foreman_rh_cloud 4.0.24 → 4.0.26

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b73f3b045ed5bcbba051801155232d62a0884b30da8e461328a17e509fe0f0ec
-  data.tar.gz: 2cc1a0c73e193de7d26b368e9a78760ee302f78ecafeef6c27e18165293d0d2d
+  metadata.gz: 713d1737fd81e7a54efa8a300fe4c0765c1d2a31b796218bcc1f447b473921af
+  data.tar.gz: a47efbe51980f47c71e57af619f73a08d214f7af3bb84632946189a1aabe81f3
 SHA512:
-  metadata.gz: 2eb0bb9cdb4d2aefa66acec328c98467a7db33de69e0256f966cca0f929756fb9100a5880d8d9a03f358cfafaf6e5aa32cf9896125c0eab8e3de9b9ebbb09269
-  data.tar.gz: 12e435965a84de5c538e98463fcdacbacd70eefd692822782cdb5ec4ed1e9f91e6d31f65466cffaa4b415c4491ff62e393a1e2f716f4542b03e5911fe6a34b97
+  metadata.gz: c7419f0e5583f02038cf784e38d67f15dd0dfa3a392a72cd19000c0f51f41fc97a29ed2e9387bfee4e1fe7a91addb563db53167c98343b640f52e3b17a729387
+  data.tar.gz: 2eb4fea115c546084e2365807e87933e60a102f1ec7455cfc5a368a1ae5a20587bf7c12206e40816a2893c19d02a035a2cee3c2262982a53f88542599bda629d

data/app/controllers/api/v2/rh_cloud/inventory_controller.rb

@@ -7,6 +7,7 @@ module Api
         include InventoryUpload::TaskActions
 
         api :GET, "/organizations/:organization_id/rh_cloud/report", N_("Download latest report")
+        param :organization_id, Integer, required: true, desc: N_("Set the current organization context for the request")
         def download_file
           filename, file = report_file(params[:organization_id])
 
@@ -16,6 +17,7 @@ module Api
         end
 
         api :POST, "/organizations/:organization_id/rh_cloud/report", N_("Start report generation")
+        param :organization_id, Integer, required: true, desc: N_("Set the current organization context for the request")
         def generate_report
           organization_id = params[:organization_id]
 
@@ -27,6 +29,7 @@ module Api
         end
 
         api :POST, "/organizations/:organization_id/rh_cloud/inventory_sync", N_("Start inventory synchronization")
+        param :organization_id, Integer, required: true, desc: N_("Set the current organization context for the request")
         def sync_inventory_status
           selected_org = Organization.find(params[:organization_id])
 
@@ -39,7 +42,7 @@ module Api
           render json: { message: error.message }, status: :bad_request
         end
 
-        api :POST, "rh_cloud/enable_connector", N_("Enable cloud connector")
+        api :POST, "/rh_cloud/enable_connector", N_("Enable cloud connector")
         def enable_cloud_connector
           cloud_connector = ForemanRhCloud::CloudConnector.new
           render json: cloud_connector.install.to_json

data/app/controllers/foreman_inventory_upload/cloud_status_controller.rb

@@ -0,0 +1,26 @@
+module ForemanInventoryUpload
+  class CloudStatusController < ::ApplicationController
+    def index
+      organizations = User.current.my_organizations
+
+      ping_service = ForemanRhCloud::CloudPingService.new(organizations, logger)
+      ping_result = ping_service.ping
+      ping_result[:cert_auth] =  ping_result[:cert_auth].map do |org, status_hash|
+        status_hash.merge(
+          {
+            org_id: org.id,
+            org_name: org.name,
+          }
+        )
+      end
+
+      render json: {
+        ping: ping_result,
+      }, status: :ok
+    end
+
+    def logger
+      Foreman::Logging.logger('app')
+    end
+  end
+end

data/app/controllers/insights_cloud/api/machine_telemetries_controller.rb

@@ -25,6 +25,14 @@ module InsightsCloud::Api
         }, status: :bad_gateway
       end
 
