Resolves: RHEL-128436 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
revert to community.general 11.4.1 - we cannot use 12.* anymore as they have dropped support for py27 and py36
(cherry picked from commit 5b332b6542)
Resolves: RHEL-128436 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
Resolves: RHEL-84891 : nbde_client - Error in using the RHEL system role for nbde client [rhel-10]
Resolves: RHEL-120325 : snapshot - add support for bootable snapsets
new role hpc
minor firewall update
(cherry picked from commit 092b96f6a9)
Resolves: RHEL-123040 : firewall - [RFE]: rhel-system-roles.firewall: add IPv6 ipset support
Resolves: RHEL-123041 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export CIB properties configuration [rhel-9]
Resolves: RHEL-123028 : network - fix: Skip the loopback profile when deleting all profiles except the ones explicitly included [rhel-9]
Resolves: RHEL-112805 : network - Ansible RHEL network system role fails cannot find route table main [rhel-9]
Resolves: RHEL-123018 : sshd - fix: include external config files first so they can override all options [rhel-9]
Resolves: RHEL-123044 : storage - Storage role crashes on systems without /etc/fstab [rhel-9]
Resolves: RHEL-112772 : storage - [storage role] add support for disk partitioning [rhel-9]
support podman, timesync in container builds
Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
This fixes ha_cluster tests
(cherry picked from commit 8434060590)
Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
This fixes tests in certificate, ha_cluster, kdump, selinux
(cherry picked from commit 5d766e2ce7)
Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
no actual code changes, test fixes for bootloader, ha_cluster, kdump, tlog
(cherry picked from commit 391b1e2109)
Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed [rhel-9]
Resolves: RHEL-106914 : storage - Tests verification fails on encrypted LVM on top of MD RAID [rhel-9]
Resolves: RHEL-106733 : sudo - redhat.rhel_system_roles.sudo takes 6-7 hours to scan /etc/sudoers.d [rhel-9]
fix storage role tests related to encrypted LVM on top of MD RAID and el7 raid errors
fix postfix role tests related to rebooting
fix ha_cluster role tests related to missing fence agent
add firewall test debugging for interface tests
(cherry picked from commit 115af14159)
Resolves: RHEL-105095 : podman - specifying multiple users causes resources to be associated with wrong user [rhel-9]
Resolves: RHEL-104891 : storage - Improve error reporting when invalid or unsupported RAID configuration is given [rhel-9]
Resolves: RHEL-104676 : storage - Incorrect key file in crypttab entry for volume encrypted_vol [rhel-9]
refactor ha_cluster to have empty __init__.py in module_utils for ansible-test
fix tests in postfix, selinux
(cherry picked from commit 6f77d841b5)
Resolves: RHEL-103889 : postfix - fix: configure postfix to listen only to IPv4 if IPv6 is disabled
Resolves: RHEL-103575 : selinux - fix: tempdir path not defined in check mode; __selinux_item.path may be undefined
ha_cluster - ansible 2.19 support
bootloader - fix wording in README
(cherry picked from commit 9d751724b4)
Resolves: RHEL-99089 : ad_integration - feat: control sssd domain/realm section name to use; merge settings into chosen name [rhel-9]
Resolves: RHEL-101678 : bootloader - fix: Fix removing kernel options with values [rhel-9]
Resolves: RHEL-87579 : bootloader - Add functionality to set default kernel with bootloader
Resolves: RHEL-101663 : ha_cluster - Fix missing /var/lib/pcsd directory after pcs installation [rhel-9]
Resolves: RHEL-95874 : journald - feat: Add support for SystemKeepFree journald.conf option [rhel-9]
Resolves: RHEL-95885 : storage - fix: Fix getting PVs from raid_disks for RAID LVs [rhel-9]
several roles work with ansible 2.19
several roles work with bootc
network test fix
(cherry picked from commit f6f83fdad4)
Resolves: RHEL-93296 : selinux - fix: Set the kernel command line selinux parameter correctly when changing selinux state
(cherry picked from commit ded7cc9142)
Resolves: RHEL-85569 : docs links should not use rhel-system-roles.github
Resolves: RHEL-88314 : ad_integration - Introduced option to skip package installation [rhel-9]
Resolves: RHEL-84951 : firewall - Add `includes` when defining a custom service
Resolves: RHEL-88251 : ha_cluster - fix: restart qdevice when its certificates have been regenerated [rhel-9]
Resolves: RHEL-88241 : ha_cluster - ha_cluster: 404 on removing qnetd certificate on rhel9.4 client vm [rhel-9]
