Skip to content

Releases: freeipa/ansible-freeipa

ansible-freeipa-1.13.2

01 Jul 13:41
16a4eb8
Compare
Choose a tag to compare

Highlights in 1.13.2

  • Support for FreeIPA 4.12
  • Idempotency fixes
  • Minimum supported ansible-core version: 2.15.0
  • Fixes for ansible-test 2.17.1

Changes since 1.13.1

  • Documentation fixes for issues found by ansible-test part of ansible-core 2.17.1 (#1264)
  • tests/sanity/sanity.sh: Install setuptools with pip (#1263)
  • user: Fix idp_user_id aliases (#1262)
  • plugins/inventory/freeipa: Try imports for requests and urllib3 (#1261)
  • permission: Fix idempotency issues for DN parameters (#1259)
  • README-service.md: Add multi service handling (#1255)
  • Convert input certificates (#1250)
  • ansible_freeipa_module: Fix errors in batch mode (#1248)
  • Fixes for FreeIPA 4.12 (#1246)
  • Bump minimum supported Ansible version (#1130)

Detailed changelog since 1.13.1 by author

2 authors, 35 commits

Rafael Guterres Jeffman (9)

  • ansible-freeipa.spec: Bump minimum supported Ansible version to 2.15
  • utils/templates: Bump minimum supported Ansible version to 2.15
  • ipasmartcard_*: Bump minimum supported Ansible version to 2.15
  • ipabackup: Bump minimum supported Ansible version to 2.15
  • ipaserver: Bump minimum supported Ansible version to 2.15
  • ipareplica: Bump minimum supported Ansible version to 2.15
  • ipaclient: Bump minimum supported Ansible version to 2.15
  • README-*: Bump minimum Ansible supported version to 2.15
  • Set collection ansible-core minimum version to 2.15

Thomas Woerner (26)

  • Role modules: Docs: Fix default value for string list parameters
  • tests/utils.py: Fix missing whitespace around arithmetic operator (E226)
  • ipareplica_prepare: Documentation: Fixed name of ipa_client_installed
  • ipaclient_setup_nss: Documentation: Add default for selinux_works
  • service: Docs: Fix required for name, add delete_continue to services
  • idp: Drop no_log from docs section, allow to log token_uri and keys_uri
  • idoverrideuser: Docs: Fix sshpubkey element type, nomembers type
  • cert: Fix short_description tag, add chain option, remove authors
  • inventory/freeipa: Documentation: Fix version_added and drop plugin_type
  • ipamodule_base_docs: Documentation: Fix default for delete_continue
  • tests/sanity/sanity.sh: Install setuptools with pip
  • user: Fix idp_user_id aliases
  • service: Add multi service examples to EXAMPLES
  • README-service.md: Add multi service handling
  • plugins/inventory/freeipa: Try imports for requests and urllib3
  • permission: Fix idempotency issues for DN parameters
  • ansible_freeipa_module: Fix errors in batch mode
  • ipauser: Use new convert_input_certificates
  • ipaidoverrideusere: Use new convert_input_certificates
  • ipahost: Use new convert_input_certificates
  • ipaservice: Use new convert_input_certificates
  • ansible_freeipa_module: New function convert_input_certificates
  • ipareplica: After an HSM replica install ensure all certs are visible
  • ipareplica: Refactor CA file handling
  • ipareplica_install_ca_certs: Do not return unchanged config attributes
  • ipaserver: Set hsm attributes to None for now

ansible-freeipa-1.13.1

27 May 14:06
a1230ca
Compare
Choose a tag to compare

Changes since 1.13.0

  • utils/build-galaxy-release.sh: Fix unary operator expected (v2) (#1242)

Detailed changelog since 1.13.0 by author

1 authors, 1 commits

Thomas Woerner (1)

