.fmf/version

@@ -1 +0,0 @@
-1

.gitignore

@@ -1,73 +1,22 @@
-/backports-3.24.1.gem
+SOURCES/HAM-logo.png
-/childprocess-4.1.0.gem
+SOURCES/backports-3.24.1.gem
-/dacite-1.8.1.tar.gz
+SOURCES/dacite-1.8.1.tar.gz
-/ethon-0.16.0.gem
+SOURCES/dataclasses-0.8.tar.gz
-/ffi-1.16.3.gem
+SOURCES/ethon-0.16.0.gem
-/mustermann-3.0.0.gem
+SOURCES/ffi-1.16.3.gem
-/nio4r-2.5.9.gem
+SOURCES/json-2.6.3.gem
-/pcs-0.11.7.tar.gz
+SOURCES/mustermann-2.0.2.gem
-/pcs-web-ui-0.1.18.tar.gz
+SOURCES/nio4r-2.5.9.gem
-/pcs-web-ui-node-modules-0.1.18.tar.xz
+SOURCES/open4-1.3.4-1.gem
-/puma-6.4.0.gem
+SOURCES/pcs-0.10.18.tar.gz
-/pyagentx-0.4.pcs.2.tar.gz
+SOURCES/puma-6.4.0.gem
-/pycurl-7.45.3.tar.gz
+SOURCES/pyagentx-0.4.pcs.2.tar.gz
-/rack-2.2.8.1.gem
+SOURCES/python-dateutil-2.8.2.tar.gz
-/rack-protection-3.1.0.gem
+SOURCES/rack-2.2.16.gem
-/rack-test-2.1.0.gem
+SOURCES/rack-protection-2.2.4.gem
-/ruby2_keywords-0.0.5.gem
+SOURCES/rack-test-2.1.0.gem
-/sinatra-3.1.0.gem
+SOURCES/rexml-3.4.1.gem
-/tilt-2.3.0.gem
+SOURCES/ruby2_keywords-0.0.5.gem
-/tornado-6.3.3.tar.gz
+SOURCES/sinatra-2.2.4.gem
-/backports-3.25.0.gem
+SOURCES/tilt-2.3.0.gem
-/base64-0.2.0.gem
+SOURCES/tornado-6.1.0.pcs.2.tar.gz
-/childprocess-5.0.0.gem
-/nio4r-2.7.3.gem
-/puma-6.4.2.gem
-/rack-3.0.11.gem
-/rack-protection-4.0.0.gem
-/rack-session-2.0.0.gem
-/rackup-2.1.0.gem
-/sinatra-4.0.0.gem
-/webrick-1.8.1.gem
-/tornado-6.4.0.tar.gz
-/pcs-web-ui-0.1.19.tar.gz
-/pcs-web-ui-node-modules-0.1.19.tar.xz
-/pcs-5b7d498915e0cc876b29fe9ebd709c061ac754db.tar.gz
-/pcs-0.12.0a1.tar.gz
-/pcs-web-ui-0.1.20.tar.gz
-/pcs-web-ui-node-modules-0.1.20.tar.xz
-/ffi-1.17.0.gem
-/mustermann-3.0.3.gem
-/nio4r-2.7.4.gem
-/puma-6.4.3.gem
-/rack-3.1.8.gem
-/rackup-2.2.1.gem
-/tilt-2.4.0.gem
-/pcs-0.12.0b1.tar.gz
-/pcs-web-ui-0.1.21.tar.gz
-/pcs-web-ui-node-modules-0.1.21.tar.xz
-/pcs-1353dfbb3af82d77f4de17a3fa4cbde185bb2b2d.tar.gz
-/pcs-web-ui-34372d1268f065ed186546f55216aaa2d7e76b54.tar.gz
-/pcs-web-ui-0.1.22.tar.gz
-/pcs-web-ui-node-modules-0.1.22.tar.xz
-/pcs-0.12.0.tar.gz
-/rack-3.1.10.gem
-/backports-3.25.1.gem
-/childprocess-5.1.0.gem
-/ffi-1.17.2.gem
-/puma-6.6.0.gem
-/rack-3.1.14.gem
-/rack-protection-4.1.1.gem
-/rack-session-2.1.1.gem
-/rack-test-2.2.0.gem
-/sinatra-4.1.1.gem
-/dacite-1.9.2.tar.gz
-/pcs-71bb3c8e22436db810c7c7ec1675d49e0062b2ee.tar.gz
-/pcs-web-ui-54730df523389a3c87abad7e47c44e30b33a2647.tar.gz
-/pcs-web-ui-node-modules-0.1.22+62-5473.tar.xz
-/tilt-2.6.0.gem
-/pcs-0.12.1.tar.gz
-/pcs-web-ui-0.1.23.tar.gz
-/pcs-web-ui-node-modules-0.1.23.tar.xz
-/pycurl-7.45.6.tar.gz
-/rack-3.1.16.gem

