77 Commits

Author	SHA1	Message	Date
Max Erenberg	9c51ad3a01	Allow offsck to add members to the office group (#126) ... Closes #62. Reviewed-on: #126	2024-02-17 19:31:03 -05:00
Max Erenberg	a4a4ef089c	Query Active Directory LDAP for alumni (#120) ... Closes #116. UWLDAP has program information for current students, so we should continue using it by default. If the sn attribute (last name) is missing from the entry, then we query ADLDAP instead. Reviewed-on: #120	2024-02-01 23:57:53 -05:00
Leon Zhang	25994af312	Update available positions in configuration files, pertaining to issue #63 (#117) ... Updated available positions adding new positions and removing 2 unused positions in ceo. Passed Drone CI. Co-authored-by: Leon <lzhang219@gmail.com> Reviewed-on: #117 Reviewed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2024-01-22 22:00:30 -05:00
Ohm Patel	de23296413	Validate usernames across tui & for create_user on cli/api (#115) ... Current changes should address issues raised by @merenber in #114 excluding #114 (comment) (both CLI and TUI validation) * Unit test for invalid name was added but needs to be modified as regex should be changed to disallow underscores eventually. Reviewed-on: #115 Reviewed-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-authored-by: o32patel <ohm.patel@uwaterloo.ca> Co-committed-by: o32patel <ohm.patel@uwaterloo.ca>	2024-01-22 13:15:40 -05:00
Ohm Patel	f06ccdc3f9	Add username verification (#114) ... Move and add validation to Controller.get_username_from_view(). This addresses #101 + Add tests for username validator Reviewed-on: #114 Reviewed-by: Nathan Chung <n4chung@csclub.uwaterloo.ca> Co-authored-by: o32patel <ohm.patel@uwaterloo.ca> Co-committed-by: o32patel <ohm.patel@uwaterloo.ca>	2024-01-15 20:01:44 -05:00
Max Erenberg	6786c8e44e	shorten tests for group search API	2023-07-31 18:24:34 -04:00
Max Erenberg	65688c72da	make forwarding_addresses mandatory when creating member (#97) ... Closes #96. Reviewed-on: #97	2023-06-09 02:39:50 -04:00
Daniel Sun	010937ea17	Add group lookup functionality (#88) ... note: **I am unaware of best practices** but I tried my best to keep changes consistent with the codebase feedback would be much appreciated notable changes: **new api endpoint**: `/groups/search` -- I moved searching into the api so it could be used in tui and cli, also seemed like a good idea to keep the json response as small as possible **tui searching** -- at first I wanted to make this realtime interactable, but the work required seemed inappropriate to a feature I am assuming will only be used sparingly Co-authored-by: Daniel Sun <dandancool@github.com> Co-authored-by: Daniel Sun <d6sun@uwaterloo.ca> Reviewed-on: #88 Reviewed-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-authored-by: Daniel Sun <d6sun@csclub.uwaterloo.ca> Co-committed-by: Daniel Sun <d6sun@csclub.uwaterloo.ca>	2023-03-04 01:21:04 -05:00
Max Erenberg	3f58d1aff5	print warning message when cloud account is created	2023-02-05 23:48:38 -05:00
Justin Chung	5e8f1b5ba5	Implement TUI support for multiple users in each position (#80) ... Co-authored-by: Justin Chung <20733699+justin13888@users.noreply.github.com> Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Reviewed-on: #80 Co-authored-by: Justin Chung <j24chung@csclub.uwaterloo.ca> Co-committed-by: Justin Chung <j24chung@csclub.uwaterloo.ca>	2023-01-23 02:26:13 -05:00
Max Erenberg	f84965c8e1	reload all NGINX servers after adding a vhost (#90) ... Currently, only the NGINX server on biloba is reloaded after adding a new vhost or renewing an SSL certificate. The NGINX server on chamomile should also be reloaded, since chamomile is a warm standby for biloba. This PR adds a new config option in ceod.ini to specify the shell command to reload the web servers. Reviewed-on: #90 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2023-01-22 17:20:55 -05:00
