6993 Commits

Author SHA1 Message Date
dandds
272d492af6
Merge pull request #1350 from robgil-dds/170808212-storage-private-endpoint
Service Endpoints
2020-01-24 10:24:23 -05:00
Rob Gil
76465e978a Remove k8s test tf 2020-01-24 07:36:24 -05:00
Rob Gil
7b2523254d Adds Dans home ip 2020-01-24 07:36:02 -05:00
Rob Gil
daa07f8631 Removes unnecessary locals in the bucket module 2020-01-23 20:26:27 -05:00
Rob Gil
e0d59eb166 Finally fixes subnet list output
This finally fixes the output coming from the vpc module so that it
returns a full list of subnets. Now they can be referenced just like the
redis module is using in this commit.
2020-01-23 20:22:53 -05:00
leigh-mil
204bf49ff4
Merge pull request #1352 from dod-ccpo/add-subscription-to-env
Add subscription to env
2020-01-23 20:20:58 -05:00
Rob Gil
3f5bbf2c5e Cleans out comments 2020-01-23 19:58:06 -05:00
Rob Gil
9f0904c201 Adds dedicated redis subnet 2020-01-23 19:57:45 -05:00
Rob Gil
0f5f5bd926 Converts redis to use service_endpoints
This is still a WIP.
2020-01-23 19:16:00 -05:00
Rob Gil
38ce1ef2b2 Adds list of users for access to storage and more service endpoints
This sets up the rest of the service endpoints on the subnets. It also
adds a variable map specifically to grant IP access to the storage
buckets. This new variable map is necessary since the azure storage ip
rules do not accept /32 CIDR ranges. The rest of the services do support
cidr ranges.
2020-01-23 18:41:29 -05:00
leigh-mil
1bad32bcdb Add success flash message 2020-01-23 16:44:27 -05:00
leigh-mil
59327d4cea Styling for environment edit form 2020-01-23 16:44:07 -05:00
leigh-mil
0fcd5a6471 Move text into translations file and fix formatting to make file more readable 2020-01-23 16:44:07 -05:00
leigh-mil
1054457048 Button for adding a subscription 2020-01-23 16:44:07 -05:00
leigh-mil
ec56d8e38a Properly display environment role on application index page 2020-01-23 16:44:07 -05:00
leigh-mil
31b7e2f589 Create route and domain method for creating a subscription 2020-01-23 16:44:07 -05:00
dandds
1c53ceef00
Merge pull request #1337 from dod-ccpo/apply-session-limit
Forcibly destroy existing session on logout.
2020-01-23 16:04:43 -05:00
Rob Gil
536eccdb90 Container registry private networking and bucket cidr range fix 2020-01-23 13:13:56 -05:00
Rob Gil
dab6cdb7dc Locks down keyvaults to subnets and administrator ip addresses 2020-01-23 11:02:12 -05:00
Rob Gil
c31d68a18c Makes client vpn cidr range configurable 2020-01-23 10:50:16 -05:00
dandds
944c5d3c9f Forcibly destroy existing session on logout.
To comply with security guidelines, we need to destroy the session when
a user logs out. This means that the session's key in the Redis cache
needs to be deleted. Flask expects to _always_ have a session object. If
the current session object does not exist in the Redis cache, Flask will
reserialize and store it at the end of the request. In order for
session deletion to work, we need to delete the key for the existing
session and then replace the session object with a new, empty one.

This also updates the SessionLimiter class so that the session prefix is
configurable.
2020-01-23 10:31:20 -05:00
dandds
0fa4fd2304 Limit concurrent session by default for deployed sites.
To meet ATO requirements, a user should not be able to have concurrent
logins.
2020-01-23 10:29:37 -05:00
Rob Gil
48482785ac Adds IP whitelisting to storage buckets 2020-01-23 10:02:31 -05:00
leigh-mil
6f2454ae5f
Merge pull request #1342 from dod-ccpo/route-validation
Validation on route parameters
2020-01-22 20:06:03 -05:00
Rob Gil
d22357e609 Adds step to manually configure MFA in AD 2020-01-22 19:37:04 -05:00
Rob Gil
635ccb0fd3 Fixes postgres character collation 2020-01-22 19:36:33 -05:00
Rob Gil
01703b1488 Configures storage buckets to be optionally exposed via service endpoints 2020-01-22 19:35:54 -05:00
Rob Gil
9042a960bb Adds configurable service endpoints to subnets in the vpc module 2020-01-22 19:35:19 -05:00
leigh-mil
158f7f43d7 Remove catch_all route 2020-01-22 16:53:28 -05:00
leigh-mil
bdc03fb0a2 Remove /help route and templates 2020-01-22 16:53:11 -05:00
leigh-mil
0484d9b77f
Merge pull request #1344 from dod-ccpo/fix-app-member-form
Remove delete environments from app members form
2020-01-22 16:30:43 -05:00
leigh-mil
36fe777230 Remove delete environments from app members form 2020-01-22 15:53:40 -05:00
graham-dds
a5684d099e
Merge pull request #1343 from dod-ccpo/text-input-validation
Form text input validation
2020-01-22 15:39:26 -05:00
graham-dds
3cf9fdac76 Add frontend validation for TextInput()s
- Add input validation regexes to input_validations.js
- Add those validators to text fields without validaiton
2020-01-22 15:20:18 -05:00
graham-dds
156d733aee Add missing regex and validation for StringFields
This commit adds further validation for StringFields that were missing
it. This mostly amounted to being Regex patters and max lengths.
2020-01-22 15:20:18 -05:00
graham-dds
b3dd32f3f7 Allow Falsey values for IsNumber validator
We should use Required() instead to ensure data is present, if that's the
desired behavior
2020-01-22 15:18:42 -05:00
graham-dds
c460f91045 CLIN data should be submitted with {prefix}-number 2020-01-22 15:18:42 -05:00
graham-dds
d925a0a570 Change dialect from postgres:// to postgresql:// 2020-01-22 15:18:42 -05:00
leigh-mil
41c8a5d187
Merge pull request #1336 from dod-ccpo/copy-updates
Copy updates
2020-01-22 15:18:27 -05:00
leigh-mil
04de3d0404 Correct portfolio invite resent alert 2020-01-22 14:58:08 -05:00
leigh-mil
176428d454
Merge branch 'staging' into copy-updates 2020-01-22 14:01:47 -05:00
dandds
f6252ae571
Merge pull request #1346 from dod-ccpo/tf-initial-db
Terraform initial database.
2020-01-22 06:07:19 -05:00
dandds
83de5d38d9 Terraform initial database.
This addes TF config for creating the initial database for the selected
ATAT environment. The datatase name format is [environment]-atat.
2020-01-21 19:52:09 -05:00
leigh-mil
d0cb4ce339 Update button text for adding new application member 2020-01-21 11:57:10 -05:00
leigh-mil
d2b9577e3b Standardize copy in TO builder and TO view page 2020-01-21 11:57:10 -05:00
leigh-mil
2d32e9c79b Remove lorem paragraph and link from 404 page 2020-01-21 11:57:10 -05:00
leigh-mil
ce70e44590 Update flash messages for portfolio invites to match application invite messages.
Use None instead of an empty string for titles and messages in flash alerts.
2020-01-21 11:57:10 -05:00
leigh-mil
6f85f6de97 Update copy for invite alert messages, CLIN error message, and use translations in flash file 2020-01-21 11:57:10 -05:00
leigh-mil
d0ae04193b Update copy on app settings page 2020-01-21 11:57:10 -05:00
leigh-mil
88d57a414b Update copy in new application form. 2020-01-21 11:57:10 -05:00