Resolves: RHEL-89913 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export pcsd and OS configuration [rhel-9]
Resolves: RHEL-17564 : metrics - support for gathering spark metrics
Resolves: RHEL-85872 : network - Incorrect attribute checks for routing rule validation
Resolves: RHEL-84197 : network - Network role should remove MAC address matching from SysUtil.link_info_find()
Resolves: RHEL-84362 : network - Network role should refine MAC validation using interface name
Resolves: RHEL-85702 : podman - fix: render boolean option values correctly in toml files
Resolves: RHEL-84940 : podman - bug in toml rendering of `podman_containers_conf`
Resolves: RHEL-84930 : podman - podman_registries_conf TOML tables not supported
Resolves: RHEL-84920 : podman - Directory .config/containers mode constantly changed
Resolves: RHEL-84910 : podman - fix: Do not restart logind unless absolutely necessary
Resolves: RHEL-89120 : storage - [storage] LVM grow_to_fill feature doesn't work with latest blivet
Resolves: RHEL-82825 : storage - Resize logical volumes is not proper idempotent
Resolves: RHEL-88772 : systemd - fix: files and templates in nested directories are not placed correctly
Resolves: RHEL-81755 : systemd - Systemd unmask should run at the begin to allow the role to manage the units
Resolves: RHEL-88299 : timesync - fix: add default seccomp filters for el9/10 [rhel-9]
Resolves: RHEL-85079 : timesync - rhel-system-roles.timesync doesn't work when IPv6 is disabled in environment
Resolves: RHEL-85569 : docs links should not use rhel-system-roles.github
Resolves: RHEL-88314 : ad_integration - Introduced option to skip package installation [rhel-9]
Resolves: RHEL-84951 : firewall - Add `includes` when defining a custom service
Resolves: RHEL-89913 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export pcsd and OS configuration [rhel-9]
Resolves: RHEL-89912 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export resources configuration [rhel-9]
Resolves: RHEL-88251 : ha_cluster - fix: restart qdevice when its certificates have been regenerated [rhel-9]
Resolves: RHEL-88241 : ha_cluster - ha_cluster: 404 on removing qnetd certificate on rhel9.4 client vm [rhel-9]
Resolves: RHEL-17564 : metrics - support for gathering spark metrics
Resolves: RHEL-84891 : nbde_client - Error in using the RHEL system role for nbde client
Resolves: RHEL-85872 : network - Incorrect attribute checks for routing rule validation
Resolves: RHEL-84362 : network - Network role should refine MAC validation using interface name
Resolves: RHEL-84197 : network - Network role should remove MAC address matching from SysUtil.link_info_find()
Resolves: RHEL-85702 : podman - fix: render boolean option values correctly in toml files
Resolves: RHEL-84940 : podman - bug in toml rendering of `podman_containers_conf`
Resolves: RHEL-84930 : podman - podman_registries_conf TOML tables not supported
Resolves: RHEL-84920 : podman - Directory .config/containers mode constantly changed
Resolves: RHEL-84910 : podman - fix: Do not restart logind unless absolutely necessary
Resolves: RHEL-89120 : storage - [storage] LVM grow_to_fill feature doesn't work with latest blivet
Resolves: RHEL-88772 : systemd - fix: files and templates in nested directories are not placed correctly
Resolves: RHEL-81755 : systemd - Systemd unmask should run at the begin to allow the role to manage the units
Resolves: RHEL-88299 : timesync - fix: add default seccomp filters for el9/10 [rhel-9]
Resolves: RHEL-85079 : timesync - rhel-system-roles.timesync doesn't work when IPv6 is disabled in environment
Resolves: RHEL-82516 : rhc - does not enable content in EL10 systems [rhel-9]
plus an upgrade to rhc role to fix a testing issue
Resolves: RHEL-82515 : storage - "Make sure required packages are installed' task fails because Blivet requires the kmod-kvdo package, which is no longer available on EL10 [rhel-9]
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
fixes an issue with parameter name
fixes an issue with changed reporting true when nothing has changed
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
fixes aide ostree support
fixes storage role ostree support
fixes cockpit tests_packages_full
fixes kdump tests_ssh_wrapper
fixes selinux test failures
Resolves: RHEL-73244 : storage - Ansible storage role 'grow_to_fill' option on LVM pools always failing with LVM resize failure due to miscalculation of free extents.
