Commit Graph

257 Commits

Author SHA1 Message Date
Rich Megginson
a241c8d852 system roles 1.111.0-0.2
Resolves: RHEL-128436 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
revert to community.general 11.4.1 - we cannot use 12.* anymore as they have dropped support for py27 and py36

(cherry picked from commit 5b332b6542)
2025-11-14 13:35:05 -07:00
Rich Megginson
f7f5da99a7 system roles 1.111.0-0.1
Resolves: RHEL-128436 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
Resolves: RHEL-84891 : nbde_client - Error in using the RHEL system role for nbde client [rhel-10]
Resolves: RHEL-120325 : snapshot - add support for bootable snapsets
new role hpc
minor firewall update

(cherry picked from commit 092b96f6a9)
2025-11-13 21:26:39 -07:00
Rich Megginson
10efb36ec5 system roles 1.110.1-1.1
Resolves: RHEL-123040 : firewall - add IPv6 ipset support
fixes ansible-test issue with firewall

(cherry picked from commit dc16a99bab)
2025-10-23 16:27:53 -06:00
Rich Megginson
72becfa51a system roles 1.110.1-0.1
Resolves: RHEL-123040 : firewall - add IPv6 ipset support
fixes ansible-test and ansible-lint issues in firewall

(cherry picked from commit 93a81ebb2e2f608dcf45e370cd84e7655c4c7024)
2025-10-23 10:52:30 -06:00
Rich Megginson
d9ffcd14ff system roles 1.110.0-0.1
Resolves: RHEL-123040 : firewall - [RFE]: rhel-system-roles.firewall: add IPv6 ipset support
Resolves: RHEL-123041 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export CIB properties configuration [rhel-9]
Resolves: RHEL-123028 : network - fix: Skip the loopback profile when deleting all profiles except the ones explicitly included [rhel-9]
Resolves: RHEL-112805 : network - Ansible RHEL network system role fails cannot find route table main [rhel-9]
Resolves: RHEL-123018 : sshd - fix: include external config files first so they can override all options [rhel-9]
Resolves: RHEL-123044 : storage - Storage role crashes on systems without /etc/fstab [rhel-9]
Resolves: RHEL-112772 : storage - [storage role] add support for disk partitioning [rhel-9]
support podman, timesync in container builds
2025-10-21 20:31:30 -06:00
Rich Megginson
d5e6846dc8 system roles 1.108.6-0.1
Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
This fixes ha_cluster tests

(cherry picked from commit 8434060590)
2025-08-20 17:37:53 -06:00
Rich Megginson
fe860b1e0f system roles 1.108.5-0.1
Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
This fixes tests in certificate, ha_cluster, kdump, selinux

(cherry picked from commit 5d766e2ce7)
2025-08-18 08:40:35 -06:00
Rich Megginson
3eb373845e system roles 1.108.4-0.1
Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
no actual code changes, test fixes for bootloader, ha_cluster, kdump, tlog

(cherry picked from commit 391b1e2109)
2025-08-08 16:44:41 -06:00
Rich Megginson
25a6e0030f system roles 1.108.3-0.1
Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
add bootloader test for this fix
2025-08-04 12:01:45 -06:00
Rich Megginson
9e7584d19a system roles 1.108.2-0.1
Resolves: RHEL-107049 : sshd - fix: New configuration option in CentOS 10
2025-08-01 12:20:42 -06:00
Rich Megginson
afab7df8f3 system roles 1.108.1-0.1
Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed [rhel-9]
Resolves: RHEL-106914 : storage - Tests verification fails on encrypted LVM on top of MD RAID [rhel-9]
Resolves: RHEL-106733 : sudo - redhat.rhel_system_roles.sudo takes 6-7 hours to scan /etc/sudoers.d [rhel-9]
fix storage role tests related to encrypted LVM on top of MD RAID and el7 raid errors
fix postfix role tests related to rebooting
fix ha_cluster role tests related to missing fence agent
add firewall test debugging for interface tests

(cherry picked from commit 115af14159)
2025-08-01 09:35:57 -06:00
Rich Megginson
4ec04c027b system roles 1.108.0-0.1
Resolves: RHEL-104659 : metrics - [RFE] Allow defining enabled PCP PMDAs with the metrics role
(cherry picked from commit 4f2d896e4a)
2025-07-24 17:59:08 -06:00
Rich Megginson
ceaf823148 system roles 1.107.0-0.1
Resolves: RHEL-105095 : podman - specifying multiple users causes resources to be associated with wrong user [rhel-9]
Resolves: RHEL-104891 : storage - Improve error reporting when invalid or unsupported RAID configuration is given [rhel-9]
Resolves: RHEL-104676 : storage - Incorrect key file in crypttab entry for volume encrypted_vol [rhel-9]
refactor ha_cluster to have empty __init__.py in module_utils for ansible-test
fix tests in postfix, selinux