Jonathan Leung	b507c56136	Show groups in member for API, CLI and TUI (#82) ... Closes #69. Tests are failing locally with many `assert os.geteuid() == 0` errors even on the master branch. I will add tests after I figure this out. Reviewed-on: #82 Co-authored-by: Jonathan Leung <j23leung@csclub.uwaterloo.ca> Co-committed-by: Jonathan Leung <j23leung@csclub.uwaterloo.ca>	2022-11-26 20:09:05 -05:00
Max Erenberg	1e452d10ce	Assume program is Alumni if UWLDAP is missing data (#84) ... This PR sets 'program=Alumni' for members who either do not have an 'ou' attribute in UWLDAP, or who do not have a UWLDAP entry at all. Reviewed-on: #84 Reviewed-by: Raymond Li <raymo@csclub.uwaterloo.ca>	2022-11-01 21:02:05 -04:00
Raymond Li	dceb5d6572	Revert "#63: Add positions to CEO (#79)" ... This reverts commit 3b7c89c925.	2022-10-13 18:12:36 -04:00
Nathan Chung	3b7c89c925	#63: Add positions to CEO (#79) ... #63 Added the following positions: * ext affairs lead * marketing lead * design lead * events lead * reps lead * mods lead * photography lead * other Signed-off-by: n4chung <n4chung@csclub.uwaterloo.ca> Co-authored-by: n4chung <n4chung@csclub.uwaterloo.ca> Reviewed-on: #79 Reviewed-by: Raymond Li <raymo@csclub.uwaterloo.ca> Co-authored-by: Nathan Chung <n4chung@csclub.uwaterloo.ca> Co-committed-by: Nathan Chung <n4chung@csclub.uwaterloo.ca>	2022-10-13 14:58:34 -04:00
Rio Liu	57ba72ef26	Add support for using number in member terms renwewal API (#77) ... Closed #75 Co-authored-by: Rio6 <rio.liu@r26.me> Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Reviewed-on: #77 Co-authored-by: Rio Liu <r345liu@csclub.uwaterloo.ca> Co-committed-by: Rio Liu <r345liu@csclub.uwaterloo.ca>	2022-10-07 07:58:23 -04:00
Max Erenberg	779e35a08e	fix shadowExpire deserialization	2022-09-10 16:01:40 -04:00
Max Erenberg	2739c45aff	use LDAP instead of NSS for authz (#73) ... Closes #71. Reviewed-on: #73	2022-09-09 17:26:54 -04:00
Max Erenberg	953bee549e	fix tests	2022-09-05 17:34:28 -04:00
Max Erenberg	cfb5f77711	Disable inactive club sites (#68) ... Closes #51. An API argument called `remove_inactive_club_reps` was added so that we can dynamically control whether we want to remove inactive club reps or not. The default action is only to disable club websites without changing group membership. Reviewed-on: #68 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2022-07-22 23:51:59 -04:00
Max Erenberg	32b2dbb307	Allow addmember and removemember to accept multiple usernames (#67) ... Closes #57. Reviewed-on: #67	2022-07-02 11:26:38 -04:00
Max Erenberg	dc412ef5cb	implement renewal reminders (#61) ... Closes #55. Once this is merged and deployed, a cron job will be used to automatically run `ceo members remindexpire` at the beginning of every term. Reviewed-on: #61	2022-06-30 20:02:06 -04:00
Max Erenberg	00c7d562ad	fix URL bug in ContainerRegistryService	2022-06-09 09:07:12 -04:00
Max Erenberg	539de01c4d	use admin GSSAPI creds for some API endpoints (#45) ... Office staff currently can't sign up new members because ceod uses their GSSAPI credentials to authenticate to LDAP, and those credentials are insufficient. This PR uses the ceod/admin credentials instead for signing up new members and for renewing existing memberships. Reviewed-on: #45	2022-03-12 15:19:14 -05:00
Max Erenberg	02598fa3bc	allow ignored Harbor projects to be configurable	2022-01-02 22:43:22 -05:00
Max Erenberg	88b40b79cc	Don't expire syscom members (#43) ... Closes #37. Co-authored-by: Max Erenberg <> Reviewed-on: #43 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2022-01-01 12:15:32 -05:00
Max Erenberg	1e94132e97	Add container registry API (#42) ... Add an API for members to create a project on Harbor. Co-authored-by: Max Erenberg <> Reviewed-on: #42 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2022-01-01 00:49:05 -05:00
