starred/ansible
1
0
Fork 0
mirror of https://github.com/ansible/ansible.git synced 2026-08-03 08:03:05 +02:00
Code Issues Packages Projects Releases Wiki Activity
55,436 Commits 56 Branches 730 Tags
stable-2.21
Commit Graph
29 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
James CassellandGitHub 47d14a33bd config: singular ANSIBLE_COLLECTIONS_PATH (#70007) 
* config: singular ANSIBLE_COLLECTIONS_PATH

Every other *_PATH setting in ansible is singular, and the traditional
$PATH variable is also singular despite containing a list of
directories.  Let's be consistent both internally and with POSIX
tradition.

* update all ANSIBLE_COLLECTIONS_PATHS env references to be singular

* deprecate plural ANSIBLE_COLLECTIONS_PATHS setting
 2020-06-11 11:40:13 -07:00
James CassellandGitHub b868f1c933 fix systemd use in container builds (#66062) 
* systemd: unify "systemctl show" failure cases

* systemd: is-enabled to detect configured state

* systemd: is-enabled to detect masked status
 2020-02-05 15:14:57 -05:00
James CassellandGitHub 1bb94ec92f service_mgr: detect systemd, even offline (#66071) 
* service_mgr: detect systemd, even offline

* service_mgr=systemd iff /sbin/init is symlink
 2020-02-04 17:32:36 -05:00
James CassellandGitHub fd954a9c5c wait_for_connection: also retry interpreter discovery (#67040) 
self._discovered_interpreter_key is None unless a previous iteration
has attempted discovery.  In that case, force re-discovery, as the
previous attempt certainly failed.
 2020-02-04 11:40:09 -08:00
James CassellandAbhijeet Kasurde 963b8249ec setup: more reliably detect container environment (#66183) 
* virtual facts: /proc/<pid>/environ is NULL-separated
* non-empty "container" env is a guest container
* This is consistent with `systemd-detect-virt --container`
* fact utils: line_sep option: specify delim for split
* allow using the same function to split null-delimited objects
 2020-01-09 11:51:45 +05:30
James CassellandAlicia Cozine a7f90df0e9 Document match/search tests (#64775) 
* clarify `search` vs `match` tests

* string test docs: fix rst formatting
 2019-11-13 11:14:10 -06:00
James Cassellandansibot bfd32c9b00 clean "changed" only after it has been processed (#59958) 
* clean "changed" after it has been processed

without this change, a loop of `debug` tasks with `changed_when`
causes the "changed" status to get lost before output

* runme.sh tests for debug loop status
 2019-10-10 18:24:31 -04:00
James Cassellandansibot 8bca160363 add vfat to selinux special_context_filesystems (#59823) 
vfat is the format of the /boot/efi partition on UEFI hosts and does
not support SELinux labels

add an environment variable for this config option
 2019-08-12 14:45:27 -04:00
James CassellSam DoranAlicia Cozine
 		c954c07271 TRANSFORM_INVALID_GROUP_CHARS: document "ignore" option (#57318) 
Co-Authored-By: Alicia Cozine <879121+acozine@users.noreply.github.com>
 2019-08-08 13:50:20 -04:00
James Cassellandansibot 17f2b5f73e os_subnet: allow using non-default subnet pool (#52608) 2019-08-01 10:11:53 -04:00
James CassellandJordan Borean 28259ee247 dzdo: fix password prompt (#59208) 2019-07-18 10:42:00 +10:00
James CassellandToshio Kuratomi 1fb0335243 group_chars: default change warning only when needed 2019-06-04 14:04:17 -07:00
James CassellandAbhijeet Kasurde 7191d45885 VMware: vmware_tools tls warning fixes (#55187) 
* vmware_tools: remove silence_tls_warnings option

* attempt import of bundled urllib3
 2019-04-14 19:58:45 +05:30
James CassellandToshio Kuratomi 05fe9ef816 vmware_tools: ignore absence of urllib3 2019-04-11 16:29:44 -07:00
James CassellandAbhijeet Kasurde 2b8cef340e VMware: vmware_tools connection plugin (#55059) 
* variable standardisation and cleanup