  • utils/build-galaxy-release.sh: Fix unary operator expected (v2)

ansible-freeipa-1.13.0

27 May 12:56
8779384
Compare
Choose a tag to compare

Highlights in 1.13.0

  • New inventory plugin
  • Use batch command internally for ipahost, ipaservice and ipauser
  • Fix idempotency issues in ipahost, ipaservice and ipauser
  • Fix idempotency in ipaclient_dns_resolver
  • Documentation fixes

Changes since 1.12.1

  • README-group.md: Add missing ":" in multi rename example (#1239)
  • README-user.md: Fix state for user rename in example playbook (#1238)
  • ipahost: Fix idempotency issues (#1237)
  • ipaservice: Do not set continue to None for service_del (#1236)
  • ipauser: Fix idempotency issues for members (#1235)
  • New inventory plugin (#1231)
  • Use batch command internally (#1229)
  • utils/build-galaxy-release.sh: Fix offline default value (#1227)
  • ipalib.install.kinit moved to ipalib (#1226)
  • Bump linter tools versions an fix linter errors (#1225)
  • ipaclient_configure_dns_resolver: Return proper changed state (#1224)
  • utils/build-galaxy-release.sh: Enable offline generation for rpm (#1223)
  • ipaserver_prepare: Properly create IPA_DEFAULT_CONF (#1222)
  • ipaserver: Run custodia setup only once (#1221)
  • ipaserver_test: Return generated domain_name (#1220)
  • Fix ca-less test to use X.509 v3 certificates (#1215)
  • README-dnszone: Fix yaml code block declaration. (#1213)

Detailed changelog since 1.12.1 by author

2 authors, 27 commits

Rafael Guterres Jeffman (6)

  • fixup! pylint: Ignore usage of 'unicode' before assignment
  • pylint: ensure variables are initialized
  • pylint: Ignore usage of 'unicode' before assignment
  • upstream ci: Update Github actions
  • lint tools: bump code verification tools versions
  • README-dnszone: Fix yaml code block declaration.

Thomas Woerner (21)

  • ipahost: Enable batch command with keeponly
  • ipagroup: Enable batch command use with keeponly
  • ipaservice: Enable batch command use with keeponly
  • ipauser: Enable batch command use with keeponly
  • IPAAnsibleModule: Add support for batch command in execute_ipa_commands
  • README-group.md: Add missing ":" in multi rename example
  • README-user.md: Fix state for user rename in example playbook
  • utils/build-galaxy-release.sh: Fix unary operator expected
  • New inventory plugin
  • ipahost: Fix idempotency issues
  • ansible_freeipa_module: Import and provide normalize_sshpubkey
  • ipaservice: Do not set continue to None for service_del
  • ipauser: Fix idempotency issues for members
  • ipalib.install.kinit moved to ipalib
  • utils/build-galaxy-release.sh: Fix offline default value
  • ipaclient_configure_dns_resolver: Return proper changed state
  • utils/build-galaxy-release.sh: Enable offline generation for rpm
  • ipaserver_prepare: Properly create IPA_DEFAULT_CONF
  • ipaserver: Run custodia setup only once
  • ipaserver_test: Return generated domain_name
  • Fix ca-less test to use X.509 v3 certificates

ansible-freeipa-1.12.1

12 Feb 14:37
a3a6919
Compare
Choose a tag to compare

Highlights in 1.12.1

  • Fix ipaserver deployment on CentOS 8 Stream
  • Fix ipaclient deployment with automount
  • Fix ipaclient OTP error reporting
  • Add missing support for renaming groups and users
  • Idempotency fixes in several modules