Max Erenberg	0422e4487b	fix flaky test for vhost rate limiting	2021-12-25 11:31:54 -05:00
Max Erenberg	f08f4872cf	Add Kubernetes API endpoint (#38) ... Add an API for members to create their own Kubernetes namespace. Co-authored-by: Max Erenberg <> Reviewed-on: #38 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-12-18 16:35:05 -05:00
Rio Liu	b4110d887d	Expire member cli and api (#33) ... Closes #23 Co-authored-by: Rio Liu <rio.liu@r26.me> Co-authored-by: Max Erenberg <> Reviewed-on: #33 Co-authored-by: Rio <r345liu@localhost> Co-committed-by: Rio <r345liu@localhost>	2021-12-11 16:30:18 -05:00
Max Erenberg	1338825c5d	use NGINX with acme.sh	2021-11-28 22:35:46 -05:00
Max Erenberg	bd50f4142f	use Caddy instead of NGINX for vhosts	2021-11-28 15:21:48 -05:00
Max Erenberg	a7c5098b67	Add cloud vhost API (#35) ... Add an API for members to create their own virtual hosts. Co-authored-by: Max Erenberg <> Reviewed-on: #35 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-11-27 17:59:21 -05:00
Max Erenberg	ac98aaf38d	Add API to manage cloud accounts (#34) ... This PR adds API endpoints and a CLI to create cloud accounts and to purge accounts of expired members. Co-authored-by: Max Erenberg <> Reviewed-on: #34 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-11-21 11:11:20 -05:00
Max Erenberg	ac573039da	add mailLocalAddress to each record (#30) ... Closes #26. Co-authored-by: Max Erenberg <> Reviewed-on: #30 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-10-25 07:36:25 -04:00
Max Erenberg	23f40c74f9	Use inetOrgPerson instead of account (#29) ... Closes #25. Co-authored-by: Max Erenberg <> Reviewed-on: #29 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-10-23 23:21:09 -04:00
Max Erenberg	e3c50d867a	Add isClubRep attribute (#27) ... Closes #24. Co-authored-by: Max Erenberg <> Reviewed-on: #27 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-10-23 10:23:43 -04:00
Max Erenberg	2a5d903eba	add mailman CLI command	2021-09-25 15:16:22 -04:00
Max Erenberg	3cba9680f5	test that email is sent when user is created	2021-09-25 13:56:23 -04:00
Max Erenberg	de18a9f293	add option to use Docker instead of VM (#16) ... Co-authored-by: Max Erenberg <> Co-authored-by: Rio <r345liu@localhost> Reviewed-on: #16 Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Co-committed-by: Max Erenberg <merenber@csclub.uwaterloo.ca>	2021-09-17 22:39:27 -04:00
Max Erenberg	155c96c500	implement Database views in TUI	2021-09-12 02:08:15 -04:00
Andrew Wang	33323fd112	Add database CLI (#15) ... Closes #12 Co-authored-by: Andrew Wang <a268wang@csclub.uwaterloo.ca> Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Reviewed-on: #15 Co-authored-by: Andrew Wang <a268wang@localhost> Co-committed-by: Andrew Wang <a268wang@localhost>	2021-09-11 13:33:43 -04:00
Rio Liu	651988bb08	Positions CLI (#11) ... Closes #9 Co-authored-by: Rio6 <rio.liu@r26.me> Co-authored-by: Rio Liu <rio.liu@r26.me> Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Reviewed-on: #11 Co-authored-by: Rio <r345liu@localhost> Co-committed-by: Rio <r345liu@localhost>	2021-09-08 09:32:34 -04:00
Max Erenberg	6f1851fc19	Merge branch 'v1' into tui	2021-09-04 23:57:50 +00:00
Max Erenberg	bb56870652	add skeleton for TUI	2021-09-04 23:05:19 +00:00
Andrew Wang	eb5d632606	db-api (#10) ... Implement DB endpoints Co-authored-by: Andrew Wang <someone.zip@gmail.com> Co-authored-by: Max Erenberg <merenber@csclub.uwaterloo.ca> Reviewed-on: #10 Co-authored-by: Andrew Wang <a268wang@localhost> Co-committed-by: Andrew Wang <a268wang@localhost>	2021-08-29 13:08:35 -04:00
Max Erenberg	7d23fd690f	store GSSAPI token in flask.g	2021-08-28 05:51:48 +00:00
Max Erenberg	e011e98026	use GSSAPI delegation	2021-08-26 02:19:18 +00:00
Max Erenberg	51737585bd	add updateprograms CLI	2021-08-24 19:37:05 +00:00
Max Erenberg	831ebf17aa	add groups CLI	2021-08-24 05:48:55 +00:00