Release 3.0.0 commit a1c03cd6a1948a747fdd00c937fa33b4661b7d62 Author: Jake McDermott <yo@jakemcdermott.me> Date: Tue Jan 22 09:30:42 2019 -0500 update license files commit 42fbb813373fb81d3a828f696b1122725a5117c7 Author: Shane McDonald <me@shanemcd.com> Date: Tue Jan 22 09:32:39 2019 -0500 AWX 3.0.0 commit 0bde309d236659176a6746d97893a45e63b0fbc2 Author: Jake McDermott <yo@jakemcdermott.me> Date: Tue Jan 22 09:03:10 2019 -0500 updating package-lock.json commit b2442d42a39b35eef8b316b80bc6e169bc840df8 Author: Ryan Petrello <rpetrell@redhat.com> Date: Tue Jan 22 08:40:26 2019 -0500 detect dead DB connections in the dispatcher when reaping jobs commit 8cb8e63db5446b61f03e3f7dac5dab427297c770 Author: Ryan Petrello <rpetrell@redhat.com> Date: Mon Jan 21 16:53:18 2019 -0500 fix a py3 bug that breaks the SSO complete endpoint commit 859767029919a43b63ba9f32fe5f2264e27ffc45 Author: Christian Adams <rooftopcellist@gmail.com> Date: Fri Jan 18 14:08:42 2019 -0500 upgrade social-auth-core to v3.0.0 commit 5dd8c3ace2e4b85c04712b8707a0b50cd93e73dd Author: AlanCoding <arominge@redhat.com> Date: Mon Dec 10 07:10:18 2018 -0500 Allow SCM overwrite vars in the UI commit 99288a5e184f01ec8c50f2ffee1394718f14c92f Author: AlanCoding <arominge@redhat.com> Date: Sun Jan 20 12:56:14 2019 -0500 Use custom virtual environment in inventory updates commit 44c48d1d6616dce0491c43f825498dbac4f53d2e Author: Yanis Guenane <yguenane@redhat.com> Date: Mon Jan 21 12:32:41 2019 +0100 Nginx: Specify X-Frame-Options "DENY" header Adding the X-Frame-Options "DENY"; header to avoid possible clickjacking attack. More info of the why available here: https://www.owasp.org/index.php/Testing_for_Clickjacking_(OTG-CLIENT-009) Signed-off-by: Yanis Guenane <yguenane@redhat.com> commit ebe0ded9c252bc1fbad1d346203582fd717628fa Author: Sebastian <werbungs-newsletter@posteo.de> Date: Sun Jan 20 22:42:03 2019 +0100 Add grafana notification type unit tests commit 2dadfbcc1404a504b3b80662323b07ea7a7b432c Author: Jake McDermott <yo@jakemcdermott.me> Date: Thu Jan 17 21:22:37 2019 -0500 use credential input access methods in injectors.py commit 3a58a5b772288805f51ab467aafdaf5d1a5c792b Author: Jake McDermott <yo@jakemcdermott.me> Date: Thu Jan 17 20:15:04 2019 -0500 use credential input access methods in views/__init__.py commit 5010e98b8f29e6f491c596a6f54b4325830e6849 Author: Jake McDermott <yo@jakemcdermott.me> Date: Thu Jan 17 19:23:04 2019 -0500 use credential input access methods in projects.py commit 3ef4cc9bfa16bb025a7c6df961921ae02909e64a Author: Jake McDermott <yo@jakemcdermott.me> Date: Thu Jan 17 19:11:16 2019 -0500 use credential input access methods in serializers.py commit c01c671642e2857f148c98200dfa33b2c958773c Author: Jake McDermott <yo@jakemcdermott.me> Date: Thu Jan 17 18:43:36 2019 -0500 use credential input access methods in tasks.py commit a86e2709057a9dcc7030c6466f6ebcf052f47a76 Author: Jake McDermott <yo@jakemcdermott.me> Date: Thu Jan 17 20:44:37 2019 -0500 add credential input access methods commit 4058d18593fff598d9f4b9716ea761b3be2719fd Author: Sebastian <werbungs-newsletter@posteo.de> Date: Sun Jan 20 13:51:23 2019 +0100 Add grafana notification type commit caa55f112f7ec5f42e9b5ed2db05ac5fce8c6604 Author: Ryan Petrello <rpetrell@redhat.com> Date: Fri Jan 18 16:04:32 2019 -0500 add robust handling of non-UTF8 when detecting inventory/playbooks commit 5c080678a689e202286be189cb128e90e3d06d93 Author: Christian Adams <rooftopcellist@gmail.com> Date: Fri Jan 18 13:27:01 2019 -0500 correct authorization code expiration help-text commit 2df51a923dd81ca619aea2f19f86f66ae9b29509 Author: John Mitchell <jlmitch5@ncsu.edu> Date: Fri Jan 18 13:13:15 2019 -0500 change grant reference to code in ui help text commit 0da0a8e67b912e676292f38a43aeba092001acd8 Author: Tyler Cross <tyler@monad.attlocal.net> Date: Sun Nov 18 21:25:21 2018 -0500 CORS Support Added the django-cors-headers app and middleware to make CORS possible. commit b75ba7ebeadb87c729bab3a811a442d5aa15de76 Author: John Mitchell <jlmitch5@ncsu.edu> Date: Thu Jan 17 13:50:53 2019 -0500 remove auth misc form and move fields under system misc form commit 24de951f6ce2c24628ac8c4f1970a4e2e004b5f5 Author: John Mitchell <jlmitch5@ncsu.edu> Date: Tue Jan 15 14:05:48 2019 -0500 add access token and authorization code expiration settings to ui commit 974306541e04ab6bc8c5a610abb350ba2dacff4c Author: John Mitchell <jlmitch5@ncsu.edu> Date: Mon Jan 14 14:24:22 2019 -0500 add isolated settings to ui commit e45e4b3cda3198f902b1e19974bc70d48636be81 Author: Ryan Petrello <rpetrell@redhat.com> Date: Fri Jan 18 11:21:47 2019 -0500 fix a deadlock when Python garbage collects LDAPBackend objects we shouldn't call signal.disconnect in __del__ because it can lead to deadlocks in Django signal dispatch code The Signal.connect, Signal.disconnect, and Signal._live_receivers methods all share a threading.Lock(): https://github.com/django/django/blob/22a60f8d0b331bf06c066ccba4eea5bb5e4ac9f2/django/dispatch/dispatcher.py#L49 It's possible for this to lead to a deadlock: 1. Have code that calls Signal._live_receivers and enter the critical path inside the shared threading.Lock() 2. Python garbage collection occurs and finds one or more LDAPBackend objects with no more references 3. This __del__ is called, which calls Signal.disconnect 4. Code in Signal._disconnect attempts to obtain the (already held) threading.Lock 5. Python hangs forever while attempting to garbage collect commit 65641c7edd909527bfa0ec88908f10888aa1ed3f Author: Ryan Petrello <rpetrell@redhat.com> Date: Wed Jan 16 17:14:08 2019 -0500 add support for custom py3 ansible virtualenvs commit 28822d891c5cec2f0ea647427afb6a2f63ef0533 Author: AlanCoding <arominge@redhat.com> Date: Mon Mar 26 08:24:14 2018 -0400 remove unneeded steps in inventory import Delete some cases that directly loads scripts due to ansible-inventory group_vars problem (now fixed) Delete intermediate method that was a go-between the command and the loader class Change return type of loader from MemInventory to a simple python dict remove backport script and star imports commit 37dbfa88f97cda624d4c594a94eda38a0a86a51d Author: Ryan Petrello <rpetrell@redhat.com> Date: Thu Jan 17 08:18:50 2019 -0500 close the persistent shelve when we're done checking it this code was added to detect celerybeat shelve .db corruption, but it caused a different issue; opening the shelve in this way puts a write lock on it, which means that when we attempt to open it _again_ moments later, we can't. when we're done checking the validity of the file, we need to close it commit b6c30e8ef55e1d1d5bfe0c0f5a59619521bab9d9 Author: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> Date: Mon Jan 14 17:17:40 2019 +0100 it's a limitation of the official postgres helm chart Signed-off-by: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> commit d938c96a76893fa2bee29b71fdac9f1eb4e11f81 