- connection_address -> vmware_host
- connection_username -> vmware_user
- connection_password -> vmware_password
- connection_verify_ssl -> validate_certs
- connection_ignore_ssl_warnings -> silence_tls_warnings
- ansible_vmware_tools_vm_path -> ansible_vmware_guest_path
- standardize user/pass vars
- fallback to default ansible conneciton vars
- accept VMware standard env vars:
- note lack of "become" support
- add example usage
- more reasonable default sleep interval
- auto-silence tls warnings if validate_certs=false
- get_option for executable
- remove unsafe 'makedirs_safe'

* executable: support env vars and ini
 2019-04-11 21:17:43 +05:30
James CassellandAdam Miller bc4ef99533 standardize TLS connection properties (#54315) 
* openstack: standardize tls params

* tower: tower_verify_ssl->validate_certs

* docker: use standard tls config params

- cacert_path -> ca_cert
- cert_path -> client_cert
- key_path -> client_key
- tls_verify -> validate_certs

* k8s: standardize tls connection params

- verify_ssl -> validate_certs
- ssl_ca_cert -> ca_cert
- cert_file -> client_cert
- key_file -> client_key

* ingate: verify_ssl -> validate_certs

* manageiq: standardize tls params

- verify_ssl -> validate_certs
- ca_bundle_path -> ca_cert

* mysql: standardize tls params

- ssl_ca -> ca_cert
- ssl_cert -> client_cert
- ssl_key -> client_key

* nios: ssl_verify -> validate_certs

* postgresql: ssl_rootcert -> ca_cert

* rabbitmq: standardize tls params

- cacert -> ca_cert
- cert -> client_cert
- key -> client_key

* rackspace: verify_ssl -> validate_certs

* vca: verify_certs -> validate_certs

* kubevirt_cdi_upload: upload_host_verify_ssl -> upload_host_validate_certs

* lxd: standardize tls params

- key_file -> client_key
- cert_file -> client_cert

* get_certificate: ca_certs -> ca_cert

* get_certificate.py: clarify one or more certs in a file

Co-Authored-By: jamescassell <code@james.cassell.me>

* zabbix: tls_issuer -> ca_cert

* bigip_device_auth_ldap: standardize tls params

- ssl_check_peer -> validate_certs
- ssl_client_cert -> client_cert
- ssl_client_key -> client_key
- ssl_ca_cert -> ca_cert

* vdirect: vdirect_validate_certs -> validate_certs

* mqtt: standardize tls params

- ca_certs -> ca_cert
- certfile -> client_cert
- keyfile -> client_key

* pulp_repo: standardize tls params

remove `importer_ssl` prefix

* rhn_register: sslcacert -> ca_cert

* yum_repository: standardize tls params

The fix for yum_repository is not straightforward since this module is
only a thin wrapper for the underlying commands and config.  In this
case, we add the new values as aliases, keeping the old as primary,
only due to the internal structure of the module.

Aliases added:
- sslcacert -> ca_cert
- sslclientcert -> client_cert
- sslclientkey -> client_key
- sslverify -> validate_certs

* gitlab_hook: enable_ssl_verification -> hook_validate_certs

* Adjust arguments for docker_swarm inventory plugin.