.pcs.metadata

@@ -0,0 +1,22 @@
+679a4ce22a33ffd4d704261a17c00cff98d9499a SOURCES/HAM-logo.png
+0ef72a288913e220695ad62718aeb75171924028 SOURCES/backports-3.24.1.gem
+07b26abbf7ff0dcba5c7f9e814ff7eebafefb058 SOURCES/dacite-1.8.1.tar.gz
+8b7598273d2ae6dad2b88466aefac55071a41926 SOURCES/dataclasses-0.8.tar.gz
+5b56a68268708c474bef04550639ded3add5e946 SOURCES/ethon-0.16.0.gem
+10e4cf0e11ef4581ec4ad5fe2cdf3c78b6077d39 SOURCES/ffi-1.16.3.gem
+6d78f730b7f3b25fb3f93684fe1364acf58bce6b SOURCES/json-2.6.3.gem
+f5f804366823c1126791dfefd98dd0539563785c SOURCES/mustermann-2.0.2.gem
+2f65d371f5f37460ad74afcedcb97d2b41a46806 SOURCES/nio4r-2.5.9.gem
+41a7fe9f8e3e02da5ae76c821b89c5b376a97746 SOURCES/open4-1.3.4-1.gem
+b3cd873042b17021355b68f1f7aa313f0c1f3fee SOURCES/pcs-0.10.18.tar.gz
+d6049c4555f3c9d198e6eb1d7e53ce9b68e175ff SOURCES/puma-6.4.0.gem
+3176b2f2b332c2b6bf79fe882e83feecf3d3f011 SOURCES/pyagentx-0.4.pcs.2.tar.gz
+c2ba10c775b7a52a4b57cac4d4110a0c0f812a82 SOURCES/python-dateutil-2.8.2.tar.gz
+807c69f4ebada58686cee22884623063745007c2 SOURCES/rack-2.2.16.gem
+5347315a7283f0b04443e924ed4eaa17807432c8 SOURCES/rack-protection-2.2.4.gem
+ae09ea83748b55875edc3708fffba90db180cb8e SOURCES/rack-test-2.1.0.gem
+966b1564a77719483eb61068ed1dfb638e5e8eb0 SOURCES/rexml-3.4.1.gem
+d017b9e4d1978e0b3ccc3e2a31493809e4693cd3 SOURCES/ruby2_keywords-0.0.5.gem
+fa6a6c98f885e93f54c23dd0454cae906e82c31b SOURCES/sinatra-2.2.4.gem
+4a38a9a55887b2882182a2c5771e592efe514e5e SOURCES/tilt-2.3.0.gem
+3e0fc1e17c45a8e25bdd6ade8dbbc522f64f2ae1 SOURCES/tornado-6.1.0.pcs.2.tar.gz

