- Support ansible-core and improve roles:
- selinux: Add support for Rocky Linux 8, fix
ansible_distribution_major_version
- timesync: Support ansible-core, use ansible_managed | comment
- kdump: Support ansible-core, use ansible_managed | comment
- network: Support ansible-core; deprecate RHEL 9 in readme; validate
that ipv6_disabled is conflicting with other settings; specify PCI
address to configure profile - adds match and path settings)
- storage: Support ansible-core, add skip checks feature to speed up
the tests
- logging: Support ansible-core, add the `uid` option for
elasticsearch, improve performance, use ansible_manged | comment
Resolves: rhbz#1990490 (EL9)
- ssh: Use ansible_manged | comment
- sshd: Use ansible_managed | comment
- ha_cluster: Support ansible-core, fix password_hash salt length
- vpn: Support ansible-core, use wait_for_connection instead of
wait_for with ssh
- ansible_managed | comment BZs:
Resolves: rhbz#2006230 (EL9)
- untar the collection tarballs and copy the files
- Add vendoring code for rhel / centos
- selinux: selinux, seboolean, seport, selogin, sefcontext
- storage: mount
- vpn: ipaddr
Resolves: rhbz#2006076 (EL9)
selinux tests_selinux_disabled.yml gives USER_AVC errors, so
add the tag so this test will be skipped by basic smoke test.
Resolves: rhbz#1996315 (EL9)
(cherry picked from commit ebbd49b04d5dced636177d56729fdc50d3a06df5)
metrics - the bpftrace role does not properly configure bpftrace agent
Resolves: rhbz#1994180 (EL9)
(cherry picked from commit 06ff97e58da3aff305ebea0ab34b9c55452eb031)
drop support for Ansible 2.8 - min_ansible_version is now 2.9
Resolves: rhbz#1989197 (EL9)
sshd - fix rhel6 support - failed to validate: error:Missing Match criteria for all Bad Match condition
Resolves: rhbz#1991598 (EL9)
(cherry picked from commit 86144623e53d9187029d9e82fdc65872322c64d8)
logging, certificate - Instead of the archive module, use "tar" command for backup.
Resolves: rhbz#1984182 (EL9)
logging - Add a support for list value to server_host in the elasticsearch output
Resolves: rhbz#1986460 (EL9)
logging - tests_relp.yml; Can't detect any of the required Python libraries cryptography (>= 1.2.3) or PyOpenSSL (>= 0.6)
Resolves: rhbz#1989962 (EL9)
(cherry picked from commit 6e83ea827bef074f0d105e208da3b633bb9ae66e)
network - tests_provider_nm.yml fails with an error: Failure in test 'I can manage a veth interface with NM after I managed it with initscripts.
Resolves: rhbz#1935919
network - _initscripts tests fail because "No package network-scripts available."
Resolves: rhbz#1935916
network - Test tests_bond_initscripts.yml failed to create interface
Resolves: rhbz#1980870
storage - covscan error - DEADCODE - vdopool if create_vdo else parent
Resolves: rhbz#1985571 (EL9)
network - network: tests_bond_initscripts.yml leaves behind unusable resolv.conf in CI
(cherry picked from commit c9b7a0996d52394d7675d49ca40bb3041967eafc)
network - Skip tests on RHEL9 that use hostapd
Resolves: rhbz#1945348
network - Fix the bond test on DHCP
certificate, logging - Use 'tar' command instead of archive module
Resolves: rhbz#1984182 (EL9)
kernel_settings - Disable bootloader testing on EL9
Resolves: rhbz#1944599
logging - Add a support for list value to server_host in the elasticsearch output
Resolves: rhbz#1986460 (EL9)
storage - Add support for percentage-based volume sizes
Resolves: rhbz#1984583 (EL9)
storage -storage_test_actual_size != storage_test_requested_size observed with tests_lvm_auto_size_cap.yml
(cherry picked from commit 597164e509ac52525191e73dbb1a74f8b1ed8b65)
Resolves: rhbz#1985382 (EL9)
EPEL yum repository configuration for tests
Rebasing to latest picks up this fix see rhel7 bz1980439
connections: workaround DeprecationWarning for NM.SettingEthtool.set_feature()
Rebasing to latest picks up this fix
(cherry picked from commit a9d89f48d068dc32b7492bb3d8f63046d5d78e94)
network - Re-running the network system role results in "changed: true" when nothing has actually changed
Resolves: rhbz#1980871
network - Test tests_bond_initscripts.yml failed to create interface
Resolves: rhbz#1980870
(cherry picked from commit 84faf297876c597a4232f699137b659ac18e11b5)
Use version tag in Source instead of commit hash where possible.
I think the network role prefers to do "proper" releases, and
auto-maintenance is untagged.