Author: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> Date: Mon Jan 14 17:03:27 2019 +0100 pg_password should be random 10 character alphanumeric string, when postgresql is running on kubernetes Signed-off-by: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> commit 6c7f11395b9e8c358bb2f3d3e5c0f377f13c7ac4 Author: Jake McDermott <yo@jakemcdermott.me> Date: Wed Jan 16 19:31:25 2019 -0500 skip chromium download when building release commit 7258a43bad7023bd351d9a70d63afbd36cc651b0 Author: Daniel Sami <dsami@redhat.com> Date: Thu Jan 17 08:28:22 2019 +0900 rewording, typo corrections commit 6d04bd34cef25f136d7b35affa65435e3408b604 Author: Ryan Petrello <rpetrell@redhat.com> Date: Wed Jan 16 16:00:27 2019 -0500 enforce key order when writing swagger docs JSON commit aebeeb170e46f5dc6f76d075b6ce1bf5e3cd21a4 Author: Corey Wanless <corey.wanless@wwt.com> Date: Fri Jan 11 19:41:32 2019 -0600 adds pod limits Signed-off-by: Corey Wanless <corey.wanless@wwt.com> commit c434d3887663710ea65562919466e4d221af6370 Author: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> Date: Wed Jan 16 09:40:49 2019 +0100 adding helm chart version for postgresql Signed-off-by: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> commit ae3ab895153b814dfe5f099b5f57b058c71e6eaa Author: Daniel Sami <dsami@redhat.com> Date: Wed Jan 16 11:06:25 2019 +0900 lint fix commit 0c250cd6afa231d758f7c9f61d94cff62393d05a Author: Daniel Sami <dsami@redhat.com> Date: Wed Jan 16 10:44:22 2019 +0900 Updated parameter info commit 33c1416f6c317389d9fa29f22a5b018e00121c6f Author: Ryan Petrello <rpetrell@redhat.com> Date: Tue Jan 15 15:13:43 2019 -0500 work around a py3 bug in celerybeat commit 3d7fcb3835d9674fcd8ce14338aa608e1e173a38 Author: Ryan Petrello <rpetrell@redhat.com> Date: Tue Jan 15 12:46:05 2019 -0500 fix a few isolated issues related to the py2 -> py3 move commit 04da4503dbda6baebd3fc7f74b56586d0cb37918 Author: Shane McDonald <me@shanemcd.com> Date: Mon Jan 14 17:33:01 2019 -0500 Python 3 / Upstream Kubernetes commit 2016798e0fa86431055a581ea5d7456757ab52c6 Author: Ryan Petrello <rpetrell@redhat.com> Date: Mon Jan 14 17:14:36 2019 -0500 fix a few UTF-8 bugs on Ubuntu related to stdout text downloads commit 39d119534c2d0fc754af248f82feae9955b20926 Author: Ryan Petrello <rpetrell@redhat.com> Date: Mon Jan 14 14:43:03 2019 -0500 support isolated runs in py2 *and* py3 (for now) once we merge in runner support for isolated environments, we can revert this commit (because we'll always run isolated code using python3 executables) commit d27347292781327ccb2a8796bf6d383621b56301 Author: Shane McDonald <me@shanemcd.com> Date: Fri Jan 11 21:18:56 2019 -0500 Enable py3 SCL if needed commit 5aa99b2ca1bfc2126ebb49bcdc9f134bdae1b59f Author: Shane McDonald <me@shanemcd.com> Date: Mon Jan 14 11:26:12 2019 -0500 Dependency updates for Python 3 commit 96b9bd6ab643218668674df909737ff62efb4793 Author: Ryan Petrello <rpetrell@redhat.com> Date: Mon Jan 7 16:00:45 2019 -0500 make py3 packaging work for k8s commit 2c5bdf361150d791f1d44e707c671874533be978 Author: Author: Jim Ladd <jladd@redhat.com> Date: Fri Jan 4 19:15:14 2019 -0500 fix some isolated py3 bugs commit af4234556ee65a3f2ab35c53b582816446b06b56 Author: Ryan Petrello <rpetrell@redhat.com> Date: Thu Jan 3 15:31:39 2019 -0500 remove dm.xmlsec.binding python-saml uses dm.xmlsec.binding only supports python2 by moving to py3, we now use python3-saml (which uses python-xmlsec instead) see: https://github.com/onelogin/python-saml/issues/145#issuecomment-222021691 commit c6482137d19bc2de2ce371789d1d38b489e3037b Author: Ryan Petrello <rpetrell@redhat.com> Date: Thu Jan 3 12:49:54 2019 -0500 parametrize PYTHON for Ubuntu py35 support commit f223df303f6ef548ccdc0d1c7bb89a980376dd3e Author: Ryan Petrello <rpetrell@redhat.com> Date: Mon Oct 22 12:58:42 2018 -0400 convert py2 -> py3 commit f132ce9b64073b7ebee590a9d47dc41c0a0d7a64 Author: Ryan Petrello <rpetrell@redhat.com> Date: Mon Oct 22 11:47:39 2018 -0400 switch image builds to py3 commit cccc03860050c2b922c9eee04b4a67af8c7fb2cc Author: AlanCoding <arominge@redhat.com> Date: Tue Jan 15 10:42:40 2019 -0500 Updates to logging, specifically for unit tests commit 7b32262f7597ace806430c45a9cf09801dd08cb3 Author: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> Date: Tue Jan 15 14:59:17 2019 +0100 revert pg_hostname Signed-off-by: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> commit d69f6acf64537b9fdaa71cc01f1870eec577a7e8 Author: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> Date: Tue Jan 15 14:47:59 2019 +0100 add helm repo update and fix helm upgrade Signed-off-by: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> commit 66a859872eda9b7da48895ac7c22c54661baff39 Author: mabashian <mabashia@redhat.com> Date: Mon Jan 14 17:23:52 2019 -0500 Fixes for numerous bootstrap upgrade bugs, uses variables for colors in bootstrap override style file commit ef3aab1357d0a57dfa15973f42bd4e2f87803d37 Author: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> Date: Tue Jan 15 11:44:08 2019 +0100 related #2991 - unify postgresql_service_name Signed-off-by: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> commit 62ebf85b96ea570c94aef8997c35dad65082e369 Author: Daniel Sami <dsami@redhat.com> Date: Mon Jan 14 19:18:47 2019 -0500 Documentation of functions commit 0c074e09883ec28239e87eeb37312074e7aed754 Author: Corey Wanless <corey.wanless@wwt.com> Date: Fri Jan 11 19:54:05 2019 -0600 * adds persistence.storageClass and limits to postgress helm install * adds new variables to the inventory Signed-off-by: Corey Wanless <corey.wanless@wwt.com> commit 7194338653241675473019623dd795081df8c81d Author: mabashian <mabashia@redhat.com> Date: Mon Jan 14 10:54:37 2019 -0500 Reduces flake on launch job e2e test commit d43521bb77932c0366dd34b656f8d0137523ea82 Author: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> Date: Mon Jan 14 10:24:41 2019 +0100 fix #2991 - make Helm creation of postgreql succeed when installing multiple AWX on different namespaces on same kubernetes Signed-off-by: Fabrice Flore-Thebault <themr0c@users.noreply.github.com> commit b1710f9523ff7f68a33f3f6d68b98b54e08ce80f Author: Corey Wanless <corey.wanless@wwt.com> Date: Fri Jan 11 22:23:43 2019 -0600 adds wait time for postgres setup as a variable commit 3b456d3e7235a37ecd0aa2e3da2ce87ebc585d65 Author: mabashian <mabashia@redhat.com> Date: Fri Jan 11 16:44:59 2019 -0500 Fix credential list e2e test commit 99205fde16b31660144f700580713308b5673dbf Author: mabashian <mabashia@redhat.com> Date: Fri Jan 11 13:06:52 2019 -0500 Fixes linting errors commit 8539eae1143076b12baf32fccf5fdef06f5c850c Author: mabashian <mabashia@redhat.com> Date: Fri Jan 11 12:49:40 2019 -0500 Fixes for e2e tests commit 32c14d6eabbdfc1bc85cfc3fefc9754e381ce96c Author: Ryan Petrello <rpetrell@redhat.com> Date: Fri Jan 11 08:49:47 2019 -0500 catch _all_ types of django.db.utils.Error on CTinT