Commit Graph

177 Commits

Author SHA1 Message Date
Rich Megginson
86eefbad8d ad_integration - leaks credentials when in check_mode
Resolves:rhbz#2223764
ad_integration - leaks credentials when in check_mode
2023-08-22 07:20:48 -06:00
Rich Megginson
a0cc364663 second RC for 1.22.0 rhel 8.9 and 9.3
Resolves:rhbz#2232241
kdump - "Write new authorized_keys if needed" task idempotency issues

Resolves:rhbz#2232231
kdump - system role fails if kdump_ssh_user doesn't have a .ssh/authorized_keys file in home directory

Resolves RHEL-1397
kdump - fix: ensure .ssh directory exists for kdump_ssh_user on kdump_ssh_server

Resolves RHEL-1499
kdump - fix: Ensure authorized_keys management works with multiple hosts

Resolves:rhbz#2223764
firewall - fix: reload on resetting to defaults

Resolves RHEL-1495
firewall - fix: files: overwrite firewalld.conf on previous replaced

Resolves RHEL-1497
storage - fix: use stat.pw_name, stat.gr_name instead of owner, group

  sshd README remove upstream only docs
  first RC for 1.22.0 rhel 8.9 and 9.3
  fix firewall reload test gather facts
2023-08-21 14:00:39 -06:00
Rich Megginson
374357ec37 first RC candidate for 8.9/9.3 - 1.22.0-1
Resolves:rhbz#2223764 : firewall - fix: reload on resetting to defaults
sshd README remove upstream only docs
first RC for 1.22.0 rhel 8.9 and 9.3
2023-08-15 11:12:02 -06:00
Rich Megginson
05326c5f92 podman rootless quadlets, secrets
Resolves:rhbz#2179455
podman - support quadlet units
Fix rootless quadlets, secrets
2023-08-10 08:31:49 -06:00
Rich Megginson
83fcfac874 firewall ipset and tests
firewall - missing module in linux-system-roles.firewall to create an ipset
Resolves:rhbz#2229802
2023-08-09 17:15:48 -06:00
Rich Megginson
faabc68125 podman, firewall, rhc, kdump updates
firewall - fix: reload on resetting to defaults
Resolves:rhbz#2223764

podman - Podman system role:  Unable to use podman_registries_conf to set unqualified-search-registries
Resolves:rhbz#2211984

rhc - baseurl in rhsm.conf is empty when rhc_baseurl is not specified
Resolves:rhbz#2227821

kdump - use failure_action instead of default on EL9 and later
Resolves RHEL-906

firewall - Check mode fails with replacing previous rules
Resolves RHEL-898

firewall - Ansible RHEL firewall system role not idempotent when configuring the interface using the role in rhel9
Resolves RHEL-885

podman - use getsubids to look for subuid, subgid for IdM support
Resolves RHEL-865

podman - allow to not pull images, continue if image pull fails
Resolves RHEL-857
2023-08-02 06:53:15 -06:00
Rich Megginson
9442dd700b systemd role update
systemd - system role for managing systemd units
Resolves:rhbz#2224384
2023-07-26 07:26:51 -06:00
Rich Megginson
e349d4a003 keylime_server role
keylime_server - system role for managing keylime servers
Resolves:rhbz#2224385
2023-07-25 17:07:23 -06:00
Rich Megginson
9129607eee new role systemd; fix fact gathering; podman quadlet; others
firewall - should have option to disable conflicting services
Resolves:rhbz#2222761

podman - allow container networking configuration
Resolves:rhbz#2161712

podman - support for healthchecks and healthcheck actions
Resolves:rhbz#2179457

podman - support quadlet units
Resolves:rhbz#2179455

systemd - system role for managing systemd units
Resolves:rhbz#2224384

ALL - facts being gathered unnecessarily
Resolves:rhbz#2223032

certificate - rhel-system-roles.certificate does not re-issue after updating key_size
Resolves:rhbz#2224138

firewall - Check mode fails when creating new firewall service
Resolves:rhbz#2222428

storage - RAID volume pre cleanup - remove existing data from member disks as needed before creation
Resolves:rhbz#2224090

firewall - when firewalld.service is masked, firewall role fails
Resolves:rhbz#2123859
2023-07-21 08:57:15 -06:00
Rich Megginson
c8785aa8cd certificate and network
certificate - add mode parameter to change permissions for cert files
Resolves:rhbz#2180902

network - Support no-aaaa DNS option
Resolves:rhbz#2218592
2023-07-10 11:16:21 -06:00
Rich Megginson
0efeefa594 certificate and network
certificate - add mode parameter to change permissions for cert files
Resolves:rhbz#2180902

network - Support no-aaaa DNS option
Resolves:rhbz#2218592
2023-07-10 10:58:50 -06:00
Rich Megginson
92a5021ede storage test fix
storage - [RHEL8] Unexpected behavior when creating ext4 filesystem with invalid parameter
Resolves:rhbz#2213691
2023-07-09 17:47:52 -06:00
Rich Megginson
81d4e5f1c1 firewall, ssh
ssh - add ssh_backup option with default true
Resolves:rhbz#2216753

firewall - Don't install python(3)-firewall it's a dependency of firewalld
Resolves:rhbz#2216520
2023-06-23 08:39:32 -06:00
Rich Megginson
f33da7dfae storage resize
storage - Storage: mounted devices that are in use cannot be resized
Resolves:rhbz#2168692
2023-06-22 11:42:46 -06:00
Rich Megginson
e8f086ad49 kdump crashkernel
kdump - support auto_reset_crashkernel, dracut_args, deprecate /etc/sysconfig/kdump
Resolves:rhbz#2211187
2023-06-20 13:00:50 -06:00
Rich Megginson
b6d3c8974e ad_integration - add ad_integration_force_rejoin
ad_integration - add ad_integration_force_rejoin
Resolves:rhbz#2186253
2023-06-07 19:51:13 -06:00
Rich Megginson
c185e917eb updates for network, rhc, selinux, storage
network - Support configuring auto-dns setting
Resolves:rhbz#2211194

