shaba/awx
1
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2024-11-01 16:51:11 +03:00
Code Releases Activity

upgrade survey encryption migration to work around an old survey bug

Browse Source 
see: https://github.com/ansible/ansible-tower/issues/7800
This commit is contained in:
Ryan Petrello 2017-12-01 10:48:11 -05:00
parent fc4b02b79f
commit 8c6a1e348d
No known key found for this signature in database
GPG Key ID: F2AA5F2122351777
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
awx/main/migrations/_reencrypt.py
View File

@ -92,7 +92,18 @@ def _encrypt_survey_passwords(Job, JobTemplate, WorkflowJob, WorkflowJobTemplate
if jt.survey_spec.get('spec', []): if jt.survey_spec.get('spec', []):
for field in jt.survey_spec['spec']: for field in jt.survey_spec['spec']:
if field.get('type') == 'password' and field.get('default', ''): if field.get('type') == 'password' and field.get('default', ''):
if field['default'].startswith('$encrypted$'): default = field['default']
if default.startswith('$encrypted$'):
if default == '$encrypted$':
# If you have a survey_spec with a literal
# '$encrypted$' as the default, you have
# encountered a known bug in awx/Tower
# https://github.com/ansible/ansible-tower/issues/7800
logger.error(
'{}.pk={} survey_spec has ambiguous $encrypted$ default for {}, needs attention...'.format(jt, jt.pk, field['variable'])
)
field['default'] = ''
changed = True
continue continue
field['default'] = encrypt_value(field['default'], pk=None) field['default'] = encrypt_value(field['default'], pk=None)
changed = True changed = True