key lookups commit 77d2364022da663c50e4eab8c1b5bc64c00b1ca3 Author: AlanCoding <arominge@redhat.com> Date: Mon Dec 3 21:42:19 2018 -0500 Make docker environment interoperable with supervisorctl commands commit d1b42fd5834a9ca571ff16938c174d7340a72f66 Author: AlanCoding <arominge@redhat.com> Date: Thu Jan 10 12:20:06 2019 -0500 Optimize dashboard using Django annotation for sum commit 2dfb0abb6995c92183b1cb3c5014e3fd85a94fe3 Author: mabashian <mabashia@redhat.com> Date: Wed Jan 9 11:45:51 2019 -0500 Fixes jshint errors commit 7bcbaabd7142539a0e78624b0f31cc870206b4e9 Author: mabashian <mabashia@redhat.com> Date: Wed Sep 12 13:36:34 2018 -0400 Removed extraneous comments commit 9c20e1b4946f05cbb63a616f297dc7da62071385 Author: mabashian <mabashia@redhat.com> Date: Wed Sep 12 13:22:32 2018 -0400 Upgrades jquery and bootstrap commit 0b3e51458d950e92939291acd481051156bd4556 Author: marcel <marcel.brandau.mb@gmail.com> Date: Sat Jan 5 09:07:11 2019 +0100 Fix typo in ca_trust_dir The correct path is used in docker-compose template: - "{{ ca_trust_dir +':/etc/pki/ca-trust/source/anchors:ro' }}" commit 1079051b12c1b8f71bc2f7d14fc891f4f65d1470 Author: Wayne Witzel III <wayne@riotousliving.com> Date: Thu Jan 3 07:52:16 2019 -0500 update to the latest asgi-amqp commit db2bb19d659329d77322fd9d4e42e46c8fa3c960 Author: chris meyers <chris.meyers.fsu@gmail.com> Date: Mon Dec 17 15:38:39 2018 -0500 add docs for task manager node decider commit e5ad2e44fb7b11b5719e6b04a9684fce5c9b09d5 Author: Elijah DeLee <kdelee@redhat.com> Date: Thu Dec 20 15:05:01 2018 -0500 swap file order so diff of schema makes more sense This way we will get +'s next to new content :) commit 479ad13630f94df335a3fbe14a586b5b892a1d82 Author: Bill Nottingham <notting@splat.cc> Date: Tue Dec 18 16:23:17 2018 -0500 Fix some more typos while here. commit 23c2e1be31380f6c7b6a41e8fcff4db11d8d09be Author: Bill Nottingham <notting@splat.cc> Date: Tue Dec 18 16:12:10 2018 -0500 Fix 'credential' typo. commit c0730aa5623a3ac3ec8b1fbc4a2cbd2e4e8fbccd Author: mabashian <mabashia@redhat.com> Date: Mon Dec 17 15:20:34 2018 -0500 Prevent mousedown on details link from triggering pan functionality commit 67d6a9f9eae23997b1b5cb8ee0534d98b1e392bc Author: mabashian <mabashia@redhat.com> Date: Mon Dec 17 14:33:48 2018 -0500 Fixes display of wf node details link in FF by adding height and width commit f9854abfa120662843c9a6b4ee4e678b4783970c Author: mabashian <mabashia@redhat.com> Date: Mon Dec 17 10:40:20 2018 -0500 Fixed linting error commit 2697615dbf6997868bf7fb4acc7fb9b01bd27dac Author: mabashian <mabashia@redhat.com> Date: Mon Dec 17 10:26:01 2018 -0500 Undo GET request that was made for workflow node jobs missing a type and instead leverage the redirect route. The workflow node results redirect now works for all job types. commit c8b15005b4e3c58cba29e6210e1cb0bec951db2e Author: Jake McDermott <yo@jakemcdermott.me> Date: Fri Dec 14 19:22:23 2018 -0500 link to workflow playbook node route from workflow viewer commit a5c435069501fe3866305560bc26d81548b6009f Author: Jake McDermott <yo@jakemcdermott.me> Date: Fri Dec 14 19:20:01 2018 -0500 add redirect route for workflow viewer commit 9f18f8dbdbc59fe9307fb8d4248dc8627c102055 Author: mabashian <mabashia@redhat.com> Date: Fri Dec 14 18:04:39 2018 -0500 Fixes split job inside workflow details link bug commit a8e1c8960fba06dd27f56501db6c37399264855a Author: mabashian <mabashia@redhat.com> Date: Fri Dec 14 16:27:35 