Markus Opahle
ed568f569c
only use ssl if certificate is specified
...
Signed-off-by: Markus Opahle <3225748+mopahle@users.noreply.github.com>
2019-02-28 14:06:59 +01:00
walkafwalka
3a7bf6a8ac
Add SSL suport for docker install
...
Signed-off-by: walkafwalka <41709139+walkafwalka@users.noreply.github.com>
2019-02-27 10:45:34 +01:00
Ryan Petrello
eed94b641e
add a custom DB backend that provides system-level SQL profiling
...
run this command on _any_ node in an awx cluster:
$ awx-manage profile_sql --threshold=2.0 --minutes=1
...and for 1 minute, the timing for _every_ SQL query in _every_ awx
Python process that uses the Django ORM will be measured
queries that run longer than (in this example) 2 seconds will be
written to a per-process sqlite database in /var/lib/awx/profile, and
the file will contain an EXPLAIN VERBOSE for the query and the full
Python stack that led to that SQL query's execution (this includes not
just WSGI requests, but background processes like the runworker and
dispatcher)
$ awx-manage profile_sql --threshold=0
...can be used to disable profiling again (if you don't want to wait for
the minute to expire)
2019-02-14 15:04:46 -05:00
Marius Rieder
589531163a
Add pg_sslmode option.
...
Allows to use PostgreSQL over SSL #709
2019-01-21 19:47:34 +01:00
Yanis Guenane
44c48d1d66
Nginx: Specify X-Frame-Options "DENY" header
...
Adding the X-Frame-Options "DENY"; header to avoid possible clickjacking
attack.
More info of the why available here:
https://www.owasp.org/index.php/Testing_for_Clickjacking_(OTG-CLIENT-009)
Signed-off-by: Yanis Guenane <yguenane@redhat.com>
2019-01-21 12:34:17 +01:00
Shane McDonald
04da4503db
Python 3 / Upstream Kubernetes
2019-01-15 14:09:05 -05:00
Ryan Petrello
96b9bd6ab6
make py3 packaging work for k8s
2019-01-15 14:09:05 -05:00
wilmardo
bf5c259d92
Empties /tmp in web Dockerfile
2018-10-25 17:12:26 -04:00
softwarefactory-project-zuul[bot]
0a964b2bf6
Merge pull request #2266 from ansible/celery-tastes-bad
...
replace the celery-based task queue with a kombu-based implementation
Reviewed-by: https://github.com/softwarefactory-project-zuul[bot]
2018-10-12 18:40:54 +00:00
softwarefactory-project-zuul[bot]
6721ea54e9
Merge pull request #1956 from droopy4096/devel
...
allow nginx config extension
Reviewed-by: https://github.com/softwarefactory-project-zuul[bot]
2018-10-11 22:38:36 +00:00
softwarefactory-project-zuul[bot]
6f55cde6d3
Merge pull request #2091 from stoned/force_boolean_eval
...
force boolean evaluation
Reviewed-by: https://github.com/softwarefactory-project-zuul[bot]
2018-10-11 20:17:48 +00:00
Ryan Petrello
ff1e8cc356
replace celery task decorators with a kombu-based publisher
...
this commit implements the bulk of `awx-manage run_dispatcher`, a new
command that binds to RabbitMQ via kombu and balances messages across
a pool of workers that are similar to celeryd workers in spirit.
Specifically, this includes:
- a new decorator, `awx.main.dispatch.task`, which can be used to
decorate functions or classes so that they can be designated as
"Tasks"
- support for fanout/broadcast tasks (at this point in time, only
`conf.Setting` memcached flushes use this functionality)
- support for job reaping
- support for success/failure hooks for job runs (i.e.,
`handle_work_success` and `handle_work_error`)
- support for auto scaling worker pool that scale processes up and down
on demand
- minimal support for RPC, such as status checks and pool recycle/reload
2018-10-11 10:53:30 -04:00
Shane McDonald
ee1d5e43b9
Fix fallout from https://github.com/ansible/awx/pull/2392
...
There were some upstream changes that I overwrote but shouldn’t have.
2018-10-10 11:41:34 -04:00
Shane McDonald
bfc74497b0
Fix error in image_build role
...
I think I derped up and commited something in an old stash.
2018-10-03 14:44:26 -05:00
Shane McDonald
3701567ad7
Revert "first-parent requires git >= 1.8.4"
...
This reverts commit 1af0ee2f8c
2018-09-28 15:48:33 -04:00
Shane McDonald
86140dec08
Revert "Fix sdist builder image"
...
This reverts commit 97472cb91b
2018-09-28 15:48:33 -04:00
Shane McDonald
50fe0392ed
Updates to versioning system.
