Seth Foster <fosterseth@users.noreply.github.com> * Update docs/docsite/rst/administration/containers_instance_groups.rst Co-authored-by: Sandra McCann <samccann@redhat.com> * Incorp'd review feedback from @fosterseth and @samccann * Update docs/docsite/rst/administration/containers_instance_groups.rst Co-authored-by: Sandra McCann <samccann@redhat.com> * Final revisions based on @fosterseth's inputs. --------- Co-authored-by: Seth Foster <fosterseth@users.noreply.github.com> Co-authored-by: Sandra McCann <samccann@redhat.com>
* Various RBAC fixes related to managed RoleDefinitions (#15287)Alan Rominger2024-06-217-6/+103
| | | | | | | | | | | | | | | | | | | | | | | * Add migration testing for certain managed roles * Fix managed role bugs * Add more tests * Fix another bug with org workflow admin role reference * Add test because another issue is fixed * Mark reason for test * Remove internal markers * Reword failure message Co-authored-by: Seth Foster <fosterseth@users.noreply.github.com> --------- Co-authored-by: Seth Foster <fosterseth@users.noreply.github.com>
* Fix object-level permission bugs with DAB RBAC system (#15284)24.6.0Alan Rominger2024-06-205-18/+36
| | | | | | | * Fix object-level permission bugs with DAB RBAC system * Fix NT organization change regression * Mark tests to AAP number
* Check for admin_role in role_check.py (#15283)Seth Foster2024-06-202-10/+29
| | | | | | | | Script was falsely identifying cross-linked parents. It needs to check if parent roles if content type is Team and role_field is member_role OR admin_role. Signed-off-by: Seth Foster <fosterbseth@gmail.com>
* Clarify the search for a proxyChris Meyers2024-06-181-0/+18
|
* Rename deleteChris Meyers2024-06-182-3/+3
| | | | | | * Include a bit of context into the name of the delete function. The HTTP_ added prepended string may be unexpected if Django's header transformation isn't top of mind.
* Add support for x-trusted-proxyChris Meyers2024-06-185-38/+171
| | | | | * Increase the surface area of the set of headers that the proxy list feature looks at for the remote proxy IF x-trusted-proxy is valid.
* Revert "Trust proxy headers for host provision callback"Chris Meyers2024-06-182-13/+7
| | | | This reverts commit 49e3971cd577127705fc0fd1d3b4ab7e3a3c3c2b.
* Tests for trust proxy and existing explicit proxyChris Meyers2024-06-181-9/+74
| | | | * Integration tests to ensure the integration of the two features.
* Trust proxy headers for host provision callbackChris Meyers2024-06-182-7/+13
| | | | | * Do not remove special header list if request is from a trusted proxy. * Continue to remove headers if request if from a non-trusted proxy.
* Pass the Makefile python exe to ansible-playbook (#15282)Alan Rominger2024-06-181-7/+10
|
* Use public methods to reference registered models (#15277)Alan Rominger2024-06-171-1/+1
|
* Add OpenShift Virtualization Inventory source option (#15047)Chad Ferman2024-06-1413-7/+255
| | | Co-authored-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com>
* Fix notification name search (#15231)a_nackov2024-06-131-1/+1
| | | Signed-off-by: Adrian Nackov <adrian.nackov@mail.schwarz>
* Add 'Terraform State' inventory source support for collection (#15258)Viktor Varga2024-06-121-2/+2
|
* Upgrade aiohttp for cve 2024-23829 (#15257)Jake Jackson2024-06-122-2/+2
|
* Change all uses of ImplicitRoleField to do on_delete=SET_NULLJeff Bradberry2024-06-128-30/+30
| | | | | This will mitigate the problem where if any Role gets deleted for some weird reason it could previously cascade delete important objects.
* Rename setting to allow local resource management (#15269)Seth Foster2024-06-114-10/+10
| | | | | | | | | | rename AWX_DIRECT_SHARED_RESOURCE_MANAGEMENT_ENABLED to ALLOW_LOCAL_RESOURCE_MANAGEMENT - clearer meaning - drop prefix so the same setting is used across the platform Signed-off-by: Seth Foster <fosterbseth@gmail.com>
* This should deal correctly with the ancestor list mismatchesJeff Bradberry2024-06-101-3/+4
|
* Guard against the role field not being populatedJeff Bradberry2024-06-101-2/+3
| | | | when doing the final reset of Role.implicit_parents.