rhc - implement rhc_proxy.scheme
Resolves:rhbz#2211748

selinux - use restorecon -T 0 on supported platforms
Resolves:rhbz#2179460

storage - RFE for the storage system role to support configuring the stripe size for RAID LVM volumes
Resolves:rhbz#2181656

storage - [RHEL9]  Failed to commit changes to disk: Failed to format device: Input/output error
Resolves:rhbz#2210916
2023-06-06 16:54:09 -06:00
Rich Megginson
8a3fe12adc storage role update
storage - [RFE] user-specified mount point owner and permissions
Resolves:rhbz#2181657

storage - Cannot set chunk size for RAID: Unsupported parameters for (blivet) module: pools.raid_chunk_size
Resolves:rhbz#2193058

storage - [RHEL9]  Failed to commit changes to disk: Failed to format device: Input/output error
Resolves:rhbz#2210916
2023-05-30 18:51:50 -06:00
Rich Megginson
17eff1975a updates for gather_facts, rhc insights tags, tlog proxy provider
rhc - system role does not apply Insights tags
Resolves:rhbz#2209200

tlog - use the proxy provider - the files provider is deprecated in sssd
Resolves:rhbz#2179458

roles should support running with gather_facts: false
Resolves:rhbz#2190502
2023-05-30 13:01:46 -06:00
Rich Megginson
94fdbccf4d Initial official build for 9.3/8.9 - new role postgresql
fingerprint in config files managed by roles
Resolves:rhbz#2185062

ha_cluster - Add possibility to load SBD watchdog kernel modules
Resolves:rhbz#2185067

ha_cluster - support for resource and operation defaults
Resolves:rhbz#2185065

postgresql - [RFE] system role for PostgreSQL management
Resolves:rhbz#2151373

rhc - [RFE] New role for Red Hat subscription management, insights management [rhel-9.3.0]
Resolves:rhbz#2179026

ha_cluster - use pcs to setup qdevice certificates if available
Resolves:rhbz#2185066

spec: Remove doc fragments from vendored modules
Resolves:rhbz#2185002

use ansible-galaxy collection build/install instead of tar
Resolves:rhbz#2175324

rhc - RHC system role: activation key registration fails if system is already registered
Resolves:rhbz#2186218

selinux - failing test - sshd/tests_firewall_selinux.yml - No package matching 'firewalld' found available, installed or updated
Resolves:rhbz#2190501
2023-05-04 07:52:00 -06:00
Sergei Petrosian
df519d40e3 Remove doc fragments with sed oneliner 2023-04-11 19:01:51 +02:00
Sergei Petrosian
7d7acf657f Add changelog entry and bump release 2023-04-06 15:05:09 +02:00
Sergei Petrosian
7557e6a1ad Remove doc_fragments from vendored modules and fix collection_artifact 2023-04-06 15:04:58 +02:00
Rich Megginson
b3d9ac7c21 rhc - New Role - Red Hat subscription management, insights management
rhc - New Role - Red Hat subscription management, insights management
Resolves:rhbz#2141330
2023-03-16 18:40:15 -06:00
Rich Megginson
1c7276f10a remove rhc role for now
Resolves:rhbz#2141330 : rhc - new role for subscription management/registration/insights
remove role until https://bugzilla.redhat.com/show_bug.cgi?id=2171829 is fixed
2023-02-27 12:02:13 -07:00
Rich Megginson
a742d407f4 network - RedHat Role rhel-system-roles.network should route traffic via correct bond
network - RedHat Role rhel-system-roles.network should route traffic via correct bond
Resolves:rhbz#2168735
2023-02-20 10:36:05 -07:00
Rich Megginson
0d789e9ce6 rhc - vendor in modules; ha_cluster - stonith watchdog
rhc - new role for subscription management/registration/insights
Resolves:rhbz#2141330

ha_cluster - Fix stonith watchdog timeout
Resolves:rhbz#2167528
2023-02-16 10:41:02 -07:00
Rich Megginson
cabddb158e New role rhc; fix ad_integration network DNS issue
rhc - new role for subscription management/registration/insights
Resolves:rhbz#2141330

ad_integration - fix issue with using the network role to configure DNS
2023-02-15 17:59:41 -07:00
Rich Megginson
9f4adf5a90 Fix selinux idempotency; fix nbde_server test problem
selinux - managing modules is not idempotent
Resolves:rhbz#2160152

fix nbde_server test problem
2023-02-09 18:31:03 -07:00
Rich Megginson
fbebdc0522 Add journald role; nbde_client fixes; selinux idempotency; storage and podman tests
journald - New role - journald - manage systemd-journald
Resolves:rhbz#2165175

nbde_client - nbde_client_clevis fails with a traceback and prints sensitive data
Resolves:rhbz#2162782

selinux - managing modules is not idempotent
Resolves:rhbz#2160152

fix storage tests_swap and tests_misc - swap size < 128GB on EL7
fix podman general-meta issue
2023-02-03 16:05:35 -07:00
Rich Megginson
ea1134c9da Sync with Fedora; network fact gathering
network - role should support running tests with ANSIBLE_GATHERING=explicit
Resolves:rhbz#2100559