+      if @cloud_response.code >= 300
+        return render json: {
+          :message => 'Cloud request failed',
+          :headers => {},
+          :response => @cloud_response,
+        }, status: @cloud_response.code
+      end
+
       if @cloud_response.headers[:content_disposition]
         return send_data @cloud_response, disposition: @cloud_response.headers[:content_disposition], type: @cloud_response.headers[:content_type]
       end
@@ -49,13 +57,19 @@ module InsightsCloud::Api
     private
 
     def ensure_telemetry_enabled_for_consumer
-      render_message 'Telemetry is not enabled for your organization', :status => 403 unless telemetry_config
+      unless (config = telemetry_config(@host))
+        logger.debug("Rejected telemetry forwarding for host #{@host.name}, insights param is set to: #{config}")
+        render_message 'Telemetry is not enabled for this host', :status => 403
+      end
+      config
     end
 
-    def telemetry_config
-      ::RedhatAccess::TelemetryConfiguration.find_or_create_by(:organization_id => @organization.id) do |conf|
-        conf.enable_telemetry = true
+    def telemetry_config(host)
+      param_value = nil
+      User.as_anonymous_admin do
+        param_value = host.host_param(InsightsCloud.enable_client_param)
       end
+      param_value
     end
 
     def cert_uuid
@@ -76,9 +90,11 @@ module InsightsCloud::Api
       return unless request.path == '/redhat_access/r/insights/platform/ingress/v1/upload' ||
                     request.path.include?('/redhat_access/r/insights/uploads/')
 
-      data = @cloud_response.code.to_s.start_with?('2')
-      host_status = @host.get_status(InsightsClientReportStatus)
-      host_status.update(reported_at: Time.now.utc, status: host_status.to_status(data: data))
+      return unless @cloud_response.code.to_s.start_with?('2')
+
+      # create insights status if it wasn't there in the first place and refresh its reporting date
+      @host.get_status(InsightsClientReportStatus).refresh!
+      @host.refresh_global_status!
     end
   end
 end

data/app/controllers/insights_cloud/hits_controller.rb

@@ -9,7 +9,6 @@ module InsightsCloud
         hasToken: !Setting[:rh_cloud_token].empty?,
         hits: hits.map { |hit| hit.attributes.merge(hostname: hit.host&.name, has_playbook: hit.has_playbook?) },
         itemCount: hits.count,
-        isExperimentalMode: Setting[:lab_features],
       }, status: :ok
     end
 

data/app/models/insights_client_report_status.rb

@@ -1,14 +1,11 @@
 class InsightsClientReportStatus < HostStatus::Status
   REPORT_INTERVAL = 48.hours
 
-  REPORTING             = 0 # host_registration_insights = true & getting data
-  NO_REPORT             = 1 # host_registration_insights = true & not getting data
-  NOT_MANAGED           = 2 # host_registration_insights = false
-  NOT_MANAGED_WITH_DATA = 3 # host_registration_insights = false & getting data
+  REPORTING             = 0
+  NO_REPORT             = 1
 
   scope :stale, -> { where.not(reported_at: (Time.now - REPORT_INTERVAL)..Time.now) }
   scope :reporting, -> { where(status: REPORTING) }
-  scope :not_managed_with_data, -> { where(status: NOT_MANAGED_WITH_DATA) }
 
   def self.status_name
     N_('Insights')
@@ -20,10 +17,6 @@ class InsightsClientReportStatus < HostStatus::Status
         N_('Reporting')
       when NO_REPORT
         N_('Not reporting')
-      when NOT_MANAGED
-        N_('Not reporting (not set by registration)')
-      when NOT_MANAGED_WITH_DATA
-        N_('Reporting (not set by registration)')
     end
   end
 
@@ -33,20 +26,16 @@ class InsightsClientReportStatus < HostStatus::Status
         ::HostStatus::Global::OK
       when NO_REPORT
         ::HostStatus::Global::ERROR
-      when NOT_MANAGED
-        ::HostStatus::Global::OK
-      when NOT_MANAGED_WITH_DATA
-        ::HostStatus::Global::WARN
     end
   end
 
-  def to_status(data: false)
-    if insights_param
-      return REPORTING if data
-      return in_interval? ? REPORTING : NO_REPORT
-    end
+  def to_status
+    in_interval? ? REPORTING : NO_REPORT
+  end
 
