Shane McDonald
28994d4b0b
Install oc and kubectl in upstream task image
2019-10-30 12:15:51 -04:00
Raphaël COMBEAU
712b07c136
Improve usage of ssl_certificate in local_docker
...
Remove nginx.conf from container
Move nginx outside ssl_certificate block
2019-10-28 17:37:14 -04:00
softwarefactory-project-zuul[bot]
5ab09686c9
Merge pull request #5043 from EStork09/devel
...
Added custom_venv_dir to local docker install,
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2019-10-27 23:42:35 +00:00
Ahmed RAHAL
2ec5dda1d8
Add quotes to shell variables with user input
...
The last update of this file added default values for passwords
but removed the 'quote' filter.
This is extremely problematic for database passwords that should always
be complex and contain special characters that the shell may interpret
wrongly.
As a sanity measure, adding the quote filter to all fields.
2019-10-25 16:44:59 -04:00
lopf
432daa6139
fix 5089
2019-10-24 14:44:36 +02:00
Shane McDonald
8356327c2b
Downstream k8s installer changes
2019-10-22 15:57:40 -04:00
Alice Hunter
e5dfc62dce
Fixed bug with python check
2019-10-22 23:06:06 +11:00
Evan Stork
0c0e172caf
Added custom_venv_dir to local docker install,
...
Signed-off-by: Evan Stork <estork@live.com>
2019-10-19 20:45:02 -04:00
Wander Boessenkool
8ecc1f37f0
Move python healthcheck script from probes to configMap
2019-10-18 10:15:21 +02:00
Wander Boessenkool
c49e64e62c
Make HTTPConnection import python 2,3 agnostic
2019-10-17 23:36:33 +02:00
Wander Boessenkool
00c9d756e8
Move installtime hardcoded rabbitmq credentials to environment variables for healthcheck
2019-10-17 23:23:29 +02:00
Wander Boessenkool
9ab58e9757
Change healthcheck from wget and grep to python with httplib
2019-10-17 22:25:20 +02:00
Wander Boessenkool
d6134fb194
Change /bin/ash to /bin/sh as requested by @shanecmd
2019-10-17 21:37:51 +02:00
Wander Boessenkool
038fd9271d
Properly escape quotes
2019-10-14 17:53:28 +02:00
Wander Boessenkool
e87055095c
Change 'rabbitmqctl status' to a wget | grep
...
- This reduces CPU usage from 250 millis on idle to 25 millis on idle
- Default rabbitmq user needs administrator privileges
2019-10-14 14:53:53 +02:00
Christian Adams
19a6c70858
remove cruft leftover from the postgresql upgrade
2019-10-03 14:43:56 -04:00
Lunar
afe38b8e68
Change to ~/.awx
2019-09-30 10:58:37 -05:00
Lunar
adac87adf2
Fix issue #3705
...
/tmp should not be used, it gets wiped and causes issues as noted in issue #3705 .
2019-09-29 23:20:09 -05:00
kumy
3dd69a06e7
Use variables to set rabbitmq host and port
2019-09-26 20:53:55 -04:00
softwarefactory-project-zuul[bot]
778b306208
Merge pull request #4824 from rooftopcellist/scl_in_containers
...
Add needed scl enables for community container installs
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2019-09-26 19:40:21 +00:00
Christian Adams
9f8d975a19
revert to get needed scl enables for community container installs
2019-09-26 13:24:26 -04:00
Ryan Petrello
955bb4a44c
allow *.pendo.io as an img-src in our Content Security Policy
2019-09-26 13:12:54 -04:00
Ryan Petrello
d52aa11422
correct CSP header to allow all pendo.io traffic
2019-09-23 09:15:55 -04:00
softwarefactory-project-zuul[bot]
d3b413c125
Merge pull request #4752 from shanemcd/drop-pg-scl
...
Stop using PG SCL in dev env
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2019-09-16 16:40:11 +00:00
Shane McDonald
3b89e894db
Stop using PG SCL in dev env
2019-09-16 11:41:13 -04:00
Christian Adams
bdbbb2a4a2
Fix authentication bug with container installs
...
- update awx-dev db password where needed
2019-09-15 19:52:41 -04:00
Shane McDonald
036567817e
Implement local docker pg upgrade
2019-09-12 12:52:43 -04:00
Christian Adams
ec1e93cc69
Upgrade to postgres 10.6
...
