foreman_rh_cloud 14.7.0 → 15.0.0

data/app/assets/javascripts/foreman_rh_cloud/locale/ko/foreman_rh_cloud.js

@@ -3,7 +3,7 @@
   "locale_data": {
     "foreman_rh_cloud": {
       "": {
-        "Project-Id-Version": "foreman_rh_cloud 14.6.1",
+        "Project-Id-Version": "foreman_rh_cloud 14.7.0",
         "Report-Msgid-Bugs-To": "",
         "PO-Revision-Date": "2023-01-20 13:26+0000",
         "Last-Translator": "Ondřej Gajdušek, 2026",
@@ -30,7 +30,7 @@
         "서브스크립션 감시 정보"
       ],
       "Actions": [
-        ""
+        "동작 "
       ],
       "Actions history": [
         "작업 내역"
@@ -90,7 +90,7 @@
         "현재 페이지"
       ],
       "Destroy HBI hosts for organization": [
-        ""
+        "조직의 HBI 호스트 삭제"
       ],
       "Details": [
         "상세 정보"
@@ -156,7 +156,7 @@
         "설치된 패키지가 Red Hat 클라우드에 업로드되지 않도록 제외합니다. (insights_minimal_data_collection이 true로 설정된 경우 이 설정은 무시되고 설치된 패키지는 항상 제외됩니다.) 로컬 Insights를 사용하는 경우에는 이 설정이 무시됩니다."
       ],
       "Excluded from upload to console.redhat.com Inventory service because host_registration_insights_inventory parameter value is false: ": [
-        ""
+        "host_registration_insights_inventory 매개변수 값이 false이므로 console.redhat.com 인벤토리 서비스에 업로드되지 않도록 제외된 호스트:"
       ],
       "Failed": [
         "실패 "
@@ -165,7 +165,7 @@
         "HBI 호스트 %s 삭제 실패: %s"
       ],
       "Failed to destroy HBI hosts for organization %s: %s": [
-        ""
+        "조직 %s의 HBI 호스트를 삭제하지 못했습니다: %s"
       ],
       "Failed to fetch hosts": [
         "호스트를 가져오는 데 실패했습니다"
@@ -192,13 +192,13 @@
         "서브스크립션 서비스에 대한 자세한 정보는 다음을 참조하십시오:"
       ],
       "Force RHEL Lightspeed CLA connection": [
-        ""
+        "RHEL Lightspeed CLA 연결 강제 적용"
       ],
       "Foreman plugin that process & upload data to Red Hat Cloud": [
         "Red Hat Cloud에 데이터를 처리하고 업로드하는 Foreman 플러그인"
       ],
       "Forward requests to Lightspeed CLA even when in IoP mode. Ignored when IoP mode is off.": [
-        ""
+        "IoP 모드에서도 요청을 Lightspeed CLA로 전달합니다. IoP 모드가 꺼져 있으면 무시됩니다."
       ],
       "Generate and upload report": [
         "보고서 생성 및 업로드"
@@ -237,13 +237,13 @@
         "호스트 인벤토리 보고서 작업"
       ],
       "Host is excluded from upload to console.redhat.com Inventory service due to host parameter": [
-        ""
+        "호스트 매개변수로 인해 console.redhat.com 인벤토리 서비스에 업로드되지 않도록 제외된 호스트"
       ],
       "Host is not present on console.redhat.com Inventory service": [
-        ""
+        "호스트가 console.redhat.com 인벤토리 서비스에 없습니다."
       ],
       "Host is uploaded and present on console.redhat.com Inventory service": [
-        ""
+        "호스트가 업로드되어 console.redhat.com 인벤토리 서비스에 표시됩니다."
       ],
       "Hostname": [
         "호스트 이름"
@@ -294,7 +294,7 @@
         "로딩 중 "
       ],
       "Loading...": [
-        "로딩..."
+        "로딩 중..."
       ],
       "Low": [
         "낮음"
@@ -324,7 +324,7 @@
         "아니오  "
       ],
       "No HBI hosts found for organization %s": [
-        ""
+        "조직 %s에 대한 HBI 호스트를 찾을 수 없습니다."
       ],
       "No account data available.": [
         "계정 정보가 없습니다."
@@ -354,13 +354,13 @@
         "선택된 호스트 중 등록된 호스트는 없습니다."
       ],
       "Not present on console.redhat.com Inventory service: ": [
-        ""
+        "console.redhat.com 인벤토리 서비스에 없는 호스트:"
       ],
       "Not reporting": [
         "보고하지 않음"
       ],
       "Not reporting because host_registration_insights parameter value is false": [
-        ""
+        "host_registration_insights 매개변수 값이 false이므로 보고하지 않습니다"
