Resolves: RHEL-180603 : bootloader - fix: support duplicate option names with different values
Resolves: RHEL-116287 : crypto_policies - [RFE] redhat.rhel_system_roles.crypto_policies add option to reapply policy when .pmod file is changed
Resolves: RHEL-184522 : firewall - fix: role should not configure firewall if only getting facts
Resolves: RHEL-189406 : firewall - fix: ensure rich rule handling is idempotent
Resolves: RHEL-189401 : nbde_server - fix: Prevent symlink following privilege escalation in nbde_server_tang module
Resolves: RHEL-157025 : network - Inverted retry condition in SysUtil.link_infos() makes retry loop ineffective
Resolves: RHEL-145224 : podman - Restart quadlet when mounted host files changed the state
Resolves: RHEL-182466 : selinux - fix: ensure policy modules are loaded before they can be referenced
Resolves: RHEL-110005 : snapshot - explain in README how to use the extend feature
Resolves: RHEL-167857 : sshd - feat: Add new c10s options GSSAPIAllowS4U2Self and GSSAPIProxyS4U2Services
Resolves: RHEL-127989 : storage - [RFE] The storage system role should only install stratis when it's needed
Resolves: RHEL-178505 : sudo - Space missing in sudoers.j2 template before tags
Resolves: RHEL-178496 : sudo - Small fix for line continuation characters
Change verbosity level 3 for no_log to use verbosity-based logging in all roles
Resolves: RHEL-175649 : allow disable of secure logging in system roles for debugging
Resolves: RHEL-175668 : auditd - auditd system role [rhel-10]
Resolves: RHEL-119732 : firewall - RFE: firewall system role not idempotent when using "previous: replaced"
Resolves: RHEL-46232 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export fencing levels configuration
Resolves: RHEL-46231 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export node attributes and utilization configuration
Resolves: RHEL-111546 : kernel_settings - The kernel_settings role is not idempotent on el7
Resolves: RHEL-175663 : snapshot - feat: add list command to report the status of LVM snapshots for specified VGs/LVs
Resolves: RHEL-175616 : trustee_client - new system role
Resolves: RHEL-175617 : trustee_server - new system role
Resolves: RHEL-145214 : selinux - Missing proto 'sctp' and 'dccp'
Resolves: RHEL-145219 : vpn - [ERROR]: Task failed: object of type 'dict' has no attribute '1.1.1.1'
Resolves: RHEL-122052 : Templates in some role license files
Fix ansible-test issue with community.general.ini_file module 11.4.4 in documentation string
Resolves: RHEL-122052 : Templates in some role license files
Resolves: RHEL-120413 : ha_cluster - ha_cluster role does not work in container builds
Resolves: RHEL-136607 : metrics - [RFE] configure TLS certificates in grafana using the metrics system role
Resolves: RHEL-138277 : ssh - feat: Add new configuration option VersionAddendum
Resolves: RHEL-144495 : sshd - feat: New OpenSSH configuration option GSSAPIDelegateCredentials
Resolves: RHEL-137261 : storage - in _get_device_id IndexError: list index out of range
All roles support INJECT_FACTS_AS_VARS=false
metrics - test: do not restore service if final state not-found
sshd - feat: Add systemd ephemeral authorized_keys to the instantiated service file on Fedora
storage - fix: add vdo package for Fedora OSTree
Resolves: RHEL-129309 : aide - cannot manage rhel9.7/10.1 or earlier - unexpected character - line database=file
Resolves: RHEL-136597 : ha_cluster - feat: add support for fencing-watchdog-timeout
remove hpc role
Resolves: RHEL-127971 : sshd - feat: Add new configuration option CanonicalMatchUser on RHEL/CentOS
fix ansible-test issues in ha_cluster, sshd
rebase all roles to version which has community.general 11.x support (no code changes, only meta)
Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
revert to community.general 11.4.1 - we cannot use 12.* anymore as they have dropped support for py27 and py36
Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
Resolves: RHEL-128428 : nbde_client - Error in using the RHEL system role for nbde client [rhel-10]
Resolves: RHEL-104931 : snapshot - add support for bootable snapsets
new role hpc
minor firewall update
Resolves: RHEL-114467 : firewall - add IPv6 ipset support
Resolves: RHEL-46227 : ha_cluster - export CIB properties configuration
Resolves: RHEL-110865 : network - Ansible RHEL network system role fails cannot find route table main
Resolves: RHEL-123026 : network - Skip the loopback profile when deleting all profiles except the ones explicitly included
Resolves: RHEL-123016 : sshd - fix: include external config files first so they can override all options
Resolves: RHEL-66738 : storage - add support for disk partitioning
Resolves: RHEL-115033 : storage - Storage role crashes on systems without /etc/fstab
support podman, timesync in container builds
Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