* foreman callback: standardize tls params

- ssl_cert -> client_cert
- ssl_key -> client_key

* grafana_annotations: validate_grafana_certs -> validate_certs

* nrdp callback: validate_nrdp_certs -> validate_certs

* kubectl connection: standardize tls params

- kubectl_cert_file -> client_cert
- kubectl_key_file -> client_key
- kubectl_ssl_ca_cert -> ca_cert
- kubectl_verify_ssl -> validate_certs

* oc connection: standardize tls params

- oc_cert_file -> client_cert
- oc_key_file -> client_key
- oc_ssl_ca_cert -> ca_cert
- oc_verify_ssl -> validate_certs

* psrp connection: cert_trust_path -> ca_cert

TODO: cert_validation -> validate_certs (multi-valued vs bool)

* k8s inventory: standardize tls params

- cert_file -> client_cert
- key_file -> client_key
- ca_cert -> ca_cert
- verify_ssl -> validate_certs

* openshift inventory: standardize tls params

- cert_file -> client_cert
- key_file -> client_key
- ca_cert -> ca_cert
- verify_ssl -> validate_certs

* tower inventory: verify_ssl -> validate_certs

* hashi_vault lookup: cacert -> ca_cert

* k8s lookup: standardize tls params

- cert_file -> client_cert
- key_file -> client_key
- ca_cert -> ca_cert
- verify_ssl -> validate_certs

* laps_passord lookup: cacert_file -> ca_cert

* changelog for TLS parameter standardization
 2019-03-28 00:19:28 -05:00
James CassellandBrian Coca 92139a01df rename dellemc_idrac_firmware -> idrac_firmware (#54421) 2019-03-26 17:47:07 -04:00
James CassellandBrian Coca 51f2065df5 use ANSIBLE_ prefix on all ansible-defined env vars (#54272) 
mark old version deprecated in all places referenced via docs
 2019-03-26 17:43:48 -04:00
James CassellandSam Doran 5d32dbd532 selogin: check_mode, ignore_selinux_state, tests 
ignore_selinux_state based on #48945
 2019-03-26 17:18:36 -04:00
James CassellandSam Doran 9040fa0235 openstack: add os module_defaults group (#54319) 2019-03-26 15:37:06 -04:00
James CassellandAdam Miller 530771e6f8 rename rhsm_repository_release to rhsm_release (#53430) 
no changelog needed, as it is a new module for 2.8
 2019-03-21 10:21:45 -05:00
James CassellandSam Doran e55e8fe2c4 regex_escape: support POSIX basic regex (#50327) 2019-03-07 08:51:19 -05:00
James CassellandSandra McCann 953058d025 standardize connection variable names (#51776) 
* standardize user/password connection vars

* docs: use ansible_user and ansible_password

* docs: var precedence for connection vars

* docs: ansible_become_pass -> ansible_become_password etc
 2019-02-11 10:43:10 -05:00
James Cassellandansibot 2bd6b1415b become_method: make dzdo more like sudo (#47946) 
dzdo is basically a drop-in replacement for sudo and supports the same
command line options.

There is no become_flags set for dzdo like there is for sudo, so users
will have to set that separately to have exactly the same functionality.
 2018-12-04 18:24:32 -05:00
James CassellandSam Doran c13fa503a1 os_server_facts: support all_projects (#44800) 
* os_server_facts: support all_projects

* os_server_facts: openstacksdk expects True or False, not None
 2018-11-08 17:05:12 -05:00
James Cassellandansibot 6f0126534c os_server_facts: remove duplicate statement (#47940) 2018-11-01 17:10:57 -04:00
James CassellandBrian Coca 8eacaf6a77 command modules: optional stdin_add_newline (#45170) 
* stdin_add_newline: allow newline suppression on command modules

* command/shell: test for stdin_add_newline

* changelog for stdin_add_newline
 2018-10-31 12:53:02 -04:00
James CassellandMartin Krizek 211aeebd0d remove unused templar._clean_data() (#42739) 2018-09-11 09:11:03 +02:00
James CassellandAdam Miller 3627aa3391 pamd module regression fix (#42025) 
* pamd: typo fix sufficicent->sufficient

* pamd: is_valid is a property, not a method; return a tuple

* pamd: define is_valid for all PamdLine classes

* pamd: use validate() for verbose errors, define generically

* pamd: PamdRule: rule_control is always str, use _control

Fixes https://github.com/ansible/ansible/issues/41179
 2018-06-29 16:34:20 -05:00