* Add a new test scenarioJeff Bradberry2024-06-101-0/+26
| | | | to trigger the implicit parent not being in the parents and ancestors lists.
* Mark and rebuild the implicit_parents field for all affected rolesJeff Bradberry2024-06-101-8/+25
|
* Wait until the end of the fix script to clean up orphaned rolesJeff Bradberry2024-06-101-13/+12
|
* Add output of the update and deletion counts to fix.pyJeff Bradberry2024-06-101-3/+15
|
* Do not throw away the container of cross-linked parentsJeff Bradberry2024-06-101-2/+2
| | | | Since we use it twice, the second time to get the id field of each.
* Add a readme file with instructionsJeff Bradberry2024-06-101-0/+36
|
* Fix another instance where a bad resource->Role fk could throw a tracebackJeff Bradberry2024-06-101-2/+7
|
* Adjusted foreignkeys.sql for correctnessJeff Bradberry2024-06-101-5/+8
| | | | | Some relationships known to be handled by the special mapping sql file were being caught as false positives.
* Split the foreign key sql script into an 'into' and 'from' portionJeff Bradberry2024-06-101-13/+35
| | | | | Also, make use of up-front defined arrays of the tables involved, for ease of editing in the future.
* Filter out the relations within the known topology tablesJeff Bradberry2024-06-101-2/+6
|
* First cut at detecting which foreign keys enter and exit the topology tablesJeff Bradberry2024-06-101-0/+9
|
* Move the "test" files into their own directoryJeff Bradberry2024-06-103-0/+0
|
* Remove the role_chain.py moduleJeff Bradberry2024-06-101-54/+0
| | | | | it wound up being unworkable, and I think ultimately we only need to check the immediate parentage of each role.
* Attempt to correct any crosslinked parentsJeff Bradberry2024-06-101-0/+6
| | | | | I think that rebuild_role_ancestor_list() will then correctly update all of the affected Role.ancestors.
* Exclude more files in the .gitignoreJeff Bradberry2024-06-101-0/+5
|
* Modify the role parent check logic to stay in the roles as much as possibleJeff Bradberry2024-06-101-11/+35
| | | | | since the foreign keys to the roles from the resources can make us go wrong almost immediately.
* Exclude the team grant false positivesJeff Bradberry2024-06-101-2/+5
| | | | The results in my test now look correct.
* Attempt to more thoroughly check the parents of each RoleJeff Bradberry2024-06-101-0/+15
| | | | | This version, however, has false positives because Roles become children of Team.member_role when a Role is granted to a Team.
* First cut at checking the role hierarchyJeff Bradberry2024-06-101-0/+13
| | | | Checking if parents and implicit_parents are consistent with ancestors.
* Set up a scenario where IG.use_role_id points to something no longer thereJeff Bradberry2024-06-101-0/+28
| | | | | | | This is actually happening for one customer, though it seems like it shouldn't be if the foreign key constraint is set back up properly. In order to recreate it, I had to add the constraint back with 'NOT VALID' added on to prevent the check.
* Handle the case where a resource points to a Role which isn't in the dbJeff Bradberry2024-06-101-1/+7
|
* Graph out only the parent/child chains from a given RoleJeff Bradberry2024-06-101-4/+36
| | | | Doing the entire graph is too much on any system with real amounts of Roles.
* Check for a broken ContentType -> model and log and skipJeff Bradberry2024-06-101-0/+3
| | | | Apparently this has happened to a customer, per Nate Becker.
* Make the role_chain.py script emit a Graphviz fileJeff Bradberry2024-06-101-4/+12
| | | | of the Role relationships.
* Start a new script that can be used to examine a Role's ancestryJeff Bradberry2024-06-101-0/+14
|
* Treat resources with null role fks differentlyJeff Bradberry2024-06-101-9/+9
| | | | The underlying role should be re-linked, instead of treated as orphaned.
* Set up an enhanced version of Seth's bad role scenarioJeff Bradberry2024-06-101-0/+20
|
* Set up Seth's bad role scenarioJeff Bradberry2024-06-101-0/+19
|
* When checking reverse links, treat duplicate Roles different from bad onesJeff Bradberry2024-06-101-2/+7
| | | | Also, null out the generic foreign key on orphaned roles before deleting.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-03 08:02:57 +0100