no actual code changes, test fixes for bootloader, ha_cluster, kdump, tlog
Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
Resolves: RHEL-95719 : storage - Tests verification fails on encrypted LVM on top of MD RAID
Resolves: RHEL-106261 : sudo - redhat.rhel_system_roles.sudo takes 6-7 hours to scan /etc/sudoers.d
fix storage role tests related to encrypted LVM on top of MD RAID and el7 raid errors
fix postfix role tests related to rebooting
fix ha_cluster role tests related to missing fence agent
add firewall test debugging for interface tests
Resolves: RHEL-105093 : podman - specifying multiple users causes resources to be associated with wrong user
Resolves: RHEL-95757 : storage - Improve error reporting when invalid or unsupported RAID configuration is given
Resolves: RHEL-95729 : storage - [RHEL10] Incorrect key file in crypttab entry for volume encrypted_vol
refactor ha_cluster to have empty __init__.py in module_utils for ansible-test
fix tests in postfix, selinux
Resolves: RHEL-103887 : postfix - fix: configure postfix to listen only to IPv4 if IPv6 is disabled
Resolves: RHEL-103573 : selinux - fix: tempdir path not defined in check mode; __selinux_item.path may be undefined
ha_cluster - ansible 2.19 support
bootloader - fix wording in README
Resolves: RHEL-99087 : ad_integration - feat: control sssd domain/realm section name to use; merge settings into chosen name
Resolves: RHEL-101676 : bootloader - fix: Fix removing kernel options with values
Resolves: RHEL-101671 : bootloader - Add functionality to set default kernel with bootloader [rhel-10]
Resolves: RHEL-100819 : ha_cluster - Fix missing /var/lib/pcsd directory after pcs installation
Resolves: RHEL-95846 : journald - feat: Add support for SystemKeepFree journald.conf option
Resolves: RHEL-95883 : storage - fix: Fix getting PVs from raid_disks for RAID LVs
several roles work with ansible 2.19
several roles work with bootc
network test fix
Resolves: RHEL-89890 : docs links should not use rhel-system-roles.github
Resolves: RHEL-88312 : ad_integration - Introduced option to skip package installation
Resolves: RHEL-84953 : firewall - Add `includes` when defining a custom service [rhel-10]
Resolves: RHEL-88249 : ha_cluster - fix: restart qdevice when its certificates have been regenerated
Resolves: RHEL-81918 : ha_cluster - ha_cluster: 404 on removing qnetd certificate on rhel9.4 client vm
Resolves: RHEL-46224 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export pcsd and OS configuration
Resolves: RHEL-78262 : metrics : support for gathering spark metrics
Resolves: RHEL-88286 : network - Incorrect attribute checks for routing rule validation [rhel-10]
Resolves: RHEL-88277 : network - Network role should remove MAC address matching from SysUtil.link_info_find() [rhel-10]
Resolves: RHEL-88263 : network - Network role should refine MAC validation using interface name [rhel-10]
Resolves: RHEL-85704 : podman - fix: render boolean option values correctly in toml files [rhel-10]
Resolves: RHEL-84942 : podman - bug in toml rendering of `podman_containers_conf` [rhel-10]
Resolves: RHEL-84932 : podman - podman_registries_conf TOML tables not supported [rhel-10]
Resolves: RHEL-84922 : podman - Directory .config/containers mode constantly changed [rhel-10]
Resolves: RHEL-84912 : podman - fix: Do not restart logind unless absolutely necessary [rhel-10]
Resolves: RHEL-89118 : storage - LVM grow_to_fill feature doesn't work with latest blivet
Resolves: RHEL-90216 : storage - Resize logical volumes is not proper idempotent [rhel-10]
Resolves: RHEL-88774 : systemd - fix: files and templates in nested directories are not placed correctly [rhel-10]
Resolves: RHEL-88760 : systemd - Systemd unmask should run at the begin to allow the role to manage the units [rhel-10]
Resolves: RHEL-88297 : timesync - fix: add default seccomp filters for el9/10
Resolves: RHEL-85689 : timesync - rhel-system-roles.timesync doesn't work when IPv6 is disabled in environment [rhel-10]
Resolves: RHEL-89890 : docs links should not use rhel-system-roles.github
Resolves: RHEL-88312 : ad_integration - Introduced option to skip package installation
Resolves: RHEL-84953 : firewall - Add `includes` when defining a custom service [rhel-10]
Resolves: RHEL-88249 : ha_cluster - fix: restart qdevice when its certificates have been regenerated
Resolves: RHEL-81918 : ha_cluster - ha_cluster: 404 on removing qnetd certificate on rhel9.4 client vm
Resolves: RHEL-46225 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export resources configuration
Resolves: RHEL-46224 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export pcsd and OS configuration
Resolves: RHEL-78262 : metrics : support for gathering spark metrics
Resolves: RHEL-88286 : network - Incorrect attribute checks for routing rule validation [rhel-10]
Resolves: RHEL-88277 : network - Network role should remove MAC address matching from SysUtil.link_info_find() [rhel-10]