SOURCES/RHEL-17280-01-disable-new-webui-routes.patch

@@ -0,0 +1,55 @@
+From 957856a556f5ed92129ce602538c3df3aebce7a3 Mon Sep 17 00:00:00 2001
+From: Ivan Devat <idevat@redhat.com>
+Date: Tue, 5 Dec 2023 15:18:35 +0100
+Subject: [PATCH 2/2] disable alternative webui routes
+
+This commit is intended to be downstream only.
+
+The new web ui was part of rhel8 as a technical preview. But new web ui
+is now the main in rhel9 and there is no need to keep it in rhel8.
+To prevent unnecessary maintenance burden it is disabled now.
+No handler code is removed, just routing disabled.
+---
+ pcs/daemon/run.py | 26 ++++++++++++++++----------
+ 1 file changed, 16 insertions(+), 10 deletions(-)
+
+diff --git a/pcs/daemon/run.py b/pcs/daemon/run.py
+index 7fdeda2a..0a6b1b21 100644
+--- a/pcs/daemon/run.py
++++ b/pcs/daemon/run.py
+@@ -81,16 +81,22 @@ def configure_app(
+             routes.extend(
+                 # old web ui by default
+                 [(r"/", RedirectHandler, dict(url="/manage"))]
+-                + [(r"/ui", RedirectHandler, dict(url="/ui/"))]
+-                + ui.get_routes(
+-                    url_prefix="/ui/",
+-                    app_dir=os.path.join(public_dir, "ui"),
+-                    fallback_page_path=os.path.join(
+-                        public_dir,
+-                        "ui_instructions.html",
+-                    ),
+-                    session_storage=session_storage,
+-                )
++                # The following disabled routes was for the new web ui. The new
++                # web ui was here as a technical preview. But new web ui is now
++                # the main in rhel9 and there is no need to keep it in rhel8.
++                # To prevent unnecessary maintenance burden it is disabled now.
++                # No handler code is removed, just routing disabled.
++                #
++                # + [(r"/ui", RedirectHandler, dict(url="/ui/"))]
++                # + ui.get_routes(
++                #     url_prefix="/ui/",
++                #     app_dir=os.path.join(public_dir, "ui"),
++                #     fallback_page_path=os.path.join(
++                #         public_dir,
++                #         "ui_instructions.html",
++                #     ),
++                #     session_storage=session_storage,
++                # )
+                 + sinatra_ui.get_routes(
+                     session_storage, ruby_pcsd_wrapper, public_dir
+                 )
+-- 
+2.43.0
+

SOURCES/RHEL-65595-stop-sending-http-headers-to-ruby-part-of-pcsd.patch

@@ -0,0 +1,52 @@
+From 6142961fe0e39bdbba0d70f792fc27fb2bc096ba Mon Sep 17 00:00:00 2001
+From: Ivan Devat <idevat@redhat.com>
+Date: Thu, 7 Mar 2024 16:51:13 +0100
+Subject: [PATCH] stop sending http headers to ruby part of pcsd
+
+---
+ pcs/daemon/ruby_pcsd.py | 23 ++++++++++++++++++++++-
+ 1 file changed, 22 insertions(+), 1 deletion(-)
+
+diff --git a/pcs/daemon/ruby_pcsd.py b/pcs/daemon/ruby_pcsd.py
+index 4b3b0ea1..e07e17cc 100644
+--- a/pcs/daemon/ruby_pcsd.py
++++ b/pcs/daemon/ruby_pcsd.py
+@@ -87,13 +87,34 @@ class RubyDaemonRequest(
+         http_request: HTTPServerRequest = None,
+         payload=None,
+     ):
+-        headers = http_request.headers if http_request else HTTPHeaders()
++        # Headers from request are not propagated to ruby part. Ruby part doesn't
++        # work with standard headers in any special way. So, we send only path,
++        # method, query, body and special headers for communication between
++        # python part and ruby part. Tornado then adds necessary default
++        # headers. The motivation here is to prevent processing potentially
++        # maliciously crafted headers by rack.
++        headers = HTTPHeaders()
+         headers.add("X-Pcsd-Type", request_type)
+         if payload:
+             headers.add(
+                 "X-Pcsd-Payload",
+                 b64encode(json.dumps(payload).encode()).decode(),
+             )
++        if http_request:
++            for key, val in http_request.headers.get_all():
++                # From webui, POST request can come with either
++                # application/x-www-form-urlencoded or application/json content
++                # type. When we remove original HTTP headers, content type is
++                # added by tornado. But in the case of original application/json,
++                # tornado puts application/x-www-form-urlencoded there. To fix
++                # this let's keep the original header here in this case.
++                #
++                # The token, CIB_user and CIB_user_groups are transferred by the
++                # "Cookie" header and these information are evaluated in ruby.
++                if (
++                    key.lower() == "content-type" and val == "application/json"
++                ) or key.lower() == "cookie":
++                    headers.add(key, val)
+         return super(RubyDaemonRequest, cls).__new__(
+             cls,
+             request_type,
+-- 
+2.47.0
+