Synchronize automation-related changes from Fedora spec file
Resolves:rhbz#2149678
2023-01-26 16:11:05 -07:00
Rich Megginson
33ef5a3554 ha_cluster updates; community.general 6.2.0; community.general fixup for rhc
ha_cluster - Allow quorum device configuration
Resolves:rhbz#2140804

ha_cluster - Allow enabled SBD on disabled cluster
Resolves:rhbz#2153030

ha_cluster - use no_log in tasks looping over pot. secret parameters
Resolves:rhbz#2143816

community.general 6.2.0

replace community.general with namespace.name for rhc role
2023-01-13 08:39:57 -07:00
Rich Megginson
bae56b6fff storage package update
storage - [RHEL9]  ansible.parsing.yaml.objects.AnsibleUnicode object' has no attribute 'bytes'
Resolves:rhbz#2143246

storage - [RHEL9] disks_needed need to be set for the raid test cases
Resolves:rhbz#2128467

storage - [RHEL9 system role]  storage role vdo tests failed about  "VDO deduplication is off but it should not"
Resolves:rhbz#2123594

storage - [RHEL9] tests_create_thinp_then_remove_scsi_generated.yml failed at "assertion": "(storage_test_expected_size|int - storage_test_actual_size.bytes)|abs / storage_test_expected_size|int < 0.01"
Resolves:rhbz#2153660
2022-12-16 18:51:15 -07:00
Rich Megginson
0621b174f7 tlog update
tlog - Unconditionally enable the files provider
Resolves:rhbz#2153043
2022-12-15 10:35:21 -07:00
Rich Megginson
78984f79cc logging update to fix tests
logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
Resolves:rhbz#2130357
2022-12-13 17:52:26 -07:00
Rich Megginson
859c62e8ac updates for firewall, ha_cluster, network, podman
ha_cluster - [RFE] convert ha_cluster role to use firewall, selinux and certificate role
Resolves:rhbz#2130010

network - Support cloned MAC address
Resolves:rhbz#2143768

podman - [RFE] role for managing podman containers and systemd
Resolves:rhbz#2143427
2022-12-12 16:11:59 -07:00
Rich Megginson
67796884eb ad_integration - new role
ad_integration - [RFE] new role to support AD integration, join to AD domain
Resolves:rhbz#2140795
2022-12-06 15:04:02 -07:00
Rich Megginson
2d2b6ec124 logging update to fix tests_relp
logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
Resolves:rhbz#2130357
2022-12-05 12:56:07 -07:00
Rich Megginson
fa1e1b4eb0 nbde_client update
nbde_client - must handle clevis-luks-askpass and clevis-luks-askpass@ systemd unit names
Resolves:rhbz#2126959
2022-12-05 09:31:38 -07:00
Rich Megginson
1bbeb1905f additional fixes for nbde_server role
nbde_server - [RFE] convert nbde_server role to use firewall and selinux role
Resolves:rhbz#2133930
2022-11-29 18:28:41 -07:00
Rich Megginson
d559ac49cc use firewall, selinux, certificate roles in other system roles
cockpit - [RFE] convert cockpit role to use firewall, selinux role, and certificate role
Resolves:rhbz#2137663

logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
Resolves:rhbz#2130357

metrics - [RFE] convert metrics role to use firewall and selinux role
Resolves:rhbz#2133528

nbde_server - [RFE] convert nbde_server role to use firewall and selinux role
Resolves:rhbz#2133930

postfix - [RFE] convert postfix role to use firewall and selinux role
Resolves:rhbz#2130329

vpn - Add parameters shared_key_content, ike, esp, type, leftid, rightid
Resolves:rhbz#2119102

vpn - [RFE] convert vpn role to use firewall and selinux role
Resolves:rhbz#2130344
2022-11-22 15:30:40 -07:00
Rich Megginson
ecbb91abc4 new role - podman
podman - [RFE] role for managing podman containers and systemd
Resolves:rhbz#2143427
2022-11-22 12:46:03 -07:00
Rich Megginson
f6f24d8216 selinux - local parameter; fix templating; ssh,sshd RequiredRSASize
selinux - add support for the 'local' parameter
Resolves:rhbz#2128843

sshd,ssh,timesync - Unexpected templating type error - expected str instance, int found
Resolves:rhbz#2129401

ssh,sshd - Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles [rhel-9.2.0]
Resolves:rhbz#2130969
2022-11-16 13:33:26 -07:00
Rich Megginson
96972c5408 network role changes for release 1.21.0 - part 2
make network role support ansible-core 2.14
fix md to adoc to html conversion for vpn and ha_cluster

network - [RFE] Support setting the metric of the default route for initscripts provider
Resolves:rhbz#2134202

network - [RFE] Support the DNS priority
Resolves:rhbz#2133858

network - Support looking up named route table in routing rule
Resolves:rhbz#2131293

network - tests_bond_options_nm.yml failing, Cannot find device "nm-bond"
Resolves:rhbz#2123311
2022-11-15 14:30:38 -07:00
Rich Megginson
611d1d3a0b network role changes for release 1.21.0
network - [RFE] Support setting the metric of the default route for initscripts provider
Resolves:rhbz#2134202

network - [RFE] Support the DNS priority
Resolves:rhbz#2133858

network - Support looking up named route table in routing rule
Resolves:rhbz#2131293

network - tests_bond_options_nm.yml failing, Cannot find device "nm-bond"
Resolves:rhbz#2123311
2022-11-08 15:38:08 -07:00
Rich Megginson
ba4945ee89 Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles
ssh,sshd - Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles
Resolves:rhbz#2129873
2022-09-27 16:25:36 -06:00
Rich Megginson
3c8b93e26e change release to 1
cockpit - Add customization of port
Resolves:rhbz#2115152

firewall - RFE: firewall-system-role: add ability to add interface to zone by PCI device ID
Resolves:rhbz#2100942

firewall - support for firewall_config - gather firewall facts
Resolves:rhbz#2115154

logging - [RFE] Support startmsg.regex and endmsg.regex in the files inputs
Resolves:rhbz#2112145