Resolves: RHEL-88263 : network - Network role should refine MAC validation using interface name [rhel-10]
Resolves: RHEL-85704 : podman - fix: render boolean option values correctly in toml files [rhel-10]
Resolves: RHEL-84942 : podman - bug in toml rendering of `podman_containers_conf` [rhel-10]
Resolves: RHEL-84932 : podman - podman_registries_conf TOML tables not supported [rhel-10]
Resolves: RHEL-84922 : podman - Directory .config/containers mode constantly changed [rhel-10]
Resolves: RHEL-84912 : podman - fix: Do not restart logind unless absolutely necessary [rhel-10]
Resolves: RHEL-89118 : storage - LVM grow_to_fill feature doesn't work with latest blivet
Resolves: RHEL-88774 : systemd - fix: files and templates in nested directories are not placed correctly [rhel-10]
Resolves: RHEL-88760 : systemd - Systemd unmask should run at the begin to allow the role to manage the units [rhel-10]
Resolves: RHEL-88297 : timesync - fix: add default seccomp filters for el9/10
Resolves: RHEL-85689 : timesync - rhel-system-roles.timesync doesn't work when IPv6 is disabled in environment [rhel-10]
Resolves: RHEL-82525 : rhc - does not enable content in EL10 systems
plus an upgrade to rhc role to fix a testing issue
Resolves: RHEL-82526 : storage - "Make sure required packages are installed' task fails because Blivet requires the kmod-kvdo package, which is no longer available on EL10
(cherry picked from commit 012313e881)
Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
fixes issue with certificate tests_basic_ipa.yml
(cherry picked from commit 7048546687)
Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
fixes an issue with parameter name
fixes an issue with changed reporting true when nothing has changed
(cherry picked from commit 07fc898b67)
Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
fixes aide ostree support
fixes storage role ostree support
fixes cockpit tests_packages_full
fixes kdump tests_ssh_wrapper
fixes selinux test failures
(cherry picked from commit 87810121b2)
Resolves: RHEL-76504 : storage - Ansible storage role 'grow_to_fill' option on LVM pools always failing with LVM resize failure due to miscalculation of free extents. [rhel-10]
also includes updates for el10 for ha_cluster and rhc
new community.general 10.3.0
(cherry picked from commit e498388a5b)
Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
not really related to aide - new community.general collection rhsm_repository.py
module now has line lengths > 164 which causes ansible-lint errors due to vendoring
fixed - skip pep8 checking
(cherry picked from commit 5ff2ce9f46)
Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
this adds cron support for aide
Resolves: RHEL-73442 : network - fix: Prioritize find link info by permanent MAC address, with fallback to current address [rhel-10]
Resolves: RHEL-73443 : podman - fix: get user information for secrets [rhel-10]
Resolves: RHEL-73441 : sshd - fix: use quote with command, shell and validate with variable [rhel-10]
Resolves: RHEL-73440 : sshd - fix: rename var sshd -> sshd_config and deprecate the former [rhel-10]
Resolves: RHEL-73439 : sshd - fix: Reload the service when needed [rhel-10]
(cherry picked from commit ffde7ed4fc)
Resolves: RHEL-70700 : storage - Could not find luks2 key size in verify-pool-member-encryption.yml
also resolves some test failures in cockpit
(cherry picked from commit ac4474b71e)
Resolves: RHEL-45303 : ha_cluster - rhel_system_roles.ha_cluster - adapt the role for pcs-0.12
Resolves: RHEL-70571 : systemd - fix: Always become user we are managing
(cherry picked from commit ec2155ab21)
Resolves: RHEL-67413 : metrics - fix: add support for Valkey
fix vendoring for selinux
fix cockpit full packages support for 9.6 and later
ensure gfs2 tests do not run on el10
(cherry picked from commit 12b80ba6a7)
Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking [rhel-10]
Resolves: RHEL-67412 : firewall - fix: Prevent interface definitions overriding 'changed' value when other elements are changed [rhel-10]
Resolves: RHEL-67286 : logging - [RFE] Add methods to define and set up custom templates in the logging role of RHEL systems roles [rhel-10]
Resolves: RHEL-67413 : metrics - fix: add support for Valkey [rhel-10]
Resolves: RHEL-67416 : network - Support autoconnect_retries in the network role [rhel-10]
Resolves: RHEL-67415 : network - Support may-fail in the network role [rhel-10]
Resolves: RHEL-67417 : podman - support the pod quadlet type [rhel-10]
Resolves: RHEL-67418 : postgresql - postgresql role: The postgresql_cert_name variable doesn't work with existing certificates [rhel-10]
Resolves: RHEL-67419 : sudo - feat: Add variable that handles semantic check for sudoers [rhel-10]
Resolves: RHEL-67420 : systemd - support management of user units [rhel-10]
Resolves: RHEL-67421 : vpn - no ansible-doc for redhat.rhel_system_roles.vpn_ipaddr [rhel-10]