Changes since 1.12.0

  • Disable config tests for pac type without ms pac (#1211)
  • ipaclient_setup_automount with new install states (#1208)
  • ipaclient: Enable SELinux for SSSD (#1207)
  • ipaserver: Fix deployment after Bronze-bit fix (#1206)
  • ipahbacrule: Fix handling of hbacsvcgroup in members (#1203)
  • ipahostgroup: Fix idempotence issues due to capitalization (#1202)
  • ipagroup: Fix idempotence issues due to capitalization (#1201)
  • Fixes for ansible-lint 6.22.1 (#1195)
  • Revert "[TEMP] Enable only idp, service and user module tests" (#1189)
  • Bump minimum ansible-lint version to 6.22 (#1188)
  • ipaclient: Fix OTP error reporting (#1187)
  • test_host_random: No jinja2 templating in conditional statements (#1186)
  • upstream ci: Increase timeout for PR tests (#1184)
  • ipaidp: Fix validation and reset of parameters (#1183)
  • test_pwpolicy: minlength parameter can be reset with empty string now (#1180)
  • ipagroup: Add support for renaming groups (#1178)
  • ipauser: Add support for renaming users (#1174)
  • ipaclient: Properly name automount_location var and add documentation (#1169)
  • ipareplica: Support inventory groups.ipaserver (#1151)
  • ipauser: Do not try to modify user when not changing password (#1149)
  • ipadnszone: Add support for per-zone privilege delegation (#1147)
  • Handle data type or empty string in module_utils (#1143)
  • ipasudorule: Allow setting groups for runasuser. (#899)
  • ipadelegation: Fix idempotence issues due to capitalization. (#760)

Detailed changelog since 1.12.0 by author

2 authors, 31 commits

Rafael Guterres Jeffman (20)

  • ipadelegation: Fix idempotence issues due to capitalization.
  • ipagroup: Fix idempotence issues due to capitalization
  • ipahostgroup: Fix idempotence issues due to capitalization
  • ipaserver: Fix deployment after Bronze-bit fix
  • ipahbacrule: Fix handling of hbacsvcgroup in members
  • ipasudorule: Allow setting groups for runasuser.
  • ipagroup: Add support for renaming groups
  • tests/group: Use module_defaults on tests_group
  • ipauser: Add support for renaming users
  • ipadnszone: Add support for per-zone privilege delegation
  • idoveridegroup: Use module.params_get_type
  • idoverideuser: Use module.params_get_type
  • ipapwpolicy: Use modules.params_get_type
  • ansible_freeipa_module: Ensure data type when retrieving parameter
  • Rename parameter 'allow_empty_string' to 'allow_empty_list_item'
  • upstream ci: Increase timeout for PR tests
  • Bump minimum ansible-lint version to 6.22
  • ipaclient: Fix OTP error reporting
  • ipauser: Do not try to modify user when not changing password
  • ipareplica: Support inventory groups.ipaserver

Thomas Woerner (11)

  • config: Disable config tests due to pac type requirement MS-PAC
  • ipaclient_setup_automount: Only return changed if there was a change
  • ipaclient_setup_automount with new install states
  • ipaclient: Enable SELinux for SSSD
  • Fixes for ansible-lint 6.22.1
  • Revert "[TEMP] Enable only idp, service and user module tests"
  • test_host_random: No jinja2 templating in conditional statements
  • [TEMP] Enable only idp, service and user module tests
  • ipaidp: Fix validation and reset of parameters
  • test_pwpolicy: minlength parameter can be reset with empty string now
  • ipaclient: Properly name automount_location var and add documentation

ansible-freeipa-1.12.0

24 Nov 16:40
1930d8c
Compare
Choose a tag to compare

Highlights in 1.12.0

  • New idoverridegroup management module.
  • New idoverrideuser management module.
  • New idview management module.
  • New idp management module.
  • Bug fixes and CI improvements.