       ],
       "Nothing to sync, there are no hosts with subscription for this organization.": [
         "동기화할 것이 없습니다. 이 조직에 대한 서브스크립션이 있는 호스트가 없습니다."
@@ -396,10 +396,10 @@
         "죄송합니다! 귀하의 쿼리와 일치하는 조직을 찾을 수 없습니다."
       ],
       "Organization": [
-        ""
+        "조직 "
       ],
       "Organization not found": [
-        ""
+        "조직을 찾을 수 없습니다"
       ],
       "Organization status": [
         "조직 상태"
@@ -423,7 +423,7 @@
         "RHC 데몬 ID입니다. 로컬 Insights를 사용할 때는 무시됩니다."
       ],
       "RHC instance ID to register with Red Hat Sources": [
-        ""
+        "Red Hat Sources에 등록할 RHC 인스턴스 ID"
       ],
       "Read more about it in RH cloud insights": [
         "RH 클라우드 Insights에서 이에 대해 자세히 알아보세요."
@@ -444,7 +444,7 @@
         "권장 사항"
       ],
       "Recommendations actions": [
-        ""
+        "권장 사항 작업"
       ],
       "Recommendations selected: %s.": [
         "선택된 권장 사항:%s ."
@@ -465,7 +465,7 @@
         "Red Hat 인벤토리"
       ],
       "Registered hosts in organization: ": [
-        ""
+        "조직에 등록된 호스트: "
       ],
       "Remediate": [
         "개선 사항"
@@ -507,16 +507,16 @@
         "Satellite 서버에는 Red Hat의 권장 사항이 %{hits_count} 개 있습니다"
       ],
       "Schedule a task to register in Red Hat Sources for cloud connector": [
-        ""
+        "클라우드 커넥터의 Red Hat Sources에 등록하는 작업 예약"
       ],
       "Scoped search string for host removal": [
         "호스트 제거를 위한 범위 검색 문자열"
       ],
       "Searching by recommendations count is not available in IoP mode.": [
-        ""
+        "IoP 모드에서는 권장 사항 수를 기준으로 검색할 수 없습니다."
       ],
       "Select all recommendations": [
-        ""
+        "모든 권장 사항 선택"
       ],
       "Select recommendations from all pages": [
         "모든 페이지에서 추천을 선택하세요"
@@ -558,7 +558,7 @@
         "성공 "
       ],
       "Successfully deleted all HBI hosts for organization %s": [
-        ""
+        "조직 %s의 모든 HBI 호스트가 성공적으로 삭제되었습니다."
       ],
       "Sync automatically": [
         "자동으로 동기화"
@@ -570,7 +570,7 @@
         "추천 사항을 자동으로 동기화합니다"
       ],
       "Table actions": [
-        ""
+        "테이블 작업"
       ],
       "The Foreman inventory upload plugin automatically uploads Foreman host inventory data to the Inventory service of Insights, where it can also be used by the Subscriptions service for subscription reporting. If you use the Subscriptions service, enabling inventory uploads is required.": [
         "Foreman 인벤토리 업로드 플러그인은 Foreman 호스트 인벤토리 데이터를 자동으로 Insights의 인벤토리 서비스에 업로드하며, 이 데이터는 서브스크립션 보고서를 위한 서브스크립션 서비스에서도 사용할 수 있습니다. 서브스크립션 서비스를 사용하는 경우, 인벤토리 업로드를 활성화하는 것이 필수입니다."
@@ -615,7 +615,7 @@
         "알 수 없음"
       ],
       "Unsupported operator for recommendations count search: %s": [
-        ""
+        "권장 사항 수 검색에 지원되지 않는 연산자: %s"
       ],
       "Upload hits from iop-advisor-engine": [
         "iop-advisor-engine에서 히트 업로드"
@@ -633,7 +633,7 @@
         "업로드됨"
       ],
       "Uploaded and present on console.redhat.com Inventory service: ": [
-        ""
+        "console.redhat.com 인벤토리 서비스에 업로드되어 표시된 호스트: "
       ],
       "Value %{value} is not a valid UUID": [
         "값%{value}이/가 유효한 UUID가 아닙니다"
@@ -672,7 +672,7 @@
         "해결을 위해 재부팅이 필요한지 여부"
       ],
       "You can review this information later by looking at the Inventory status of each host.": [
-        ""
+        "각 호스트의 인벤토리 상태에서 이 정보를 나중에 검토할 수 있습니다."
       ],
       "You do not have permission to perform this action": [
         "이 작업을 수행할 권한이 없습니다."