...
https://github.com/ansible/awx/issues?q=%22--first-parent%22
2018-09-28 15:48:33 -04:00
Dmytro Makovey
f8d2a32756
merge and resolve conflict
2018-09-18 11:35:35 -07:00
Shane McDonald
1b4c3f56fa
Merge pull request #2113 from kialam/upgrade-node-lts
...
Upgrade Node and NPM to LTS
2018-09-18 12:46:30 -04:00
Shane McDonald
89e656b2a4
Update Node version in sdist builder
2018-09-18 12:17:52 -04:00
Shane McDonald
2e6a7205e7
Fix broken conditional
2018-08-14 11:19:15 -04:00
Matthew Jones
14685901aa
skip migrations If an environment variable is set
...
This is to help k8s/openshift migrations which will perform migrations
in a separate pod.
2018-08-14 11:00:51 -04:00
Ryan Petrello
18f6f68540
Merge remote-tracking branch 'tower/release_3.3.0' into devel
2018-08-10 11:54:34 -04:00
Ryan Petrello
2d4fbffb91
set the correct X-Forwarded-Port header to fix SAML auth
...
see: https://github.com/ansible/tower/issues/2314
2018-08-07 10:07:06 -04:00
Shane McDonald
be7a40daf3
Fix syntax in nginx config
...
Broke in 6f5259d017
2018-08-02 11:24:51 -04:00
Ryan Petrello
6f5259d017
remove the network UI
2018-07-30 11:03:53 -04:00
Stoned Elipot
ada2d65547
force boolean evaluation
2018-07-25 19:10:31 +02:00
Shane McDonald
467a1fafcc
Merge pull request #1880 from luisico/compose-web-wait-for
...
AWX launchers should wait for other containers to be ready
2018-07-16 13:11:06 -04:00
V.Gouvalas
1239195289
FIX nginx use selected log formatting
2018-06-28 14:09:13 +03:00
Ryan Petrello
471ff69257
stop setting celery's hostname dynamically (it's passed via the cli)
2018-06-19 12:16:00 -04:00
Ryan Petrello
88e3c46810
add a background process to spot celery hangs and reload the worker pool
...
see: https://github.com/ansible/tower/issues/2085
2018-06-11 12:22:21 -04:00
Dmytro Makovey
adaa164a19
allow nginx config extension
2018-06-05 08:16:08 -07:00
Matthew Jones
72f2994cc5
Merge branch 'release_3.3.0' into devel
2018-05-17 16:07:47 -04:00
Luis Gracia
8e85a57c1a
AWX launchers should wait for other containers to be ready
2018-05-15 11:45:54 -04:00
Wayne Witzel III
5d016c0dcb
Merge pull request #1705 from benthomasson/network_ui_openshift_fix
...
Adds websocket for network_ui to the installer version of nginx.conf
2018-05-10 09:41:11 -04:00
Ben Thomasson
33ef12002f
Adds websocket for network_ui to the installer version of nginx.conf
2018-05-07 13:42:29 -04:00
AlanCoding
59744e421f
send our oddball loggers to external logger too
2018-05-02 15:33:58 -04:00
Shane McDonald
4fdf462b98
Merge branch 'release_3.3.0' into awx/devel
...
# Conflicts:
# awx/ui/client/src/standard-out/standard-out-factories/main.js
# awx/ui/package.json
2018-04-27 10:17:59 -04:00
Matthew Jones
d04bbde3c2
Merge pull request #1786 from shanemcd/devel
...
Fix image build role when not deploying to localhost
2018-04-20 13:46:50 -04:00
Engin Vardar
6b06d1896e
Install unzip to enable usage of unarchive module
...
Signed-off-by: Engin Vardar <enginvardar@gmail.com>
2018-04-20 09:17:27 +02:00
Shane McDonald
98a9e82d2d
Fix image build role when not deploying to localhost
2018-04-20 00:07:25 -04:00
Shane McDonald
40d7751fbd
Remove image push logic from installer roles
...
I’m going to be reusing this code on the Tower side, and I’m trying to refactor some of the AWX specific bits out. There will probably be more to come, but this is a good start.
2018-04-16 19:01:43 -04:00
Andrew Van Tassel
84329fc735
Update nginx.conf ( #1 )
...
* Update nginx.conf
Added nginx_status, Sysdig is relentless...
2018-04-03 11:24:30 -06:00
Ben Thomasson
43601be8a7
Removes --fake-initial from awx-manage migrate.
...
The --fake-initial option is no longer needed and can cause
application with an initial migration to fail as was seen
in the network_ui application.
2018-04-02 15:34:39 -04:00
Jake McDermott
4a8f24becc
update reference to role file path to work with roles dir
2018-03-23 12:43:13 -04:00
Shane McDonald
84cd933702
Move installer roles into roles directory
...
Signed-off-by: Shane McDonald <me@shanemcd.com>
2018-03-22 14:34:03 -04:00