-    data ? NOT_MANAGED_WITH_DATA : NOT_MANAGED
+  # prevent creation of the status on global refresh, but show it if the record already exists
+  def relevant?(_options = {})
+    persisted?
   end
 
   private
@@ -55,8 +44,4 @@ class InsightsClientReportStatus < HostStatus::Status
     return false unless reported_at
     (Time.now.utc - reported_at).to_i < REPORT_INTERVAL.to_i
   end
-
-  def insights_param
-    host.host_params_hash.dig('host_registration_insights', :value)
-  end
 end

data/app/services/foreman_rh_cloud/cloud_auth.rb

@@ -4,6 +4,10 @@ module ForemanRhCloud
 
     include CloudRequest
 
+    def cloud_auth_available?
+      Setting[:rh_cloud_token].present?
+    end
+
     def rh_credentials
       @rh_credentials ||= query_refresh_token
     end

data/app/services/foreman_rh_cloud/cloud_ping_service.rb

@@ -0,0 +1,83 @@
+require 'rest-client'
+
+module ForemanRhCloud
+  class CloudPingService
+    class TokenPing
+      include ForemanRhCloud::CloudAuth
+
+      attr_accessor :logger
+
+      def initialize(logger)
+        @logger = logger
+      end
+
+      def ping
+        execute_cloud_request(
+          method: :get,
+          url: ForemanRhCloud.base_url + "/api/inventory/v1/hosts?per_page=1",
+          headers: {
+            content_type: :json,
+          }
+        )
+      rescue StandardError => ex
+        ex
+      end
+    end
+
+    class CertPing
+      include ForemanRhCloud::CloudRequest
+      include InsightsCloud::CandlepinCache
+
+      attr_accessor :logger
+
+      def initialize(org, logger)
+        @org = org
+        @logger = logger
+      end
+
+      def ping
+        certs = candlepin_id_cert(@org)
+        return StandardError.new('certificate missing') unless certs
+
+        execute_cloud_request(
+          method: :get,
+          url: ForemanRhCloud.cert_base_url + "/api/apicast-tests/ping",
+          headers: {
+            content_type: :json,
+          },
+          ssl_client_cert: OpenSSL::X509::Certificate.new(certs[:cert]),
+          ssl_client_key: OpenSSL::PKey::RSA.new(certs[:key])
+        )
+      rescue StandardError => ex
+        ex
+      end
+    end
+
+    def initialize(organizations, logger)
+      @organizations = organizations
+      @logger = logger
+    end
+
+    def ping
+      token_response = TokenPing.new(@logger).ping
+      {
+        token_auth: {
+          success: token_response.is_a?(RestClient::Response),
+          error: (token_response.is_a?(Exception) ? token_response.inspect : nil),
+        },
+        cert_auth: Hash[
+          @organizations.map do |org|
+            cert_response = CertPing.new(org, @logger).ping
+            [
+              org,
+              {
+                success: cert_response.is_a?(RestClient::Response),
+                error: (cert_response.is_a?(Exception) ? cert_response.inspect : nil),
+              },
+            ]
+          end
+        ],
+      }
+    end
+  end
+end

data/app/services/foreman_rh_cloud/cloud_request_forwarder.rb

@@ -17,6 +17,8 @@ module ForemanRhCloud
       logger.debug("Sending request to: #{request_opts[:url]}")
 
       execute_cloud_request(request_opts)
+    rescue RestClient::Exception => error_response
+      error_response.response
     end
 
     def prepare_request_opts(original_request, forward_payload, forward_params, certs)
@@ -62,12 +64,18 @@ module ForemanRhCloud
           ssl_client_cert: OpenSSL::X509::Certificate.new(certs[:cert]),
           ssl_client_key: OpenSSL::PKey::RSA.new(certs[:key]),
         }
+      when connection_test_request?
+        {
+          url: ForemanRhCloud.cert_base_url + '/api/apicast-tests/ping',
+          ssl_client_cert: OpenSSL::X509::Certificate.new(certs[:cert]),
+          ssl_client_key: OpenSSL::PKey::RSA.new(certs[:key]),
+        }
       else # Legacy insights API
         {
           url: ForemanRhCloud.legacy_insights_url + request_path.sub('/redhat_access/r/insights', '/r/insights'),
           ssl_client_cert: OpenSSL::X509::Certificate.new(certs[:cert]),
           ssl_client_key: OpenSSL::PKey::RSA.new(certs[:key]),
-          ssl_ca_file: Class.new.include(RedhatAccess::Telemetry::LookUps).new.get_default_ssl_ca_file,
+          ssl_ca_file: ForemanRhCloud.legacy_insights_ca,
         }
       end
     end
@@ -76,6 +84,10 @@ module ForemanRhCloud
       ->(request_path) { request_path.include? '/platform' }
     end
 
