dandds
bd3662e8ce
Add config for EFS persistent volume in AWS k8s cluster.
...
Chose Elastic File Storage over EBS (Elastic Block Storage) because the
latter can only be mounted into a single node.
This adds the RBAC config and deployment for managing EFS mounts within
the cluster. Largely depends on this efs-provisioner config:
https://github.com/kubernetes-incubator/external-storage/tree/master/aws/efs
The config has been hard-copied into the repo and updated for future
reference. Note that the config requires an environment variable
substitution and cannot be applied directly to the cluster.
2019-08-06 11:31:19 -04:00
dandds
44141c002d
Fix up sync-crls script and add to Dockerfile.
...
- Fix some python formatting and import issues
- Fix dockerfile to include sync-crls script
- Adjust sync-crls script to use paths and CLI tools available in the
Docker container
2019-08-06 11:31:19 -04:00
leigh-mil
d755d96bae
Update z-index of parent element to the tooltip
...
Source: https://foundation.zurb.com/forum/posts/50229-fixing-the-sticky-dropdown-z-index-issue
2019-08-06 11:25:42 -04:00
dandds
b1cf89051a
Add kubernetes config and scripts for syncing CRLs.
...
This adds a previous version of the CRL sync functionality back to the
repo, with some small adjustments. We now grab the CRLs directly from
their DISA URLs.
The CRL sync is handled by a kubernetes cronjob that sync the files to a
persistent volume that is mounted into each Flask app container.
2019-08-06 11:05:18 -04:00
richard-dds
989e28e5fb
Destructure get_token() result
2019-08-06 10:41:17 -04:00
richard-dds
5329937eb9
Polyfill fetch
2019-08-06 10:39:46 -04:00
leigh-mil
9cf72e9466
Update name of permission
2019-08-06 10:38:58 -04:00
leigh-mil
5049b8262d
Add alert to log in page with csp disclaimer
2019-08-06 10:33:28 -04:00
leigh-mil
8460a454cb
Merge pull request #1000 from dod-ccpo/update-ccpo-logo
...
Update CCPO logo
2019-08-06 10:24:58 -04:00
richard-dds
a4581e7a7c
js this
woes
2019-08-06 10:23:04 -04:00
leigh-mil
71e72bcbcf
If there are 0 envs, do not show the toggle arrow and disable the link
2019-08-06 10:19:54 -04:00
richard-dds
80831c2d85
Set uploader configs in __init__
...
Now missing configs cause the app to crash right at startup
2019-08-06 10:00:09 -04:00
richard-dds
b18e291511
Set Azure protocol to https
...
- Default allows https/http
2019-08-06 09:58:44 -04:00
leigh-mil
d7cd913881
Remove list-style-type because it was causing the li to render without any height
2019-08-06 09:55:00 -04:00
richard-dds
0bc5ccdb95
Merge pull request #988 from dod-ccpo/task-order-cancel
...
Save draft TO on cancel
2019-08-06 09:50:50 -04:00
richard-dds
68a1004bf1
Make Azure FE config injectable
2019-08-05 16:51:28 -04:00
leigh-mil
b0b8f644d3
Update CCPO logo
2019-08-05 16:38:10 -04:00
richard-dds
72275421d0
More CSP-specific docstrings for get_token
2019-08-05 16:14:01 -04:00
leigh-mil
083896a689
Update template to show table of CCPO users
2019-08-05 16:11:24 -04:00
richard-dds
e5a0318310
Formatting
2019-08-05 16:04:38 -04:00
leigh-mil
90ae235cd0
Create query to get all CCPO users
2019-08-05 16:04:31 -04:00
richard-dds
0b201809a1
Configure js uploader based on CLOUD_PROVIDER environment var
2019-08-05 15:59:27 -04:00
leigh-mil
41820813ed
Add in route for CCPO users page and permissions to view page
2019-08-05 15:23:17 -04:00
richard-dds
6405d9b958
Make Azure account name and bucket name configurable
2019-08-05 14:58:10 -04:00
richard-dds
94b6b320fb
Provide mock implementation of uploader
2019-08-05 14:58:10 -04:00
richard-dds
81a478915d
Fix uploader test and refactor makeTestWrapper to accept data fn
2019-08-05 14:58:10 -04:00
richard-dds
3d414e1a60
Fix TO upload tests
2019-08-05 14:58:10 -04:00
richard-dds
f5c8424b46
Wire up FE uploads to TO form
2019-08-05 14:58:10 -04:00
richard-dds
8eba9a097d
Add CSP file uploads
2019-08-05 14:58:10 -04:00
richard-dds
1cd35445ea
Fix CLINForm.validate()
2019-08-05 14:02:06 -04:00
leigh-mil
7afc24deb1
Merge pull request #997 from dod-ccpo/to-signing-bug
...
TO Review page bugs
2019-08-05 13:49:36 -04:00
richard-dds
e034269a02
Don't flash when cancelling TO form with invalid data
2019-08-05 09:56:15 -04:00
richard-dds
24049c4c81
Formatting
2019-08-05 09:56:15 -04:00
richard-dds
c99e05ed86
Some styling for cancel modal
2019-08-05 09:56:15 -04:00
richard-dds
ec6494c6c3
Add another route for new TOs
2019-08-05 09:56:15 -04:00
richard-dds
3c56f96fa2
Not using previous_button_link for step 1
2019-08-05 09:56:15 -04:00
richard-dds
0216faf1e6
Fix cancel urls
2019-08-05 09:56:15 -04:00
richard-dds
dd93dd5aea
Allow user to cancel without saving
2019-08-05 09:56:15 -04:00
richard-dds
88853e352c
Formatting
2019-08-05 09:55:34 -04:00
richard-dds
59545aaf0e
Add TO cancel modal
2019-08-05 09:55:34 -04:00
richard-dds
470df0a572
New route for cancelling TO form
2019-08-05 09:55:34 -04:00
leigh-mil
12dc805465
Use dollar formatting
2019-08-02 16:19:42 -04:00
leigh-mil
e333f32aea
Merge pull request #995 from dod-ccpo/pop-dates-bug
...
PoP start date must be before end
2019-08-02 16:10:17 -04:00
dandds
82b8a420c8
Merge pull request #996 from dod-ccpo/moar-k8s
...
SSL/TLS and Authentication for Kubernetes Clusters
2019-08-02 15:58:10 -04:00
leigh-mil
4e71b6dcef
Do not show edit TO button if user does not have perms or if TO is expired
2019-08-02 15:50:24 -04:00
leigh-mil
46a7702f4f
Add containing div around to review fragment
2019-08-02 15:44:09 -04:00
leigh-mil
5adb2d016e
Fix route in TO sign button to direct to the form review page and remove modal call
2019-08-02 15:39:08 -04:00
dandds
27a0569a7e
HTTP -> HTTPS upgrade redirects for the staging sites.
...
There may be a cleaner way to configure this with Kubernetes. For now,
we expose port 80 on the load balancers and let NGINX redirect that
traffic to the HTTPS version of the site.
2019-08-02 15:30:37 -04:00
leigh-mil
f3de41cc06
Fix issue where error message was showing up before both dates were
...
filled in
- only set startDate and endDate in data if there is are initial dates
- only update popValid and showPopError if both dates are present
2019-08-02 15:19:50 -04:00
dandds
e5c360452c
Add SSL/TLS config for staging sites.
...
This presumes the existence of TLS kubernetes secrets available in both
clusters. It adds NGINX config for SSL termination and the necessary k8s
config to write the certificate and private key to the NGINX container.
2019-08-02 15:01:56 -04:00