7166 Commits

Author SHA1 Message Date
Rob Gil
38ce1ef2b2 Adds list of users for access to storage and more service endpoints
This sets up the rest of the service endpoints on the subnets. It also
adds a variable map specifically to grant IP access to the storage
buckets. This new variable map is necessary since the azure storage ip
rules do not accept /32 CIDR ranges. The rest of the services do support
cidr ranges.
2020-01-23 18:41:29 -05:00
leigh-mil
1bad32bcdb Add success flash message 2020-01-23 16:44:27 -05:00
leigh-mil
59327d4cea Styling for environment edit form 2020-01-23 16:44:07 -05:00
leigh-mil
0fcd5a6471 Move text into translations file and fix formatting to make file more readable 2020-01-23 16:44:07 -05:00
leigh-mil
1054457048 Button for adding a subscription 2020-01-23 16:44:07 -05:00
leigh-mil
ec56d8e38a Properly display environment role on application index page 2020-01-23 16:44:07 -05:00
leigh-mil
31b7e2f589 Create route and domain method for creating a subscription 2020-01-23 16:44:07 -05:00
dandds
1c53ceef00
Merge pull request #1337 from dod-ccpo/apply-session-limit
Forcibly destroy existing session on logout.
2020-01-23 16:04:43 -05:00
Hannah Brinkman
3a78c6a911
Merge branch 'staging' into grid-styling 2020-01-23 13:17:39 -05:00
Rob Gil
536eccdb90 Container registry private networking and bucket cidr range fix 2020-01-23 13:13:56 -05:00
hmbrink
0f2ba887d9 Large spacing variable 2020-01-23 13:13:04 -05:00
Rob Gil
dab6cdb7dc Locks down keyvaults to subnets and administrator ip addresses 2020-01-23 11:02:12 -05:00
Rob Gil
c31d68a18c Makes client vpn cidr range configurable 2020-01-23 10:50:16 -05:00
dandds
944c5d3c9f Forcibly destroy existing session on logout.
To comply with security guidelines, we need to destroy the session when
a user logs out. This means that the session's key in the Redis cache
needs to be deleted. Flask expects to _always_ have a session object. If
the current session object does not exist in the Redis cache, Flask will
reserialize and store it at the end of the request. In order for
session deletion to work, we need to delete the key for the existing
session and then replace the session object with a new, empty one.

This also updates the SessionLimiter class so that the session prefix is
configurable.
2020-01-23 10:31:20 -05:00
dandds
0fa4fd2304 Limit concurrent session by default for deployed sites.
To meet ATO requirements, a user should not be able to have concurrent
logins.
2020-01-23 10:29:37 -05:00
tomdds
81054b2ff0 Fix Enum Migration to properly deal with constraint changes
Since we're using non-native enums for our model, alembic has some issues knowing what the previous "type" actually was, and not specifying it correctly causes a bad constraint.
2020-01-23 10:17:07 -05:00
597ea32e42 portfolio provision process. add logging, __repr___ method, fix broken tests 2020-01-23 10:14:22 -05:00
Rob Gil
48482785ac Adds IP whitelisting to storage buckets 2020-01-23 10:02:31 -05:00
leigh-mil
6f2454ae5f
Merge pull request #1342 from dod-ccpo/route-validation
Validation on route parameters
2020-01-22 20:06:03 -05:00
Rob Gil
d22357e609 Adds step to manually configure MFA in AD 2020-01-22 19:37:04 -05:00
Rob Gil
635ccb0fd3 Fixes postgres character collation 2020-01-22 19:36:33 -05:00
Rob Gil
01703b1488 Configures storage buckets to be optionally exposed via service endpoints 2020-01-22 19:35:54 -05:00
Rob Gil
9042a960bb Adds configurable service endpoints to subnets in the vpc module 2020-01-22 19:35:19 -05:00
leigh-mil
158f7f43d7 Remove catch_all route 2020-01-22 16:53:28 -05:00
leigh-mil
bdc03fb0a2 Remove /help route and templates 2020-01-22 16:53:11 -05:00
leigh-mil
0484d9b77f
Merge pull request #1344 from dod-ccpo/fix-app-member-form
Remove delete environments from app members form
2020-01-22 16:30:43 -05:00
00b10c484f alembic migration to extend the state machine states enum 2020-01-22 16:04:51 -05:00
Hannah Brinkman
70faa4c42e
Merge branch 'staging' into grid-styling 2020-01-22 15:55:12 -05:00
leigh-mil
36fe777230 Remove delete environments from app members form 2020-01-22 15:53:40 -05:00
graham-dds
a5684d099e
Merge pull request #1343 from dod-ccpo/text-input-validation
Form text input validation
2020-01-22 15:39:26 -05:00
Hannah Brinkman
674f6363d5
Merge branch 'staging' into grid-styling 2020-01-22 15:23:39 -05:00
graham-dds
3cf9fdac76 Add frontend validation for TextInput()s
- Add input validation regexes to input_validations.js
- Add those validators to text fields without validaiton
2020-01-22 15:20:18 -05:00
graham-dds
156d733aee Add missing regex and validation for StringFields
This commit adds further validation for StringFields that were missing
it. This mostly amounted to being Regex patters and max lengths.
2020-01-22 15:20:18 -05:00
graham-dds
b3dd32f3f7 Allow Falsey values for IsNumber validator
We should use Required() instead to ensure data is present, if that's the
desired behavior
2020-01-22 15:18:42 -05:00
graham-dds
c460f91045 CLIN data should be submitted with {prefix}-number 2020-01-22 15:18:42 -05:00
graham-dds
d925a0a570 Change dialect from postgres:// to postgresql:// 2020-01-22 15:18:42 -05:00
leigh-mil
41c8a5d187
Merge pull request #1336 from dod-ccpo/copy-updates
Copy updates
2020-01-22 15:18:27 -05:00
leigh-mil
04de3d0404 Correct portfolio invite resent alert 2020-01-22 14:58:08 -05:00
tomdds
e5332897f1 Fix formatting 2020-01-22 14:52:06 -05:00
tomdds
1b1a20cf52 Restore implementations for policies and management group creation
These were accidentally stripped out during a rebase.
2020-01-22 14:39:30 -05:00
hmbrink
01341be95b Profile max-width 2020-01-22 14:34:23 -05:00
hmbrink
16db93c2da Topbar navigation 2020-01-22 14:25:56 -05:00
leigh-mil
176428d454
Merge branch 'staging' into copy-updates 2020-01-22 14:01:47 -05:00
tomdds
f5e4b603cb Bring naming conventions for methods and classes related to CSP provisioning in line with state machine 2020-01-22 13:39:41 -05:00
tomdds
d646c3c00f Updates from Production Scripts
Made a bunch of tweaks when using these tests to run production scripts for initial setup, this brings over a bunch of those changes
2020-01-22 13:39:41 -05:00
becc3630c2 azure integration. methods to authenticate and set/get value in keyvault 2020-01-22 13:39:41 -05:00
67842748b8 call next on the results of filter function to get the first value 2020-01-22 13:39:41 -05:00
dfaea2d937 trigger_next_transition method will call the create trigger of the next stage for machines in CREATED state 2020-01-22 13:39:41 -05:00
743a91d658 trigger_next_transition method will call the create trigger of the next stage for machines in CREATED state 2020-01-22 13:39:41 -05:00
tomdds
b1adaf771d state machine integration wip 2020-01-22 13:39:35 -05:00