+    def connection_test_request?
+      ->(request_path) { request_path =~ /redhat_access\/r\/insights\/?$/ }
+    end
+
     def prepare_forward_cloud_url(base_url, request_path)
       cloud_path = request_path.sub('/redhat_access/r/insights/platform/', '')
                                .sub('/redhat_access/r/insights/', '')
@@ -84,11 +96,11 @@ module ForemanRhCloud
     end
 
     def core_app_name
-      'Foreman'
+      BranchInfo.new.core_app_name
     end
 
     def core_app_version
-      Foreman::Version.new
+      BranchInfo.new.core_app_version
     end
 
     def http_user_agent(original_request)

data/app/services/foreman_rh_cloud/insights_status_cleaner.rb

@@ -0,0 +1,17 @@
+module ForemanRhCloud
+  class InsightsStatusCleaner
+    def clean(host_search)
+      host_ids = Host.search_for(host_search).pluck(:id)
+
+      # delete all insights status records for the hosts
+      deleted_count = InsightsClientReportStatus.where(host_id: host_ids).delete_all
+
+      # refresh global status
+      Host.where(id: host_ids).preload(:host_statuses).find_in_batches do |hosts|
+        hosts.each { |host| host.refresh_global_status! }
+      end
+
+      deleted_count
+    end
+  end
+end

data/app/services/foreman_rh_cloud/remediations_retriever.rb

@@ -12,6 +12,11 @@ module ForemanRhCloud
     end
 
     def create_playbook
+      unless cloud_auth_available?
+        logger.debug('Cloud authentication is not available, cannot continue')
+        return
+      end
+
       response = query_playbook
 
       logger.debug("Got playbook response: #{response.body}")

data/config/Gemfile.lock.gh_test

@@ -4,7 +4,6 @@ PATH
     foreman_rh_cloud (3.0.15)
       foreman_ansible
       katello
-      redhat_access
 