SOURCES/RHEL-90147-support-for-query-limits-in-rack.patch

@@ -0,0 +1,45 @@
+From 0ad47ec40b7a9a2cb6bdbdf11e1e5b3c59f49b8b Mon Sep 17 00:00:00 2001
+From: Miroslav Lisik <mlisik@redhat.com>
+Date: Tue, 20 May 2025 16:34:18 +0200
+Subject: [PATCH] support for query limits in rack
+
+---
+ pcsd/conf/pcsd | 6 ++++++
+ pcsd/pcsd.rb   | 5 +++++
+ 2 files changed, 11 insertions(+)
+
+diff --git a/pcsd/conf/pcsd b/pcsd/conf/pcsd
+index 98df4744..65a9c9a9 100644
+--- a/pcsd/conf/pcsd
++++ b/pcsd/conf/pcsd
+@@ -45,5 +45,11 @@ PCSD_SESSION_LIFETIME=3600
+ # is 50 (even if set lower).
+ PCSD_RESTART_AFTER_REQUESTS=200
+ 
++# These environment variables set the maximum query string bytesize and the
++# maximum number of query parameters that pcsd will attempt to parse.
++# See CVE-2025-46727 for details.
++#RACK_QUERY_PARSER_BYTESIZE_LIMIT=4194304
++#RACK_QUERY_PARSER_PARAMS_LIMIT=4096
++
+ # Do not change
+ RACK_ENV=production
+diff --git a/pcsd/pcsd.rb b/pcsd/pcsd.rb
+index 11698f54..a2634e4e 100644
+--- a/pcsd/pcsd.rb
++++ b/pcsd/pcsd.rb
+@@ -90,6 +90,11 @@ configure do
+   CAPABILITIES_PCSD = capabilities_pcsd.freeze
+ end
+ 
++error Rack::QueryParser::QueryLimitError do
++  $logger.warn(env['sinatra.error'].message)
++  return 400, env['sinatra.error'].message
++end
++
+ def run_cfgsync
+   node_connected = true
+   if Cfgsync::ConfigSyncControl.sync_thread_allowed?()
+-- 
+2.49.0
+

SOURCES/do-not-support-cluster-setup-with-udp-u-transport.patch

@@ -0,0 +1,53 @@
+From 854efcf148c82e5a5e4f0afd71cc3333ea4a8ce4 Mon Sep 17 00:00:00 2001
+From: Ivan Devat <idevat@redhat.com>
+Date: Tue, 20 Nov 2018 15:03:56 +0100
+Subject: [PATCH 1/2] do not support cluster setup with udp(u) transport
+
+---
+ pcs/pcs.8.in              | 2 ++
+ pcs/usage.py              | 1 +
+ pcsd/public/css/style.css | 3 +++
+ 3 files changed, 6 insertions(+)
+
+diff --git a/pcs/pcs.8.in b/pcs/pcs.8.in
+index d504e8b4..93202d05 100644
+--- a/pcs/pcs.8.in
++++ b/pcs/pcs.8.in
+@@ -438,6 +438,8 @@ By default, encryption is enabled with cipher=aes256 and hash=sha256. To disable
+ 
+ Transports udp and udpu:
+ .br
++WARNING: These transports are not supported in RHEL 8.
++.br
+ These transports are limited to one address per node. They do not support traffic encryption nor compression.
+ .br
+ Transport options are: ip_version, netmtu
+diff --git a/pcs/usage.py b/pcs/usage.py
+index f4b84202..ee10370a 100644
+--- a/pcs/usage.py
++++ b/pcs/usage.py
+@@ -1038,6 +1038,7 @@ Commands:
+             hash=sha256. To disable encryption, set cipher=none and hash=none.
+ 
+         Transports udp and udpu:
++        WARNING: These transports are not supported in RHEL 8.
+         These transports are limited to one address per node. They do not
+         support traffic encryption nor compression.
+         Transport options are:
+diff --git a/pcsd/public/css/style.css b/pcsd/public/css/style.css
+index 2f26e831..a7702ac4 100644
+--- a/pcsd/public/css/style.css
++++ b/pcsd/public/css/style.css
+@@ -949,6 +949,9 @@ table.args-table td.reg {
+   width: 6ch;
+   text-align: right;
+ }
++#csetup-transport .transport-types {
++  display: none;
++}
+ #csetup-transport-options.udp .knet-only,
+ #csetup-transport-options.knet .without-knet
+ {
+-- 
+2.43.0
+