data/app/assets/javascripts/foreman_rh_cloud/locale/zh_CN/foreman_rh_cloud.js

@@ -3,7 +3,7 @@
   "locale_data": {
     "foreman_rh_cloud": {
       "": {
-        "Project-Id-Version": "foreman_rh_cloud 14.6.1",
+        "Project-Id-Version": "foreman_rh_cloud 14.7.0",
         "Report-Msgid-Bugs-To": "",
         "PO-Revision-Date": "2023-01-20 13:26+0000",
         "Last-Translator": "Ondřej Gajdušek, 2026",
@@ -30,7 +30,7 @@
         "订阅查看"
       ],
       "Actions": [
-        ""
+        "操作"
       ],
       "Actions history": [
         "操作历史记录"
@@ -90,7 +90,7 @@
         "当前页"
       ],
       "Destroy HBI hosts for organization": [
-        ""
+        "为机构销毁 HBI 主机"
       ],
       "Details": [
         "详情"
@@ -156,7 +156,7 @@
         "在上传到红帽云时排除安装的软件包。（如果 insights_minimal_data_collection 设置为 true，则忽略此设置，且安装的软件包始终被排除。）在使用本地 Insights 时忽略。"
       ],
       "Excluded from upload to console.redhat.com Inventory service because host_registration_insights_inventory parameter value is false: ": [
-        ""
+        "因为 host_registration_insights_inventory 参数值为 false，被排除在上传至 console.redhat.com Inventory 服务的范围之外。"
       ],
       "Failed": [
         "失败"
@@ -165,7 +165,7 @@
         "销毁 HBI 主机 %s 失败：%s"
       ],
       "Failed to destroy HBI hosts for organization %s: %s": [
-        ""
+        "为机构 %s 销毁 HBI 主机失败：%s"
       ],
       "Failed to fetch hosts": [
         "获取主机失败"
@@ -192,13 +192,13 @@
         "有关订阅服务的更多信息，请参阅："
       ],
       "Force RHEL Lightspeed CLA connection": [
-        ""
+        "强制 RHEL Lightspeed CLA 连接"
       ],
       "Foreman plugin that process & upload data to Red Hat Cloud": [
         "处理数据并将其上传到红帽云的 Foreman 插件"
       ],
       "Forward requests to Lightspeed CLA even when in IoP mode. Ignored when IoP mode is off.": [
-        ""
+        "即使处于 IoP 模式，也会将请求转发至 Lightspeed CLA。当 IoP 模式未开启时，此设置将被忽略。"
       ],
       "Generate and upload report": [
         "生成并上传报告"
@@ -237,13 +237,13 @@
         "主机清单报告作业"
       ],
       "Host is excluded from upload to console.redhat.com Inventory service due to host parameter": [
-        ""
+        "由于主机参数设置，该主机已被排除在上传至 console.redhat.com Inventory 服务的范围之外。"
       ],
       "Host is not present on console.redhat.com Inventory service": [
-        ""
+        "console.redhat.com 清单服务中没有主机"
       ],
       "Host is uploaded and present on console.redhat.com Inventory service": [
-        ""
+        "主机已上传并存在于 console.redhat.com Inventory 服务中"
       ],
       "Hostname": [
         "主机名"
@@ -324,7 +324,7 @@
         "否"
       ],
       "No HBI hosts found for organization %s": [
-        ""
+        "未找到用于机构 %s 的 HBI 主机 "
       ],
       "No account data available.": [
         "没有可用的帐户数据。"
@@ -354,13 +354,13 @@
         "所选主机都没有注册"
       ],
       "Not present on console.redhat.com Inventory service: ": [
-        ""
+        "console.redhat.com Inventory 服务没有包括： "
       ],
       "Not reporting": [
         "未报告"
       ],
       "Not reporting because host_registration_insights parameter value is false": [
-        ""
+        "未上报数据，因为 host_registration_insights 参数的值为 false。"
       ],
       "Nothing to sync, there are no hosts with subscription for this organization.": [
         "没有同步，此机构没有带有订阅的主机。"
@@ -396,10 +396,10 @@
         "未找到与您的查询匹配的机构"
       ],
       "Organization": [
-        ""
+        "机构"
       ],
       "Organization not found": [
-        ""
+        "没有找到机构"
       ],
       "Organization status": [