selinux - Added setting of seuser and selevel for completeness
Resolves:rhbz#2115157

nbde_client - Sets proper spacing for parameter rd.neednet=1
Resolves:rhbz#2115156

ssh sshd - ssh, sshd: RSAMinSize parameter definition is missing
Resolves:rhbz#2109998

storage - [RHEL9] [WARNING]: The loop variable 'storage_test_volume' is already in use. You should set the `loop_var` value in the `loop_control` option for the task to something else to avoid variable collisions and unexpected behavior.
Resolves:rhbz#2082736

network - fix IPRouteUtils.get_route_tables_mapping() to accept any whitespace sequence
Resolves:rhbz#2115886
2022-08-09 11:29:38 -06:00
Rich Megginson
4e1fefa681 Support for CHANGELOG.md; features and fixes for cockpit, logging, firewalll, etc.
cockpit - Add customization of port
Resolves:rhbz#2115152

firewall - RFE: firewall-system-role: add ability to add interface to zone by PCI device ID
Resolves:rhbz#2100942

firewall - support for firewall_config - gather firewall facts
Resolves:rhbz#2115154

logging - [RFE] Support startmsg.regex and endmsg.regex in the files inputs
Resolves:rhbz#2112145

selinux - Added setting of seuser and selevel for completeness
Resolves:rhbz#2115157

nbde_client - Sets proper spacing for parameter rd.neednet=1
Resolves:rhbz#2115156

ssh sshd - ssh, sshd: RSAMinSize parameter definition is missing
Resolves:rhbz#2109998

storage - [RHEL9] [WARNING]: The loop variable 'storage_test_volume' is already in use. You should set the `loop_var` value in the `loop_control` option for the task to something else to avoid variable collisions and unexpected behavior.
Resolves:rhbz#2082736

network - fix IPRouteUtils.get_route_tables_mapping() to accept any whitespace sequence
Resolves:rhbz#2115886
2022-08-09 11:08:23 -06:00
Rich Megginson
a3a2acd87e min_ansible_version; ansible-core 2.13; fixes for several roles
[RHEL9] _storage_test_pool_pvs get wrong data type in  test-verify-pool-members.yml
Resolves: rhbz#2044119

[RFE] [network] Support managing the network through nmstate schema
Resolves: rhbz#2072385

storage - support for adding/removing disks to/from storage pools
Resolves: rhbz#2072742

storage - support for attaching cache volumes to existing volumes
Resolves: rhbz#2072746

crypto_policies - rhel 8.7 default policy is FUTURE not DEFAULT
Resolves: rhbz#2100251

document minimum supported redis version required by rhel-system-roles
Resolves: rhbz#2100286

firewall - support add/modify/delete services
Resolves: rhbz#2100292

metrics - restart pmie, pmlogger if changed, do not wait for handler
Resolves: rhbz#2100294

forward_port should accept list of string or list of dict
Resolves: rhbz#2100605
2022-07-01 11:32:05 -06:00
Rich Megginson
8734be5269 sshd - fix ansible 2.9 support in meta/main.yml
sshd - fix ansible 2.9 support in meta/main.yml
Resolves: rhbz#2052086 (9.1.0)
2022-06-15 18:39:02 -06:00
Rich Megginson
9d20456a2b storage, logging, ha_cluster, sshd - minor issues
storage - fix coverity scan issue in blivet.py
Resolves: rhbz#2072745 (9.1.0)

logging - fix gather_facts/set_vars issue
Resolves: rhbz#2078989 (9.1.0)

ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
Resolves: rhbz#2093438 (9.1.0)

sshd - fix tests issue with rhel9 hosts
2022-06-13 11:02:57 -06:00
Rich Megginson
afd33087af storage LVM thin pools; striped deprecation; ha_cluster testing; firewall state optional; network testing
storage - support for creating and managing LVM thin pools/LVs
Resolves: rhbz#2072745 (9.1.0)

Update Ansible syntax in Firewall system role README.md file examples
Resolves: rhbz#2094096 (9.1.0)

storage role raid_level "striped" is not supported
Resolves: rhbz#2083410 (9.1.0)

network: the controller device is not completely cleaned up in the bond tests.
Resolves: rhbz#2089872 (9.1.0)

state no longer required for masquerade and ICMP block inversion
Resolves: rhbz#2093423 (9.1.0)

Move tasks that set up CI environment to roles tasks/ dir
Resolves: rhbz#2093438 (9.1.0)
2022-06-09 12:37:51 -06:00
Rich Megginson
72d0c45898 support gather_facts: false; snapshots; many other fixes, features
[Improvement] Allow System Role to reset to default Firewalld Settings
Resolves: rhbz#2043010

[RFE] add an option to the metrics role to enable postfix metric collection
Resolves: rhbz#2051737

sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has "Include > /etc/ssh/sshd_config.d/*.conf"
Resolves: rhbz#2052081

sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL 9
Resolves: rhbz#2052086

logging tests fail during cleanup if no cloud-init on system
Resolves: rhbz#2058799

Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run
Resolves: rhbz#2060523

timesync: basic-smoke test failure in timesync/tests_ntp.yml
Resolves: rhbz#2060524

kernel_settings error configobj not found on RHEL 8.6 managed hosts
Resolves: rhbz#2060525

Firewall system role Ansible deprecation warning related to "include"
Resolves: rhbz#2061511

ha_cluster - support advanced corosync configuration
Resolves: rhbz#2065337

network - consistently use ansible_managed in configuration files managed by role [rhel-9.1.0]
Resolves: rhbz#2065382

Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default [rhel-9.1.0]
Resolves: rhbz#2065383

metrics - consistently use ansible_managed in configuration files managed by role [rhel-9.1.0]
Resolves: rhbz#2065392

postfix - consistently use ansible_managed in configuration files managed by role [rhel-9.1.0]
Resolves: rhbz#2065393

bond: fix typo in supporting the infiniband ports in active-backup mode [rhel-9.1.0]
Resolves: rhbz#2065394

pytest failed when running with nm providers in the rhel-8.5 beaker machine [rhel-9.1.0]
Resolves: rhbz#2066911

NBDE client system role does not support servers with static IP addresses [rhel-9.1.0]
Resolves: rhbz#2070462

Tlog role - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
Resolves: rhbz#2071804

ha_cluster - add support for configuring bundle resources
Resolves: rhbz#2073519

FIPS mode detection in SSHD role is wrong
Resolves: rhbz#2073605

Logging - RFE - support template, severity and facility options
Resolves: rhbz#2075119

All roles should support running with gather_facts: false
Resolves: rhbz#2078989

[RFE] Extend rhel-system-roles.network feature set to support routing rules
Resolves: rhbz#2079622

ha_cluster - support SBD fencing
Resolves: rhbz#2079626

RFE storage Less verbosity by default
Resolves: rhbz#2079627

storage role cannot set mount_options for volumes
Resolves: rhbz#2083376

Rework the infiniband support
Resolves: rhbz#2086965
2022-05-27 09:52:48 -06:00
Rich Megginson
17407de20b kernel_settings configobj; timesync service errors on el9
kernel_settings error configobj not found on RHEL 8.6 managed hosts
Resolves: rhbz#2060525 (EL9)

timesync: basic-smoke test failure in timesync/tests_ntp.yml
Resolves: rhbz#2060524 (EL9)

(cherry picked from commit 6065b77481477ecc55f9af6638ec783cbadd1c87)
(cherry picked from commit 2575704e8a8cf17f3bff4c1c4c2dff0df48d1669)
2022-03-07 10:33:29 -07:00
Noriko Hosoi
3e1a7de782 metrics - follow symlinks for the mssql and elasticsearch configuration paths
Resolves: rhbz#2060523 (EL9)

(cherry picked from commit 6a16001f4776a7b9790a0f067e897cfe644598b1)
2022-03-07 10:33:00 -07:00
Rich Megginson
f8f3ebc370 firewall - set_default_zone, target immediate; network - fix 802 tests - epel hostapd
firewall - ensure target changes take effect immediately
Resolves: rhbz#2057164 (EL9)

firewall - Firewall RHEL System Role should be able to set default zone
Resolves: rhbz#2022461 (EL9)

network - tests_802_1x_nm, tests_802_1x_updated_nm fails because of missing hostapd in EPEL
Resolves: rhbz#2053861 (EL9)

(cherry picked from commit 0b47c4621d3a2e385463729f41aabb0f12c0805f)
2022-02-24 07:28:06 -07:00
Rich Megginson
ea9739eb49 ha_cluster permissions; network bonding; some more ansible_managed
ha_cluster - set permissions for haclient group
Resolves: rhbz#2049754 (EL9)

network - Add more bonding options to rhel-system-roles.network
Resolves: rhbz#2054435 (EL9)

network - Fix or remove failing test tests_switch_provider_RHEL9. No package network-scripts available.
Resolves: rhbz#2050362 (EL9)

certificate - should consistently use ansible_managed in hook scripts
Resolves: rhbz#2054368 (EL9)

tlog - consistently use ansible_managed in configuration files managed by role
Resolves: rhbz#2054367 (EL9)

vpn - consistently use ansible_managed in configuration files managed by role
Resolves: rhbz#2054369 (EL9)

(cherry picked from commit 5bc1032e7397cbdf1654c987d0bdfe1fb8ae247c)
2022-02-21 11:24:48 -07:00
Richard Megginson
4c27e01955 ha_cluster constraints; network DNS; storage RAID, cached volumes; nbde_client - static IP 2022-02-14 21:26:34 +00:00
Rich Megginson
8a208687ce vpn - no filter named vpn_ipaddr; kdump - kdump.service fails; remove collection dependencies
vpn - template error while templating string: no filter named 'vpn_ipaddr'
Resolves: rhbz#2050341 (EL9)

kdump - Unable to start service kdump: Job for kdump.service failed because the control process exited with error code.
Resolves: rhbz#2050419 (EL9)

remove collection dependencies on rhel because we vendor them in

(cherry picked from commit 62325241126fc196a0de1b2ea9fbed8861497f3d)
2022-02-10 15:20:51 -07:00
Rich Megginson
6a51ef1ecc RHEL8.6, 9 - add "Requires: ansible-core or ansible"
RHEL8.6, 9 - add "Requires: ansible-core or ansible"
Resolves: rhbz#2012298 (EL9)
2022-02-03 13:34:38 -07:00
Rich Megginson
38a41c08a0 logging_purge_conf fix; kernel_settings ansible_managed fix; vpn_ipaddr fix
vpn - use custom vpn_ipaddr filter to make role work on RHEL 8.6 with ansible-core
  this is covered by "make roles work with ansible-core on all platforms" BZ

logging - Logging role "logging_purge_confs" option not properly working
Resolves: rhbz#2039106

kernel_settings role should use ansible_managed in its configuration file
Resolves: rhbz#2047506

(cherry picked from commit 136a75679287eb30dc043cee5a59190b10c1e478)
2022-02-01 08:27:37 -07:00
Fedora Release Engineering
29d1488c2c - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>

Resolves: rhbz#2012298

(cherry picked from commit ba4d2bce257205a01aee4a856be145c4936b45f7)
2022-02-01 08:27:28 -07:00
Miro Hrončok
6576f9aa9c Use PEP 503 names for BuildRequires, but maintain EPEL 8 compatibility
Since Fedora 33, we generate both python3dist(foo.bar) and python3dist(foo-bar)
provides, but we'd like to follow PEP 503 and use only the names with dash.