(cherry picked from commit 6f77d841b5)
2025-07-24 15:06:50 -06:00
Rich Megginson
7caab50e2a system roles 1.106.1-0.1
Resolves: RHEL-103889 : postfix - fix: configure postfix to listen only to IPv4 if IPv6 is disabled
Resolves: RHEL-103575 : selinux - fix: tempdir path not defined in check mode; __selinux_item.path may be undefined
ha_cluster - ansible 2.19 support
bootloader - fix wording in README

(cherry picked from commit 9d751724b4)
2025-07-15 17:32:21 -06:00
Rich Megginson
3ba49d072a system roles 1.106.0-0.1
Resolves: RHEL-89912 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export resources configuration
Resolves: RHEL-102637 : journald - feat: Add MaxRetention configuration
All roles support ansible 2.19
All roles support the latest ansible-lint

(cherry picked from commit f54c2f38e0)
2025-07-10 06:35:33 -06:00
Rich Megginson
5a731202f1 system roles 1.105.0-0.1
Resolves: RHEL-99089 : ad_integration - feat: control sssd domain/realm section name to use; merge settings into chosen name [rhel-9]
Resolves: RHEL-101678 : bootloader - fix: Fix removing kernel options with values [rhel-9]
Resolves: RHEL-87579 : bootloader - Add functionality to set default kernel with bootloader
Resolves: RHEL-101663 : ha_cluster - Fix missing /var/lib/pcsd directory after pcs installation [rhel-9]
Resolves: RHEL-95874 : journald - feat: Add support for SystemKeepFree journald.conf option [rhel-9]
Resolves: RHEL-95885 : storage - fix: Fix getting PVs from raid_disks for RAID LVs [rhel-9]
several roles work with ansible 2.19
several roles work with bootc
network test fix