- use awx-python in shebang in dev env
- scl enable where needed for rhel7 & container installs
- use scram-sha-256 pg user hashing by default
- ensure psycopg2 is using the correct PG_CONFIG at build time for the right libpq version
2019-09-12 12:52:43 -04:00
Jose OrPa
04ab736f09
#3778 Upgrading postgresql to v10
2019-09-12 12:52:42 -04:00
Ryan Petrello
b82030b025
hide nginx server version headers
2019-08-20 14:34:04 -04:00
Gabriel Totusek
794808cd10
Fix compatibility with postgresql helm chart v6.0.0+
2019-08-12 02:40:25 -07:00
Gabriel Totusek
d932a70eff
Downgrade postgres helm chart to v5.3.13
2019-08-12 00:43:09 -07:00
Gabriel Totusek
90e5b0a12d
Update postgres helm chart to v6.2.1
2019-08-11 23:16:43 -07:00
Gabriel Totusek
f705eba7ed
Add support for kubernetes tolerations, nodeSelector, and affinity
2019-08-11 23:10:56 -07:00
Jorge Machado
76933ed889
* upgrade from git on containers
...
* agreed with terms of DCO 1.1
Signed-off-by: Jorge Machado <jorge@jmachado.me>
2019-07-30 07:04:04 +02:00
Scholl III, Michael G
12f564e4a3
Addition of inventory value for memcached image, allows for custom image locations for memcached to match other images
2019-07-18 09:24:44 -04:00
Ashley Nelson
036e1ad82e
Add dynamic custom venv setup
...
Add support for python3 venvs
2019-07-08 18:49:31 -05:00
Jeff Byrnes
987cfed649
Update Content Security Policy to allow websockets
...
Per #4167 a reasonable CSP was put in place, but unfortunately this
broke WebSockets support in Safari.
This is a quick fix to return support immediately. A more secure
implemetation would be beneficial in the longer term, however.
2019-07-05 16:12:27 -04:00
Ashley Nelson
485536d4cf
Change to docker_service for compatibility
2019-07-02 16:03:43 -05:00
Ryan Petrello
75a72637dd
allow data: images in our Content Security Policy
...
support for custom login logos relies on data:image/*;base64
see: https://github.com/ansible/awx/issues/4253
2019-07-02 11:35:56 -04:00
Ryan Petrello
eacf819caf
add a reasonable default Content Security Policy
...
ideally we'd improve this over time to remove the `unsafe-inline` lines,
but we can't due that today because Angular1 makes use of a lot of
inline <script> and <style> tag generation
see: https://github.com/ansible/awx/issues/2056
2019-06-26 10:46:26 -04:00
aubrel
e9ac44f561
Change docker_service
to docker_compose
.
...
Signed-off-by: aubrel <red_clover@riseup.net>
2019-06-25 15:58:52 -04:00
Marcelo Mello
52712a0d9a
Introduces the ability to pass annotations to the Kubernetes Ingress Controllers
2019-06-20 16:40:08 -04:00
Marcelo Mello
7d77727a60
project_data_dir is not required in the awx_task containers
2019-06-19 21:35:49 -04:00
Marcelo Mello
47560fdf7c
Fixes ca_trust_dir and project_data_dir for Kubernetes
2019-06-19 21:21:35 -04:00
softwarefactory-project-zuul[bot]
3fcf3b20c4
Merge pull request #4005 from shanemcd/sdist-builder-node
...
Update node in AWX installer sdist builder
Reviewed-by: https://github.com/softwarefactory-project-zuul[bot]
2019-06-05 11:48:30 +00:00
Anand kumar
3d7bd8579b
Multiple installation of same dependency
...
python-pip is being installed multiple times.
2019-06-05 12:38:52 +05:30
Shane McDonald
99704af302
Fix some ansible warnings
2019-06-04 20:37:03 -04:00
Shane McDonald
a13b733191
Update node in sdist builder image
2019-06-04 20:36:39 -04:00
Yanis Guenane
11630a8803
Installer: quote password where it applies
...
Prior to this change, password having shell interpretable character
would break the installer (e.g '&', '(', etc... )
This commits rely on the `quote` filter from ansible to ensure those
password are properly quoted where it applies
Fixes: https://github.com/ansible/awx/issues/3943
Signed-off-by: Yanis Guenane <yguenane@redhat.com>
2019-06-03 11:50:52 +02:00