 PATH
   remote: ../katello
@@ -41,66 +40,66 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    actioncable (6.0.3.4)
-      actionpack (= 6.0.3.4)
+    actioncable (6.0.3.6)
+      actionpack (= 6.0.3.6)
       nio4r (~> 2.0)
       websocket-driver (>= 0.6.1)
-    actionmailbox (6.0.3.4)
-      actionpack (= 6.0.3.4)
-      activejob (= 6.0.3.4)
-      activerecord (= 6.0.3.4)
-      activestorage (= 6.0.3.4)
-      activesupport (= 6.0.3.4)
+    actionmailbox (6.0.3.6)
+      actionpack (= 6.0.3.6)
+      activejob (= 6.0.3.6)
+      activerecord (= 6.0.3.6)
+      activestorage (= 6.0.3.6)
+      activesupport (= 6.0.3.6)
       mail (>= 2.7.1)
-    actionmailer (6.0.3.4)
-      actionpack (= 6.0.3.4)
-      actionview (= 6.0.3.4)
-      activejob (= 6.0.3.4)
+    actionmailer (6.0.3.6)
+      actionpack (= 6.0.3.6)
+      actionview (= 6.0.3.6)
+      activejob (= 6.0.3.6)
       mail (~> 2.5, >= 2.5.4)
       rails-dom-testing (~> 2.0)
-    actionpack (6.0.3.4)
-      actionview (= 6.0.3.4)
-      activesupport (= 6.0.3.4)
+    actionpack (6.0.3.6)
+      actionview (= 6.0.3.6)
+      activesupport (= 6.0.3.6)
       rack (~> 2.0, >= 2.0.8)
       rack-test (>= 0.6.3)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.0, >= 1.2.0)
-    actiontext (6.0.3.4)
-      actionpack (= 6.0.3.4)
-      activerecord (= 6.0.3.4)
-      activestorage (= 6.0.3.4)
-      activesupport (= 6.0.3.4)
+    actiontext (6.0.3.6)
+      actionpack (= 6.0.3.6)
+      activerecord (= 6.0.3.6)
+      activestorage (= 6.0.3.6)
+      activesupport (= 6.0.3.6)
       nokogiri (>= 1.8.5)
-    actionview (6.0.3.4)
-      activesupport (= 6.0.3.4)
+    actionview (6.0.3.6)
+      activesupport (= 6.0.3.6)
       builder (~> 3.1)
       erubi (~> 1.4)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.1, >= 1.2.0)
-    activejob (6.0.3.4)
-      activesupport (= 6.0.3.4)
+    activejob (6.0.3.6)
+      activesupport (= 6.0.3.6)
       globalid (>= 0.3.6)
-    activemodel (6.0.3.4)
-      activesupport (= 6.0.3.4)
-    activerecord (6.0.3.4)
-      activemodel (= 6.0.3.4)
-      activesupport (= 6.0.3.4)
-    activerecord-import (1.0.7)
+    activemodel (6.0.3.6)
+      activesupport (= 6.0.3.6)
+    activerecord (6.0.3.6)
+      activemodel (= 6.0.3.6)
+      activesupport (= 6.0.3.6)
+    activerecord-import (1.0.8)
       activerecord (>= 3.2)
     activerecord-nulldb-adapter (0.7.0)
       activerecord (>= 5.2.0, < 6.3)
-    activerecord-session_store (1.1.3)
-      actionpack (>= 4.0)
-      activerecord (>= 4.0)
+    activerecord-session_store (2.0.0)
+      actionpack (>= 5.2.4.1)
+      activerecord (>= 5.2.4.1)
       multi_json (~> 1.11, >= 1.11.2)
-      rack (>= 1.5.2, < 3)
-      railties (>= 4.0)
-    activestorage (6.0.3.4)
-      actionpack (= 6.0.3.4)
-      activejob (= 6.0.3.4)
-      activerecord (= 6.0.3.4)
-      marcel (~> 0.3.1)
-    activesupport (6.0.3.4)
+      rack (>= 2.0.8, < 3)
+      railties (>= 5.2.4.1)
+    activestorage (6.0.3.6)
+      actionpack (= 6.0.3.6)
+      activejob (= 6.0.3.6)
+      activerecord (= 6.0.3.6)
+      marcel (~> 1.0.0)
+    activesupport (6.0.3.6)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 0.7, < 2)
       minitest (~> 5.1)
@@ -109,7 +108,7 @@ GEM
     addressable (2.7.0)
       public_suffix (>= 2.0.2, < 5.0)
     algebrick (0.7.5)
-    amazing_print (1.2.2)
+    amazing_print (1.3.0)
     ancestry (3.2.1)
       activerecord (>= 4.2.0)
     anemone (0.7.2)
@@ -136,13 +135,13 @@ GEM
     benchmark-ips (2.8.4)
     binding_of_caller (1.0.0)
       debug_inspector (>= 0.0.1)
-    bootsnap (1.7.1)
+    bootsnap (1.7.3)
       msgpack (~> 1.0)
     bootstrap-sass (3.4.1)
       autoprefixer-rails (>= 5.2.1)
       sassc (>= 2.0.0)
     builder (3.2.4)
-    bullet (6.1.3)
+    bullet (6.1.4)
       activesupport (>= 3.0.0)
       uniform_notifier (~> 1.11)
     byebug (11.1.3)
@@ -168,7 +167,7 @@ GEM
       coffee-script-source
       execjs
     coffee-script-source (1.12.2)
-    concurrent-ruby (1.1.8)