Changes since 1.11.1

  • idoverride{user,group}: Fix delete_continue with state absent (#1176)
  • ipahost: Remove dangling dns records during test setup (#1173)
  • Update ansible-lint and pylint versions (#1170)
  • Reproduce upstream CI groups in developer's machine (#1168)
  • upstream CI: Pin ansible-lint version to 6.20 series (#1159)
  • ipaidview: Fail to apply unknown (invalid) hosts (#1158)
  • upstream CI: Pin Python version to 3.11 (#1157)
  • hbacsvcgroup: Remove obsolete result_handler (#1156)
  • hbacrule: Fix use of builtin sudo hbacsvcgroup (#1155)
  • upstream CI: Fix test selection for CheckPR pipeline. (#1148)
  • utils/ansible-freeipa.spec.in: Add ref for idoverridegroup management (#1146)
  • Revert "upstream ci: Run nightly tests against Ansible 2.9" (#1145)
  • Ensure CI runs against the oldest supported Ansible versions. (#1144)
  • Do not use "del os.environ" as the variable might not exist (#1142)
  • New idoverridegroup management module. (#1141)
  • new_module template fixes (#1140)
  • New idoverrideuser management module. (#1139)
  • spec file: Updated list of modules (#1138)
  • Bump Ansible version to 2.13 (#1136)
  • New idview management module. (#1134)
  • ipacert: Fix revocation example playbook on README (#1133)
  • Updated supported distros (#1131)
  • upstream ci: fix sanity test ansible lint failures (#1120)
  • Bump linter versions. (#1112)
  • New idp management module (#1105)
  • upstream CI: Build containers in parallel jobs (#1104)

Detailed changelog since 1.11.1 by author

2 authors, 40 commits

Rafael Guterres Jeffman (28)

  • ipahost: Remove dangling dns records during test setup
  • utils/run-tests.sh: Replicate Azure's test grouping
  • Update ansible-lint and pylint versions
  • upstream CI: Build containers in parallel jobs
  • upstream ci: Run PR tests using a single job.
  • upstream ci: Use a single random seed for spliting tests
  • upstream CI: Fix test selection for CheckPR pipeline.
  • upstream CI: Pin ansible-lint version to 6.20 series
  • upstream CI: Pin Python version to 3.11
  • Revert "upstream ci: Run nightly tests against Ansible 2.9"
  • upstream ci: Run nightly tests against Ansible 2.9
  • upstream ci: Run PR checks against the oldest supported ansible-core
  • pylint: Fix redefined-builtin
  • pylint: Fix unused-argument
  • ci: Bump pylint version
  • development: Bump versions of development checks
  • pylint: Unnecessary parens after '=' keyword
  • Change 'Exception' to 'RuntimeError' when FreeIPA version is too old
  • pylint: Disable broad exception warnings
  • pylint: Fix warning 'unnecessary "else" after "return"'
  • pylint: Disable warning when using non-literal dict
  • spec file: Updated list of modules
  • ansible-freeipa: Bump minimum supported Ansible version to 2.13
  • README-*: Bump minimum supported Ansible version to 2.13
  • roles: Bump minimum Ansible version to 2.13
  • ansible-lint: Use the same command line as galaxy-importer
  • ipacert: Fix revocation example playbook on README
  • Updated supported distros

Thomas Woerner (12)

  • idoverride{user,group}: Fix delete_continue with state absent
  • ipaidview: Fail to apply unknown (invalid) hosts
  • hbacsvcgroup: Remove obsolete result_handler
  • hbacrule: Fix use of builtin sudo hbacsvcgroup
  • utils/ansible-freeipa.spec.in: Add ref for idoverridegroup management
  • New idp management module
  • New idoverridegroup management module.
  • New idoverrideuser management module.
  • Do not use "del os.environ" as the variable might not exist
  • utils/templates/ipamodule*.py.in: Fix superfluous type in argument spec
  • utils/templates/test_module_client_context.yml.in: Fix FQDN issue
  • New idview management module.

ansible-freeipa-1.11.1

24 Jul 11:05
cf779e4
Compare
Choose a tag to compare

Highlights in 1.11.1

  • Support for GECOS, street, smb and idp attributes in ipauser module
  • Support for indirect maps in ipaautomountmap module
  • Update of user_auth_type choices in ipaconfig and ipauser modules
  • Update of auth_ind choices in ipahost and ipaservice modules
  • Upstream test and environment enhancements
  • Documentation updates