do-not-support-cluster-setup-with-udp-u-transport.patch

@@ -1,39 +0,0 @@
-From b81cb787380e1d09919a758070966a7805815937 Mon Sep 17 00:00:00 2001
-From: Michal Pospisil <mpospisi@redhat.com>
-Date: Thu, 23 May 2024 17:22:12 +0200
-Subject: [PATCH 1/2] do not support cluster setup with udp(u) transport in
- RHEL10
-
----
- pcs/pcs.8.in | 2 ++
- pcs/usage.py | 1 +
- 2 files changed, 3 insertions(+)
-
-diff --git a/pcs/pcs.8.in b/pcs/pcs.8.in
-index e2ca2d59..051de0c4 100644
---- a/pcs/pcs.8.in
-+++ b/pcs/pcs.8.in
-@@ -479,6 +479,8 @@ By default, encryption is enabled with cipher=aes256 and hash=sha256. To disable
- 
- Transports udp and udpu:
- .br
-+WARNING: These transports are not supported in RHEL 10.
-+.br
- These transports are limited to one address per node. They do not support traffic encryption nor compression.
- .br
- Transport options are: ip_version, netmtu
-diff --git a/pcs/usage.py b/pcs/usage.py
-index ac1376f2..187d0b1a 100644
---- a/pcs/usage.py
-+++ b/pcs/usage.py
-@@ -1502,6 +1502,7 @@ Commands:
-             hash=sha256. To disable encryption, set cipher=none and hash=none.
- 
-         Transports udp and udpu:
-+        WARNING: These transports are not supported in RHEL 10.
-         These transports are limited to one address per node. They do not
-         support traffic encryption nor compression.
-         Transport options are:
--- 
-2.50.0
-

gating.fmf

@@ -1,49 +0,0 @@
-summary: PCS gating test plan
-description: Runs upstream tier0, tier1 and smoke tests
-
-discover:
-    how: shell
-    dist-git-source: true
-    tests:
-        # Workaround until tmt supports patching sources
-        - name: Patch sources and run autotools
-          test: ./prepare-env.sh
-          duration: 30m
-        - name: Tier 0 tests
-          test: ./builddir/pcs-*/pcs_test/suite --tier0 -v --vanilla --installed
-          duration: 10m
-        - name: Tier 1 tests
-          test: ./builddir/pcs-*/pcs_test/suite --tier1 -v --vanilla --installed
-          duration: 2h
-        - name: Smoke tests
-          test: |
-              systemctl start pcsd
-              ./builddir/pcs-*/pcs_test/smoke.sh
-          duration: 10m
-prepare:
-    - name: Install packages
-      how: install
-      package:
-          - autoconf
-          - automake
-          - make
-          - diffstat
-          - rpm-build
-          - ruby-devel
-          - git-core
-          - booth-site
-          - fence-agents-apc
-          - fence-agents-ipmilan
-          - fence-agents-scsi
-          - fence-virt
-          - openssl
-          - pcs
-          - pcs-snmp
-          - python3-pip
-          - python3-setuptools_scm
-          - python3-wheel
-          - rubygem-json
-          - rubygem-test-unit
-          - wget
-execute:
-    how: tmt

gating.yaml

@@ -1,7 +0,0 @@
-# recipients: idevat,mlisik,mpospisi,omular,tojeline
---- !Policy
-product_versions:
-  - rhel-10
-decision_context: osci_compose_gate
-rules:
-  - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}

prepare-env.sh

@@ -1,18 +0,0 @@
-set -eo xtrace
-# Rpmbuild expects patches in the _sourcedir
-find *.patch &> /dev/null && mv *.patch $TMT_SOURCE_DIR
-mkdir builddir
-rpmbuild -bp pcs.spec --nodeps --define "_sourcedir $TMT_SOURCE_DIR" \
-  --define "_builddir $(pwd)/builddir"
-# Remove *SPECPARTS folders generated by rpmbuild
-rm -rfv builddir/*SPECPARTS
-# Remove pcs-web-ui in builddir for "cd pcs-*" to have exactly one match
-rm -rf builddir/pcs-web-ui-*
-cd builddir/pcs-*
-# Run autotools, use bundled dependencies from the system
-export PYTHONPATH=/usr/lib64/pcs/pcs_bundled/packages/
-export GEM_HOME=/usr/lib64/pcsd/vendor/bundle/
-./autogen.sh
-./configure
-# Remove pcs sources to make sure tests are not using any of those files
-rm -rf pcs