(cherry picked from commit f6f83fdad4)
2025-07-02 20:42:04 -06:00
Rich Megginson
f581fc60c3 system roles 1.101.1-0.1
Resolves: RHEL-93296 : selinux - fix: Set the kernel command line selinux parameter correctly when changing selinux state
(cherry picked from commit ded7cc9142)
2025-06-02 10:00:26 -06:00
Rich Megginson
dc33941efe system roles 1.100.1-1.1
Resolves: RHEL-94444 : ansible-core and rhel-system-roles incompatible
(cherry picked from commit 1f11ced3b0)
2025-05-29 15:38:26 -06:00
Rich Megginson
58a3a9aaa2 system roles 1.100.1-0.1
Resolves: RHEL-61488 : snapshot - add snapshot-manager provider
(cherry picked from commit e9d2244c4e)
2025-05-20 08:33:36 -06:00
Rich Megginson
4bc4cb5958 system roles 1.99.1-0.1
Resolves: RHEL-85569 : docs links should not use rhel-system-roles.github
Resolves: RHEL-88314 : ad_integration - Introduced option to skip package installation [rhel-9]
Resolves: RHEL-84951 : firewall - Add `includes` when defining a custom service
Resolves: RHEL-88251 : ha_cluster - fix: restart qdevice when its certificates have been regenerated [rhel-9]
Resolves: RHEL-88241 : ha_cluster - ha_cluster: 404 on removing qnetd certificate on rhel9.4 client vm [rhel-9]
Resolves: RHEL-89913 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export pcsd and OS configuration [rhel-9]
Resolves: RHEL-17564 : metrics - support for gathering spark metrics
Resolves: RHEL-85872 : network - Incorrect attribute checks for routing rule validation
Resolves: RHEL-84197 : network - Network role should remove MAC address matching from SysUtil.link_info_find()
Resolves: RHEL-84362 : network - Network role should refine MAC validation using interface name
Resolves: RHEL-85702 : podman - fix: render boolean option values correctly in toml files
Resolves: RHEL-84940 : podman - bug in toml rendering of `podman_containers_conf`
Resolves: RHEL-84930 : podman - podman_registries_conf TOML tables not supported
Resolves: RHEL-84920 : podman - Directory .config/containers mode constantly changed
Resolves: RHEL-84910 : podman - fix: Do not restart logind unless absolutely necessary
Resolves: RHEL-89120 : storage - [storage] LVM grow_to_fill feature doesn't work with latest blivet
Resolves: RHEL-82825 : storage - Resize logical volumes is not proper idempotent
Resolves: RHEL-88772 : systemd - fix: files and templates in nested directories are not placed correctly
Resolves: RHEL-81755 : systemd - Systemd unmask should run at the begin to allow the role to manage the units
Resolves: RHEL-88299 : timesync - fix: add default seccomp filters for el9/10 [rhel-9]
Resolves: RHEL-85079 : timesync - rhel-system-roles.timesync doesn't work when IPv6 is disabled in environment
2025-05-16 18:26:19 -06:00
Rich Megginson
2bebe33195 system roles 1.98.0-0.1
Resolves: RHEL-85569 : docs links should not use rhel-system-roles.github
Resolves: RHEL-88314 : ad_integration - Introduced option to skip package installation [rhel-9]
Resolves: RHEL-84951 : firewall - Add `includes` when defining a custom service
Resolves: RHEL-89913 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export pcsd and OS configuration [rhel-9]
Resolves: RHEL-89912 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export resources configuration [rhel-9]
Resolves: RHEL-88251 : ha_cluster - fix: restart qdevice when its certificates have been regenerated [rhel-9]
Resolves: RHEL-88241 : ha_cluster - ha_cluster: 404 on removing qnetd certificate on rhel9.4 client vm [rhel-9]
Resolves: RHEL-17564 : metrics - support for gathering spark metrics
Resolves: RHEL-84891 : nbde_client - Error in using the RHEL system role for nbde client
Resolves: RHEL-85872 : network - Incorrect attribute checks for routing rule validation
Resolves: RHEL-84362 : network - Network role should refine MAC validation using interface name
Resolves: RHEL-84197 : network - Network role should remove MAC address matching from SysUtil.link_info_find()
Resolves: RHEL-85702 : podman - fix: render boolean option values correctly in toml files
Resolves: RHEL-84940 : podman - bug in toml rendering of `podman_containers_conf`
Resolves: RHEL-84930 : podman - podman_registries_conf TOML tables not supported
Resolves: RHEL-84920 : podman - Directory .config/containers mode constantly changed
Resolves: RHEL-84910 : podman - fix: Do not restart logind unless absolutely necessary
Resolves: RHEL-89120 : storage - [storage] LVM grow_to_fill feature doesn't work with latest blivet
Resolves: RHEL-88772 : systemd - fix: files and templates in nested directories are not placed correctly
Resolves: RHEL-81755 : systemd - Systemd unmask should run at the begin to allow the role to manage the units
Resolves: RHEL-88299 : timesync - fix: add default seccomp filters for el9/10 [rhel-9]
Resolves: RHEL-85079 : timesync - rhel-system-roles.timesync doesn't work when IPv6 is disabled in environment
2025-05-06 16:57:07 -06:00