+    concurrent-ruby (1.1.9)
     concurrent-ruby-edge (0.6.0)
       concurrent-ruby (~> 1.1.6)
     connection_pool (2.2.3)
@@ -180,12 +179,12 @@ GEM
     daemons (1.3.1)
     database_cleaner (1.99.0)
     deacon (1.0.0)
-    debug_inspector (1.0.0)
+    debug_inspector (1.1.0)
     declarative (0.0.20)
     declarative-option (0.1.0)
-    deep_cloneable (3.0.0)
+    deep_cloneable (3.1.0)
       activerecord (>= 3.1.0, < 7)
-    deface (1.6.1)
+    deface (1.8.1)
       nokogiri (>= 1.6)
       polyglot
       rails (>= 5.2)
@@ -338,7 +337,7 @@ GEM
     http-cookie (1.0.3)
       domain_name (~> 0.5)
     httpclient (2.8.3)
-    i18n (1.8.8)
+    i18n (1.8.10)
       concurrent-ruby (~> 1.0)
     immigrant (0.3.6)
       activerecord (>= 3.0)
@@ -369,16 +368,14 @@ GEM
       nokogiri (>= 1.5.9)
     mail (2.7.1)
       mini_mime (>= 0.1.1)
-    marcel (0.3.3)
-      mimemagic (~> 0.3.2)
+    marcel (1.0.0)
     maruku (0.7.3)
     memoist (0.16.2)
     method_source (1.0.0)
     mime-types (3.3.1)
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2020.1104)
-    mimemagic (0.3.5)
-    mini_mime (1.0.2)
+    mime-types-data (3.2021.0225)
+    mini_mime (1.0.3)
     mini_portile2 (2.5.0)
     minitest (5.10.3)
     minitest-reporters (1.4.3)
@@ -404,8 +401,8 @@ GEM
       net-ssh (>= 2.6.5, < 7.0.0)
     net-ssh (4.2.0)
     netrc (0.11.0)
-    nio4r (2.5.5)
-    nokogiri (1.11.1)
+    nio4r (2.5.7)
+    nokogiri (1.11.2)
       mini_portile2 (~> 2.5.0)
       racc (~> 1.4)
     oauth (0.5.5)
@@ -415,7 +412,7 @@ GEM
       json (>= 1, < 3)
     paint (2.2.1)
     parallel (1.20.1)
-    parallel_tests (3.4.0)
+    parallel_tests (3.6.0)
       parallel
     parse-cron (0.1.4)
     parser (3.0.0.0)
@@ -492,20 +489,20 @@ GEM
       rack
     rack-test (1.1.0)
       rack (>= 1.0, < 3)
-    rails (6.0.3.4)
-      actioncable (= 6.0.3.4)
-      actionmailbox (= 6.0.3.4)
-      actionmailer (= 6.0.3.4)
-      actionpack (= 6.0.3.4)
-      actiontext (= 6.0.3.4)
-      actionview (= 6.0.3.4)
-      activejob (= 6.0.3.4)
-      activemodel (= 6.0.3.4)
-      activerecord (= 6.0.3.4)
-      activestorage (= 6.0.3.4)
-      activesupport (= 6.0.3.4)
+    rails (6.0.3.6)
+      actioncable (= 6.0.3.6)
+      actionmailbox (= 6.0.3.6)
+      actionmailer (= 6.0.3.6)
+      actionpack (= 6.0.3.6)
+      actiontext (= 6.0.3.6)
+      actionview (= 6.0.3.6)
+      activejob (= 6.0.3.6)
+      activemodel (= 6.0.3.6)
+      activerecord (= 6.0.3.6)
+      activestorage (= 6.0.3.6)
+      activesupport (= 6.0.3.6)
       bundler (>= 1.3.0)
-      railties (= 6.0.3.4)
+      railties (= 6.0.3.6)
       sprockets-rails (>= 2.0.0)
     rails-controller-testing (1.0.5)
       actionpack (>= 5.0.1.rc1)
@@ -519,9 +516,9 @@ GEM
     rails-i18n (6.0.0)
       i18n (>= 0.7, < 2)
       railties (>= 6.0.0, < 7)
-    railties (6.0.3.4)
-      actionpack (= 6.0.3.4)
-      activesupport (= 6.0.3.4)
+    railties (6.0.3.6)
+      actionpack (= 6.0.3.6)
+      activesupport (= 6.0.3.6)
       method_source
       rake (>= 0.8.7)
       thor (>= 0.20.3, < 2.0)
@@ -541,13 +538,6 @@ GEM
     rdoc (6.3.0)
     record_tag_helper (1.0.1)
       actionview (>= 5)
-    redhat_access (2.2.18)
-      angular-rails-templates (>= 0.0.4)
-      foreman-tasks
-      katello
-      redhat_access_lib (>= 1.1.5)
-    redhat_access_lib (1.1.5)
-      rest-client (>= 1.6.3)
     redis (4.1.4)
     regexp_parser (1.8.2)
     representable (3.0.4)
@@ -628,8 +618,8 @@ GEM
       tilt
     scoped_search (4.1.9)
       activerecord (>= 4.2.0)
-    sd_notify (0.1.0)
-    secure_headers (6.3.1)
+    sd_notify (0.1.1)
+    secure_headers (6.3.2)
     selenium-webdriver (3.142.7)
       childprocess (>= 0.5, < 4.0)
       rubyzip (>= 1.2.2)
@@ -716,7 +706,7 @@ PLATFORMS
 
 DEPENDENCIES
   activerecord-nulldb-adapter
-  activerecord-session_store (>= 1.1.0, < 2)
+  activerecord-session_store (>= 2.0.0, < 3)
   amazing_print (~> 1.1)
   ancestry (>= 3.0.7, < 4, != 3.2.0)
   apipie-dsl (>= 2.2.6)