also includes updates for el10 for ha_cluster and rhc
new community.general 10.3.0
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
not really related to aide - new community.general collection rhsm_repository.py
module now has line lengths > 164 which causes ansible-lint errors due to vendoring
fixed - skip pep8 checking
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
this adds cron support for aide
Resolves: RHEL-73404 : network - fix: Prioritize find link info by permanent MAC address, with fallback to current address
Resolves: RHEL-73402 : podman - fix: get user information for secrets
Resolves: RHEL-73409 : sshd - fix: Reload the service when needed
Resolves: RHEL-73408 : sshd - fix: rename var sshd -> sshd_config and deprecate the former
Resolves: RHEL-73406 : sshd - fix: use quote with command, shell and validate with variable
Resolves: RHEL-71342 : storage - Could not find luks2 key size in verify-pool-member-encryption.yml [rhel-9]
also resolves some test failures in cockpit
Resolves: RHEL-70581 : ha_cluster - rhel_system_roles.ha_cluster - adapt the role for pcs-0.12 [rhel-9]
Resolves: RHEL-70566 : systemd - fix: Always become user we are managing
Resolves: RHEL-65748 : metrics - fix: add support for Valkey
fix vendoring for selinux
fix cockpit full packages support for 9.6 and later
ensure gfs2 tests do not run on el10
Resolves: RHEL-67244 : aide - New role aide to manage system integrity checking
Resolves: RHEL-65758 : firewall - fix: Prevent interface definitions overriding 'changed' value when other elements are changed
Resolves: RHEL-61947 : logging - [RFE] Add methods to define and set up custom templates in the logging role of RHEL systems roles
Resolves: RHEL-65748 : metrics - fix: add support for Valkey
Resolves: RHEL-63026 : network - Support may-fail in the network role
Resolves: RHEL-61599 : network - Support autoconnect_retries in the network role
Resolves: RHEL-36014 : podman - support the pod quadlet type
Resolves: RHEL-62395 : postgresql - postgresql role: The postgresql_cert_name variable doesn't work with existing certificates
Resolves: RHEL-61596 : sudo - feat: Add variable that handles semantic check for sudoers
Resolves: RHEL-27760 : systemd - support management of user units
Resolves: RHEL-61085 : vpn - no ansible-doc for redhat.rhel_system_roles.vpn_ipaddr
Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
logging - test issue with imuxsock and loginctl used by podman - restart systemd-logind to fix podman tests
updates collection README for new Automation Hub format
Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
podman - previous fix broke ansible 2.9 + el8 with volume cleanup
logging - test issue with imuxsock and journald - restart dbus-broker
Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
fapolicyd - fix method used to read from journald to determine when daemon is listening
storage - fix tests to use blkid instead of lsblk to get partition table
storage - skip stratis tests on el8
logging - tests_combination.yml needs fact gathering
same as 1.88.7-0.1 but needed to bump N-V-R and rebuild for exception
Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
fapolicyd - fix method used to read from journald to determine when daemon is listening
storage - fix tests to use blkid instead of lsblk to get partition table
storage - skip stratis tests on el8
logging - tests_combination.yml needs fact gathering
Resolves: RHEL-53896 : kernel_settings - fix: Use tuned files instead of using it as a module
recent tuned in el9 changed the profile directory back to the old one
so had to change the role to detect directory
Resolves: RHEL-55295 : ha_cluster - Fixes for new pcs and ansible
fix gather_facts issue with fapolicyd
fix gather_facts issue with ha_cluster
fix bond test firewall issue with network
Resolves: RHEL-50825 : System Roles: No module documentation
Fix storage role tests_lvm_pool_pv_grow issue with pvcreate hang on el7
podman - skip quadlet tests on non-x86_64 arch
journald - fix the test pattern that looks for the max size
network - fix the bond tests issue with firewall
sshd - add new parameters for openssh 9.8
Resolves: RHEL-53896 : kernel_settings - fix: Use tuned files instead of using it as a module
Resolves: RHEL-3252 : network - support route src parameter
Resolves: RHEL-53902 : rhc - fix: drop usage of "auto_attach" of the "redhat_subscription" module
Resolves: RHEL-49596 : ha_cluster - alerts support
other fixes for el10 support
add timesync_provider.sh side car doc for Automation Hub rendering issue
Resolves: RHEL-46854 : postfix - feat: Added postfix_files feature as a simple means to add extra files/maps to config
Resolves: RHEL-48227 : snapshot - feat: rewrite snapshot.py as an Ansible module / add support for thin origins
Resolves: RHEL-41090 : cockpit - cockpit install all wildcard match does not work in newer el9
Resolves: RHEL-45717 : nbde_client - feat: Allow initrd configuration to be skipped
Implements meta/main.yml el10 support in most roles