By using the %py3_dist macro, this remains compatible with EPEL 8

Resolves: rhbz#2012298

(cherry picked from commit 2406e1f14815924cd65b4fdc3cf10c290f206a70)
2022-02-01 08:27:17 -07:00
Richard Megginson
679e17907b add cockpit, firewall; ansible 2.12 support; many more enhancements, fixes 2021-12-09 18:51:08 +00:00
Sergei Petrosian
1626695f4f Change PFSL to Python because rpmspec uses Python abbreviation
Related: rhbz#2006076
2021-10-26 17:38:37 +02:00
Sergei Petrosian
f8c6c6d6e8 Rebase to latest upstream
- Support ansible-core and improve roles:
- selinux: Add support for Rocky Linux 8, fix
ansible_distribution_major_version
  - timesync: Support ansible-core, use ansible_managed | comment
  - kdump: Support ansible-core, use ansible_managed | comment
- network: Support ansible-core; deprecate RHEL 9 in readme; validate
that ipv6_disabled is conflicting with other settings; specify PCI
address to configure profile - adds match and path settings)
- storage: Support ansible-core, add skip checks feature to speed up
the tests
- logging: Support ansible-core, add the `uid` option for
elasticsearch, improve performance, use ansible_manged | comment
  Resolves: rhbz#1990490 (EL9)
  - ssh: Use ansible_manged | comment
  - sshd: Use ansible_managed | comment
  - ha_cluster: Support ansible-core, fix password_hash salt length
- vpn: Support ansible-core, use wait_for_connection instead of
wait_for with ssh
  - ansible_managed | comment BZs:
    Resolves: rhbz#2006230 (EL9)
- untar the collection tarballs and copy the files
- Add vendoring code for rhel / centos
  - selinux: selinux, seboolean, seport, selogin, sefcontext
  - storage: mount
  - vpn: ipaddr
  Resolves: rhbz#2006076 (EL9)
2021-10-26 13:06:59 +02:00
Rich Megginson
d16afec0fa selinux - some tests give USER_AVC denied errors
selinux tests_selinux_disabled.yml gives USER_AVC errors, so
add the tag so this test will be skipped by basic smoke test.
Resolves: rhbz#1996315 (EL9)

(cherry picked from commit ebbd49b04d5dced636177d56729fdc50d3a06df5)
2021-08-26 08:38:49 -06:00
Rich Megginson
58873d92ff storage - revert dm-vdo workaround
storage - revert the dm-vdo workaround fix for vdo testing
Resolves: rhbz#1978488 (EL9)

(cherry picked from commit 28f40e09cc1c5a947c9dfa0cd6fa32abc725cccf)
2021-08-26 08:22:51 -06:00
Rich Megginson
725e899f60 logging - Update the certificates copy tasks
logging - Update the certificates copy tasks
Resolves: rhbz#1996777 (EL9)

(cherry picked from commit e2562c34964f843495769cbbdc7f8f9c24615c5c)
2021-08-25 09:33:07 -06:00
Rich Megginson
328e881079 the bpftrace role does not properly configure bpftrace agent
metrics - the bpftrace role does not properly configure bpftrace agent
Resolves: rhbz#1994180 (EL9)

(cherry picked from commit 06ff97e58da3aff305ebea0ab34b9c55452eb031)
2021-08-18 17:14:23 -06:00
Rich Megginson
52c415a1da drop support for ansible 2.8; fix sshd el6 bug
drop support for Ansible 2.8 - min_ansible_version is now 2.9
Resolves: rhbz#1989197 (EL9)

sshd - fix rhel6 support - failed to validate: error:Missing Match criteria for all Bad Match condition
Resolves: rhbz#1991598 (EL9)

(cherry picked from commit 86144623e53d9187029d9e82fdc65872322c64d8)
2021-08-18 17:11:05 -06:00
Rich Megginson
7089e62386 storage - dm-vdo not found; tests_lvm_errors syntax errors
storage - tests_create_lvmvdo_then_remove fails - Module dm-vdo not found
Resolves: rhbz#1991062 (EL9)

storage - Get syntax errors in tests_lvm_errors.yml
Resolves: rhbz#1991142 (EL9)

(cherry picked from commit a85ede7da4af74da633c2c03a5ebadd3f55246a3)
2021-08-18 17:07:43 -06:00
Mohan Boddu
19c90202d1 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-10 00:37:46 +00:00
Rich Megginson
5975a6072b logging, cert - use tar; logging - server_host; logging - py crypto
logging, certificate - Instead of the archive module, use "tar" command for backup.
Resolves: rhbz#1984182 (EL9)

logging - Add a support for list value to server_host in the elasticsearch output
Resolves: rhbz#1986460 (EL9)

logging - tests_relp.yml; Can't detect any of the required Python libraries cryptography (>= 1.2.3) or PyOpenSSL (>= 0.6)
Resolves: rhbz#1989962 (EL9)

(cherry picked from commit 6e83ea827bef074f0d105e208da3b633bb9ae66e)
2021-08-08 11:26:20 -06:00
Rich Megginson
5f3c7039f7 metrics - Grafana dashboard not working after metrics role run unless services manually restarted
Resolves: rhbz#1984150 (EL9)
(cherry picked from commit 882dfa0cd996125af2cbbf45ce474a78eae20e2a)
2021-08-08 11:09:57 -06:00
Rich Megginson
73a32883a7 storage - tag tests that use NVME and SCSI
storage - tag tests that use NVME and SCSI
Resolves: rhbz#1988573 (EL9)