rpminspect.yaml

@@ -1,8 +0,0 @@
-xml:
-    # exclude ruby templates from checks
-    exclude_path: .*\.erb$
-
-shellsyntax:
-    # exclude ruby templates from checks
-    ignore:
-        - /usr/lib*/pcsd/vendor/bundle/gems/thin*/lib/thin/controllers/*.erb

show-info-page-instead-of-webui.patch

@@ -1,148 +0,0 @@
-From 1ba74b14e91c49c0e6f5618f5572748dc4e1e11e Mon Sep 17 00:00:00 2001
-From: Ivan Devat <idevat@redhat.com>
-Date: Tue, 5 Nov 2024 16:35:02 +0100
-Subject: [PATCH 2/2] show info page instead of webui
-
----
- pcs/Makefile.am                      |  1 +
- pcs/daemon/app/webui_info_handler.py | 31 ++++++++++++++++++++++++++++
- pcs/daemon/run.py                    |  4 +++-
- pcs_test/smoke.sh.in                 |  4 ++--
- pcsd/public/ui_instructions.html     | 26 ++++++++++-------------
- 5 files changed, 48 insertions(+), 18 deletions(-)
- create mode 100644 pcs/daemon/app/webui_info_handler.py
-
-diff --git a/pcs/Makefile.am b/pcs/Makefile.am
-index 1297473f..8d4b9307 100644
---- a/pcs/Makefile.am
-+++ b/pcs/Makefile.am
-@@ -219,6 +219,7 @@ EXTRA_DIST		= \
- 			  daemon/app/webui/core.py \
- 			  daemon/app/webui/session.py \
- 			  daemon/app/webui/sinatra_ui.py \
-+			  daemon/app/webui_info_handler.py \
- 			  daemon/async_tasks/__init__.py \
- 			  daemon/async_tasks/scheduler.py \
- 			  daemon/async_tasks/task.py \
-diff --git a/pcs/daemon/app/webui_info_handler.py b/pcs/daemon/app/webui_info_handler.py
-new file mode 100644
-index 00000000..3ab8275b
---- /dev/null
-+++ b/pcs/daemon/app/webui_info_handler.py
-@@ -0,0 +1,31 @@
-+from pcs.daemon.app.common import (
-+    BaseHandler,
-+    RoutesType,
-+)
-+
-+
-+class _WebuiInfoHandler(BaseHandler):
-+    __path = None
-+
-+    def initialize(self, path):
-+        self.__path = path
-+
-+    def get(self):
-+        self.set_status(404)
-+        self.render(self.__path)
-+
-+
-+def get_routes(path: str) -> RoutesType:
-+    return [
-+        # The following two rules can be compressed into one: r"/(ui/?)?".
-+        # However, the content of the parentheses used here should be captured
-+        # and passed in to the handler’s get method as an argument.
-+        # Unfortunately, it seems that tornado version 6.4.1 don't pass this
-+        # argument (unlike version 6.3.3). Maybe it's a bug (it needs further
-+        # inspection). These rules are a safe way to avoid surprises.
-+        # Moreover, the captured parameter is irrelevant to the functionality
-+        # of the handler.
-+        (r"/", _WebuiInfoHandler, dict(path=path)),
-+        (r"/ui/?", _WebuiInfoHandler, dict(path=path)),
-+        (r"/ui/.*", _WebuiInfoHandler, dict(path=path)),
-+    ]
-diff --git a/pcs/daemon/run.py b/pcs/daemon/run.py
-index 558315c2..cfe9999f 100644
---- a/pcs/daemon/run.py
-+++ b/pcs/daemon/run.py
-@@ -33,6 +33,7 @@ from pcs.daemon.app import (
-     auth,
-     sinatra_remote,
-     sinatra_ui,
-+    webui_info_handler,
- )
- from pcs.daemon.app import capabilities as capabilities_app
- 
-@@ -168,7 +169,8 @@ def configure_app(  # noqa: PLR0913