Changes since 1.11.0

  • ci: Increase verbosity for Ansible playbook runs (#1123)
  • ansible_freeipa_module: Fix ipa_command_invalid_param_choices (#1122)
  • Update authtypes authind readmes (#1119)
  • Update authtypes authind (#1118)
  • ipaserver: Update README with detailed Ubuntu support (#1117)
  • utils/run-tests.sh: Install Ansible collections on virtual environment (#1116)
  • Remove dependency on 'virtualenv' (#1114)
  • Singular to plural on random serial numbers setting (#1106)
  • upstream CI: Update ansible-core version (#1100)
  • doc: Differentiate location meaning between host and server (#1098)
  • Fix handling of ipapwpolicy attributes usercheck and dictcheck (#1076)
  • ipaautomountmap: add support for indirect maps (#1075)
  • ipauser: Add support for SMB attributes. (#1056)
  • ipauser: Support for External IdP attributes. (#1055)
  • ipauser: Add support for parameter "street" (#1044)
  • ipauser: Add support to modify GECOS field. (#1039)

Detailed changelog since 1.11.0 by author

3 authors, 25 commits

Rafael Guterres Jeffman (14)

  • ci: Increase verbosity for Ansible playbook runs
  • ipauser: Support for External IdP attributes.
  • ipaserver: Update README with detailed Ubuntu support
  • ipaautomountmap: add support for indirect maps
  • utils/run-tests.sh: Install Ansible collections on virtual environment
  • ipauser: Add support for SMB attributes.
  • doc: Differentiate location meaning between host and server
  • Remove dependency on 'virtualenv'
  • ipauser: Add support for parameter "street"
  • ipapwpolicy: Updated module documentation.
  • ipapwpolicy: Modify handling of usercheck and dictcheck
  • module_utils: Export Ansible's 'boolean' parsing function.
  • ipauser: Add support to modify GECOS field.
  • upstream CI: Update ansible-core version

Renich Bon Ciric (1)

  • Singular to plural on random serial numbers setting

Thomas Woerner (10)

  • ansible_freeipa_module: Fix ipa_command_invalid_param_choices
  • README-user.md: Add choices pkinit, hardened and idp to user_auth_type
  • README-service.md: Add choice idp to auth_ind
  • README-host.md: Add choice idp to auth_ind
  • README-config.md: Add choices pkinit, hardened and idp to user_auth_type
  • ipauser: Add choices pkinit, hardened and idp to user_auth_type
  • ipaservice: Add choice idp to auth_ind
  • ipahost: Add choice idp to auth_ind
  • ipaconfig: Add choices pkinit, hardened and idp to user_auth_type
  • ansible_freeipa_module: New ipa_command_invalid_param_choices method

ansible-freeipa-1.11.0

12 Jun 08:58
45700bc
Compare
Choose a tag to compare

Highlights in 1.11.0

  • Multiple service management with ipaservice module
  • New ipacert module for certificate management
  • Action group support for the Ansible collections on Ansible Galaxy and Ansible AutomationHub
  • Fixed maxsequence handling in ipapwpolicy module
  • Even more Ansible lint driven changes

Changes since 1.10.0

  • Multiple service management (#1101)
  • Don't allow the FQDN to match the domain on server installs (#1099)
  • upstream CI: Disable ansible-lint var-naming check (#1097)
  • Upstream CI: Disable execution of pytest tests (#1094)
  • tests/azure/templates/build_container.yml: Quote requests with version (#1092)
  • Pin requests to < 2.29 temporarily (#1089)
  • Fix new ansible lint disallowes ignores (#1088)
  • tests/azure: Install molecule-plguins to get docker driver (#1083)
  • pwpolicy test: Fix maxsequence test (#1082)
  • Fix typo in ipapwpolicy.py (#1081)
  • Create action group in collection for use with module_defaults (#1080)
  • ipapwpolicy: simplified and faster attribute verification (#1078)
  • Make Git ignore temporary and output files. (#1077)
  • Fixes and enhancements for utils/new_module and templates (#1035)
  • ipacert module (#687)