In addition, the following changes were made:
ha_cluster - add pacemaker resources configuration
Resolves: rhbz#1978726
ha_cluster - code cleanup
Resolves: rhbz#1978731
Postfix RHEL system role README.md missing variables under the "Role Variables" section
Resolves: rhbz#1978734
logging README.html examples are rendered incorrectly
Resolves: rhbz#1978758
make postfix role idempotent - round 2
Resolves: rhbz#1978760
selinux task for semanage says Fedora in name but also runs on RHEL/CentOS 8
Resolves: rhbz#1978740
metrics role task to enable logging for targeted hosts not working
Resolves: rhbz#1978746
network - Only show stderr_lines by default
Resolves: rhbz#1978731
storage - LVMVDO support
Resolves: rhbz#1978488
storage - fix several linter issues
Resolves: rhbz#1978731
ssh - Fix variable precedence when invoked through roles
Resolves: rhbz#1978745
ssh - Update configuration options list for OpenSSH 8.6
Resolves: rhbz#1978731
sshd - Fix variable precedence when invoked through roles
Resolves: rhbz#1978745
sshd - Update configuration options list for OpenSSH 8.6
Resolves: rhbz#1978731
sshd - support for appending a snippet to configuration file
Resolves: rhbz#1978752
timesync - add NTS support
Resolves: rhbz#1978753
timesync - rebase to latest
Resolves: rhbz#1978731
nbde_client - rebase to latest
Resolves: rhbz#1978731
(cherry picked from commit f0ea5fbead7b5a519f329724497da850fd0f8ae9)
Resolves: rhbz#1978731
Make the ansible_collection_files macro defined in Fedora automatically
and in RHEL manually consistent - having slash at the end to clean
double-slashes from the code.
(cherry picked from commit f04c75a2c87a901d9e2b090010744234422e9336)
Resolves: rhbz#1978731
It is more natural to have no slash / at the end of the url definition,
and instead use / where the url is used
Fix the forgeorg15 url
(cherry picked from commit 7c7eb82eee1390e461c4118eaf84845c25ca5581)
Avoid dynamically using the license macro since the license macro
is replaced with the value of License directive in the older rpmbuild.
Needs to list excluded files in this hardcoded style since when
format_item_for_files is executed, brp-python-bytecompile is not
executed yet.
Resolves: rhbz#1961404
Drop python3-six dependency which was used by lsr_role2collection.py.
Drop html files from rpm if the version has no markdown parser.
Drop unnecessary python scripts which include python3 only code, e.g.,
f-strings.
Resolves: rhbz#1961404
%_pkgdocdir and its subdirs, but the collection artifact tarball
has README.html in each roles/ROLE directory along with README.md.
Fixing it to make the collection artifact tarball consistent with
the collection part in rpm.
Related: rhbz#1961404
Following bz's are solved with the previous rebases.
Related: rhbz#1935957
storage: An unhandled exception occurred while running the lookup
plugin 'first_found'.
Related: rhbz#1944296
certificate: ipa-server package missing in RHEL-9 - Failed: Ensure
that IPA server packages are installed
Related: rhbz#1944557
tlog: Always install sssd.conf to enable files domain
Related: rhbz#1944561
crypto_policies: The NO-CAMELLIA is not available in RHEL9 package
anymore. Use a module that is available in all systems
Related: rhbz#1944579
ssh: Add support for RHEL-9 in meta/main.yml, add file vars/RedHat_9.yml
Related: rhbz#1945337
nbde_client: /bin/sh: line 1: cryptsetup: command not found
Related: rhbz#1945359
selinux umount: /sys/fs/selinux: target is busy.
Related: rhbz#1945376
ssh: file not found: file not found: /etc/ssh/ssh_config.d/00-ansible.conf
Related: rhbz#1945378
ssh: file not found: /etc/ssh/ssh_config.d/99-last.conf
Related: rhbz#1945380
ssh: Check if the selected options are in 'Include /etc/ssh/ssh_config.d/*.conf'
in config.content | b64decode
Related: rhbz#1945385
ssh: options_before.stdout == options_after.stdout
Update mainid to the latest master commit of auto-maintenance
Upload the updated sources file
Separate requirements for galaxy_transform and md2html, fix version
Related: rhbz#1943532
rebase roles to latest upstream (1957876)
make postfix role idempotent (1960375)
use FQRN in postfix README (1958963)
use relayhost in postfix README (1866544)
use lazy unmount to fix umount: target is busy (1945359)
network - Add support for ETHTOOL Ring option (1959649)
storage: calltrace observed when set type: partition for storage_pools (1854187)
ha_cluster - cannot read preshared key in binary format (1952620)
Related: rhbz#1961404
to the collectino top dir as requirements.txt if the source exists.
(1954747)
- Copy auto-mainteannce/lsr_role2collection/collection_bindep.txt to the
collectino top dir as bindep.txt if the source exists. (1954747)
Related: rhbz#1961404