-             # Even with disabled (standalone) webui the following routes must be
-             # provided because they can be used via unix socket from cockpit.
-             routes.extend(
--                sinatra_ui.get_routes(auth_provider, ruby_pcsd_wrapper)
-+                webui_info_handler.get_routes(webui_fallback)
-+                + sinatra_ui.get_routes(auth_provider, ruby_pcsd_wrapper)
-             )
- 
-         return Application(
-diff --git a/pcs_test/smoke.sh.in b/pcs_test/smoke.sh.in
-index fdfe8be2..a9bb8344 100755
---- a/pcs_test/smoke.sh.in
-+++ b/pcs_test/smoke.sh.in
-@@ -71,10 +71,10 @@ if [ "$webui_http_code_response" = "200" ]; then
-   curl --insecure --cookie ${cookie_file} --header "X-Requested-With: XMLHttpRequest" --data "hidden[hidden_input]=&config[stonith-enabled]=false" https://localhost:2224/managec/${cluster_name}/update_cluster_settings > "${output_file}"
-   cat "${output_file}"; echo ""
-   [ "$(cat ${output_file})" = "Update Successful" ]
--elif [  "$webui_http_code_response" = "401"  ]; then
-+elif [  "$webui_http_code_response" = "404"  ]; then
-   curl --insecure  https://localhost:2224/ui/ > "${output_file}"
-   cat "${output_file}"; echo ""
--  [ "$(cat "${output_file}")" = '{"notauthorized":"true"}' ]
-+  grep "HA cluster management has been moved" "${output_file}"
- else
-   echo "Unexpected response from https://localhost:2224/ui/ - http code: '${webui_http_code_response}'"
-   exit 1
-diff --git a/pcsd/public/ui_instructions.html b/pcsd/public/ui_instructions.html
-index a120ed3d..ac0117c8 100644
---- a/pcsd/public/ui_instructions.html
-+++ b/pcsd/public/ui_instructions.html
-@@ -1,27 +1,23 @@
- <!DOCTYPE html>
- <html>
- <head>
--  <title>Pcs WebUI instructions</title>
-+  <title>HA cluster management has been moved</title>
-   <meta charset="utf-8" />
- </head>
- <body>
--  <h1>Pcs WebUI instructions</h1>
-+  <h1>HA cluster management has been moved</h1>
-   <p>
--  WebUI is not a part of pcs repository but it has its own
--  <a href="https://github.com/ClusterLabs/pcs-web-ui">repository</a>.
-+    Since RHEL 10, pcsd web UI is no longer available. Management of high
-+    availability clusters has been<br>moved to an add-on for the RHEL web
-+    console.  The HA Cluster Management add-on can be installed<br>from within
-+    the RHEL web console or by installing the <code>cockpit-ha-cluster</code>
-+    RPM package.
-   </p>
-   <p>
--  You can clone <a href="https://github.com/ClusterLabs/pcs-web-ui">WebUI repository</a>
--  and build the web application into pcs by:
--  </p>
--  <pre><code>
--    $ npm install
--    $ npm run build
--    $ mv ./build [/path/to/]pcs/pcsd/public/ui
--  </code></pre>
--  <p>
--  For more details, see instructions in
--  <a href="https://github.com/ClusterLabs/pcs-web-ui/blob/main/README.md">README.md</a>.
-+    To learn more, please visit:
-+    <a href="https://access.redhat.com/solutions/7099451">
-+      https://access.redhat.com/solutions/7099451
-+    </a>
-   </p>
- </body>
- </html>
--- 
-2.50.0
-