Detailed changelog since 1.10.0 by author

5 authors, 30 commits

Denis Karpelevich (1)

  • Allow multiple services creation

Jacob Cutright (1)

  • Fix typo in ipapwpolicy.py

Rafael Guterres Jeffman (6)

  • Don't allow the FQDN to match the domain on server installs
  • upstream CI: Disable ansible-lint var-naming check
  • Upstream CI: Disable execution of pytest tests.
  • Make Git ignore temporary and output files.
  • utils/new_module: Ensure correct number of parameters for new_module
  • ipapwpolicy: simplified and faster attribute verification

Sam Morris (1)

  • New certificate management module.

Thomas Woerner (21)

  • pwpolicy test: Fix maxsequence test
  • ipaservice: Updated and new tests for certificates and multi service handling
  • ipaservice: Add Denis Karpelevich to the authors header
  • ipaservice: Properly Handle certs with leading or trailing white space
  • tests/azure/templates/build_container.yml: Quote requests with version
  • ansible_freeipa_module.py: Calm down ansible-test on print and sys.exit
  • ipaserver_test.py: Add missing default for random_serial_numbers
  • ansible-test: Do not use automatic field numbering specification
  • Use "#!/usr/bin/env python" for python shebang
  • Add -eu to all bash shebangs
  • Remove old or empty sanity ignore files
  • Pin requests to < 2.29 temporarily
  • tests/azure: Install molecule-plguins to get docker driver
  • utils/templates/test_module*.yml.in: Use generic module_defaults
  • utils/templates/test_module*.yml.in: Better docs for become and gather_facts
  • utils/templates/{README*.md.in,test_module*.yml.in}: Use true and false
  • utils/build-galaxy-release.sh: Create module action group
  • utils/galaxyfy.py: Handle module_defaults, match roles and modules
  • New utils/facts.py: Provide facts about the repo like role and module lists
  • utils/templates/ipamodule.py.in: Add missing bracket
  • utils/new_module: Fix github_user test

ansible-freeipa-1.10.0

05 Apr 14:30
b861a61
Compare
Choose a tag to compare

Highlights in 1.10.0

  • ipagroup: Allow multiple group management.
  • ipaclient: Add subid option to select the sssd profile with-subid.
  • ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup.
  • ipaclient: Keep server affinity while deploying by deferring the creation the final krb5.conf.
  • ipaserver: Allow deployments with random serial numbers.
  • ipareplica/server: Enable removal from domain with undeployment.
  • More Ansible lint fixes.

Changes since 1.9.2

  • ipaserver: Do not enable random serial numbers by default (#1073)
  • ipagroup: Fix ensuring external group group members (without trust-ad) (#1072)
  • Ansible lint fixes (#1069)
  • ipareplica/server: Enable removal from domain with undeployment (#1068)
  • ipaclient: Defer krb5 configuration fix (#1067)
  • ipareplica role: Remove usage of undefined parameters. (#1062)
  • roles/ipaserver: Allow deployments with random serial numbers (#1060)
  • ipahost: Make return value depending on hosts parameter (#1058)
  • ipauser: Make return value depending on users parameter (#1053)
  • Migrated to SPDX license. (#1051)
  • ipaclient: Defer creating the final krb5.conf on clients (#1050)
  • Update EXAMPLE sections for multiuser and multihost handling. (#1047)
  • Fix ansible-lint on tests (#1046)
  • ipauser: Better description of UID and GID parameters (#1045)
  • ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup (#1037)
  • [RFE] Allow multiple groups creation (#1001)
  • Add subid option to select the sssd profile with-subid. (#974)

Detailed changelog since 1.9.2 by author

3 authors, 26 commits

Denis Karpelevich (3)

  • [RFE] Allow multiple groups creation.
  • Add subid option to select the sssd profile with-subid.
  • Update EXAMPLE sections for multiuser and multihost handling.