2018 -0500 Remove details function commit 7f66053654b6d2a905566aa00eec9812ee42a6f9 Author: mabashian <mabashia@redhat.com> Date: Fri Dec 14 14:59:19 2018 -0500 Changed workflow node details link to href so that i can be opened in new tab commit 4858868428f70b8422a72ea39bf3d8b0c49b14fc Author: Ryan Petrello <rpetrell@redhat.com> Date: Fri Dec 14 12:20:12 2018 -0500 configure an HA policy for openshift/k8s installs commit 4e37076955ca90c57075def1ae0106a5053df244 Author: mabashian <mabashia@redhat.com> Date: Fri Dec 14 14:08:06 2018 -0500 Fixes bug scheduling jt where first survey question is optional commit 65e110cdbfaf925a6a05c32b27be3a87ce034a8c Author: AlanCoding <arominge@redhat.com> Date: Thu Dec 13 11:47:54 2018 -0500 catch python error when unable to find user commit b0e3bc96ddb3828b817862d9a4575c4bf2304414 Author: GitStorm <GitStorm@users.noreply.github.com> Date: Thu Dec 13 11:52:56 2018 +0100 tower-cli config: host value needs to be URL Since the key name "host" is slightly misleading, it would help to point out in this documentation, that in fact an URL is required for that key/value pair "host" in the tower-cli config. Failing to do so drops the follwing error: Error: There was a network error of some kind trying to connect to Tower. The most common reason for this is a settings issue; is your "host" value in `tower-cli config` correct? commit 5950f26c692fddfd94097319feeff14a3784e1af Author: Ryan Petrello <rpetrell@redhat.com> Date: Wed Dec 12 17:01:11 2018 -0500 only allow the task dispatch worker to import and run decorated tasks this _technically_ prevents a remote code exploit where a user who has access to publish AMQP messages to the dispatch queue could craft a special message that would import and run arbitrary Python functions; that said, the types of user with this privilege level are generally _already_ the awx user (so they can already do this by hand if they want) commit a3a5c6bf9fa9a640dbfad28c51425d3281b4b18c Author: AlanCoding <arominge@redhat.com> Date: Wed Dec 12 11:56:57 2018 -0500 fix bug where some SJs could not be relaunched commit c2660af60dc3b14bc5bf56f68c68cc36b6506338 Author: Ryan Petrello <rpetrell@redhat.com> Date: Thu Nov 15 11:45:11 2018 -0500 stop various async background requests from bumping the session expiry if a user has an active session that just sits on the dashboard or job list, websocket messages that come in (for e.g., job status changes) will trigger AJAX requests for more data; this process causes a user with an idle login to continue to generate API requests, which in turn ticks their expiry timer. As a result, users with active sessions sitting on these two (popular) pages will never be automatically logged out via SESSION_MAX_AGE. this change introduces a special header that the UI can use to signify that a request shouldn't bump the expiry timer commit d5c6c589b2304ed311d54fc93d36b585377ed6ab Author: Ryan Petrello <rpetrell@redhat.com> Date: Mon Nov 26 17:26:30 2018 -0500 add an AWX_ISOLATED_VERBOSITY setting for debugging isolated connections commit fc0a03909755f36079c52454697a902aacb90395 Author: Ryan Petrello <rpetrell@redhat.com> Date: Mon Nov 26 16:28:17 2018 -0500 collect isolated capacity using a cache plugin, not stdout parsing reading capacity values using the jsonfile cache plugin is more robust in scenarios where ansible-playbook may print non-JSON output (such as -vvv or when a custom callback plugin like timer is enabled)