summaryrefslogtreecommitdiffstats
path: root/docs/rbac.md (unfollow)
Commit message (Collapse)AuthorFilesLines
2024-02-14Build multi-arch awx-operator images when releasingChristian M. Adams1-11/+17
2024-02-14shhhhhhhhhhhhhhhChris Meyers1-1/+1
Hopefully silence some setuptools
2024-02-14More locked down websocket pathChris Meyers1-1/+1
* Previously, the nginx location would match on /foo/websocket... or /foo/api/websocket... Now, we require these two paths to start at the root i.e. <host>/websocket/... /api/websocket/... * Note: We now also require an ending / and do NOT support <host>/websocket_foobar but DO support <host>/websocket/foobar. This was always the intended behavior. We want to keep <host>/api/websocket/... "open" and routing to daphne in case we want to add more websocket urls in the future.
2024-02-14remove the ldap volume when cleaning all volumesthedoubl3j1-1/+1
2024-02-13Unbreak the pip-compile command when multiple files are passed in (#14875)Jeff Bradberry1-1/+1
2024-02-13Switch to docker_compose_v2 in tools playbook (#14872)23.8.0Hao Liu1-2/+2
Switch to docker_compose_v2 Fix ``` "Configuration error - kwargs_from_env() got an unexpected keyword argument 'ssl_version'"} ```
2024-02-13Retries on vault on seal (#14873)Hao Liu1-0/+4
Sometime we tried to unseal when vault is not ready yet
2024-02-13Remove cython libAlan Rominger1-176/+0
2024-02-13WIP consider droping cython depAlan Rominger2-3/+0
2024-02-13Use lowercase passwordAlan Rominger1-1/+1
2024-02-13Support DB configs where PASSWORD is not usedAlan Rominger1-1/+5
2024-02-13Websockets now use rest_framework configed authChris Meyers1-2/+3
* Always support cookies, session, and also allow rest_framework configured auth methods over the browser websocket. * The node -> node websocket auth remains locked down and unchanged
2024-02-13Allow connecting to websockets via api/websocket/Chris Meyers2-1/+2
* Before, we just allowed websockets on <host>/websocket/. With this change, they can now come from <host>/api/websocket/
2024-02-13gitignore pyenv python-version fileHao Liu1-0/+3
pyenv local can be use to set directory specific python version in `.python-version` file in the directory Signed-off-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com>
2024-02-12Ability to use updater script to pin dev requirements (#14644)Alan Rominger2-10/+22
* Add a dev option for updater script to pin CI reqs * Avoid removing git links for dev requirements * Add dev to primary options * Fix up sanitize git switch
2024-02-12Change parsing of docker info in dev buildJesse Wattenbarger1-1/+1
This is a non-functional change. The way os_info is populated with docker info and grep 'Operating System' breaks on podman and likely in other places. This makes it work on both podman and docker, and it will continue to return the exact same strings everywhere else.
2024-02-12Switch mailing list to forum (#14600)jessicamack1-2/+2
* Switch mailing list to forum * add link to community Co-authored-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com> * use correct channel name Co-authored-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com> --------- Co-authored-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com>
2024-02-12Update location of logstash build context (#14676)Alan Rominger1-1/+1
2024-02-12Avoid using SmartFilter during migrations (#14786)Jeff Bradberry1-5/+8
Our migrations that touch roles tend to bring in our real models via migration_utils.set_current_apps_for_migrations, and that can have some undesirable side-effects.
2024-02-12Add new credential type to support Terraform backend configuration (#14828)Bikouo Aubin4-0/+50
* Add new credential type to support configuration of Terraform Backend * Fix unit tests
2024-02-12Remove json serialization for notify validation (#14847)Dave1-10/+15
* Remove json serialization for notify validation * Update serializers.py
2024-02-09Add ldap support to vault container in docker dev environment (#14777)Jake Jackson8-15/+295
* add ldap_auth mount and configure it * added in key engines, userpass auth method, still needs testing * add policies and fix ldap_user * start awx automation for vault demo and move ldap * update docs with new flags/new credentials
2024-02-09Added LDAP support for HashiCorp Vault lookup credential (#14833)TVo4-10/+22
* Added LDAP support for HashiCorp Vault lookup credential * Added LDAP support for HashiCorp Vault lookup credential * Replaced graphics and updated missing fields. * Added LDAP support for HashiCorp Vault lookup credential * Replaced graphics and updated missing fields. * Incorporated review feedback from @thedoubl3j and @djyasin.