Rafael Guterres Jeffman (8)

  • roles/ipaserver: Allow deployments with random serial numbers
  • ipareplica role: Remove usage of undefined parameters.
  • Migrated to SPDX license.
  • ipauser: Better description of UID and GID parameters
  • ansible-lint: License must be defined as a list.
  • ansible-lint: Fixed dangling 'when' clause.
  • ansible-lint: Fix key order on upstream tests
  • ansible-lint: Use 'missing-import' instead of '505'

Thomas Woerner (15)

  • ipaserver: Do not enable random serial numbers by default
  • ipagroup: Handle ensuring groups with mixed types without IPA fix 6741
  • ipagroup: Fix ensuring external group group members (without trust-ad)
  • ipareplica/server: Enable removal from domain with undeployment
  • tests/config/test_config_sid: Mark tasks as noqa 503
  • ipareplica/server: Always cleanup root IPA cache
  • ipaclient_configure_dns_resolver: Removed bad aliases
  • ipapwpolicy: The alias for usercheck in argument_spec had typo
  • ipanetgroup: Missing type for action and state DOCUMENTATION section
  • ipaclient: ipaclient_fix_ca also needs krb_name parameter
  • ipaclient: ipaclient_setup_nss also needs krb_name parameter
  • ipahost: Make return value depending on hosts parameter
  • ipauser: Make return value depending on users parameter
  • ipaclient: Defer creating the final krb5.conf on clients
  • ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup

ansible-freeipa-1.9.2

31 Jan 14:35
0c23ae5
Compare
Choose a tag to compare

Changes since 1.9.1

  • ipabackup: Use ipabackup_item again in copy_backup_to_server (#1033)

Detailed changelog since 1.9.1 by author

1 authors, 1 commits

Thomas Woerner (1)

  • ipabackup: Use ipabackup_item again in copy_backup_to_server

ansible-freeipa-1.9.1

30 Jan 14:54
e96f92c
Compare
Choose a tag to compare

Highlights in 1.9.1

  • Ansible 2.14 test and lint fixes
  • pwpolicy: Allow clearing policy values
  • More bug fixes

Changes since 1.9.0

  • upstream CI: increase Azure test timeout. (#1031)
  • Use yml extension for pytest tests (#1030)
  • playbooks: Fix automount tasks to make ansible-lint happy (#1029)
  • dnszone tests: Fix typo on task names. (#1028)
  • playbooks/automount: All playbooks should use .yml (#1027)
  • Ansible lint tests (#1026)
  • pwpolicy: Fix tests for 'minlength: ""' (#1024)
  • .github/workflows/lint.yml: ansible-lint needs collection source dir (#1023)
  • pwpolicy: Fix new bool checks for IPA prior to 4.9.10 (#1022)
  • utils files: Support builtins with ansible.builtin. prefix (#1016)
  • Fix ansible-test lint warnings in roles. (#1014)
  • yamllint: All tasks need to be named (#1013)
  • pwpolicy: Allow clearing policy values. (#1012)
  • upstream ci: Allow tasks to retry in case of connection failure. (#1009)
  • Use FQCN for ansible.builtin (#1007)
  • Use netgroup_find instead of netgroup_show to workaround IPA bug. (#1003)
  • ansible-freeipa.spec.in: Fix for loop with wildcard (#1002)
  • Update development and Github workflow tools. (#999)
  • upstream ci: Update Ansible versions on Azure pipelines. (#977)

Detailed changelog since 1.9.0 by author

3 authors, 66 commits

Denis Karpelevich (1)

  • Use netgroup_find instead of netgroup_show to workaround IPA bug.

