cmdbsyncer 4.1.0.dev21__tar.gz → 4.1.1__tar.gz

{cmdbsyncer-4.1.0.dev21 → cmdbsyncer-4.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cmdbsyncer
-Version: 4.1.0.dev21
+Version: 4.1.1
 Summary: Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems
 Author-email: Kuhn & Ruess GmbH <info@kuhn-ruess.de>
 Maintainer-email: Bastian Kuhn <mail@bastian-kuhn.de>

{cmdbsyncer-4.1.0.dev21 → cmdbsyncer-4.1.1}/application/_version.py

@@ -94,13 +94,42 @@ def _has_unreleased_entries():
     return bool(match and match.group(1).strip())
 
 
-def get_display_version():
-    """Display form: ``4.0.0`` / ``4.0.0-dev`` / ``3.12-LTS3``.
+def _installed_version():
+    """The version recorded in installed-package metadata, or None.
+
+    `pyproject.toml` carries the authoritative pre-release counter
+    (``4.1.0.dev22`` etc.) but is gone after ``pip install``. The wheel's
+    dist-info keeps it, so ``importlib.metadata`` recovers the suffix on
+    both PyPI installs and editable installs. Source checkouts without
+    an installation just fall through to the changelog-derived version.
+    """
+    try:
+        from importlib.metadata import (  # pylint: disable=import-outside-toplevel
+            PackageNotFoundError, version as _md_version,
+        )
+        return _md_version('cmdbsyncer')
+    except (PackageNotFoundError, ImportError, ModuleNotFoundError):
+        return None
 
-    PEP 440 stores LTS as ``3.12+lts3``; users see the conventional
-    ``-LTS`` form. ``-dev`` is appended on the main line while an
-    ``## Unreleased`` section is open.
+
+def get_display_version():
+    """Display form: ``4.0.0`` / ``4.0.0-dev22`` / ``3.12-LTS3``.
+
+    Resolution:
+    - LTS lines keep their ``-LTS`` suffix (PEP 440 stores it as ``+lts``).
+    - If the installed metadata carries a pre-release suffix (``.devN``,
+      ``aN``, ``bN``, ``rcN``), surface it as ``-dev22`` / ``-rc1`` etc.
+      so users can tell which dev build they are on.
+    - Otherwise, while an ``## Unreleased`` section is still open in the
+      active changelog, append a bare ``-dev`` (source checkouts before
+      the next pre-release is cut).
     """
     if '+lts' in __version__:
         return __version__.replace('+lts', '-LTS')
+    installed = _installed_version()
+    if installed:
+        match = re.search(r'\.(dev\d+|a\d+|b\d+|rc\d+)$', installed)
+        if match:
+            base = installed[:match.start()]
+            return f'{base}-{match.group(1)}'
     return f'{__version__}-dev' if _has_unreleased_entries() else __version__

{cmdbsyncer-4.1.0.dev21 → cmdbsyncer-4.1.1}/application/api/views.py

@@ -14,9 +14,12 @@ API_BP = Blueprint('api', __name__)
 
 # Rate-limit API auth failures per client IP. Only 401 responses deduct from
 # the bucket, so legitimate high-volume API traffic is not throttled — only
-# brute-force / credential-stuffing attempts are.
+# brute-force / credential-stuffing attempts are. Uses its own bucket
+# (API_RATE_LIMIT), independent of the much stricter form-login budget
+# (AUTH_RATE_LIMIT, used by /auth) — otherwise a polling monitoring agent
+# whose creds are momentarily wrong can lock the whole API for an hour.
 limiter.limit(
-    lambda: app.config.get('AUTH_RATE_LIMIT', '3 per minute; 10 per hour'),
+    lambda: app.config.get('API_RATE_LIMIT', '30 per minute; 300 per hour'),
     deduct_when=lambda response: response.status_code == 401,
 )(API_BP)
 

cmdbsyncer-4.1.1/application/buildinfo.txt

@@ -0,0 +1 @@
+BUILD_DATE=2026-05-13T13:17:45Z

{cmdbsyncer-4.1.0.dev21 → cmdbsyncer-4.1.1}/application/changelog/v4.1.md

@@ -1,6 +1,11 @@
 # Version 4.1
 
-## Unreleased
+## Version 4.1.1
+
+### API
+- FIX: Separate `API_RATE_LIMIT` for `/api/v1` (default `30/min; 300/hour`) so a few 401s no longer lock out monitoring polling for the rest of the hour
+
+## Version 4.1.0
 
 ### Ansible
 - FEAT: Trigger Ansible playbook runs from the host UI with live output and per-host run history
@@ -16,6 +21,7 @@
 - FIX: `ansible/inventory`, `ansible/inventory_single` and `ansible/cmk_server_inventory` find the pip-installed `cmdbsyncer` on PATH instead of failing with "No such file or directory" when ansible/ lives at `/opt/cmdbsyncer/ansible/`, and they export `CMDBSYNCER_CONFIG_DIR` pointing at the shim's parent directory so the called CLI loads `local_config.py` regardless of ansible-playbook's cwd. The `CMDBSYNCER_CONFIG_DIR` lookup is now honored at package-import time (not only inside the CLI entry point), which is when `local_config.py` is actually loaded — so the shim's env var really does its job and `ansible-playbook` from `/opt/cmdbsyncer/ansible/` no longer fails with "CRYPTOGRAPHY_KEY is not set"
 - FIX: Ansible Playbook Runner finds `playbooks.yml` at `<install-root>/ansible/` on pip installs (e.g. `/opt/cmdbsyncer/ansible/`) instead of pointing at the unused `<site-packages>/ansible/` path
 - FIX: GUI playbook runs under mod_wsgi/gunicorn use a per-run temp directory for Ansible's local scratch state instead of inheriting the web user's read-only `$HOME` — fixes "Permission denied: /usr/share/httpd/.ansible/tmp"
+- FIX: Ansible Playbook Runner input labels and empty-state border read from the theme palette instead of hardcoded greys, so they stay legible on Gruvbox Dark / Nord / Dracula
 - FIX: Offline bundle `install.sh` no longer swallows the playbook copy when `pip install` fails — both steps run independently and report their own status, and `ANSIBLE_TARGET` is replaced by default (no more `FORCE=1` dance for re-installs)
 