sources

@@ -1,21 +0,0 @@
-SHA512 (ethon-0.16.0.gem) = 3b31affcee0d5a5be05b5497d4a8d13515f8393f54579a3a9c8de49f78d3f065bb92659434b023f0a8bf8e0cccfbc94b617695b93c4d3f744cccd1eff2e68905
-SHA512 (pyagentx-0.4.pcs.2.tar.gz) = d4194fec9a3e5fefe3793d49b7fec1feafef294c7e613a06046c2993daeefc5cb39d7c5b2b402ff83e49b2d976953f862264288c758c0be09d997b5323cc558a
-SHA512 (base64-0.2.0.gem) = ee5cdc30e73e625c15cb674cdd16a839ad44ffb0a27d1363f94491b48d95da37a2976c34f6f616b722a35750a067eb2245c4746d7d36f8e9a9ecee68ff5540fb
-SHA512 (mustermann-3.0.3.gem) = d205985a5da83d83248899642ed359056b0cdb511e77d51309319c2f8d8b6c84040e9e1d3a56b7f83a0b26aed4b344f4df371b310e419c20170f0a486e89ba6f
-SHA512 (nio4r-2.7.4.gem) = 6c8280484066ffc39e98b99dfaf5a69fe2a28cafb380924f448673fda8b69b5d97f8b75b8345b91d92f6186f0664e09bec8e1c7c19c070219b030f554824d2ac
-SHA512 (rackup-2.2.1.gem) = e63c4dee6f1a677d507df0ae7bcebec88673e7a0a8d6621997949045db60801907038a148a0608f6e62864cb2ac056fca382f3438dc227b0fa7a3be52d56ea66
-SHA512 (backports-3.25.1.gem) = a69f9b38d5f2b868a0823c3e2750b01e0d1a5c8b52c5e49a04de13fd0fd7262e881768f583c6545c4257bb12a20d6531d0a5132173ee629ee7464db2421dbbc4
-SHA512 (childprocess-5.1.0.gem) = 487ee82e6e7cc1e81ed6740e3eb54e12e9d1065de92eda71f48039e377db8a827c647ce6c9314157ece577be52519bbe014aadcda4a7a748589fad7dbf19ae3a
-SHA512 (ffi-1.17.2.gem) = 61fd30c546d9d4a695dd3954eba205cd6ddf36f2c67eb2f823591a6ece540d2d11fcc792704218d969d21bf7111e36bc54f40e5d9eeb1be4fdb06274a17bec13
-SHA512 (puma-6.6.0.gem) = 3f6563fe0520249c8be911a726b1a1a02941c4336491b46716b132a0b5723f0ca4b2df16f1c9c2f2919e9343df929d1e2f620c3adab589c7013fe87fa41560fb
-SHA512 (rack-protection-4.1.1.gem) = 0f5fd96d93eab654a7333fe75772b460e91b129da143df420f84ac259f2e24e3b1cf5a1892c1edd2dee3a2ed456cd025ae49dc961c7122a1852de3f15f77d1b1
-SHA512 (rack-session-2.1.1.gem) = 2cb385879a6d5e67056303daee861e1a45d75571bf68a5339f9c23ba512aa29f4cc1473d60de6f8ed7c0a0ea2932ad83657e54686725346783a135352ce7a03c
-SHA512 (rack-test-2.2.0.gem) = 9c758151d89d86f04a92ba20c43221c4346b8d23f62accb955e759f85910c0e179a5c2e1ff74f131f337afd6b6ae72c36f5d53f600649480769a29468e14f44a
-SHA512 (sinatra-4.1.1.gem) = bf6c75a2f5e38cfb8442f481c491efb132dbf37a114e8ee35a4d24dd6f3b882f967a3c542cbafdcaf96242b39f5d78b77271adc562a2ee002b8790a73c99a7e9
-SHA512 (dacite-1.9.2.tar.gz) = 69513bc1acd43e45a208ce4b4186072f92d9057a6a88c77d56f21405fbed7964d94fe4f6a37c99754a793caa2bd0584664dfab69169ef0d3564bb09d37769e59
-SHA512 (tilt-2.6.0.gem) = 96aad6e3dfa542d0f11a4c96faa99c724723fe10029dae58f9662f9ef07198cf4d3ffea56899b7f88d8738a01effade00591318900364798fad9a41cd95397b2
-SHA512 (pcs-0.12.1.tar.gz) = 90c95b0056377ba0d0710092bb2d8106fecd605a2431b45a41783dd4a7842ea9639f80d2ec31ee6987e4bc397f5fd9f071c9d23098621f899ef8e1cc0e3e74ad
-SHA512 (pcs-web-ui-0.1.23.tar.gz) = ac4ab488388e279f585bc69a30c949613b3da7b27601d36a0f5435c102ba1a3913ec6bc4482239cebdc63e245fe10ee9fa8f16e354f793fb6395646741633537
-SHA512 (pcs-web-ui-node-modules-0.1.23.tar.xz) = f39dd1fd391f10b874b5fec34da1a2f2496d66b31af736ee1dfc2ef6e0b518efd03053fd00312c84e10a33ffda492e12d48a898a21efb6241e5459828e500e80
-SHA512 (pycurl-7.45.6.tar.gz) = 4eb53cbb3c8801950c76adb920b30919ca9f70e3f93dcef898d048244c475ec4a135590d173398efeb7642be33c11cb1742cb2519713088223870141e0cef8b3
-SHA512 (rack-3.1.16.gem) = 65d8863d2d33a3ce5106cd8ac647389133eab0acfe5fa0cb02dff246313fdbc726c89f495c73e814258694b22508736958170d114edce8b7c15b7c444c7dcaa0