Rafael Guterres Jeffman (19)

  • upstream CI: increase Azure test timeout.
  • playbooks: Fix automount tasks to make ansible-lint happy
  • dnszone tests: Fix typo on task names.
  • pwpolicy: Fix tests for 'minlength: ""'
  • ansible-lint: Fix file kind and ignores.
  • roles: Fix ansible-lint name:template warnings
  • roles: Fix ansible-lint warning on var-naming.
  • Fix issues raised by Flake8 version 5.0.3
  • Fix issues raised by Pylint version 2.14.4.
  • Update Github workflow linter and check tools.
  • pwpolicy: Allow clearing policy values.
  • upstream ci: Update Ansible versions on Azure pipelines.
  • Update development tools.
  • roles: Fix when, block and always key order.
  • roles: Fix jinja2 template spacing
  • roles: Fix task names to start with uppercase letters
  • roles: Fix use of ansible.builtin.fail free-form message.
  • roles: Fix type of data used for for versions in meta files
  • upstream ci: Allow tasks to retry in case of connection failure.

Thomas Woerner (46)

  • Use yml extension for pytest tests
  • playbooks/automount: All playbooks should use .yml
  • ansible-lint: All names should start with an uppercase letter
  • Fix jinja2 white spaces issues reported by ansible-lint
  • Improve jinja2 spacing: Remove space between join and ()
  • .github/workflows/lint.yml: Enable ansible-lint for the whole collection
  • .ansible-lint: Deactivate experimental and name[template] tests
  • .github/workflows/lint.yml: ansible-lint needs collection source dir
  • pwpolicy: Fix new bool checks for IPA prior to 4.9.10
  • yamllint: All tasks need to be named
  • utils/get_test_modules.py: Support ansible.builtin. prefix
  • utils/galaxyfy.py: Support builtins with ansible.builtin. prefix
  • vault: Use FQCN for ansible.builtin
  • user: Use FQCN for ansible.builtin
  • trust: Use FQCN for ansible.builtin
  • sudo*: Use FQCN for ansible.builtin
  • servicedelegation*: Use FQCN for ansible.builtin
  • service: Use FQCN for ansible.builtin
  • server: Use FQCN for ansible.builtin
  • selfservice: Use FQCN for ansible.builtin
  • role: Use FQCN for ansible.builtin
  • pwpolicy: Use FQCN for ansible.builtin
  • privilege: Use FQCN for ansible.builtin
  • permission: Use FQCN for ansible.builtin
  • netgroup: Use FQCN for ansible.builtin
  • location: Use FQCN for ansible.builtin
  • idrange: Use FQCN for ansible.builtin
  • host*: Use FQCN for ansible.builtin
  • hbac*: Use FQCN for ansible.builtin
  • group: Use FQCN for ansible.builtin
  • tests/external-signed-ca-*: Use FQCN for ansible.builtin
  • tests/env_freeipa_facts.yml: Use FQCN for ansible.builtin
  • dnszone: Use FQCN for ansible.builtin
  • dnsrecord: Use FQCN for ansible.builtin
  • dnsforwardzone: Use FQCN for ansible.builtin
  • dnsconfig: Use FQCN for ansible.builtin
  • delegation: Use FQCN for ansible.builtin
  • config: Use FQCN for ansible.builtin
  • tests/ca-less: Use FQCN for ansible.builtin
  • automount: Use FQCN for ansible.builtin
  • automember: Use FQCN for ansible.builtin
  • ipabackup role: Use FQCN for ansible.builtin
  • ipaclient role: Use FQCN for ansible.builtin
  • ipareplica role: Use FQCN for ansible.builtin
  • ipaserver role: Use FQCN for ansible.builtin
  • ansible-freeipa.spec.in: Fix for loop with wildcard