(cherry picked from commit a9197653408f2b61cbed4f3e265f5480ee05057a)
2021-08-08 10:45:37 -06:00
Rich Megginson
e7f56a79dc sshd - support for rhel9 managed hosts
sshd - support for rhel9 managed hosts
Resolves: rhbz#1989221 (EL9)

(cherry picked from commit f988cf133f7775eb47c98bbfc73bff75f18c463c)
2021-08-04 18:37:14 -06:00
Rich Megginson
b8ce8fac79 network - no initscripts on el9, restore resolv.conf - storage deadcode issue
network - tests_provider_nm.yml fails with an error: Failure in test 'I can manage a veth interface with NM after I managed it with initscripts.
Resolves: rhbz#1935919

network - _initscripts tests fail because "No package network-scripts available."
Resolves: rhbz#1935916

network - Test tests_bond_initscripts.yml failed to create interface
Resolves: rhbz#1980870

storage - covscan error - DEADCODE - vdopool if create_vdo else parent
Resolves: rhbz#1985571 (EL9)

network - network: tests_bond_initscripts.yml leaves behind unusable resolv.conf in CI

(cherry picked from commit c9b7a0996d52394d7675d49ca40bb3041967eafc)
2021-08-04 18:26:27 -06:00
Rich Megginson
e3b9317300 Several fixes - network, certificate, logging, storage, kernel_settings
network - Skip tests on RHEL9 that use hostapd
Resolves: rhbz#1945348
network - Fix the bond test on DHCP
certificate, logging - Use 'tar' command instead of archive module
Resolves: rhbz#1984182 (EL9)
kernel_settings - Disable bootloader testing on EL9
Resolves: rhbz#1944599
logging - Add a support for list value to server_host in the elasticsearch output
Resolves: rhbz#1986460 (EL9)
storage - Add support for percentage-based volume sizes
Resolves: rhbz#1984583 (EL9)
storage -storage_test_actual_size != storage_test_requested_size observed with tests_lvm_auto_size_cap.yml

(cherry picked from commit 597164e509ac52525191e73dbb1a74f8b1ed8b65)
2021-08-04 17:22:35 -06:00
Rich Megginson
e166e3eeef Error: device becoming unmanaged and pytest not reproducible in tests_integration_pytest.yml
Resolves: rhbz#1985382 (EL9)

EPEL yum repository configuration for tests
Rebasing to latest picks up this fix see rhel7 bz1980439

connections: workaround DeprecationWarning for NM.SettingEthtool.set_feature()
Rebasing to latest picks up this fix

(cherry picked from commit a9d89f48d068dc32b7492bb3d8f63046d5d78e94)
2021-08-04 17:07:22 -06:00
Rich Megginson
f864d51f0f ha_cluster - add pacemaker cluster properties configuration
Resolves: rhbz#1982906 (EL9)
(cherry picked from commit f2813e8e7eeaf2630873cb47a2827a2d93659475)
2021-08-04 16:53:03 -06:00
Rich Megginson
b5acd77e06 crypto_policies - rename 'policy modules' to 'subpolicies'
Resolves: rhbz#1982896 (EL9)
(cherry picked from commit 470be0e5cca5932d363a308837d93be280c5ce27)
2021-08-04 16:48:30 -06:00
Richard Megginson
bc37c741bf storage - relabel doesn't support - Fixed volume relabeling 2021-08-04 22:39:11 +00:00
Rich Megginson
d7652f9fa3 network - fix idempotency; fix bond tests
network - Re-running the network system role results in "changed: true" when nothing has actually changed
  Resolves: rhbz#1980871
network - Test tests_bond_initscripts.yml failed to create interface
  Resolves: rhbz#1980870

(cherry picked from commit 84faf297876c597a4232f699137b659ac18e11b5)
2021-08-04 11:01:27 -06:00
Rich Megginson
5faf6fb9aa storage - LVMVDO support
Resolves: rhbz#1978488 EL9
(cherry picked from commit f3ca7c32422fbccc661f1f2b416bfa667bb568cb)
2021-07-09 09:55:12 -06:00
Rich Megginson
d0f254216c Rebase to latest upstream; version tag instead of git commit hash
Use version tag in Source instead of commit hash where possible.
I think the network role prefers to do "proper" releases, and
auto-maintenance is untagged.

In addition, the following changes were made:

ha_cluster - add pacemaker resources configuration
  Resolves: rhbz#1978726
ha_cluster - code cleanup
  Resolves: rhbz#1978731
Postfix RHEL system role README.md missing variables under the "Role Variables" section
  Resolves: rhbz#1978734
logging README.html examples are rendered incorrectly
  Resolves: rhbz#1978758
make postfix role idempotent - round 2
  Resolves: rhbz#1978760
selinux task for semanage says Fedora in name but also runs on RHEL/CentOS 8
  Resolves: rhbz#1978740
metrics role task to enable logging for targeted hosts not working
  Resolves: rhbz#1978746
network - Only show stderr_lines by default
  Resolves: rhbz#1978731
storage - LVMVDO support
  Resolves: rhbz#1978488
storage - fix several linter issues
  Resolves: rhbz#1978731
ssh - Fix variable precedence when invoked through roles
  Resolves: rhbz#1978745
ssh - Update configuration options list for OpenSSH 8.6
  Resolves: rhbz#1978731
sshd - Fix variable precedence when invoked through roles
  Resolves: rhbz#1978745
sshd - Update configuration options list for OpenSSH 8.6
  Resolves: rhbz#1978731
sshd - support for appending a snippet to configuration file
  Resolves: rhbz#1978752
timesync - add NTS support
  Resolves: rhbz#1978753
timesync - rebase to latest
  Resolves: rhbz#1978731
nbde_client - rebase to latest
  Resolves: rhbz#1978731

(cherry picked from commit f0ea5fbead7b5a519f329724497da850fd0f8ae9)
2021-07-02 12:27:22 -06:00
Sergei Petrosian
26408b8e57 Make the use of slashes in ansible_collection_files consistent
Resolves: rhbz#1978731

Make the ansible_collection_files macro defined in Fedora automatically
and in RHEL manually consistent - having slash at the end to clean
double-slashes from the code.