2024-02-09Fix the way we are passing the awxkit base path to resources (#14862)Cesar Francisco San Nicolas Martinez1-5/+2
2024-02-09Remove enable button for hop nodes (#14861)Seth Foster1-6/+8
Enabled/disabled does not apply to hop nodes, since hop nodes don't run jobs. Signed-off-by: Seth Foster <fosterbseth@gmail.com>
2024-02-08Fix UI peers_from_control_nodes (#14858)Seth Foster3-40/+32
* Fix UI peers_from_control_nodes Fixes bug where peers_from_control_node was greyed out in UI. Additional changes: - Make edit instance button only show for instances with managed = False - Make remove instance button only show for instances with managed = False - InstanceList selectable only for instances with managed = False --------- Signed-off-by: Seth Foster <fosterbseth@gmail.com>
2024-02-08Removed erroneous line for basic authTVo1-2/+0
2024-02-07Fix the test_export_system_auditor collection testJeff Bradberry1-14/+10
2024-02-07Fix linting problemJeff Bradberry1-1/+1
2024-02-07rework with check if POST existsLorenzo Tanganelli1-1/+6
2024-02-07fix decription extraction on exportLorenzo Tanganelli1-1/+1
2024-02-07leave $encrypted$ on export Lorenzo Tanganelli1-2/+2
add encrypted removal from import when object not exists
2024-02-07awxkit: allow to modify api base url (#14835)Julen Landa Alustiza17-49/+54
Signed-off-by: Julen Landa Alustiza <jlanda@redhat.com>
2024-02-05Per-service metrics http serverChris Meyers12-71/+217
* Organize metrics into their respective service * Server per-service metrics on a per-service http server * Increase prometheus client usage over our custom metrics fields
2024-02-02UI rename Endpoints to Listener AddressesSeth Foster6-56/+42
Listener Addresses is a better name to emphasize these are routable addresses to reach a listener service on the node. Also removed expand toggle on the listener addresses list items, as the expanded mode had no additional information. Signed-off-by: Seth Foster <fosterbseth@gmail.com>
2024-02-02InstanceLink unique constraint source and targetSeth Foster2-0/+14
Prevent creating InstanceLinks with duplicate source and target pairings. Signed-off-by: Seth Foster <fosterbseth@gmail.com>
2024-02-02Disable health check button if managedSeth Foster3-1/+3
Also, update ui screen tests to expect injecting "listener_port: null" if listener_port is empty Signed-off-by: Seth Foster <fosterbseth@gmail.com>
2024-02-02Fix UI lint by running npm prettierSeth Foster2-13/+19
Signed-off-by: Seth Foster <fosterbseth@gmail.com>
2024-02-02Protocol blank if no canonical addressSeth Foster1-2/+1
Make protocol be blank on instance if there is no canonical address for this instance. It was defaulting to "tcp" before. Signed-off-by: Seth Foster <fosterbseth@gmail.com>
2024-02-02Prevent duplicating instance linksSeth Foster2-15/+21
In receptor address post-save method: - Fixed detecting if address was missing a link from control nodes - Use InstanceLink create_or_update to prevent adding duplicate InstanceLink source and target peers In instance serializer create_or_update, delete receptor addresses first before doing instance create or update. This ensures that we don't trigger unnecessary post-save methods that might attempt to manipulate receptor addresses that will just be removed later. Signed-off-by: Seth Foster <fosterbseth@gmail.com>
2024-02-02Remove redundant testsSeth Foster1-71/+0
test_listener_port test_peers_from_control_nodes test_peers_from_control_nodes_without_listener_port are covered in the following tests: test_no_op test_creates_canonical_address test_deletes_canonical_address test_updates_canonical_address test_canonical_address_validation_error Signed-off-by: Seth Foster <fosterbseth@gmail.com>
2024-02-02If managed, cannot modify peers_from_control_nodesSeth Foster2-0/+33
Adds validation to prevent changing peers_from_control_nodes if instance managed=True Signed-off-by: Seth Foster <fosterbseth@gmail.com>