         "机构标签"
@@ -423,7 +423,7 @@
         "RHC 守护进程 ID。在使用本地 Insights 时忽略。"
       ],
       "RHC instance ID to register with Red Hat Sources": [
-        ""
+        "用于注册 Red Hat Sources 的 RHC 实例 ID"
       ],
       "Read more about it in RH cloud insights": [
         "在 RH Cloud insights 中了解更多有关它的信息"
@@ -444,7 +444,7 @@
         "建议"
       ],
       "Recommendations actions": [
-        ""
+        "建议操作"
       ],
       "Recommendations selected: %s.": [
         "选择的建议：%s。"
@@ -465,7 +465,7 @@
         "Red Hat 清单"
       ],
       "Registered hosts in organization: ": [
-        ""
+        "机构中注册的主机： "
       ],
       "Remediate": [
         "补救"
@@ -507,16 +507,16 @@
         "Satellite 服务器有 %{hits_count} 个红帽提供的建议"
       ],
       "Schedule a task to register in Red Hat Sources for cloud connector": [
-        ""
+        "调度一个在 Red Hat Sources 中注册云连接器的任务"
       ],
       "Scoped search string for host removal": [
         "用于删除主机的有范围的搜索字符串"
       ],
       "Searching by recommendations count is not available in IoP mode.": [
-        ""
+        "在 IoP 模式下不支持按推荐数量进行搜索。"
       ],
       "Select all recommendations": [
-        ""
+        "选择所有建议"
       ],
       "Select recommendations from all pages": [
         "在所有页面中选择建议"
@@ -558,7 +558,7 @@
         "成功"
       ],
       "Successfully deleted all HBI hosts for organization %s": [
-        ""
+        "为机构 %s 成功删除所有 HBI 主机"
       ],
       "Sync automatically": [
         "自动同步"
@@ -570,7 +570,7 @@
         "自动同步建议"
       ],
       "Table actions": [
-        ""
+        "表操作"
       ],
       "The Foreman inventory upload plugin automatically uploads Foreman host inventory data to the Inventory service of Insights, where it can also be used by the Subscriptions service for subscription reporting. If you use the Subscriptions service, enabling inventory uploads is required.": [
         "Foreman 清单上传插件会自动将 Foreman 主机清单数据上传到 Insights 的 Inventory 服务，订阅服务使用这些信息来提供订阅报告。如果使用订阅服务，则需要启用清单上传。"
@@ -615,7 +615,7 @@
         "未知"
       ],
       "Unsupported operator for recommendations count search: %s": [
-        ""
+        "不支持按推荐数量进行搜索的运算符：%s"
       ],
       "Upload hits from iop-advisor-engine": [
         "从 iop-advisor-engine 上传 hits"
@@ -633,7 +633,7 @@
         "已上传"
       ],
       "Uploaded and present on console.redhat.com Inventory service: ": [
-        ""
+        "上传并存在于 console.redhat.com Inventory 服务中： "
       ],
       "Value %{value} is not a valid UUID": [
         "值 %{value} 不是一个有效的 UUID"
@@ -672,7 +672,7 @@
         "resolution 是否需要重启"
       ],
       "You can review this information later by looking at the Inventory status of each host.": [
-        ""
+        "稍后，您可以通过查看每个主机的 Inventory 状态来查看此信息。"
       ],
       "You do not have permission to perform this action": [
         "您没有执行此操作的权限"

data/app/services/foreman_rh_cloud/tags_auth.rb

@@ -5,6 +5,7 @@ module ForemanRhCloud
     TAG_NAMESPACE = 'sat_iam'.freeze
     TAG_SHORT_NAME = 'scope'.freeze
     TAG_NAME = "#{TAG_NAMESPACE}/#{TAG_SHORT_NAME}".freeze
+    SYNC_CACHE_TTL = 10.seconds
 
     def self.auth_tag_for(user, org, loc)
       new(user, org, loc, nil).auth_tag
@@ -20,20 +21,28 @@ module ForemanRhCloud
     end
 
     def update_tag
-      loc_name = location_name_for_tag
-      logger.debug("Updating tags for user: #{@user}, org: #{@org.name}, loc: #{loc_name}")
+      cached = Rails.cache.read(sync_identity)
+      return cached if cached
 