(cherry picked from commit f04c75a2c87a901d9e2b090010744234422e9336)
2021-07-02 12:26:09 -06:00
Sergei Petrosian
bca54c544b Naturalize urls
Resolves: rhbz#1978731

It is more natural to have no slash / at the end of the url definition,
and instead use / where the url is used

Fix the forgeorg15 url

(cherry picked from commit 7c7eb82eee1390e461c4118eaf84845c25ca5581)
2021-07-02 12:25:44 -06:00
Noriko Hosoi
e5a42a3758 Add EL 9 support for timesync and network
Resolves: rhbz#1952887

postfix: Use FQRN in README
  Resolves: rhbz#1958964
2021-06-16 15:34:51 -07:00
Noriko Hosoi
5645c1f150 Update system roles for RHEL7 (1970165)
Avoid dynamically using the license macro since the license macro
  is replaced with the value of License directive in the older rpmbuild.
Needs to list excluded files in this hardcoded style since when
  format_item_for_files is executed, brp-python-bytecompile is not
  executed yet.

Resolves: rhbz#1961404
2021-06-16 15:08:30 -07:00
Rich Megginson
f940749309 Fix HTML rendering of internal links when using pandoc/asciidoc
Uses pandoc gfm instead of markdown_github (1962976)

Related: rhbz#1961404
2021-06-16 15:03:37 -07:00
Noriko Hosoi
533ad2c992 Make spec file available for older versions of OSes. (1970165)
Drop python3-six dependency which was used by lsr_role2collection.py.
Drop html files from rpm if the version has no markdown parser.
Drop unnecessary python scripts which include python3 only code, e.g.,
  f-strings.

  Resolves: rhbz#1961404
2021-06-11 13:34:52 -07:00
Rich Megginson
b907aac146 fix kdump tests_ssh for basic smoke test (1957876)
Resolves: rhbz#1935914
2021-06-11 13:05:13 -07:00
Noriko Hosoi
a7186593d4 The rpm package contains collection README.html files only in
%_pkgdocdir and its subdirs, but the collection artifact tarball
has README.html in each roles/ROLE directory along with README.md.
Fixing it to make the collection artifact tarball consistent with
the collection part in rpm.

Related: rhbz#1961404

Following bz's are solved with the previous rebases.

Related: rhbz#1935957
storage: An unhandled exception occurred while running the lookup
plugin 'first_found'.

Related: rhbz#1944296
certificate: ipa-server package missing in RHEL-9 - Failed: Ensure
that IPA server packages are installed

Related: rhbz#1944557
tlog: Always install sssd.conf to enable files domain

Related: rhbz#1944561
crypto_policies: The NO-CAMELLIA is not available in RHEL9 package
anymore. Use a module that is available in all systems

Related: rhbz#1944579
ssh: Add support for RHEL-9 in meta/main.yml, add file vars/RedHat_9.yml

Related: rhbz#1945337
nbde_client: /bin/sh: line 1: cryptsetup: command not found

Related: rhbz#1945359
selinux umount: /sys/fs/selinux: target is busy.

Related: rhbz#1945376
ssh: file not found: file not found: /etc/ssh/ssh_config.d/00-ansible.conf

Related: rhbz#1945378
ssh: file not found: /etc/ssh/ssh_config.d/99-last.conf

Related: rhbz#1945380
ssh: Check if the selected options are in 'Include /etc/ssh/ssh_config.d/*.conf'
in config.content | b64decode

Related: rhbz#1945385
ssh: options_before.stdout == options_after.stdout
2021-05-27 13:16:07 -07:00
Noriko Hosoi
6611d4664d fix logging README.html examples' rendering problems (1962374)
fix broken internal links in README.md files (1962976)

Fixed the bugs found in the review by @richm.
Bump version to 1.2.1-1.

Related: rhbz#1961404
2021-05-27 13:15:30 -07:00
Sergei Petrosian
2ef139db83 Add the requirement for kramdown for Fedora and RHEL 9 builds
Update mainid to the latest master commit of auto-maintenance

Upload the updated sources file

Separate requirements for galaxy_transform and md2html, fix version

Related: rhbz#1943532
2021-05-25 14:33:36 -07:00
Rich Megginson
589f7a04b3 rebase roles to latest upstream
rebase roles to latest upstream (1957876)
make postfix role idempotent (1960375)
use FQRN in postfix README (1958963)
use relayhost in postfix README (1866544)
use lazy unmount to fix umount: target is busy (1945359)
network - Add support for ETHTOOL Ring option (1959649)
storage: calltrace observed when set type: partition for storage_pools (1854187)
ha_cluster - cannot read preshared key in binary format (1952620)

Related: rhbz#1961404
2021-05-25 14:33:36 -07:00
Noriko Hosoi
49a2f82370 Repacing auto-maintenance tarball with the official one.
Rebase: 1954747

Related: rhbz#1961404
2021-05-25 14:33:36 -07:00
Noriko Hosoi
5bac758698 - Copy auto-mainteannce/lsr_role2collection/collection_requirememts.txt
to the collectino top dir as requirements.txt if the source exists.
  (1954747)
- Copy auto-mainteannce/lsr_role2collection/collection_bindep.txt to the
  collectino top dir as bindep.txt if the source exists. (1954747)

Related: rhbz#1961404
2021-05-25 14:33:36 -07:00
Rich Megginson
23c4878234 omit trailing slash from ansible_collection_files
Related: rhbz#1961404
2021-05-25 14:33:36 -07:00