Rich Megginson
012313e881 system roles 1.95.7-0.1
Resolves: RHEL-82516 : rhc - does not enable content in EL10 systems [rhel-9]
plus an upgrade to rhc role to fix a testing issue
Resolves: RHEL-82515 : storage - "Make sure required packages are installed' task fails because Blivet requires the kmod-kvdo package, which is no longer available on EL10 [rhel-9]
2025-03-06 13:19:47 -07:00
Rich Megginson
7048546687 system roles 1.95.5-0.1
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
fixes issue with certificate tests_basic_ipa.yml
2025-02-13 14:55:14 -07:00
Rich Megginson
07fc898b67 system roles 1.95.4-0.1
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
fixes an issue with parameter name
fixes an issue with changed reporting true when nothing has changed
2025-02-11 16:33:43 -07:00
Rich Megginson
87810121b2 system roles 1.95.3-0.1
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
fixes aide ostree support
fixes storage role ostree support
fixes cockpit tests_packages_full
fixes kdump tests_ssh_wrapper
fixes selinux test failures
2025-02-04 14:38:48 -07:00
Rich Megginson
e498388a5b system roles 1.94.2-0.1
Resolves: RHEL-73244 : storage - Ansible storage role 'grow_to_fill' option on LVM pools always failing with LVM resize failure due to miscalculation of free extents.
also includes updates for el10 for ha_cluster and rhc
new community.general 10.3.0
2025-01-28 10:23:01 -07:00
Rich Megginson
5ff2ce9f46 system roles 1.94.1-0.2
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
not really related to aide - new community.general collection rhsm_repository.py
module now has line lengths > 164 which causes ansible-lint errors due to vendoring
fixed - skip pep8 checking
2025-01-09 15:52:06 -07:00
Rich Megginson
ffde7ed4fc system roles 1.94.1-0.1
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
this adds cron support for aide
Resolves: RHEL-73404 : network - fix: Prioritize find link info by permanent MAC address, with fallback to current address
Resolves: RHEL-73402 : podman - fix: get user information for secrets
Resolves: RHEL-73409 : sshd - fix: Reload the service when needed
Resolves: RHEL-73408 : sshd - fix: rename var sshd -> sshd_config and deprecate the former
Resolves: RHEL-73406 : sshd - fix: use quote with command, shell and validate with variable
2025-01-09 12:36:35 -07:00
Rich Megginson
ac4474b71e system roles 1.93.0-0.1
Resolves: RHEL-71342 : storage - Could not find luks2 key size in verify-pool-member-encryption.yml [rhel-9]
also resolves some test failures in cockpit
2024-12-13 14:11:08 -07:00
Rich Megginson
ec2155ab21 system roles 1.92.1-0.1
Resolves: RHEL-70581 : ha_cluster - rhel_system_roles.ha_cluster - adapt the role for pcs-0.12 [rhel-9]
Resolves: RHEL-70566 : systemd - fix: Always become user we are managing
2024-12-09 17:15:07 -07:00
Rich Megginson
a66c146bab system roles 1.92.0-0.1
Resolves: RHEL-13333 : certificate - rhel-system-roles.certificate with IPA backend hangs processes when repeating playbook
Resolves: RHEL-70483 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export corosync configuration [rhel-9]
Resolves: RHEL-55538 : ha_cluster - list cloud agent packages by architecture
Resolves: RHEL-69983 : postfix - feat: support postfix_default_database_type
2024-12-09 09:52:09 -07:00
Rich Megginson
12b80ba6a7 system roles 1.90.3-0.1
Resolves: RHEL-65748 : metrics - fix: add support for Valkey
fix vendoring for selinux
fix cockpit full packages support for 9.6 and later
ensure gfs2 tests do not run on el10
2024-11-20 12:43:04 -07:00
Rich Megginson
19648712fc system roles 1.90.1-0.1
Resolves: RHEL-61596 : sudo - feat: Add variable that handles semantic check for sudoers
  fix meta/main.yml versions
fix vendoring for selinux, podman
2024-11-13 17:09:51 -07:00
Rich Megginson
2868e823fe system roles 1.90.0-0.1
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
Resolves: RHEL-65758 : firewall - fix: Prevent interface definitions overriding 'changed' value when other elements are changed
Resolves: RHEL-61947 : logging - [RFE] Add methods to define and set up custom templates in the logging role of RHEL systems roles
Resolves: RHEL-65748 : metrics - fix: add support for Valkey
Resolves: RHEL-63026 : network - Support may-fail in the network role
Resolves: RHEL-61599 : network - Support autoconnect_retries in the network role
Resolves: RHEL-36014 : podman - support the pod quadlet type
Resolves: RHEL-62395 : postgresql - postgresql role: The postgresql_cert_name variable doesn't work with existing certificates
Resolves: RHEL-61596 : sudo - feat: Add variable that handles semantic check for sudoers
Resolves: RHEL-27760 : systemd - support management of user units
Resolves: RHEL-61085 : vpn - no ansible-doc for redhat.rhel_system_roles.vpn_ipaddr
2024-11-13 13:52:43 -07:00
Rich Megginson
4b2aa89902 system roles 1.88.9-0.1
Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
logging - test issue with imuxsock and loginctl used by podman - restart systemd-logind to fix podman tests
updates collection README for new Automation Hub format
2024-09-13 09:14:00 -06:00
Rich Megginson
9176e7bf5d system roles 1.88.8-0.1
Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
podman - previous fix broke ansible 2.9 + el8 with volume cleanup
logging - test issue with imuxsock and journald - restart dbus-broker
2024-09-11 08:44:02 -06:00
Rich Megginson
e9545ca3de system roles 1.88.7-0.2
Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
fapolicyd - fix method used to read from journald to determine when daemon is listening
storage - fix tests to use blkid instead of lsblk to get partition table
storage - skip stratis tests on el8
logging - tests_combination.yml needs fact gathering
same as 1.88.7-0.1 but needed to bump N-V-R and rebuild for exception
2024-09-04 12:16:30 -06:00
Rich Megginson
c8b6a74b54 system roles 1.88.7-0.1
Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
fapolicyd - fix method used to read from journald to determine when daemon is listening
storage - fix tests to use blkid instead of lsblk to get partition table
storage - skip stratis tests on el8
logging - tests_combination.yml needs fact gathering
2024-09-04 07:43:31 -06:00
Rich Megginson
d0aa27e3bd system roles 1.88.4-0.1
Resolves: RHEL-53896 : kernel_settings - fix: Use tuned files instead of using it as a module
recent tuned in el9 changed the profile directory back to the old one
so had to change the role to detect directory
2024-08-26 15:19:49 -06:00
Rich Megginson
9ecfc74848 system roles 1.88.3-0.1
Resolves: RHEL-34214 : gfs2 - New Role
no el10, aarch64 support for gfs2
network role docs
2024-08-22 11:55:33 -06:00
Rich Megginson
71c6716ef4 system roles 1.88.2-0.1
Resolves: RHEL-55295 : ha_cluster - Fixes for new pcs and ansible
several fixes for ostree issues
2024-08-22 05:45:14 -06:00
Rich Megginson
ba9e82225b system roles 1.88.0-0.1
Resolves: RHEL-55295 : ha_cluster - Fixes for new pcs and ansible
fix gather_facts issue with fapolicyd
fix gather_facts issue with ha_cluster
fix bond test firewall issue with network
2024-08-20 16:58:24 -06:00
Rich Megginson
767e58f810 system roles 1.87.2-0.1
Resolves: RHEL-50825 : System Roles: No module documentation
Fix storage role tests_lvm_pool_pv_grow issue with pvcreate hang on el7
podman - skip quadlet tests on non-x86_64 arch
journald - fix the test pattern that looks for the max size
network - fix the bond tests issue with firewall
sshd - add new parameters for openssh 9.8
2024-08-19 17:42:39 -06:00
Rich Megginson
912386f567 system roles 1.87.1-0.1
Resolves: RHEL-30888 : storage - Fingerprint storage RHEL System Role managed config files
s390x issue fix requires fix for architecture fact
2024-08-16 13:41:03 -06:00
Rich Megginson
ebafc5e708 system roles 1.87.0-0.1
Resolves: RHEL-48227 : snapshot - feat: rewrite snapshot.py as an Ansible module / add support for thin origins
some test fixes in snapshot, network
2024-08-16 09:06:21 -06:00
Rich Megginson
ff4f801418 system roles release 1.86.0-0.1
Resolves: RHEL-53896 : kernel_settings - fix: Use tuned files instead of using it as a module
Resolves: RHEL-3252 : network - support route src parameter
Resolves: RHEL-53902 : rhc - fix: drop usage of "auto_attach" of the "redhat_subscription" module
2024-08-09 12:23:42 -06:00
Rich Megginson
001d1206df system roles release 1.85.0-0.1
Resolves: RHEL-49596 : ha_cluster - alerts support
other fixes for el10 support
add timesync_provider.sh side car doc for Automation Hub rendering issue
2024-08-01 17:38:56 -06:00
Rich Megginson
cd76dc87d3 system roles release 1.84.1-0.1
Resolves: RHEL-46590 : logging - RFE - system-roles - logging: Add truncate options for local file inputs
Resolves: RHEL-40273 : logging - redhat.rhel_system_roles.logging role fails to process logging_outputs: of type: "custom"
Resolves: RHEL-34935 : logging - [RFE] Add the umask settings or enable a variable in linux-system-roles.logging
Resolves: RHEL-50102 : podman - fix: proper cleanup for networks; ensure cleanup of resources
Resolves: RHEL-30888 : storage - Fingerprint storage RHEL System Role managed config files
2024-07-23 10:34:22 -06:00
Rich Megginson
ddc63a9333 system roles release 1.83.0-0.1
Resolves: RHEL-46854 : postfix - feat: Added postfix_files feature as a simple means to add extra files/maps to config
Resolves: RHEL-48227 : snapshot - feat: rewrite snapshot.py as an Ansible module / add support for thin origins
2024-07-15 16:06:38 -06:00
Rich Megginson
5e96eca7a3 system roles release 1.82.0-0.1
Resolves: RHEL-41090 : cockpit - cockpit install all wildcard match does not work in newer el9
Resolves: RHEL-45717 : nbde_client - feat: Allow initrd configuration to be skipped
Implements meta/main.yml el10 support in most roles
2024-07-02 17:40:26 -06:00