 ### Hosts
@@ -106,6 +112,7 @@
 - FIX: PyPI installs now ship every plugin's `plugin.json` (was only the `.py` files), and the user `plugins/` directory plus `disabled_plugins.json` next to `app.wsgi` are picked up correctly instead of being looked for inside `site-packages`
 - FEAT: Offline installation bundle always ships base, extras and ansible Python dependencies plus the default Ansible playbook collection, and the bundled `install.sh` deploys the playbooks to `/opt/cmdbsyncer/ansible` (override via `ANSIBLE_TARGET`, skip with `SKIP_ANSIBLE=1`, replace existing target with `FORCE=1`)
 - FEAT: New `make release-pre` target ships sequential pre-release builds (`.devN` / `aN` / `bN` / `rcN`) to PyPI without requiring a hand-edit before each upload; `tools/build_offline_bundle.sh --syncer-version 4.1.0.dev3 --enterprise-version 0.3.9.dev1` pins the offline bundle to those pre-releases so QA can test them on air-gapped systems
+- FEAT: Header version display surfaces the installed pre-release counter — `4.1.0-dev22` / `4.1.0-rc1` etc. — instead of the bare `-dev` suffix, so operators can tell which build is running
 
 ### Refactor
 - REFACTOR: `application/views/host.py` split into focused modules (widgets, filters, renderers)

{cmdbsyncer-4.1.0.dev21 → cmdbsyncer-4.1.1}/application/config.py

@@ -196,6 +196,14 @@ class BaseConfig():
     # Applied per client IP to the POST handler; GET (rendering the form) is
     # not rate-limited.
     AUTH_RATE_LIMIT = '3 per minute; 10 per hour'
+    # Rate limit for the /api/v1 namespace. Only 401 responses deduct from
+    # the bucket (see application/api/views.py), so legitimate polling
+    # never spends quota. Picked generous enough that a misconfigured
+    # monitoring agent producing repeated 401s does not lock out the whole
+    # API for the rest of the hour, while still throttling credential
+    # stuffing. Set tighter via local_config.py if your network is fully
+    # trusted, or looser if you have many polling clients.
+    API_RATE_LIMIT = '30 per minute; 300 per hour'
     # Flask-Limiter storage backend. Default is in-process memory, which is
     # fine for single-worker deployments. For multiple workers, set to
     # e.g. 'redis://localhost:6379' or 'mongodb://localhost:27017/cmdb-api'.

{cmdbsyncer-4.1.0.dev21 → cmdbsyncer-4.1.1}/application/helpers/local_config_presets.py

@@ -158,6 +158,11 @@ PRESETS = [
              'default': '3 per minute; 10 per hour',
              'hint': 'Per-IP rate limit for login + password-reset POSTs '
                      '(Flask-Limiter syntax).'},
+            {'key': 'API_RATE_LIMIT', 'type': 'str',
+             'default': '30 per minute; 300 per hour',
+             'hint': 'Per-IP rate limit for /api/v1. Only 401 responses '
+                     'count, so legitimate polling never spends quota. '
+                     'Raise if your monitoring polls many endpoints.'},
             {'key': 'RATELIMIT_STORAGE_URI', 'type': 'str',
              'default': 'memory://',
              'hint': 'Backend for rate-limit counters. Use redis:// or '

{cmdbsyncer-4.1.0.dev21 → cmdbsyncer-4.1.1}/application/templates/admin/ansible_playbook_run.html

@@ -22,7 +22,7 @@
   }
   .ansible-runner-card label {
     font-size: 11px;
-    color: #555;
+    color: var(--surface-muted, #555);
     margin: 0 0 2px 0;
     display: block;
     text-transform: uppercase;
@@ -32,11 +32,12 @@
     font-size: 14px;
     font-weight: 600;
     padding: 6px 0 0 0;
+    color: var(--surface-text, inherit);
   }
   .ansible-runner-card .playbook-file {
     font-family: monospace;
     font-size: 11px;
-    color: #888;
+    color: var(--surface-muted, #888);
     padding-bottom: 4px;
   }
   .ansible-runner-card input.form-control {
@@ -46,8 +47,8 @@
   .ansible-empty {
     padding: 24px;
     text-align: center;
-    color: #888;
-    border: 1px dashed #ccc;
+    color: var(--surface-muted, #888);
+    border: 1px dashed var(--surface-border, #ccc);
     border-radius: 4px;
   }
 </style>

{cmdbsyncer-4.1.0.dev21 → cmdbsyncer-4.1.1}/cmdbsyncer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cmdbsyncer
-Version: 4.1.0.dev21
+Version: 4.1.1
 Summary: Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems
 Author-email: Kuhn & Ruess GmbH <info@kuhn-ruess.de>
 Maintainer-email: Bastian Kuhn <mail@bastian-kuhn.de>

{cmdbsyncer-4.1.0.dev21 → cmdbsyncer-4.1.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cmdbsyncer"
-version = "4.1.0.dev21"
+version = "4.1.1"
 description = "Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems"
 readme = "README.md"
 license = { text = "MIT" }

cmdbsyncer-4.1.0.dev21/application/buildinfo.txt

@@ -1 +0,0 @@
-BUILD_DATE=2026-05-13T08:04:42Z