-      payload = tags_query_payload
-      params = {
-        organization: @org,
-        method: :post,
-        url: "#{InsightsCloud.gateway_url}/tags",
-        headers: {
-          content_type: :json,
-        },
-        payload: payload.to_json,
-      }
-      execute_cloud_request(params) unless payload[:host_id_list].empty?
+      Foreman::AdvisoryLockManager.with_session_lock(sync_identity) do
+        Rails.cache.fetch(sync_identity, expires_in: SYNC_CACHE_TTL) do
+          loc_name = location_name_for_tag
+          logger.debug("Updating tags for user: #{@user}, org: #{@org.name}, loc: #{loc_name}")
+
+          payload = tags_query_payload
+          params = {
+            organization: @org,
+            method: :post,
+            url: "#{InsightsCloud.gateway_url}/tags",
+            headers: {
+              content_type: :json,
+            },
+            payload: payload.to_json,
+          }
+          execute_cloud_request(params) unless payload[:host_id_list].empty?
+          true
+        end
+      end
     end
 
     def allowed_hosts
@@ -63,5 +72,11 @@ module ForemanRhCloud
     def location_name_for_tag
       @loc ? @loc.name : '*'
     end
+
+    # Single identity string reused as BOTH the advisory-lock name and the
+    # Rails.cache key, so the lock and the cached entry always correspond 1:1.
+    def sync_identity
+      "rh_cloud_tags_auth_sync_#{tag_value}"
+    end
   end
 end

data/config/routes.rb

@@ -36,6 +36,16 @@ Rails.application.routes.draw do
     get 'insights_cloud', to: '/react#index' # Uses foreman's react controller
     get 'insights_vulnerability', to: '/react#index'
     get 'insights_vulnerability/:cve_id', to: '/react#index'
+    scope 'insights_compliance' do
+      get 'reports', to: '/react#index'
+      get 'reports/:report_id', to: '/react#index'
+      get 'reports/:report_id/delete', to: '/react#index'
+      get 'scappolicies', to: '/react#index'
+      get 'scappolicies/new', to: '/react#index'
+      get 'scappolicies/:policy_id', to: '/react#index'
+      get 'scappolicies/:policy_id/edit', to: '/react#index'
+      get 'scappolicies/:policy_id/delete', to: '/react#index'
+    end
   end
 
   scope :module => :'insights_cloud/api', :path => :redhat_access do

data/lib/foreman_rh_cloud/plugin.rb

@@ -145,6 +145,20 @@ module ForemanRhCloud
             url_hash: { controller: :react, action: :index },
             parent: :insights_menu,
             if: -> { ForemanRhCloud.with_iop_smart_proxy? }
+          menu :top_menu,
+            :insights_compliance_reports,
+            caption: N_('Compliance Reports'),
+            url: '/foreman_rh_cloud/insights_compliance/reports',
+            url_hash: { controller: :react, action: :index },
+            parent: :insights_menu,
+            if: -> { ForemanRhCloud.with_iop_smart_proxy? }
+          menu :top_menu,
+            :insights_compliance_scappolicies,
+            caption: N_('SCAP Policies'),
+            url: '/foreman_rh_cloud/insights_compliance/scappolicies',
+            url_hash: { controller: :react, action: :index },
+            parent: :insights_menu,
+            if: -> { ForemanRhCloud.with_iop_smart_proxy? }
         end
 
         # In IoP case we want the page to be in the admin menu

data/lib/foreman_rh_cloud/version.rb

@@ -1,3 +1,3 @@
 module ForemanRhCloud
-  VERSION = '14.7.0'.freeze
+  VERSION = '15.0.0'.freeze
 end

data/locale/foreman_rh_cloud.pot

@@ -8,8 +8,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: foreman_rh_cloud 1.0.0\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-22 17:30+0000\n"
-"PO-Revision-Date: 2026-09-22 17:30+0000\n"
+"POT-Creation-Date: 2026-09-29 10:58+0000\n"
+"PO-Revision-Date: 2026-09-29 10:58+0000\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "Language: \n"